{{ Widget::FiltersWidget([ 'timerange'=>$timerange, 'service'=>$service ]) }}

Top 10 hosts with behaviors

Top 10 Behaviors list

Top 10 Behaviors list

@include('dashboards.ecsm.news_top')
@section('splunk') @if($splunkhostname) var search1 = new SearchManager({ id: "search1", search: 'index="cyberbit-index" {{ $splunkhostname }} NOT Behaviors_list="[]" | chart limit=10 count over host by Source_id useother=f usenull=f | addtotals | sort -Total | fields - Total | head', cancelOnUnload: true, latest_time: "{{ $to }}", status_buckets: 0, earliest_time: "{{ $from }}", //"app": utils.getCurrentApp(), auto_cancel: 0, preview: true, runWhenTimeIsUndefined: false }, {tokens: true, tokenNamespace: "submitted"} ); var element1 = new ChartView({ "id": "element1", "charting.axisLabelsX.majorLabelStyle.overflowMode": "ellipsisNone", "charting.axisLabelsX.majorLabelStyle.rotation": "0", "charting.axisTitleX.text": "Hosts", "charting.axisTitleX.visibility": "visible", "charting.axisTitleY.text": "Behavious", "charting.axisTitleY.visibility": "visible", "charting.axisTitleY2.visibility": "visible", "charting.axisX.abbreviation": "none", "charting.axisX.scale": "linear", "charting.axisY.abbreviation": "none", "charting.axisY.scale": "linear", "charting.axisY2.abbreviation": "none", "charting.axisY2.enabled": "0", "charting.axisY2.scale": "inherit", "charting.chart": "bar", "charting.chart.bubbleMaximumSize": "50", "charting.chart.bubbleMinimumSize": "10", "charting.chart.bubbleSizeBy": "area", "charting.chart.nullValueMode": "gaps", "charting.chart.showDataLabels": "all", "charting.chart.sliceCollapsingThreshold": "0.01", "charting.chart.stackMode": "default", "charting.chart.style": "shiny", "charting.drilldown": "none", "charting.layout.splitSeries": "0", "charting.layout.splitSeries.allowIndependentYRanges": "0", "charting.legend.labelStyle.overflowMode": "ellipsisMiddle", "charting.legend.mode": "standard", "charting.legend.placement": "right", "charting.lineWidth": "2", "trellis.enabled": "0", "trellis.scales.shared": "1", "trellis.size": "medium", "managerid": "search1", "el": $('#element1') }, {tokens: true, tokenNamespace: "submitted"} ).render(); /* Row 2 Top 10 Behaviors list index="cyberbit-index"| top limit=20 Behaviors_list -30d @d now "charting.chart": "bar", "charting.chart.showDataLabels": "all", "charting.drilldown": "none", "charting.layout.splitSeries": "0", */ var search21 = new SearchManager({ id: "search21", search: "index=\"cyberbit-index\" {{ $splunkhostname }} NOT Behaviors_list=\"[]\" | rex field=Behaviors_list mode=sed \"s/u'//g\" | rex field=Behaviors_list mode=sed \"s/'//g\" | top limit=20 Behaviors_list", cancelOnUnload: true, latest_time: "{{ $to }}", status_buckets: 0, earliest_time: "{{ $from }}", //"app": utils.getCurrentApp(), auto_cancel: 90, preview: true, runWhenTimeIsUndefined: false }, {tokens: true, tokenNamespace: "submitted"} ); var element21 = new ChartView({ "id": "element21", "charting.chart": "bar", "charting.chart.showDataLabels": "all", "charting.drilldown": "none", "charting.layout.splitSeries": "0", "managerid": "search21", "el": $('#element21') }, {tokens: true, tokenNamespace: "submitted"} ).render(); /* Top 10 Behaviors list index="cyberbit-index"| top limit=20 Behaviors_list -30d @d now "count": "10", "drilldown": "none", "percentagesRow": "false", "rowNumbers": "true", "totalsRow": "true",
*/ var search22 = new SearchManager({ id: "search22", //search: "index=\"cyberbit-index\"| top limit=20 Behaviors_list", search: "index=\"cyberbit-index\" {{ $splunkhostname }} NOT Behaviors_list=\"[]\" | rex field=Behaviors_list mode=sed \"s/u'//g\" | rex field=Behaviors_list mode=sed \"s/'//g\" | top limit=20 Behaviors_list", cancelOnUnload: true, latest_time: "{{ $to }}", status_buckets: 0, earliest_time: "{{ $from }}", //"app": utils.getCurrentApp(), auto_cancel: 90, preview: true, runWhenTimeIsUndefined: false }, {tokens: true, tokenNamespace: "submitted"} ); new TableView({ id: "table22", "managerid": "search22", "count": "10", "drilldown": "none", "percentagesRow": "false", "rowNumbers": "true", "totalsRow": "true", el: $("#element22") }).render(); @else @endif @endsection