@inject('splunk_searches', '\App\Models\SplunkSearches')
@php
$dashboard = 'MSS-INT-PREMIUM';
$wActionableDetections = $splunk_searches::getIdByName('Actionable Detections (30d)', $dashboard);
$wCritical = $splunk_searches::getIdByName('CRITICAL', $dashboard);
$wHigh = $splunk_searches::getIdByName('HIGH', $dashboard);
$wCredential = $splunk_searches::getIdByName('Exposed Credential/Stealer', $dashboard);
$wRansomClaims = $splunk_searches::getIdByName('Ransomware/Extortion Claims', $dashboard);
$wCodeItems = $splunk_searches::getIdByName('Secret Code Items', $dashboard);
$wPriorityPie = $splunk_searches::getIdByName('Actionable Detections by Priority', $dashboard);
$wTrend = $splunk_searches::getIdByName('Threat Landscape — Actionable Detection Trend', $dashboard);
$wIdentity = $splunk_searches::getIdByName('Client Identity Exposure Detail', $dashboard);
$wRansom = $splunk_searches::getIdByName('Ransomware, Extortion & Dark Web Activity', $dashboard);
$wAssetExposure = $splunk_searches::getIdByName('Asset Exposure Monitor — Dark Web / Underground', $dashboard);
$wCodeLeak = $splunk_searches::getIdByName('Source Code & Secret Leakage', $dashboard);
$wIoc = $splunk_searches::getIdByName('Candidate IOC Correlations — WAF', $dashboard);
$wCve = $splunk_searches::getIdByName('Potentially Applicable CVEs — Multi-Client Sandbox', $dashboard);
$wCases = $splunk_searches::getIdByName('Cases', $dashboard);
@endphp
{{-- ===== ROW 1: 6 KPI GAUGES ===== --}}
@if($wActionableDetections)
Actionable Detections (30d)
{!! $splunk_searches::getCodeArray([$wActionableDetections], $from, $to) !!}
@endif
@if($wCritical)
{!! $splunk_searches::getCodeArray([$wCritical], $from, $to) !!}
@endif
@if($wHigh)
{!! $splunk_searches::getCodeArray([$wHigh], $from, $to) !!}
@endif
@if($wCredential)
Exposed Credential/Stealer
{!! $splunk_searches::getCodeArray([$wCredential], $from, $to) !!}
@endif
@if($wRansomClaims)
Ransomware/Extortion Claims
{!! $splunk_searches::getCodeArray([$wRansomClaims], $from, $to) !!}
@endif
@if($wCodeItems)
{!! $splunk_searches::getCodeArray([$wCodeItems], $from, $to) !!}
@endif
{{-- ===== ROW 2: Ransomware (left full height) | Identity + Asset Exposure (right stacked) ===== --}}
@if($wRansom)
Ransomware, Extortion & Dark Web Activity
{!! $splunk_searches::getCodeArray([$wRansom], $from, $to) !!}
@endif
@if($wIdentity)
Client Identity Exposure Detail
{!! $splunk_searches::getCodeArray([$wIdentity], $from, $to) !!}
@endif
@if($wAssetExposure)
Asset Exposure Monitor — Dark Web / Underground
{!! $splunk_searches::getCodeArray([$wAssetExposure], $from, $to) !!}
@endif
{{-- ===== ROW 3: Trend (left) | Source Code (right) ===== --}}
@if($wTrend)
Threat Landscape — Actionable Detection Trend
{!! $splunk_searches::getCodeArray([$wTrend], $from, $to) !!}
@endif
@if($wCodeLeak)
Source Code & Secret Leakage
{!! $splunk_searches::getCodeArray([$wCodeLeak], $from, $to) !!}
@endif
{{-- ===== ROW 4: Priority Pie (left) | IOC Correlations (right) ===== --}}
@if($wPriorityPie)
Actionable Detections by Priority
{!! $splunk_searches::getCodeArray([$wPriorityPie], $from, $to) !!}
@endif
@if($wIoc)
Candidate IOC Correlations — WAF
{!! $splunk_searches::getCodeArray([$wIoc], $from, $to) !!}
@endif
{{-- ===== ROW 5: CVEs full width ===== --}}
@if($wCve)
Potentially Applicable CVEs — Multi-Client Sandbox
{!! $splunk_searches::getCodeArray([$wCve], $from, $to) !!}
@endif
{{-- ===== ROW 6: Cases full width ===== --}}
@if($wCases)
{!! $splunk_searches::getCodeArray([$wCases], $from, $to) !!}
@endif
{{-- /mss-int-premium --}}