{
  "visState": "{\n  \"title\": \"Exe Name Tag Cloud [Auditbeat Auditd Executions]\",\n  \"type\": \"tagcloud\",\n  \"params\": {\n    \"scale\": \"linear\",\n    \"orientation\": \"single\",\n    \"minFontSize\": 14,\n    \"maxFontSize\": 45\n  },\n  \"aggs\": [\n    {\n      \"id\": \"1\",\n      \"enabled\": true,\n      \"type\": \"count\",\n      \"schema\": \"metric\",\n      \"params\": {}\n    },\n    {\n      \"id\": \"2\",\n      \"enabled\": true,\n      \"type\": \"terms\",\n      \"schema\": \"segment\",\n      \"params\": {\n        \"field\": \"process.exe\",\n        \"size\": 10,\n        \"order\": \"desc\",\n        \"orderBy\": \"1\"\n      }\n    }\n  ]\n}", 
  "description": "", 
  "title": "Exe Name Tag Cloud [Auditbeat Auditd Executions]", 
  "uiStateJSON": "{}", 
  "version": 1, 
  "savedSearchId": "d382f5b0-c1c6-11e7-8995-936807a28b16", 
  "kibanaSavedObjectMeta": {
    "searchSourceJSON": ""
  }
}