{
    "objects": [
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": []}"
                },
                "savedSearchId": "Syslog-system-logs-ecs",
                "title": "Syslog events by hostname [Filebeat System] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [{\"type\": \"count\", \"id\": \"1\", \"schema\": \"metric\", \"params\": {}, \"enabled\": true}, {\"type\": \"date_histogram\", \"id\": \"2\", \"schema\": \"segment\", \"params\": {\"customInterval\": \"2h\", \"interval\": \"auto\", \"min_doc_count\": 1, \"field\": \"@timestamp\", \"extended_bounds\": {}}, \"enabled\": true}, {\"type\": \"terms\", \"id\": \"3\", \"schema\": \"group\", \"params\": {\"order\": \"desc\", \"orderBy\": \"1\", \"field\": \"host.hostname\", \"size\": 5}, \"enabled\": true}], \"listeners\": {}, \"type\": \"histogram\", \"params\": {\"mode\": \"stacked\", \"defaultYExtents\": false, \"addLegend\": true, \"addTimeMarker\": false, \"times\": [], \"addTooltip\": true, \"setYExtents\": false, \"shareYAxis\": true, \"legendPosition\": \"right\", \"scale\": \"linear\", \"yAxis\": {}}, \"title\": \"Syslog events by hostname ECS\"}"
            },
            "id": "Syslog-events-by-hostname-ecs",
            "type": "visualization",
            "version": 2
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": []}"
                },
                "savedSearchId": "Syslog-system-logs-ecs",
                "title": "Syslog hostnames and processes [Filebeat System] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [{\"type\": \"count\", \"id\": \"1\", \"schema\": \"metric\", \"params\": {}, \"enabled\": true}, {\"type\": \"terms\", \"id\": \"2\", \"schema\": \"segment\", \"params\": {\"order\": \"desc\", \"orderBy\": \"1\", \"field\": \"host.hostname\", \"size\": 5}, \"enabled\": true}, {\"type\": \"terms\", \"id\": \"3\", \"schema\": \"segment\", \"params\": {\"order\": \"desc\", \"orderBy\": \"1\", \"field\": \"process.name\", \"size\": 5}, \"enabled\": true}], \"listeners\": {}, \"type\": \"pie\", \"params\": {\"legendPosition\": \"bottom\", \"addTooltip\": true, \"addLegend\": true, \"shareYAxis\": true, \"isDonut\": true}, \"title\": \"Syslog hostnames and processes ECS\"}"
            },
            "id": "Syslog-hostnames-and-processes-ecs",
            "type": "visualization",
            "version": 2
        },
        {
            "attributes": {
                "columns": [
                    "host.hostname",
                    "process.name",
                    "message"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"index\": \"filebeat-*\", \"highlight\": {\"fragment_size\": 2147483647, \"fields\": {\"*\": {}}, \"require_field_match\": false, \"pre_tags\": [\"@kibana-highlighted-field@\"], \"post_tags\": [\"@/kibana-highlighted-field@\"]}, \"filter\": [], \"highlightAll\": true, \"query\": {\"query\": \"event.dataset:system.syslog\", \"language\": \"kuery\"}}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "Syslog logs [Filebeat System] ECS",
                "version": 1
            },
            "id": "Syslog-system-logs-ecs",
            "type": "search",
            "version": 2
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{}"
                },
                "title": "Dashboards [Filebeat System] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [], \"type\": \"markdown\", \"params\": {\"fontSize\": 12, \"markdown\": \"[Syslog](#/dashboard/Filebeat-syslog-dashboard-ecs) | [Sudo commands](#/dashboard/277876d0-fa2c-11e6-bbd3-29c986c96e5a-ecs) | [SSH logins](#/dashboard/5517a150-f9ce-11e6-8115-a7c18106d86a-ecs) | [New users and groups](#/dashboard/0d3f2380-fa78-11e6-ae9b-81e5311e8cab-ecs)\"}, \"title\": \"Dashboards [Filebeat System] ECS\"}"
            },
            "id": "327417e0-8462-11e7-bab8-bd2f0fb42c54-ecs",
            "type": "visualization",
            "version": 1
        },
        {
            "attributes": {
                "description": "Syslog dashboard from the Filebeat System module",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": [], \"highlightAll\": true, \"version\": true}"
                },
                "optionsJSON": "{\"darkTheme\": false}",
                "panelsJSON": "[{\"size_x\": 8, \"id\": \"Syslog-events-by-hostname-ecs\", \"col\": 1, \"row\": 2, \"size_y\": 4, \"panelIndex\": 1, \"type\": \"visualization\"}, {\"size_x\": 4, \"id\": \"Syslog-hostnames-and-processes-ecs\", \"col\": 9, \"row\": 2, \"size_y\": 4, \"panelIndex\": 2, \"type\": \"visualization\"}, {\"sort\": [\"@timestamp\", \"desc\"], \"size_x\": 12, \"id\": \"Syslog-system-logs-ecs\", \"col\": 1, \"row\": 6, \"columns\": [\"host.hostname\", \"process.name\", \"message\"], \"size_y\": 7, \"panelIndex\": 3, \"type\": \"search\"}, {\"size_x\": 12, \"id\": \"327417e0-8462-11e7-bab8-bd2f0fb42c54-ecs\", \"col\": 1, \"row\": 1, \"size_y\": 1, \"panelIndex\": 4, \"type\": \"visualization\"}]",
                "timeRestore": false,
                "title": "[Filebeat System] Syslog dashboard ECS",
                "uiStateJSON": "{}",
                "version": 1
            },
            "id": "Filebeat-syslog-dashboard-ecs",
            "type": "dashboard",
            "version": 6
        }
    ],
    "version": "6.0.0-beta1-SNAPSHOT"
}