{
    "objects": [
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "title": "Navigation [Packetbeat] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [], \"params\": {\"fontSize\": 10, \"markdown\": \"### Packetbeat:\\n\\n[Overview](#/dashboard/Packetbeat-Dashboard-ecs)\\n\\n[Network Flows](#/dashboard/Packetbeat-Flows-ecs)\\n\\n[DNS Overview](#/dashboard/65120940-1454-11e9-9de0-f98d1808db8e-ecs) | [Tunneling](#/dashboard/DNS-Unique-Domains-ecs)\\n\\n[DHCPv4 Transactions](#/dashboard/a7b35890-8baa-11e8-9676-ef67484126fb-ecs)\\n\\n[TLS Overview](#/dashboard/tls-sessions-ecs)\\n\\n[HTTP transactions](#/dashboard/Packetbeat-HTTP-ecs)\\n\\nDatabases: [MySQL](#/dashboard/Packetbeat-MySQL-performance-ecs) | [PostgreSQL](#/dashboard/Packetbeat-PgSQL-performance-ecs) | [MongoDB](#/dashboard/Packetbeat-MongoDB-performance-ecs) | [Cassandra](#/dashboard/Packetbeat-Cassandra-ecs)\\n\\nRPC: [Thrift](#/dashboard/Packetbeat-Thrift-performance-ecs)\\n\\nStorage: [NFS](#/dashboard/Packetbeat-NFS-ecs)\", \"openLinksInNewTab\": false}, \"title\": \"Navigation [Packetbeat] ECS\", \"type\": \"markdown\"}"
            },
            "id": "Navigation-ecs",
            "type": "visualization",
            "updated_at": "2019-01-19T00:18:59.372Z",
            "version": 11
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "ffc3c0b0-d2d7-11e7-9914-4982455b3063-ecs",
                "title": "TLS Sessions [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"colors\": {\"false\": \"#E24D42\", \"true\": \"#7EB26D\"}, \"legendOpen\": false}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customInterval\": \"2h\", \"customLabel\": \"Sessions per minute\", \"extended_bounds\": {}, \"field\": \"@timestamp\", \"interval\": \"auto\", \"min_doc_count\": 1}, \"schema\": \"segment\", \"type\": \"date_histogram\"}, {\"enabled\": true, \"id\": \"3\", \"params\": {\"customLabel\": \"Handshake completed\", \"field\": \"tls.established\", \"json\": \"\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"group\", \"type\": \"terms\"}], \"params\": {\"addLegend\": true, \"addTimeMarker\": false, \"addTooltip\": true, \"categoryAxes\": [{\"id\": \"CategoryAxis-1\", \"labels\": {\"show\": true, \"truncate\": 100}, \"position\": \"bottom\", \"scale\": {\"type\": \"linear\"}, \"show\": true, \"style\": {}, \"title\": {}, \"type\": \"category\"}], \"grid\": {\"categoryLines\": false, \"style\": {\"color\": \"#eee\"}, \"valueAxis\": \"ValueAxis-1\"}, \"legendPosition\": \"right\", \"seriesParams\": [{\"data\": {\"id\": \"1\", \"label\": \"Count\"}, \"drawLinesBetweenPoints\": true, \"mode\": \"stacked\", \"show\": \"true\", \"showCircles\": true, \"type\": \"histogram\", \"valueAxis\": \"ValueAxis-1\"}], \"times\": [], \"type\": \"histogram\", \"valueAxes\": [{\"id\": \"ValueAxis-1\", \"labels\": {\"filter\": false, \"rotate\": 0, \"show\": true, \"truncate\": 100}, \"name\": \"LeftAxis-1\", \"position\": \"left\", \"scale\": {\"mode\": \"normal\", \"type\": \"linear\"}, \"show\": true, \"style\": {}, \"title\": {\"text\": \"Count\"}, \"type\": \"value\"}]}, \"title\": \"TLS Sessions ECS\", \"type\": \"histogram\"}"
            },
            "id": "059fe5e0-d2dd-11e7-9914-4982455b3063-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"query\", \"negate\": false, \"type\": \"custom\", \"value\": \"{\\\"exists\\\":{\\\"field\\\":\\\"tls\\\"}}\"}, \"query\": {\"exists\": {\"field\": \"tls\"}}}], \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "title": "TLS Alerts [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"colors\": {\"None\": \"#7EB26D\", \"handshake_failure\": \"#E24D42\"}}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"field\": \"tls.detailed.alert_types\", \"include\": \".*\", \"json\": \"{\\\"missing\\\": \\\"None\\\"}\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"segment\", \"type\": \"terms\"}], \"params\": {\"addLegend\": true, \"addTooltip\": true, \"isDonut\": true, \"legendPosition\": \"right\", \"type\": \"pie\"}, \"title\": \"TLS Alerts ECS\", \"type\": \"pie\"}"
            },
            "id": "c14377a0-d353-11e7-9914-4982455b3063-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.established\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.established\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "title": "Total Number of TLS Sessions [Packetbeat] ECS",
                "uiStateJSON": "{\"P-5\": {\"vis\": {\"defaultColors\": {\"0 - 100\": \"rgb(0,104,55)\"}}}, \"P-7\": {\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}], \"params\": {\"addLegend\": false, \"addTooltip\": true, \"metric\": {\"colorSchema\": \"Green to Red\", \"colorsRange\": [{\"from\": 0, \"to\": 10000}], \"invertColors\": false, \"labels\": {\"show\": true}, \"metricColorMode\": \"None\", \"percentageMode\": false, \"style\": {\"bgColor\": false, \"bgFill\": \"#000\", \"fontSize\": 60, \"labelColor\": false, \"subText\": \"\"}, \"useRanges\": false}, \"type\": \"metric\"}, \"title\": \"Total Number of TLS Sessions ECS\", \"type\": \"metric\"}"
            },
            "id": "061de380-d361-11e7-9914-4982455b3063-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "94908e80-d2d8-11e7-9914-4982455b3063-ecs",
                "title": "TLS Server Name Indication [Packetbeat] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"Server Name Indication\", \"field\": \"tls.client.server_name\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"segment\", \"type\": \"terms\"}], \"params\": {\"hideLabel\": false, \"maxFontSize\": 64, \"minFontSize\": 14, \"orientation\": \"single\", \"scale\": \"linear\"}, \"title\": \"TLS Server Name Indication ECS\", \"type\": \"tagcloud\"}"
            },
            "id": "a28d09d0-d361-11e7-9914-4982455b3063-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "bf3d23b0-d37c-11e7-9914-4982455b3063-ecs",
                "title": "TLS Versions [Packetbeat] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"TLS version\", \"field\": \"tls.detailed.version\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"segment\", \"type\": \"terms\"}], \"params\": {\"addLegend\": true, \"addTooltip\": true, \"isDonut\": true, \"legendPosition\": \"right\", \"type\": \"pie\"}, \"title\": \"TLS Versions ECS\", \"type\": \"pie\"}"
            },
            "id": "0af0b790-d37d-11e7-9914-4982455b3063-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "8f0ff590-d37d-11e7-9914-4982455b3063-ecs",
                "title": "TLS Server Public Key Size [Packetbeat] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"Public Key Size\", \"field\": \"tls.detailed.server_certificate.public_key_size\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"segment\", \"type\": \"terms\"}], \"params\": {\"addLegend\": true, \"addTooltip\": true, \"isDonut\": true, \"legendPosition\": \"right\", \"type\": \"pie\"}, \"title\": \"Server Public Key Size ECS\", \"type\": \"pie\"}"
            },
            "id": "ae6e33c0-d37d-11e7-9914-4982455b3063-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "ffc3c0b0-d2d7-11e7-9914-4982455b3063-ecs",
                "title": "TLS Session Resume [Packetbeat] ECS",
                "uiStateJSON": "{}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"exclude\": \"\", \"field\": \"tls.detailed.resumption_method\", \"json\": \"{\\n\\\"missing\\\": \\\"none\\\"\\n}\", \"missingBucket\": false, \"missingBucketLabel\": \"Missing\", \"order\": \"desc\", \"orderBy\": \"1\", \"otherBucket\": false, \"otherBucketLabel\": \"Other\", \"size\": 5}, \"schema\": \"segment\", \"type\": \"terms\"}], \"params\": {\"addLegend\": true, \"addTooltip\": true, \"isDonut\": true, \"labels\": {\"last_level\": true, \"show\": false, \"truncate\": 100, \"values\": true}, \"legendPosition\": \"right\", \"type\": \"pie\"}, \"title\": \"TLS Session Resume [Packetbeat] ECS\", \"type\": \"pie\"}"
            },
            "id": "2c467370-d392-11e7-8fa0-232aa9259081-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "ffc3c0b0-d2d7-11e7-9914-4982455b3063-ecs",
                "title": "TLS Server Certificates [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {\"customLabel\": \"\"}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"4\", \"params\": {\"customLabel\": \"Subject Common Name\", \"field\": \"tls.detailed.server_certificate.subject.common_name\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 10}, \"schema\": \"bucket\", \"type\": \"terms\"}, {\"enabled\": true, \"id\": \"3\", \"params\": {\"customLabel\": \"Organization\", \"field\": \"tls.detailed.server_certificate.subject.organization\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"bucket\", \"type\": \"terms\"}], \"params\": {\"perPage\": 10, \"showMeticsAtAllLevels\": false, \"showPartialRows\": false, \"showTotal\": false, \"sort\": {\"columnIndex\": null, \"direction\": null}, \"totalFunc\": \"sum\"}, \"title\": \"TLS Server Certificates ECS\", \"type\": \"table\"}"
            },
            "id": "0958a910-d396-11e7-8fa0-232aa9259081-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "ffc3c0b0-d2d7-11e7-9914-4982455b3063-ecs",
                "title": "TLS Client Certificates [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"Subject Common Name\", \"field\": \"tls.detailed.client_certificate.subject.common_name\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"bucket\", \"type\": \"terms\"}, {\"enabled\": true, \"id\": \"3\", \"params\": {\"customLabel\": \"Signature Algorithm\", \"field\": \"tls.detailed.client_certificate.signature_algorithm\", \"json\": \"{ \\\"missing\\\": \\\"N/A\\\" }\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"bucket\", \"type\": \"terms\"}], \"params\": {\"perPage\": 10, \"showMeticsAtAllLevels\": false, \"showPartialRows\": false, \"showTotal\": false, \"sort\": {\"columnIndex\": null, \"direction\": null}, \"totalFunc\": \"sum\"}, \"title\": \"TLS Client Certificates ECS\", \"type\": \"table\"}"
            },
            "id": "86743f90-d396-11e7-8fa0-232aa9259081-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "ffc3c0b0-d2d7-11e7-9914-4982455b3063-ecs",
                "title": "TLS Cipher [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"Cipher\", \"field\": \"tls.cipher\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"bucket\", \"type\": \"terms\"}], \"params\": {\"perPage\": 10, \"showMeticsAtAllLevels\": false, \"showPartialRows\": false, \"showTotal\": false, \"sort\": {\"columnIndex\": null, \"direction\": null}, \"totalFunc\": \"sum\"}, \"title\": \"TLS Cipher ECS\", \"type\": \"table\"}"
            },
            "id": "463d2bf0-d3a8-11e7-9081-ab2af08e9961-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "6b1b1360-d49d-11e7-996f-bd7c1ca4591b-ecs",
                "title": "TLS Fingerprint [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"JA3 Fingerprint\", \"field\": \"tls.client.ja3\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5}, \"schema\": \"bucket\", \"type\": \"terms\"}], \"params\": {\"perPage\": 10, \"showMeticsAtAllLevels\": false, \"showPartialRows\": false, \"showTotal\": false, \"sort\": {\"columnIndex\": null, \"direction\": null}, \"totalFunc\": \"sum\"}, \"title\": \"TLS Fingerprint ECS\", \"type\": \"table\"}"
            },
            "id": "ad2a8b50-d49d-11e7-996f-bd7c1ca4591b-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "",
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"event.duration\", \"negate\": false, \"params\": {\"gte\": 0, \"lt\": 1000000000}, \"type\": \"range\", \"value\": \"0 to 1,000,000,000\"}, \"range\": {\"event.duration\": {\"gte\": 0, \"lt\": 1000000000}}}], \"query\": {\"language\": \"kuery\", \"query\": \"\"}}"
                },
                "savedSearchId": "8e2af860-d520-11e7-9fff-7b1ebf397ba9-ecs",
                "title": "TLS Handshake Latency [Packetbeat] ECS",
                "uiStateJSON": "{\"vis\": {\"legendOpen\": false}}",
                "version": 1,
                "visState": "{\"aggs\": [{\"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\"}, {\"enabled\": true, \"id\": \"2\", \"params\": {\"customLabel\": \"Handshake Latency (ns)\", \"extended_bounds\": {}, \"field\": \"event.duration\", \"interval\": 2000000}, \"schema\": \"segment\", \"type\": \"histogram\"}], \"params\": {\"addLegend\": true, \"addTimeMarker\": false, \"addTooltip\": true, \"categoryAxes\": [{\"id\": \"CategoryAxis-1\", \"labels\": {\"filter\": true, \"show\": true, \"truncate\": 100}, \"position\": \"bottom\", \"scale\": {\"type\": \"linear\"}, \"show\": true, \"style\": {}, \"title\": {}, \"type\": \"category\"}], \"grid\": {\"categoryLines\": false, \"style\": {\"color\": \"#eee\"}}, \"legendPosition\": \"right\", \"seriesParams\": [{\"data\": {\"id\": \"1\", \"label\": \"Count\"}, \"drawLinesBetweenPoints\": true, \"interpolate\": \"linear\", \"mode\": \"stacked\", \"show\": \"true\", \"showCircles\": true, \"type\": \"area\", \"valueAxis\": \"ValueAxis-1\"}], \"times\": [], \"type\": \"area\", \"valueAxes\": [{\"id\": \"ValueAxis-1\", \"labels\": {\"filter\": false, \"rotate\": 0, \"show\": true, \"truncate\": 100}, \"name\": \"LeftAxis-1\", \"position\": \"left\", \"scale\": {\"mode\": \"normal\", \"type\": \"linear\"}, \"show\": true, \"style\": {}, \"title\": {\"text\": \"Count\"}, \"type\": \"value\"}]}, \"title\": \"TLS Handshake Latency ECS\", \"type\": \"area\"}"
            },
            "id": "d2e15950-d560-11e7-9fff-7b1ebf397ba9-ecs",
            "type": "visualization",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "columns": [
                    "_source"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.established\"}, \"meta\": {\"alias\": \"TLS sessions\", \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.established\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"highlightAll\": true, \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "TLS Sessions [Packetbeat] ECS",
                "version": 1
            },
            "id": "ffc3c0b0-d2d7-11e7-9914-4982455b3063-ecs",
            "type": "search",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "columns": [
                    "_source"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.client.server_name\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.client.server_name\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"highlightAll\": true, \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "TLS Server Name Indication [Packetbeat] ECS",
                "version": 1
            },
            "id": "94908e80-d2d8-11e7-9914-4982455b3063-ecs",
            "type": "search",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "columns": [
                    "_source"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.detailed.version\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.detailed.version\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"highlightAll\": true, \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "TLS Version [Packetbeat] ECS",
                "version": 1
            },
            "id": "bf3d23b0-d37c-11e7-9914-4982455b3063-ecs",
            "type": "search",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "columns": [
                    "_source"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.detailed.server_certificate.public_key_size\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.detailed.server_certificate.public_key_size\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"highlightAll\": true, \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "Server Public Key Size ECS",
                "version": 1
            },
            "id": "8f0ff590-d37d-11e7-9914-4982455b3063-ecs",
            "type": "search",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "columns": [
                    "_source"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.client.ja3\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.client.ja3\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"highlightAll\": true, \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "TLS Fingerprint [Packetbeat] ECS",
                "version": 1
            },
            "id": "6b1b1360-d49d-11e7-996f-bd7c1ca4591b-ecs",
            "type": "search",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "columns": [
                    "_source"
                ],
                "description": "",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [{\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"tls.established\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"tls.established\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}, {\"$state\": {\"store\": \"appState\"}, \"exists\": {\"field\": \"event.duration\"}, \"meta\": {\"alias\": null, \"disabled\": false, \"index\": \"packetbeat-*\", \"key\": \"event.duration\", \"negate\": false, \"type\": \"exists\", \"value\": \"exists\"}}], \"highlightAll\": true, \"index\": \"packetbeat-*\", \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "sort": [
                    "@timestamp",
                    "desc"
                ],
                "title": "TLS Handshake Latency [Packetbeat] ECS",
                "version": 1
            },
            "id": "8e2af860-d520-11e7-9fff-7b1ebf397ba9-ecs",
            "type": "search",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        },
        {
            "attributes": {
                "description": "TLS Sessions ECS",
                "hits": 0,
                "kibanaSavedObjectMeta": {
                    "searchSourceJSON": "{\"filter\": [], \"highlightAll\": true, \"query\": {\"language\": \"kuery\", \"query\": \"\"}, \"version\": true}"
                },
                "optionsJSON": "{\"darkTheme\": false, \"useMargins\": false}",
                "panelsJSON": "[{\"gridData\": {\"h\": 4, \"i\": \"4\", \"w\": 3, \"x\": 0, \"y\": 0}, \"id\": \"Navigation-ecs\", \"panelIndex\": \"4\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 4, \"i\": \"8\", \"w\": 9, \"x\": 3, \"y\": 0}, \"id\": \"059fe5e0-d2dd-11e7-9914-4982455b3063-ecs\", \"panelIndex\": \"8\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"9\", \"w\": 3, \"x\": 3, \"y\": 7}, \"id\": \"c14377a0-d353-11e7-9914-4982455b3063-ecs\", \"panelIndex\": \"9\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"10\", \"w\": 3, \"x\": 0, \"y\": 4}, \"id\": \"061de380-d361-11e7-9914-4982455b3063-ecs\", \"panelIndex\": \"10\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"11\", \"w\": 12, \"x\": 0, \"y\": 10}, \"id\": \"a28d09d0-d361-11e7-9914-4982455b3063-ecs\", \"panelIndex\": \"11\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"12\", \"w\": 3, \"x\": 6, \"y\": 7}, \"id\": \"0af0b790-d37d-11e7-9914-4982455b3063-ecs\", \"panelIndex\": \"12\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"13\", \"w\": 3, \"x\": 9, \"y\": 7}, \"id\": \"ae6e33c0-d37d-11e7-9914-4982455b3063-ecs\", \"panelIndex\": \"13\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"14\", \"w\": 3, \"x\": 0, \"y\": 7}, \"id\": \"2c467370-d392-11e7-8fa0-232aa9259081-ecs\", \"panelIndex\": \"14\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"15\", \"w\": 6, \"x\": 0, \"y\": 13}, \"id\": \"0958a910-d396-11e7-8fa0-232aa9259081-ecs\", \"panelIndex\": \"15\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"16\", \"w\": 6, \"x\": 0, \"y\": 16}, \"id\": \"86743f90-d396-11e7-8fa0-232aa9259081-ecs\", \"panelIndex\": \"16\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"17\", \"w\": 6, \"x\": 6, \"y\": 13}, \"id\": \"463d2bf0-d3a8-11e7-9081-ab2af08e9961-ecs\", \"panelIndex\": \"17\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"18\", \"w\": 6, \"x\": 6, \"y\": 16}, \"id\": \"ad2a8b50-d49d-11e7-996f-bd7c1ca4591b-ecs\", \"panelIndex\": \"18\", \"type\": \"visualization\", \"version\": \"6.2.4\"}, {\"gridData\": {\"h\": 3, \"i\": \"19\", \"w\": 9, \"x\": 3, \"y\": 4}, \"id\": \"d2e15950-d560-11e7-9fff-7b1ebf397ba9-ecs\", \"panelIndex\": \"19\", \"type\": \"visualization\", \"version\": \"6.2.4\"}]",
                "timeRestore": false,
                "title": "[Packetbeat] TLS Sessions ECS",
                "uiStateJSON": "{\"P-15\": {\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}, \"P-16\": {\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}, \"P-17\": {\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}, \"P-18\": {\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}, \"P-5\": {\"vis\": {\"defaultColors\": {\"0 - 100\": \"rgb(0,104,55)\"}}}, \"P-7\": {\"vis\": {\"params\": {\"sort\": {\"columnIndex\": null, \"direction\": null}}}}}",
                "version": 1
            },
            "id": "tls-sessions-ecs",
            "type": "dashboard",
            "updated_at": "2019-01-18T23:49:33.441Z",
            "version": 1
        }
    ],
    "version": "7.0.0-SNAPSHOT"
}