{
    "objects": [
        {
            "attributes": {
                "description": "This dashboard provides an overview of user activity, alerts and resource in Azure cloud.", 
                "hits": 0, 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "optionsJSON": "{\"useMargins\": true, \"hidePanelTitles\": false}", 
                "panelsJSON": "[{\"gridData\": {\"i\": \"6b6e7452-979c-4f78-afc2-cc58fcf105ff\", \"h\": 4, \"y\": 0, \"w\": 9, \"x\": 0}, \"panelRefName\": \"panel_0\", \"version\": \"7.4.0\", \"panelIndex\": \"6b6e7452-979c-4f78-afc2-cc58fcf105ff\", \"embeddableConfig\": {\"title\": \"\"}}, {\"gridData\": {\"i\": \"042f777a-5e41-41e8-9d6e-d842473a8aed\", \"h\": 4, \"y\": 0, \"w\": 15, \"x\": 9}, \"panelRefName\": \"panel_1\", \"version\": \"7.4.0\", \"panelIndex\": \"042f777a-5e41-41e8-9d6e-d842473a8aed\", \"embeddableConfig\": {\"title\": \"\"}}, {\"gridData\": {\"i\": \"1e73bca7-8569-41b5-830e-2f762602219a\", \"h\": 8, \"y\": 0, \"w\": 24, \"x\": 24}, \"title\": \"Activity Level\", \"embeddableConfig\": {\"title\": \"Activity Level\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_2\", \"panelIndex\": \"1e73bca7-8569-41b5-830e-2f762602219a\"}, {\"gridData\": {\"i\": \"d9465e9f-49f1-4173-b1a4-fea9ee3120ab\", \"h\": 6, \"y\": 4, \"w\": 24, \"x\": 0}, \"panelRefName\": \"panel_3\", \"version\": \"7.4.0\", \"panelIndex\": \"d9465e9f-49f1-4173-b1a4-fea9ee3120ab\", \"embeddableConfig\": {\"title\": \"\"}}, {\"gridData\": {\"i\": \"18ec1e20-202b-4a40-8d0d-22060ac3e23c\", \"h\": 7, \"y\": 8, \"w\": 24, \"x\": 24}, \"title\": \"Access Requests\", \"embeddableConfig\": {\"title\": \"Access Requests\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_4\", \"panelIndex\": \"18ec1e20-202b-4a40-8d0d-22060ac3e23c\"}, {\"gridData\": {\"i\": \"d2bdec0f-dde1-4925-bf7e-afbc430c0eca\", \"h\": 11, \"y\": 10, \"w\": 24, \"x\": 0}, \"title\": \"Top Active Users\", \"embeddableConfig\": {\"title\": \"Top Active Users\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_5\", \"panelIndex\": \"d2bdec0f-dde1-4925-bf7e-afbc430c0eca\"}, {\"gridData\": {\"i\": \"3bcc964d-6862-4fdd-9d82-f7510cc02162\", \"h\": 7, \"y\": 15, \"w\": 12, \"x\": 24}, \"title\": \"Alerts Overview\", \"embeddableConfig\": {\"title\": \"Alerts Overview\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_6\", \"panelIndex\": \"3bcc964d-6862-4fdd-9d82-f7510cc02162\"}, {\"gridData\": {\"i\": \"74436614-9dfc-4c38-bc58-8cb76c348f37\", \"h\": 7, \"y\": 15, \"w\": 12, \"x\": 36}, \"title\": \"Service Health\", \"embeddableConfig\": {\"title\": \"Service Health\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_7\", \"panelIndex\": \"74436614-9dfc-4c38-bc58-8cb76c348f37\"}, {\"gridData\": {\"i\": \"a6f36dfe-b6d6-4dca-b63c-81f5b4f7c8f8\", \"h\": 19, \"y\": 21, \"w\": 24, \"x\": 0}, \"title\": \"Top Resource Groups\", \"embeddableConfig\": {\"vis\": {\"legendOpen\": false}, \"title\": \"Top Resource Groups\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_8\", \"panelIndex\": \"a6f36dfe-b6d6-4dca-b63c-81f5b4f7c8f8\"}, {\"gridData\": {\"i\": \"644c6151-fd05-4b2e-b18e-30843697e932\", \"h\": 6, \"y\": 22, \"w\": 12, \"x\": 24}, \"panelRefName\": \"panel_9\", \"version\": \"7.4.0\", \"panelIndex\": \"644c6151-fd05-4b2e-b18e-30843697e932\", \"embeddableConfig\": {\"title\": \"\"}}, {\"gridData\": {\"i\": \"3d5ccff8-6576-4a1c-b3ee-363ae665906e\", \"h\": 6, \"y\": 22, \"w\": 12, \"x\": 36}, \"panelRefName\": \"panel_10\", \"version\": \"7.4.0\", \"panelIndex\": \"3d5ccff8-6576-4a1c-b3ee-363ae665906e\", \"embeddableConfig\": {\"title\": \"\"}}, {\"gridData\": {\"i\": \"0dce9ac1-3046-4eb5-a57b-ef2cfe61ce1f\", \"h\": 12, \"y\": 28, \"w\": 24, \"x\": 24}, \"title\": \"Resource Changes\", \"embeddableConfig\": {\"vis\": {\"legendOpen\": false}, \"legendOpen\": true, \"title\": \"Resource Changes\"}, \"version\": \"7.4.0\", \"panelRefName\": \"panel_11\", \"panelIndex\": \"0dce9ac1-3046-4eb5-a57b-ef2cfe61ce1f\"}]", 
                "timeRestore": false, 
                "title": "[Filebeat Azure] Cloud Overview", 
                "version": 1
            }, 
            "id": "41e84340-ec20-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "dashboard": "7.3.0"
            }, 
            "references": [
                {
                    "id": "fe24ac90-f05a-11e9-90ec-112a988266d5", 
                    "name": "panel_0", 
                    "type": "visualization"
                }, 
                {
                    "id": "097d74d0-f044-11e9-90ec-112a988266d5", 
                    "name": "panel_1", 
                    "type": "visualization"
                }, 
                {
                    "id": "da67d650-ec14-11e9-90ec-112a988266d5", 
                    "name": "panel_2", 
                    "type": "visualization"
                }, 
                {
                    "id": "e4c7f4b0-f045-11e9-90ec-112a988266d5", 
                    "name": "panel_3", 
                    "type": "visualization"
                }, 
                {
                    "id": "709995e0-ec16-11e9-90ec-112a988266d5", 
                    "name": "panel_4", 
                    "type": "visualization"
                }, 
                {
                    "id": "ffe22180-ec1c-11e9-90ec-112a988266d5", 
                    "name": "panel_5", 
                    "type": "visualization"
                }, 
                {
                    "id": "52c2a4e0-ec1f-11e9-90ec-112a988266d5", 
                    "name": "panel_6", 
                    "type": "visualization"
                }, 
                {
                    "id": "bc65e840-ec1e-11e9-90ec-112a988266d5", 
                    "name": "panel_7", 
                    "type": "visualization"
                }, 
                {
                    "id": "71b62ca0-ec1a-11e9-90ec-112a988266d5", 
                    "name": "panel_8", 
                    "type": "visualization"
                }, 
                {
                    "id": "f684a750-ec23-11e9-90ec-112a988266d5", 
                    "name": "panel_9", 
                    "type": "visualization"
                }, 
                {
                    "id": "e37cd3d0-ec23-11e9-90ec-112a988266d5", 
                    "name": "panel_10", 
                    "type": "visualization"
                }, 
                {
                    "id": "05d39d10-ec1a-11e9-90ec-112a988266d5", 
                    "name": "panel_11", 
                    "type": "visualization"
                }
            ], 
            "type": "dashboard", 
            "updated_at": "2019-10-18T15:20:07.860Z", 
            "version": "WzkyMzcsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "title": "Navigation Overview [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"markdown\", \"params\": {\"openLinksInNewTab\": false, \"markdown\": \"### Azure Monitoring\\n\\n[**Overview**](#/dashboard/41e84340-ec20-11e9-90ec-112a988266d5) | [Users](#/dashboard/87095750-f05a-11e9-90ec-112a988266d5) | [Alerts](#/dashboard/0f559cc0-f0d5-11e9-90ec-112a988266d5) \", \"fontSize\": 10}, \"aggs\": [], \"title\": \"Navigation Overview [Filebeat Azure]\"}"
            }, 
            "id": "fe24ac90-f05a-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [], 
            "type": "visualization", 
            "updated_at": "2019-10-17T11:56:32.153Z", 
            "version": "WzQ5MzQsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "title": "Subscriptions Filter [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"input_control_vis\", \"params\": {\"pinFilters\": false, \"useTimeFilter\": false, \"updateFiltersOnChange\": true, \"controls\": [{\"parent\": \"\", \"indexPatternRefName\": \"control_0_index_pattern\", \"label\": \"Subscription ID\", \"fieldName\": \"azure.subscription_id\", \"id\": \"1571250866125\", \"type\": \"list\", \"options\": {\"type\": \"terms\", \"size\": 5, \"multiselect\": true, \"dynamicOptions\": true, \"order\": \"desc\"}}]}, \"aggs\": [], \"title\": \"Subscriptions Filter [Filebeat Azure]\"}"
            }, 
            "id": "097d74d0-f044-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "control_0_index_pattern", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-16T18:37:41.917Z", 
            "version": "WzQ0MDEsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "title": "Activity Level [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metrics\", \"params\": {\"default_index_pattern\": \"metricbeat-*\", \"index_pattern\": \"filebeat-*\", \"default_timefield\": \"@timestamp\", \"series\": [{\"line_width\": 1, \"point_size\": 1, \"color\": \"#68BC00\", \"stacked\": \"none\", \"metrics\": [{\"type\": \"count\", \"id\": \"61ca57f2-469d-11e7-af02-69e470af7417\"}], \"split_mode\": \"everything\", \"chart_type\": \"bar\", \"separate_axis\": 0, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"61ca57f1-469d-11e7-af02-69e470af7417\", \"fill\": 0.5}], \"axis_formatter\": \"number\", \"interval\": \"\", \"isModelInvalid\": false, \"id\": \"61ca57f0-469d-11e7-af02-69e470af7417\", \"filter\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" and event.category :\\\"Administrative\\\" \", \"language\": \"kuery\"}, \"time_field\": \"\", \"show_legend\": 0, \"show_grid\": 1, \"axis_scale\": \"normal\", \"type\": \"timeseries\", \"axis_position\": \"left\"}, \"aggs\": [], \"title\": \"Activity Level [Filebeat Azure]\"}"
            }, 
            "id": "da67d650-ec14-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [], 
            "type": "visualization", 
            "updated_at": "2019-10-16T18:18:42.561Z", 
            "version": "WzQzODYsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"event.dataset : \\\"azure.activitylogs\\\" \", \"language\": \"kuery\"}, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
                }, 
                "title": "Activity Stats [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metric\", \"params\": {\"type\": \"metric\", \"metric\": {\"style\": {\"bgFill\": \"#000\", \"bgColor\": false, \"fontSize\": 60, \"subText\": \"\", \"labelColor\": false}, \"colorSchema\": \"Green to Red\", \"invertColors\": false, \"labels\": {\"show\": true}, \"useRanges\": false, \"percentageMode\": false, \"colorsRange\": [{\"to\": 10000, \"from\": 0, \"type\": \"range\"}], \"metricColorMode\": \"None\"}, \"addTooltip\": true, \"dimensions\": {\"metrics\": [{\"type\": \"vis_dimension\", \"accessor\": 0, \"format\": {\"params\": {}, \"id\": \"number\"}}, {\"type\": \"vis_dimension\", \"accessor\": 1, \"format\": {\"params\": {}, \"id\": \"number\"}}, {\"type\": \"vis_dimension\", \"accessor\": 2, \"format\": {\"params\": {}, \"id\": \"number\"}}]}, \"addLegend\": false}, \"aggs\": [{\"params\": {\"field\": \"azure.resource.name\", \"customLabel\": \"Resources\"}, \"type\": \"cardinality\", \"enabled\": true, \"id\": \"1\", \"schema\": \"metric\"}, {\"params\": {\"field\": \"azure.activitylogs.identity.claims_initiated_by_user.name\", \"customLabel\": \"Users\"}, \"type\": \"cardinality\", \"enabled\": true, \"id\": \"2\", \"schema\": \"metric\"}, {\"params\": {\"field\": \"azure.resource.group\", \"customLabel\": \"Resource Groups\"}, \"type\": \"cardinality\", \"enabled\": true, \"id\": \"3\", \"schema\": \"metric\"}, {\"params\": {\"field\": \"azure.subscription_id\", \"customLabel\": \"Subscriptions\"}, \"type\": \"cardinality\", \"enabled\": true, \"id\": \"4\", \"schema\": \"metric\"}], \"title\": \"Activity Stats [Filebeat Azure]\"}"
            }, 
            "id": "e4c7f4b0-f045-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "kibanaSavedObjectMeta.searchSourceJSON.index", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-18T09:14:38.537Z", 
            "version": "WzgwNzYsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "title": "Access Requests [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metrics\", \"params\": {\"default_index_pattern\": \"metricbeat-*\", \"index_pattern\": \"filebeat-*\", \"default_timefield\": \"@timestamp\", \"series\": [{\"line_width\": \"2\", \"metrics\": [{\"type\": \"count\", \"id\": \"61ca57f2-469d-11e7-af02-69e470af7417\"}], \"color\": \"#68BC00\", \"stacked\": \"none\", \"label\": \"Success\", \"filter\": {\"query\": \"event.outcome : \\\"success\\\" or event.outcome : \\\"Success\\\" \", \"language\": \"kuery\"}, \"separate_axis\": 0, \"split_mode\": \"filter\", \"chart_type\": \"line\", \"point_size\": 1, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"61ca57f1-469d-11e7-af02-69e470af7417\", \"fill\": \"0\"}, {\"line_width\": \"2\", \"metrics\": [{\"type\": \"count\", \"id\": \"1b5f75a1-ec15-11e9-b6a7-21d19b63822a\"}], \"color\": \"rgba(226,115,0,1)\", \"stacked\": \"none\", \"label\": \"Failure\", \"filter\": {\"query\": \"event.outcome : \\\"Failure\\\"  or event.outcome : \\\"failure\\\"  \", \"language\": \"kuery\"}, \"separate_axis\": 0, \"split_mode\": \"filter\", \"chart_type\": \"line\", \"point_size\": 1, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"1b5f75a0-ec15-11e9-b6a7-21d19b63822a\", \"fill\": \"0\"}], \"axis_formatter\": \"number\", \"interval\": \"\", \"isModelInvalid\": false, \"id\": \"61ca57f0-469d-11e7-af02-69e470af7417\", \"filter\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" and azure.activitylogs.operation_name : *LISTKEYS*\", \"language\": \"kuery\"}, \"time_field\": \"\", \"show_legend\": 0, \"show_grid\": 1, \"axis_scale\": \"normal\", \"type\": \"timeseries\", \"axis_position\": \"left\"}, \"aggs\": [], \"title\": \"Access Requests [Filebeat Azure]\"}"
            }, 
            "id": "709995e0-ec16-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [], 
            "type": "visualization", 
            "updated_at": "2019-10-11T11:01:13.406Z", 
            "version": "WzI3MzYsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
                }, 
                "title": "User Tag Cloud [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"tagcloud\", \"params\": {\"minFontSize\": 12, \"orientation\": \"single\", \"maxFontSize\": 32, \"metric\": {\"type\": \"vis_dimension\", \"accessor\": 1, \"format\": {\"params\": {}, \"id\": \"string\"}}, \"bucket\": {\"type\": \"vis_dimension\", \"accessor\": 0, \"format\": {\"params\": {\"otherBucketLabel\": \"Other\", \"id\": \"string\", \"missingBucketLabel\": \"Missing\"}, \"id\": \"terms\"}}, \"showLabel\": true, \"scale\": \"linear\"}, \"aggs\": [{\"params\": {}, \"type\": \"count\", \"enabled\": true, \"id\": \"1\", \"schema\": \"metric\"}, {\"params\": {\"orderBy\": \"1\", \"missingBucket\": false, \"missingBucketLabel\": \"Missing\", \"field\": \"azure.activitylogs.identity.claims_initiated_by_user.name\", \"otherBucketLabel\": \"Other\", \"otherBucket\": false, \"order\": \"desc\", \"size\": 10}, \"type\": \"terms\", \"enabled\": true, \"id\": \"2\", \"schema\": \"segment\"}], \"title\": \"User Tag Cloud [Filebeat Azure]\"}"
            }, 
            "id": "ffe22180-ec1c-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "kibanaSavedObjectMeta.searchSourceJSON.index", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-18T09:12:32.252Z", 
            "version": "WzgwNzEsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "title": "Alerts Overview [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metrics\", \"params\": {\"default_index_pattern\": \"metricbeat-*\", \"index_pattern\": \"filebeat-*\", \"default_timefield\": \"@timestamp\", \"series\": [{\"hide_in_legend\": 0, \"metrics\": [{\"type\": \"count\", \"id\": \"61ca57f2-469d-11e7-af02-69e470af7417\"}], \"line_width\": 1, \"color\": \"rgba(252,220,0,1)\", \"stacked\": \"none\", \"filter\": {\"query\": \"event.outcome: \\\"Activated\\\"\", \"language\": \"kuery\"}, \"separate_axis\": 0, \"split_mode\": \"filter\", \"chart_type\": \"line\", \"point_size\": 1, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"61ca57f1-469d-11e7-af02-69e470af7417\", \"fill\": 0.5}, {\"hide_in_legend\": 0, \"metrics\": [{\"type\": \"count\", \"id\": \"5a52f171-ec1e-11e9-b6a7-21d19b63822a\"}], \"line_width\": 1, \"color\": \"#68BC00\", \"stacked\": \"none\", \"filter\": {\"query\": \"event.outcome: \\\"Resolved\\\" or event.outcome: \\\"Succeeded\\\"\", \"language\": \"kuery\"}, \"separate_axis\": 0, \"split_mode\": \"filter\", \"chart_type\": \"line\", \"point_size\": 1, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"5a52f170-ec1e-11e9-b6a7-21d19b63822a\", \"fill\": 0.5}], \"axis_formatter\": \"number\", \"interval\": \"\", \"isModelInvalid\": false, \"id\": \"61ca57f0-469d-11e7-af02-69e470af7417\", \"filter\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" and event.category : \\\"Alert\\\"\", \"language\": \"kuery\"}, \"time_field\": \"\", \"show_legend\": 0, \"show_grid\": 1, \"axis_scale\": \"normal\", \"type\": \"timeseries\", \"axis_position\": \"left\"}, \"aggs\": [], \"title\": \"Alerts Overview [Filebeat Azure]\"}"
            }, 
            "id": "52c2a4e0-ec1f-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [], 
            "type": "visualization", 
            "updated_at": "2019-10-16T18:41:58.846Z", 
            "version": "WzQ0MDcsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}}"
                }, 
                "title": "Service Health Overview [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metrics\", \"params\": {\"default_index_pattern\": \"metricbeat-*\", \"index_pattern\": \"filebeat-*\", \"default_timefield\": \"@timestamp\", \"series\": [{\"hide_in_legend\": 0, \"metrics\": [{\"type\": \"count\", \"id\": \"61ca57f2-469d-11e7-af02-69e470af7417\"}], \"line_width\": 1, \"color\": \"rgba(252,220,0,1)\", \"stacked\": \"none\", \"filter\": {\"query\": \"event.outcome: \\\"Active\\\"\", \"language\": \"kuery\"}, \"separate_axis\": 0, \"split_mode\": \"filter\", \"chart_type\": \"line\", \"point_size\": 1, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"61ca57f1-469d-11e7-af02-69e470af7417\", \"fill\": 0.5}, {\"hide_in_legend\": 0, \"metrics\": [{\"type\": \"count\", \"id\": \"5a52f171-ec1e-11e9-b6a7-21d19b63822a\"}], \"line_width\": 1, \"color\": \"#68BC00\", \"stacked\": \"none\", \"filter\": {\"query\": \"event.outcome: \\\"Resolved\\\" \", \"language\": \"kuery\"}, \"separate_axis\": 0, \"split_mode\": \"filter\", \"chart_type\": \"line\", \"point_size\": 1, \"axis_position\": \"right\", \"formatter\": \"number\", \"id\": \"5a52f170-ec1e-11e9-b6a7-21d19b63822a\", \"fill\": 0.5}], \"axis_formatter\": \"number\", \"interval\": \"\", \"isModelInvalid\": false, \"id\": \"61ca57f0-469d-11e7-af02-69e470af7417\", \"filter\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" and event.category : \\\"ServiceHealth\\\"\", \"language\": \"kuery\"}, \"time_field\": \"\", \"show_legend\": 0, \"show_grid\": 1, \"axis_scale\": \"normal\", \"type\": \"timeseries\", \"axis_position\": \"left\"}, \"aggs\": [], \"title\": \"Service Health Overview [Filebeat Azure]\"}"
            }, 
            "id": "bc65e840-ec1e-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [], 
            "type": "visualization", 
            "updated_at": "2019-10-16T18:40:07.894Z", 
            "version": "WzQ0MDQsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
                }, 
                "title": "Top Resource Groups [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"horizontal_bar\", \"params\": {\"labels\": {}, \"dimensions\": {\"y\": [{\"params\": {}, \"aggType\": \"count\", \"accessor\": 1, \"format\": {\"id\": \"number\"}}], \"x\": {\"params\": {}, \"aggType\": \"terms\", \"accessor\": 0, \"format\": {\"params\": {\"otherBucketLabel\": \"Other\", \"id\": \"string\", \"missingBucketLabel\": \"Missing\"}, \"id\": \"terms\"}}}, \"type\": \"histogram\", \"categoryAxes\": [{\"style\": {}, \"scale\": {\"type\": \"linear\"}, \"show\": true, \"title\": {}, \"labels\": {\"filter\": false, \"rotate\": 0, \"truncate\": 200, \"show\": true}, \"position\": \"left\", \"type\": \"category\", \"id\": \"CategoryAxis-1\"}], \"legendPosition\": \"right\", \"addTimeMarker\": false, \"addLegend\": true, \"grid\": {\"categoryLines\": false}, \"times\": [], \"addTooltip\": true, \"valueAxes\": [{\"style\": {}, \"scale\": {\"type\": \"linear\", \"mode\": \"normal\"}, \"name\": \"LeftAxis-1\", \"show\": false, \"title\": {\"text\": \"Count\"}, \"labels\": {\"filter\": true, \"rotate\": 75, \"truncate\": 100, \"show\": true}, \"position\": \"bottom\", \"type\": \"value\", \"id\": \"ValueAxis-1\"}], \"seriesParams\": [{\"showCircles\": true, \"show\": true, \"data\": {\"id\": \"1\", \"label\": \"Count\"}, \"mode\": \"normal\", \"drawLinesBetweenPoints\": true, \"valueAxis\": \"ValueAxis-1\", \"type\": \"histogram\"}]}, \"aggs\": [{\"params\": {}, \"type\": \"count\", \"enabled\": true, \"id\": \"1\", \"schema\": \"metric\"}, {\"params\": {\"orderBy\": \"1\", \"missingBucket\": false, \"customLabel\": \"Resource Groups\", \"missingBucketLabel\": \"Missing\", \"field\": \"azure.resource.group\", \"otherBucketLabel\": \"Other\", \"otherBucket\": false, \"order\": \"desc\", \"size\": 10}, \"type\": \"terms\", \"enabled\": true, \"id\": \"2\", \"schema\": \"segment\"}], \"title\": \"Top Resource Groups [Filebeat Azure]\"}"
            }, 
            "id": "71b62ca0-ec1a-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "kibanaSavedObjectMeta.searchSourceJSON.index", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-17T14:50:09.427Z", 
            "version": "WzYxMTUsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" and event.category : \\\"Alert\\\" \", \"language\": \"kuery\"}, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
                }, 
                "title": "Alerts Count [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metric\", \"params\": {\"type\": \"metric\", \"metric\": {\"style\": {\"bgFill\": \"#000\", \"bgColor\": false, \"fontSize\": 60, \"subText\": \"\", \"labelColor\": false}, \"colorSchema\": \"Green to Red\", \"invertColors\": false, \"labels\": {\"show\": true}, \"useRanges\": false, \"percentageMode\": false, \"colorsRange\": [{\"to\": 10000, \"from\": 0, \"type\": \"range\"}], \"metricColorMode\": \"None\"}, \"addTooltip\": true, \"dimensions\": {\"metrics\": [{\"type\": \"vis_dimension\", \"accessor\": 1, \"format\": {\"params\": {}, \"id\": \"number\"}}], \"bucket\": {\"type\": \"vis_dimension\", \"accessor\": 0, \"format\": {\"params\": {}, \"id\": \"string\"}}}, \"addLegend\": false}, \"aggs\": [{\"params\": {\"customLabel\": \"Alerts\"}, \"type\": \"count\", \"enabled\": true, \"id\": \"1\", \"schema\": \"metric\"}, {\"params\": {\"filters\": [{\"input\": {\"query\": \"event.outcome : \\\"Activated\\\"\", \"language\": \"kuery\"}, \"label\": \"Activated\"}, {\"input\": {\"query\": \"event.outcome : \\\"Resolved\\\"\", \"language\": \"kuery\"}, \"label\": \"Resolved\"}, {\"input\": {\"query\": \"event.outcome : \\\"Succeeded\\\"\", \"language\": \"kuery\"}, \"label\": \"Succeeded\"}]}, \"type\": \"filters\", \"enabled\": true, \"id\": \"2\", \"schema\": \"group\"}], \"title\": \"Alerts Count [Filebeat Azure]\"}"
            }, 
            "id": "f684a750-ec23-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "kibanaSavedObjectMeta.searchSourceJSON.index", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-16T18:44:12.955Z", 
            "version": "WzQ0MTAsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" and event.category : \\\"ServiceHealth\\\" \", \"language\": \"kuery\"}, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
                }, 
                "title": "Service Health Count [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"metric\", \"params\": {\"type\": \"metric\", \"metric\": {\"style\": {\"bgFill\": \"#000\", \"bgColor\": false, \"fontSize\": 60, \"subText\": \"\", \"labelColor\": false}, \"colorSchema\": \"Green to Red\", \"invertColors\": false, \"labels\": {\"show\": true}, \"useRanges\": false, \"percentageMode\": false, \"colorsRange\": [{\"to\": 10000, \"from\": 0, \"type\": \"range\"}], \"metricColorMode\": \"None\"}, \"addTooltip\": true, \"dimensions\": {\"metrics\": [{\"type\": \"vis_dimension\", \"accessor\": 1, \"format\": {\"params\": {}, \"id\": \"number\"}}], \"bucket\": {\"type\": \"vis_dimension\", \"accessor\": 0, \"format\": {\"params\": {}, \"id\": \"string\"}}}, \"addLegend\": false}, \"aggs\": [{\"params\": {\"customLabel\": \"Incidents\"}, \"type\": \"count\", \"enabled\": true, \"id\": \"1\", \"schema\": \"metric\"}, {\"params\": {\"filters\": [{\"input\": {\"query\": \"event.outcome : \\\"Active\\\"\", \"language\": \"kuery\"}, \"label\": \"Active\"}, {\"input\": {\"query\": \"event.outcome : \\\"Resolved\\\"\", \"language\": \"kuery\"}, \"label\": \"Resolved\"}]}, \"type\": \"filters\", \"enabled\": true, \"id\": \"2\", \"schema\": \"group\"}], \"title\": \"Service Health Count [Filebeat Azure]\"}"
            }, 
            "id": "e37cd3d0-ec23-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "kibanaSavedObjectMeta.searchSourceJSON.index", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-16T18:45:10.848Z", 
            "version": "WzQ0MTEsMV0="
        }, 
        {
            "attributes": {
                "description": "", 
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"query\": \"event.dataset :\\\"azure.activitylogs\\\" \", \"language\": \"kuery\"}, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
                }, 
                "title": "Resource Changes [Filebeat Azure]", 
                "uiStateJSON": "{}", 
                "version": 1, 
                "visState": "{\"type\": \"horizontal_bar\", \"params\": {\"labels\": {}, \"dimensions\": {\"y\": [{\"params\": {}, \"aggType\": \"count\", \"accessor\": 2, \"format\": {\"id\": \"number\"}}], \"series\": [{\"params\": {}, \"aggType\": \"filters\", \"accessor\": 1, \"format\": {}}], \"x\": {\"params\": {}, \"aggType\": \"terms\", \"accessor\": 0, \"format\": {\"params\": {\"otherBucketLabel\": \"Other\", \"id\": \"string\", \"missingBucketLabel\": \"Missing\"}, \"id\": \"terms\"}}}, \"type\": \"histogram\", \"categoryAxes\": [{\"style\": {}, \"scale\": {\"type\": \"linear\"}, \"show\": true, \"title\": {}, \"labels\": {\"filter\": false, \"rotate\": 0, \"truncate\": 200, \"show\": true}, \"position\": \"left\", \"type\": \"category\", \"id\": \"CategoryAxis-1\"}], \"legendPosition\": \"right\", \"addTimeMarker\": false, \"addLegend\": true, \"grid\": {\"categoryLines\": false}, \"times\": [], \"addTooltip\": true, \"valueAxes\": [{\"style\": {}, \"scale\": {\"type\": \"linear\", \"mode\": \"normal\"}, \"name\": \"LeftAxis-1\", \"show\": false, \"title\": {\"text\": \"Count\"}, \"labels\": {\"filter\": true, \"rotate\": 75, \"truncate\": 100, \"show\": true}, \"position\": \"bottom\", \"type\": \"value\", \"id\": \"ValueAxis-1\"}], \"seriesParams\": [{\"showCircles\": true, \"show\": true, \"data\": {\"id\": \"1\", \"label\": \"Count\"}, \"mode\": \"stacked\", \"drawLinesBetweenPoints\": true, \"valueAxis\": \"ValueAxis-1\", \"type\": \"histogram\"}]}, \"aggs\": [{\"params\": {}, \"type\": \"count\", \"enabled\": true, \"id\": \"1\", \"schema\": \"metric\"}, {\"params\": {\"orderBy\": \"1\", \"missingBucket\": false, \"customLabel\": \"Resource Type\", \"missingBucketLabel\": \"Missing\", \"field\": \"azure.resource.provider\", \"otherBucketLabel\": \"Other\", \"otherBucket\": false, \"order\": \"desc\", \"size\": 15}, \"type\": \"terms\", \"enabled\": true, \"id\": \"2\", \"schema\": \"segment\"}, {\"params\": {\"filters\": [{\"input\": {\"query\": \"azure.activitylogs.identity.action : *write\", \"language\": \"kuery\"}, \"label\": \"Creations\"}, {\"input\": {\"query\": \"azure.activitylogs.identity.action : *delete\", \"language\": \"kuery\"}, \"label\": \"Deletions\"}]}, \"type\": \"filters\", \"enabled\": true, \"id\": \"3\", \"schema\": \"group\"}], \"title\": \"Resource Changes [Filebeat Azure]\"}"
            }, 
            "id": "05d39d10-ec1a-11e9-90ec-112a988266d5", 
            "migrationVersion": {
                "visualization": "7.3.1"
            }, 
            "references": [
                {
                    "id": "filebeat-*", 
                    "name": "kibanaSavedObjectMeta.searchSourceJSON.index", 
                    "type": "index-pattern"
                }
            ], 
            "type": "visualization", 
            "updated_at": "2019-10-17T11:18:44.463Z", 
            "version": "WzQ4ODIsMV0="
        }
    ], 
    "version": "7.4.0"
}