vmware-nsx-t-v4.0.7.vlcp

{
  "name":"VMware - NSX-T",
  "namespace":"com.vmware.nsxt",
  "contentPackId":"com.vmware.nsxt",
  "framework":"#9c4",
  "version":"3.2",
  "extractedFields":[ {
    "displayName":"vmw_nsxt_alarm_state",
    "preContext":"alarmState=\"",
    "postContext":"\"",
    "regexValue":"\\S+?",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df",
    "constraints":"{\"searchTerms\":\"comp subcomp NSX\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_audit_operation_status",
    "preContext":"status(?::'|=\")",
    "postContext":"(?:'|\")",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000",
    "constraints":"{\"searchTerms\":\"comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_comp",
    "preContext":"comp=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000",
    "constraints":"{\"searchTerms\":\"subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_display_name",
    "preContext":"\"display_name\":\"",
    "postContext":"\"",
    "regexValue":"[\\w \\\\']+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3enfzxa3dbpfpw4ylnmu000000",
    "constraints":"{\"searchTerms\":\"comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_edge_firewall_ruleid",
    "preContext":"(?:REJECT|DROP|PASS) ",
    "postContext":" (?:IN|OUT)",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fmrtwkx3gnfzgk53bnrwf64tvnrswsza0",
    "constraints":"{\"searchTerms\":\"INET* FIREWALL\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_entid",
    "preContext":"entId=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0",
    "constraints":"{\"searchTerms\":\"NSX comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_error_code",
    "preContext":"errorCode=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0",
    "constraints":"{\"searchTerms\":\"comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_event_state",
    "preContext":"\"event_state\":\\s?",
    "postContext":"(?:,|})",
    "regexValue":"\\S+?",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df",
    "constraints":"{\"searchTerms\":\"comp subcomp NSX\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_event_type",
    "preContext":"eventType=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0",
    "constraints":"{\"searchTerms\":\"comp subcomp NSX\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_eventid",
    "preContext":"eventId=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000",
    "constraints":"{\"searchTerms\":\"comp subcomp NSX\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_reason",
    "preContext":"(?:INET|INET6) ",
    "postContext":" (?:PASS|DROP|REJECT|GOTO_FILTER)",
    "regexValue":".*",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf64tfmfzw63q0",
    "constraints":"{\"searchTerms\":\"INET*\",\"filters\":[{\"internalName\":\"appname\",\"displayName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"firewall_pktlog\",\"fieldType\":\"STRING\",\"isExtracted\":false,\"hidden\":false}]}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_action",
    "preContext":"(?:match|TERM|L7 Rule pending) ",
    "postContext":" (?:\\d+)",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6yldoruw63q0",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_client_to_server_bytes",
    "preContext":" ",
    "postContext":"/\\d+.*$",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_dst",
    "preContext":"[A-Fa-f\\d]+->",
    "postContext":"(?: |/|$)",
    "regexValue":"[A-Fa-f\\d\\.:]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_dst_ip_port",
    "preContext":"[A-Fa-f\\d]+->",
    "postContext":"(?: |$)",
    "regexValue":"[A-Fa-f\\d\\.:]+/\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_dst_port",
    "preContext":"[A-Fa-f\\d]+->[A-Fa-f\\d\\.:]+/",
    "postContext":"(?: |$)",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_protocol",
    "preContext":"(?:IN|OUT) (\\d+ )?",
    "postContext":"\\s",
    "regexValue":"(?:TCP6?|UDP6?|ICMP|PROTO6? \\d+)",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf64dsn52g6y3pnq000000",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_ruleid",
    "preContext":"(?:REJECT|DROP|PASS|GOTO_FILTER) ",
    "postContext":" (?:IN|OUT)",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf64tvnrswsza0",
    "constraints":"{\"searchTerms\":\"INET*\",\"filters\":[{\"hidden\":false,\"internalName\":\"appname\",\"displayName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"firewall-pktlog\",\"fieldType\":\"STRING\",\"isExtracted\":false}]}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_server_to_client_bytes",
    "preContext":" \\d+/",
    "postContext":".*$",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_src",
    "preContext":"\\S+\\s+",
    "postContext":"(?:/|->)",
    "regexValue":"[A-Fa-f\\d\\.:]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_src_ip_port",
    "preContext":"(?:TCP6?|UDP6?|ICMP|PROTO6? \\d+) ",
    "postContext":"(->)",
    "regexValue":"[A-Fa-f\\d\\.:]+/\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smnpws4c7obxxe5a0",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_firewall_src_port",
    "preContext":"(?:TCP6?|UDP6?|ICMP|PROTO6? \\d+) [A-Fa-f\\d\\.:]+/",
    "postContext":"(->)",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smnpxa33soq000000",
    "constraints":"{\"searchTerms\":\"INET*\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_operation",
    "preContext":"Operation(?::'|=\")",
    "postContext":"(?:'|\")",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000",
    "constraints":"{\"searchTerms\":\"comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_s2comp",
    "preContext":"s2comp=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq",
    "constraints":"{\"searchTerms\":\"comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_subcomp",
    "preContext":"subcomp=\"",
    "postContext":"\"",
    "regexValue":"\\S+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000",
    "constraints":"{\"searchTerms\":\"comp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_user",
    "preContext":"UserName(?::'|=\")",
    "postContext":"(?:'|\")",
    "regexValue":".+?",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000",
    "constraints":"{\"searchTerms\":\"comp subcomp\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_event_type",
    "preContext":"event_type\":\\s+\"",
    "postContext":"\",\\s+\"event_trigger",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3fozsw45c7or4xazi0",
    "constraints":"{\"searchTerms\":\"\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_origin_fw_type",
    "preContext":"fw_type\":\\s+\"",
    "postContext":"\",\\s+\"fw_uuid",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3pojuwo2lol5thox3upfygk000",
    "constraints":"{\"searchTerms\":\"origin\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_origin_fw_uuid",
    "preContext":"fw_uuid\":\\s+\"",
    "postContext":"\",\\s+\"node_uuid",
    "regexValue":"[A-Fa-f\\d\\-]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3pojuwo2lol5thox3vovuwi000",
    "constraints":"{\"searchTerms\":\"origin\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_start",
    "preContext":"start\":\\s+\"",
    "postContext":"\",\\s+\"end",
    "regexValue":"[-\\d\\:\\.TZ]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3torqxe5a0",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_end",
    "preContext":"end\":\\s+\"",
    "postContext":"\",\\s+\"ip_ver",
    "regexValue":"[-\\d\\:\\.TZ]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3fnzsa0000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_ip_ver",
    "preContext":"ip_ver\":\\s+\"",
    "postContext":"\",\\s+\"flow_id",
    "regexValue":"ipv\\d",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3jobpxmzls",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_src_ip",
    "preContext":"src_ip\":\\s+\"",
    "postContext":"\",\\s+\"src_port",
    "regexValue":"[A-Fa-f\\d\\.:]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_src_port",
    "preContext":"src_port\":\\s+",
    "postContext":",\\s+\"dest_ip",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv64dpoj2a0000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_dest_ip",
    "preContext":"dest_ip\":\\s+\"",
    "postContext":"\",\\s+\"dest_port",
    "regexValue":"[A-Fa-f\\d\\.:]+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_dest_port",
    "preContext":"dest_port\":\\s+",
    "postContext":",\\s+\"proto",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_proto",
    "preContext":"proto\":\\s+\"",
    "postContext":"\",\\s+\"tcp_flags",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3qojxxi3y0",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_bytes_toserver",
    "preContext":"bytes_toserver\":\\s+",
    "postContext":",\\s+\"bytes_toclient",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_bytes_toclient",
    "preContext":"bytes_toclient\":\\s+",
    "postContext":",\\s+\"",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_flow_final_action",
    "preContext":"final_action\":\\s+\"",
    "postContext":"\"\\s?}",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000",
    "constraints":"{\"searchTerms\":\"flow\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_fw_action",
    "preContext":"action\":\\s+\"",
    "postContext":"\",\\s+\"rule_id",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3go5pwcy3unfxw4000",
    "constraints":"{\"searchTerms\":\"fw\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_fw_rule_id",
    "preContext":"rule_id\":\\s+",
    "postContext":",\\s+\"direction",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3go5pxe5lmmvpwsza0",
    "constraints":"{\"searchTerms\":\"fw\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_fw_rule_tag",
    "preContext":"rule_tag\":\\s+\"",
    "postContext":"\"\\s?}",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3go5pxe5lmmvpxiylh",
    "constraints":"{\"searchTerms\":\"fw\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_l7profile_entry_id",
    "preContext":"entry_id\":\\s",
    "postContext":",\\s+\"action",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3mg5yhe33gnfwgkx3fnz2he6k7nfsa0000",
    "constraints":"{\"searchTerms\":\"l7profile\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_l7profile_action",
    "preContext":"action\":\\s+\"",
    "postContext":"\"\\s?},",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3mg5yhe33gnfwgkx3bmn2gs33o",
    "constraints":"{\"searchTerms\":\"l7profile\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_http_method",
    "preContext":"http_method\":\\s+\"",
    "postContext":"\",\\s+\"hostname",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3ior2hax3nmv2gq33e",
    "constraints":"{\"searchTerms\":\"http\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_http_hostname",
    "preContext":"hostname\":\\s+\"",
    "postContext":"\",\\s+\"url",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3ior2hax3in5zxi3tbnvsq0000",
    "constraints":"{\"searchTerms\":\"http\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_http_url",
    "preContext":"url\":\\s+\"",
    "postContext":"\",\\s+\"scheme",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3ior2hax3vojwa0000",
    "constraints":"{\"searchTerms\":\"http\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_http_scheme",
    "preContext":"scheme\":\\s+\"",
    "postContext":"\",\\s+\"http_user_agent",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3ior2hax3tmnugk3lf",
    "constraints":"{\"searchTerms\":\"http\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_http_user_agent",
    "preContext":"http_user_agent\":\\s+\"",
    "postContext":"\",\\s+\"status",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3ior2hax3vonsxex3bm5sw45a0",
    "constraints":"{\"searchTerms\":\"http\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_http_status",
    "preContext":"status\":\\s+\"",
    "postContext":"\",\\s+\"site_category",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3ior2hax3torqxi5lt",
    "constraints":"{\"searchTerms\":\"http\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_tls_action",
    "preContext":"action\":\\s+\"",
    "postContext":"\",\\s+\"rule_id",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3unrzv6yldoruw63q0",
    "constraints":"{\"searchTerms\":\"tls_inspection\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_tls_rule_id",
    "preContext":"rule_id\":\\s+",
    "postContext":",\\s+\"domain",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3unrzv64tvnrsv62le",
    "constraints":"{\"searchTerms\":\"tls_inspection\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_tls_domain",
    "preContext":"domain\":\\s+\"",
    "postContext":"\",\\s+\"cert_status",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3unrzv6zdpnvqws3q0",
    "constraints":"{\"searchTerms\":\"tls_inspection\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_idps_action",
    "preContext":"action\":\\s+\"",
    "postContext":"\",\\s+\"rule_id",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3jmryhgx3bmn2gs33o",
    "constraints":"{\"searchTerms\":\"idps\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_idps_rule_id",
    "preContext":"rule_id\":\\s+",
    "postContext":",\\s+\"ids_profile_id",
    "regexValue":"-?\\d+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3jmryhgx3sovwgkx3jmq000000",
    "constraints":"{\"searchTerms\":\"idps\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_app_id_app",
    "preContext":"app\":\\s+\"",
    "postContext":"\"\\s?}",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3bobyf62lel5qxa4a0",
    "constraints":"{\"searchTerms\":\"app_id\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_antimalware_sha256",
    "preContext":"filehash_sha256\":\\s+\"",
    "postContext":"\",\\s+\"file_name",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3bnz2gs3lbnr3wc4tfl5zwqyjsgu3a0000",
    "constraints":"{\"searchTerms\":\"antimalware\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_antimalware_file",
    "preContext":"file_name\":\\s+\"",
    "postContext":"\",\\s+\"file_size",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3bnz2gs3lbnr3wc4tfl5tgs3df",
    "constraints":"{\"searchTerms\":\"antimalware\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_antimalware_verdic",
    "preContext":"verdict\":\\s+\"",
    "postContext":"\",\\s+\"action",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3bnz2gs3lbnr3wc4tfl53gk4tenfrq0000",
    "constraints":"{\"searchTerms\":\"antimalware\"}",
    "info":null
  }, {
    "displayName":"vmw_nsxt_ulog_antimalware_action",
    "preContext":"action\":\\s+\"",
    "postContext":"\",\\s+\"verdict_source",
    "regexValue":"\\w+",
    "internalName":"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3bnz2gs3lbnr3wc4tfl5qwg5djn5xa0000",
    "constraints":"{\"searchTerms\":\"antimalware\"}",
    "info":null
  } ],
  "queries":[ ],
  "alerts":[ {
    "name":"SysCpuUsage",
    "info":"The CPU usage on NSX Manager or Edge node is very high.",
    "recommendation":"Please review the configuration, running services and sizing of this Manager or Edge node. Consider adjusting the Manager or Edge appliance form factor size.",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"operator\":\"CONTAINS\",\"value\":\"manager_cpu_usage_very_high,edge_cpu_usage_very_high\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"operator\":\"CONTAINS\",\"value\":\"OPEN\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_alarm_state\",\"preContext\":\"alarmState=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_event_type\",\"preContext\":\"eventType=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"SysMemUsage",
    "info":"The memory usage on NSX Manager or Edge node is very high.",
    "recommendation":"Please review the configuration, running services and sizing of this Manager or Edge node. Consider adjusting the Manager or Edge appliance form factor size.",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"operator\":\"CONTAINS\",\"value\":\"manager_memory_usage_very_high,edge_memory_usage_very_high\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"operator\":\"CONTAINS\",\"value\":\"OPEN\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_alarm_state\",\"preContext\":\"alarmState=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_event_type\",\"preContext\":\"eventType=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"SysDiskUsage",
    "info":"The disk usage for the NSX Manager or Edge node is very high.",
    "recommendation":"Examine the partition with high usage and see if there are any unexpected large files that can be removed.",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"operator\":\"CONTAINS\",\"value\":\"manager_disk_usage_very_high,edge_disk_usage_very_high\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"operator\":\"CONTAINS\",\"value\":\"OPEN\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_alarm_state\",\"preContext\":\"alarmState=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_event_type\",\"preContext\":\"eventType=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"PasswordExpiry",
    "info":"Password for appliance user account is about to expire or expired.",
    "recommendation":"The password for user must be changed to access the system. For example, to apply a new password to a user, invoke the following NSX API with a valid password in the request body: PUT /api/v1/node/users/<userid> where <userid> is the ID of the user. If the admin user (with <userid> 10000) password has expired, admin must login to the system via SSH (if enabled) or console in order to change the password. Upon entering the current expired password, admin will be prompted to enter a new password.",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"operator\":\"CONTAINS\",\"value\":\"password_expired,password_is_about_to_expire\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"operator\":\"CONTAINS\",\"value\":\"OPEN\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_alarm_state\",\"preContext\":\"alarmState=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_event_type\",\"preContext\":\"eventType=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"CertificateExpiry",
    "info":"One or more certificate is expired.",
    "recommendation":"Ensure services that are currently using the certificate are updated to use a new, non-expired certificate. Once the expired certificate is no longer in use, it should be deleted. If the expired certificate is used by NAPP Platform, the connection is broken between NSX and NAPP Platform. Please check the NAPP Platform troubleshooting document to use a self-signed NAPP CA certificate for recovering the connection.",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"operator\":\"CONTAINS\",\"value\":\"certificate_expired\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"operator\":\"CONTAINS\",\"value\":\"OPEN\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_alarm_state\",\"preContext\":\"alarmState=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bnrqxe3k7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_event_type\",\"preContext\":\"eventType=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7or4xazi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"ClusterNodeStatus",
    "info":"Local edge cluster node is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXClusterNodeStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[3-9]|\\\\d{2,}$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"BackupFailure",
    "info":"NSX scheduled backup operation failed.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"Cluster backup failed\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"VipLeadership",
    "info":"NSX Management cluster VIP is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"http\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP60401\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"ApiRateLimit",
    "info":"Client API reached 80% of the configured threshold.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"http\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"New maximum of client API rate has exceeded 80% of the allowed limit.\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"CorfuQuorumLost",
    "info":"Two nodes went down in the cluster and lost corfu quorum.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"cluster-boot-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"step\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"CBM38\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"DfwHeapMem",
    "info":"DFW heap memory exceeded configured threshold.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"agg-service\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA11015\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"ProcessStatus",
    "info":"Critical process status changed.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXProcessStatus\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"ClusterFailoverStatus",
    "info":"SR high availability state changed or active/standby services failover.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXClusterFailoverStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[1-9]|\\\\d{2,}$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"DhcpPoolUsageOverloadedEvent",
    "info":"DHCP pool reached configured usage threshold.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXDhcpPoolUsageOverloadedEvent\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^1$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"FabricCryptoStatus",
    "info":"Edge crypto mux driver is down for failing Known_Answer_Tests (KAT).",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXFabricCryptoStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[2-9]|\\\\d{2,}$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"VpnTunnelState",
    "info":"VPN tunnel is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXVpnTunnelState\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"BfdTunnelStatus",
    "info":"BFD Tunnel status changed.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXBfdTunnelStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^[3-9]|\\\\d{2,}$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"RoutingBgpNeighborStatus",
    "info":"BGP neighbor status is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXRoutingBgpNeighborStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"VpnL2SessionStatus",
    "info":"L2 VPN session is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXVpnL2SessionStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"VpnIkeSessionStatus",
    "info":"IKE session is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXVpnIkeSessionStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"RoutingStatus",
    "info":"Routing(BGP/BFD) is down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXRoutingStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^0$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"DnsForwarderStatus",
    "info":"DNS forwarder running status is DOWN.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"operator\":\"CONTAINS\",\"value\":\"vmwNSXDnsForwarderStatus\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"operator\":\"MATCH\",\"value\":\"^1$\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_event_state\",\"preContext\":\"\\\"event_state\\\":\\\\s?\",\"postContext\":\"(?:,|})\",\"regexValue\":\"\\\\S+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45c7on2gc5df\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"},{\"displayName\":\"vmw_nsxt_eventid\",\"preContext\":\"eventId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fozsw45djmq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp NSX\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"TnConnDown_15min",
    "info":"Transport Node connection to a controller/Manager is down for at least 15 minutes.",
    "recommendation":"",
    "alertType":"NEW_EVENT_TYPE",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"mpa,nsx-proxy\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA1009,MPA1011,PRX0803,PRX0105,PRX0805\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":900000,
    "searchInterval":300000
  }, {
    "name":"TnConnDown_5min",
    "info":"Transport Node connection to controller/Manager is down for at least 5 minutes.",
    "recommendation":"",
    "alertType":"NEW_EVENT_TYPE",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"mpa,nsx-proxy\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA1009,MPA1011,PRX0803,PRX0105,PRX0805\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":60000
  }, {
    "name":"ServiceDown",
    "info":"One or more services are down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"heartbeatservice-server\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"ServiceMonitor\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"HBS153\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"IpNotAvailableInPool",
    "info":"There is no IP available in the Pool or reaches configured threshold.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP5137,MP5109\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"LoadBalancerError",
    "info":"NSX Load Balancer Service status is ERROR.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP7505\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"LoadBalancerDown",
    "info":"NSX Load Balancer Service status is DOWN.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP7506\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"LoadBalancerVsDown",
    "info":"VS status: all pool members are down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge-lb.lb\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"EDG1200001\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"LoadBalancerPoolDown",
    "info":"Pool status: all pool members are down.",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"startTimeMillis\":1560560370535,\"endTimeMillis\":1560560674224,\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-edge-lb.lb\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"EDG1200000\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  }, {
    "name":"ProcessCrash",
    "info":"Process or daemon crashes in the datapath or other LB process like dispatcher, etc..",
    "recommendation":"",
    "alertType":"RATE_BASED",
    "chartQuery":"{\"query\":\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager,nsx-edge,nsx-autonomous-edge\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"node-mgmt\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"Core file generated\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
    "messageQuery":"",
    "hitCount":0.0,
    "hitOperator":"GREATER_THAN",
    "searchPeriod":300000,
    "searchInterval":300000
  } ],
  "dashboardSections":[ {
    "views":[
      {
            "name":"NSX - Infrastructure",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"NSX Manager : Communication Errors",
          "info":"These are all communication log errors on nsx-manager.<br><br>They are grouped by hostname.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp subcomp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MPA(1[2-9]|20|1[0-1][0-9]|12[0-1]|13[0-39])\\\\b\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP228,MP236,MP239,MP40003,MP40005,MP40006,MP40007,MP40014,MP2109,MP2117,MP4002,MP4018,MP4021,MP4024,MP4035,MP4037,MP4038,MP4039,MP4040,MP4041,MP4042,MP4043,MP4052,MP4060,MP4069,MP4705,MP4709,MP2301,MP2302,CSM60306,CSM60310,MP211,MP217,MP254\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP5005,MP5605,MP5616,MP5618,MP3024,MP3025,MP4051,MP4058,MP4063,MP4065,MP4066,MP4067,MP2201,MP2203,MP2205,MP2206,MP2207,MP2208,MP2209,MP2213,MP2214,MP2215,MP2219,MP2221,MP2222,CSM60304,CSM60312,CSM60313,CSM60315,CSM60316,CSM60317,MP98,MP220,MP257\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP25007,MP25409\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP8244,MP8812\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MPA41542,MPA42063\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"nsxa[\\\\\\\\s\\\\\\\\S]*\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Transport Node - NSX Manager : Communication Errors",
          "info":"Communication errors between NSX transport nodes (vSphere hosts, KVM hosts and NSX Edges) and NSX Manager. It is recommended to analyze the hostnames with the highest returned values to look for potential issues.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"EDG03[0-9]{4}\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0020[1-9]|LCP002[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MPA(1[2-9]|20|1[0-1][0-9]|12[0-1]|13[0-39])\\\\b\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"nsxa\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Transport Node - Controller : Communication Errors",
          "info":"Communication errors between NSX transport nodes (vSphere hosts, KVM hosts and NSX Edges) and NSX controllers. It is recommended to analyze the hostnames with the highest returned values to look for potential issues.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0000[1-9]|LCP000[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0020[1-9]|LCP002[1-9][0-9]\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Controller : Communication Errors",
          "info":"Communication errors among controllers in a cluster. It is recommended to analyze the hostnames with the highest returned values to look for potential issues.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"CCP1910040, CCP2010060, CCP2010070\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MPA(1[2-9]|20|1[0-1][0-9]|12[0-1]|13[0-39])\\\\b\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"zookeeper,replication,moot-client,moot-cluster,lcp-channel,lcp-session,adapter-mp\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-controller\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Configuration Errors",
          "info":"This widget is based on known error patterns generated from various components that create the NSX infrastructure. It is recommended to analyze the hostnames with the highest returned values to look for potential issues.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0000[1-9]|LCP000[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"EDG01[0-9][0-9][0-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"ESX[0-9]+\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"CCP0110690,CCP0110700,CCP0110710,CCP1910010,CCP1910030,CCP2010130,CCP2010140,CCP0110400,CCP0110540,CCP0110550,CCP0110560,CCP0110570,CCP0110580,CCP0110590,CCP0910020\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"LCP0100006,LCP0101002,LCP0106004\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MP2500[0-8]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP25100\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MP254[0-2][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MP253[0-1][0-9]|MP2532[0-4]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MP255[0][0-9]|MP2551[0-1]\"}],\"supplementalConstraints\":[{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Other Errors",
          "info":"Other errors from all NSX components. It is recommended to analyze the hostnames with the highest returned values to look for potential issues. Host agent failures, such as nsx-cfgagent down or MPA down, may require immediate action.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"ESX[0-9]+\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"MPA13[4-8]|MPA12[2-9]|MPA130|MPA14[0-3]|MPA100[0-9]|MPA101[0-9]|MPA102[0-7]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"CONTAINS\",\"value\":\"MP25431,MP25421,MP25415\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"EDG07[0-9]{4}\"}],\"supplementalConstraints\":[{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Audits - Overview",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Logical Switch Audits",
          "info":"Logical switch messages excerpted from the NSX audit log capturing any create, update, or delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical switch audit events.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalSwitch,UpdateLogicalSwitch,DeleteLogicalSwitch\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Switch Audit Details",
          "info":"All logical switch audit events. This widget is based on known error patterns generated from various components that create the NSX logical switch infrastructure.",
          "gridWidth" : "1/2",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalSwitch,UpdateLogicalSwitch,DeleteLogicalSwitch\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Switch Port Audits",
          "info":"Logical switch port messages excerpted from the NSX audit log capturing any create, update, or delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical switch port audit events.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalPort,UpdateLogicalPort,DeleteLogicalPort\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Switch Port Audit Details",
          "info":"All logical switch port audit events. This widget is based on known error patterns generated from various components that create the NSX logical switch infrastructure.",
          "gridWidth" : "1/2",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalPort,UpdateLogicalPort,DeleteLogicalPort\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Router Audits",
          "info":"Logical router messages excerpted from the NSX audit log capturing any create, update, or delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical router audit events.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalRouter,UpdateLogicalRouter,DeleteLogicalRouter\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Router Audit Details",
          "info":"All logical router audit events. This widget is based on known error patterns generated from various components that create the NSX logical routing infrastructure.",
          "gridWidth" : "1/2",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalRouter,UpdateLogicalRouter,DeleteLogicalRouter\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Router Port Audits",
          "info":"Logical router port messages excerpted from the NSX audit log capturing any create, update, or delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical router port audit events.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalRouterPort,UpdateLogicalRouterPort,DeleteLogicalRouterPort\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Router Port Audit Details",
          "info":"All logical switch port audit events. This widget is based on known error patterns generated from various components that create the NSX logical router infrastructure.",
          "gridWidth" : "1/2",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalRouterPort,UpdateLogicalRouterPort,DeleteLogicalRouterPort\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Firewall Audits",
          "info":"Firewall messages excerpted from the NSX audit log capturing any add section, update section with new rules, or delete section events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of firewall audit events.",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"AddSection,UpdateSectionWithRules,DeleteSection\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Firewall Audit Details",
          "info":"All firewall audit events. This widget is based on known error patterns generated from the NSX firewall.",
          "gridWidth" : "1/2",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"AddSection,UpdateSectionWithRules,DeleteSection\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Logical Switch - Overview",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Logical Switch Created",
          "info":"Logical switch messages excerpted from the NSX audit log capturing any create events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical switch create audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalSwitch\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Switch Updates",
          "info":"Logical switch messages excerpted from the NSX audit log capturing any update events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical switch update audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"UpdateLogicalSwitch\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Switch Deleted",
          "info":"Logical switch messages excerpted from the NSX audit log capturing any delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical switch delete audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"DeleteLogicalSwitch\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Switch Audit Details",
          "info":"All logical switch audit events.",
          "gridWidth" : "1",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalSwitch,UpdateLogicalSwitch,DeleteLogicalSwitch\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Switch - Manager Errors",
          "info":"Logical switch log errors reported to NSX Manager.<br><br>Errors are grouped by hostname.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Switch - Controller Errors",
          "info":"Logical switch log errors reported from the view of the NSX controllers.<br><br>Errors are grouped by hostname.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-controller\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"app-l2,app-config\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Switch - Transport Node Errors",
          "info":"Logical switch log errors reported for all NSX transport nodes - vSphere hosts, KVM hosts, and Edge Services Gateways.<br><br>Errors are grouped by node.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0040[1-9]|LCP004[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0050[1-9]|LCP005[1-9][0-9]|LCP0060[0-9]|LCP006[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0104[0-9]*\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"SWITCHING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"vdl2,vswitch\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Logical Router - Overview",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Logical Router Create Audit Events",
          "info":"Logical router messages excerpted from the NSX audit log capturing any create events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical router create audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalRouter\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Router Update Audit Events",
          "info":"Logical router messages excerpted from the NSX audit log capturing any update events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical router update audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"UpdateLogicalRouter\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Router Delete Audit Events",
          "info":"Logical router messages excerpted from the NSX audit log capturing any delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of logical router delete audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"DeleteLogicalRouter\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Router Audit Details",
          "info":"All logical router audit events.",
          "gridWidth" : "1",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateLogicalRouter,UpdateLogicalRouter,DeleteLogicalRouter\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Logical Router - Manager Errors",
          "info":"Logical router log errors reported to NSX Manager.<br><br>Errors are grouped by hostname.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Router - Controller Errors",
          "info":"Logical router log errors detected by NSX controllers.<br><br>Errors are grouped by hostname.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-controller\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"app-vdr,app-config\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Logical Router - Transport Node Errors",
          "info":"Logical router log errors for NSX transport nodes - vSphere hosts, KVM hosts, and Edge Services Gateways.<br><br>Errors are grouped by node.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP(0103[0-9]*|009[0-9]*)\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"ROUTING\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"vdrb\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Distributed Firewall - Overview",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Section Create Events",
          "info":"All firewall section create audit events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of firewall section create audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"AddSection\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Section Update Events",
          "info":"All firewall section update audit events.<br><br>Notes<br>Any create, update, delete activity on a rule raising section update event.<br><br>Events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of firewall section update audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"UpdateSectionWithRules\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Section Delete Events",
          "info":"All firewall section delete audit events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of firewall section delete audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"DeleteSection\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Section Audit Details",
          "info":"Shows all Firewall audit events (who changed what).<br><br><span>Note -&nbsp;</span><span>Any create, update, delete activity on a rule raising section update event.</span><br>",
          "gridWidth" : "1",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"AddSection,UpdateSectionWithRules,DeleteSection\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Firewall - Manager Errors",
          "info":"Firewall log errors reported to NSX Manager.<br><br>Errors are grouped by hostname.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"FIREWALL\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Firewall - Controller Errors",
          "info":"Firewall log errors reported to NSX controllers.<br><br>Errors are grouped by hostname.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-controller\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"phoenix,falcon,pigeon\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Firewall - Transport Node Errors",
          "info":"Firewall log errors on NSX transport nodes - vSphere hosts and KVM hosts.<br><br>Errors are grouped by node.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ANY\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0040[1-9]|LCP004[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0050[1-9]|LCP005[1-9][0-9]|LCP0060[0-9]|LCP006[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0110[1-9]|LCP011[1-9][0-9]\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"LCP0102[0-9]*\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"vsip\"}],\"supplementalConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-esx,nsx-edge,nsx-kvm\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Distributed Firewall - Traffic",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Top Firewall Sources",
          "info":"Top source IP addresses from all firewall rules that are logging data.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"INET\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6yldoruw63q0\",\"operator\":\"CONTAINS\",\"value\":\"pass\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_src\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_src\",\"preContext\":\"\\\\S+\\\\s+\",\"postContext\":\"(?:/|->)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_action\",\"preContext\":\"(?:match|TERM|L7 Rule pending) \",\"postContext\":\" (?:\\\\d+)\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6yldoruw63q0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Top Firewall Destinations",
          "info":"Top destination IP addresses from all firewall rules that are logging data.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"INET\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6yldoruw63q0\",\"operator\":\"CONTAINS\",\"value\":\"pass\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |/|$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_action\",\"preContext\":\"(?:match|TERM|L7 Rule pending) \",\"postContext\":\" (?:\\\\d+)\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6yldoruw63q0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Application Ports Permitted",
          "info":"Measures all in / out connections permitted in the NSX-T environment by destination port.<br><br>The data is the summation of the specified time range.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"inet term\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst_port\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"preContext\":\" \",\"postContext\":\"/\\\\d+.*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst_ip_port\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+/\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst_port\",\"preContext\":\"[A-Fa-f\\\\d]+->[A-Fa-f\\\\d\\\\.:]+/\",\"postContext\":\"(?: |$)\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Application Ports Denied",
          "info":"All traffic deined by a firewall rule.  Data is grouped by application (or destination) port number.  This widget displays only data associated with a port. Traffic types, such as ICMP, without an associated port are not displayed.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"INET\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"operator\":\"EXISTS\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"drop, reject\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"inet match\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst_port\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst_ip_port\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+/\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst_port\",\"preContext\":\"[A-Fa-f\\\\d]+->[A-Fa-f\\\\d\\\\.:]+/\",\"postContext\":\"(?: |$)\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpxa33soq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Top Firewall Sources by bytes - client to server",
          "info":"All firewall traffic, in bytes by source IP address, from the client to a server. &nbsp;Data is only displayed if the firewall is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"INET\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"displayNamespace\":\"Unknown\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"inet term\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_src\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"preContext\":\" \",\"postContext\":\"/\\\\d+.*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst_ip_port\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+/\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_src\",\"preContext\":\"\\\\S+\\\\s+\",\"postContext\":\"(?:/|->)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Top Firewall Destinations by bytes - client to server",
          "info":"All firewall traffic, in bytes by destination IP address, from the client to a server. &nbsp;Data is only displayed if the firewall is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"INET\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"displayNamespace\":\"Unknown\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"operator\":\"EXISTS\"},{\"internalName\":\"text\",\"operator\":\"CONTAINS\",\"value\":\"inet term\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"preContext\":\" \",\"postContext\":\"/\\\\d+.*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |/|$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Top Firewall Sources by bytes - server to client",
          "info":"All firewall traffic, in bytes by source IP address, from the server to a client. &nbsp;Data is only displayed if the firewall is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"inet term\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"displayName\":\"vmw_nsxt_firewall_server_to_client_bytes\",\"displayNamespace\":\"Unknown\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_src\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"preContext\":\" \",\"postContext\":\"/\\\\d+.*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst_ip_port\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+/\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtorpws4c7obxxe5a0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_server_to_client_bytes\",\"preContext\":\" \\\\d+/\",\"postContext\":\".*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_src\",\"preContext\":\"\\\\S+\\\\s+\",\"postContext\":\"(?:/|->)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643smm000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Top Firewall Destinations by bytes - server to client",
          "info":"All firewall traffic, in bytes by destination IP address, from the server to a client. &nbsp;Data is only displayed if the firewall is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that distributed firewall rule logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"inet term\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"displayName\":\"vmw_nsxt_firewall_server_to_client_bytes\",\"displayNamespace\":\"Unknown\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_firewall_dst\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_firewall_client_to_server_bytes\",\"preContext\":\" \",\"postContext\":\"/\\\\d+.*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6y3mnfsw45c7orxv643foj3gk4s7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_dst\",\"preContext\":\"[A-Fa-f\\\\d]+->\",\"postContext\":\"(?: |/|$)\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf6zdtoq000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"},{\"displayName\":\"vmw_nsxt_firewall_server_to_client_bytes\",\"preContext\":\" \\\\d+/\",\"postContext\":\".*$\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3gnfzgk53bnrwf643foj3gk4s7orxv6y3mnfsw45c7mj4xizlt\",\"constraints\":\"{\\\"searchTerms\\\":\\\"INET*\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - DHCP - Overview",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"DHCP Create Audit Events",
          "info":"All DHCP create audit events, including new DHCP profiles, static bindings, or IP pools.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of DHCP create audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"DHCP\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateDHCPProfile,CreateDHCPServer,CreateDHCPStaticBinding,CreateDHCPIpPool\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"DHCP Update Audit Events",
          "info":"All DHCP update audit events, including updated DHCP profiles, static bindings, and IP pools.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of DHCP update audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"DHCP\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"UpdateDhcpProfile,UpdateDhcpServer,UpdateDhcpStaticBinding,UpdateDhcpIpPool\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"DHCP Delete Audit Events",
          "info":"All DHCP delete audit events, including deleted DHCP profiles, static bindings, or IP pools.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of DHCP delete audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"DHCP\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"DeleteDhcpProfile,DeleteDhcpServer,DeleteDhcpStaticBinding,DeleteDhcpIpPool\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"DHCP Audit Details",
          "info":"All DHCP audit events.",
          "gridWidth" : "1",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"DHCP\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateDHCPProfile,CreateDHCPServer,CreateDHCPStaticBinding,CreateDHCPIpPool,UpdateDHCPProfile,UpdateDHCPServer,UpdateDHCPStaticBinding,UpdateDHCPIpPool,DeleteDHCPProfile,DeleteDHCPServer,DeleteDHCPStaticBinding,DeleteDHCPIpPool\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"DHCP - Manager Errors",
          "info":"DHCP log errors reported by NSX Manager.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"DHCP\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"DHCP - Controller Errors",
          "info":"DHCP log errors reported by NSX controllers.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-controller\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"canary\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"DHCP - Transport Node Errors",
          "info":"DHCP log errors reported for NSX transport nodes - vSphere hosts, KVM hosts, and Edge Services Gateways.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"MATCH\",\"value\":\"EDG07[0-9]*\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Backup",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Backup Configuration Updates",
          "info":"Total number of times backup configuration was updated",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"Backup configuration updated\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Backup Failures",
          "info":"Count of all backup failures over time grouped by error code",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"backup failed with\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_error_code\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_error_code\",\"preContext\":\"errorCode=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fojzg64s7mnxwizi0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Successful Cluster Backups",
          "info":"Total number of cluster and node backups completed successfully",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"Cluster backup completed successfully\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Failed Cluster Backups",
          "info":"Total number of cluster and node backups failed",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"Cluster backup failed\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Successful Inventory Backups",
          "info":"Total number of inventory backups completed successfully",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"Inventory backup completed successfully\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Failed Inventory Backups",
          "info":"Total number of inventory backups failed",
          "gridWidth" : "1/2",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"Inventory backup failed\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"operator\":\"CONTAINS\",\"value\":\"manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"operator\":\"CONTAINS\",\"value\":\"backup-restore\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_subcomp\",\"preContext\":\"subcomp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tovrgg33noa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp\\\"}\"},{\"displayName\":\"vmw_nsxt_s2comp\",\"preContext\":\"s2comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3tgjrw63lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - IPAM - Overview",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"IPAM Create Events",
          "info":"IPAM messages excerpted from the NSX audit log capturing any create events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of IPAM create audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"POOL-MGMT\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateIpPool,CreateIpBlock,CreateIpBlockSubnet\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"IPAM Update Events",
          "info":"IPAM messages excerpted from the NSX audit log capturing any update events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of IPAM update audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"POOL-MGMT\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"UpdateIpPool,UpdateIpBlock\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"IPAM Delete Events",
          "info":"IPAM messages excerpted from the NSX audit log capturing any delete events.<br><br>Note - events may be duplicated as they are generated in multiple NSX loggers. Thus, this widget will provide a general count of IPAM delete audit events.",
          "gridWidth" : "1/3",
          "chartType":null,
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"POOL-MGMT\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"DeleteIpPool,DeleteIpBlock,DeleteIpBlockSubnet\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"}],\"supplementalConstraints\":[],\"groupByFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"IPAM Audit Details",
          "info":"All IPAM audit events.",
          "gridWidth" : "1",
          "chartType":"number",
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"appname\",\"operator\":\"CONTAINS\",\"value\":\"NSX\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"POOL-MGMT\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"operator\":\"CONTAINS\",\"value\":\"CreateIpPool,CreateIpBlock,CreateIpBlockSubnet,UpdateIpPool,UpdateIpBlock,DeleteIpPool,DeleteIpBlock,DeleteIpBlockSubnet\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"operator\":\"CONTAINS\",\"value\":\"success\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_user\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_operation\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null},{\"displayName\":\"vmw_nsxt_entid\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"displayNamespace\":\"Unknown\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_audit_operation_status\",\"preContext\":\"status(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3bovsgs5c7n5ygk4tboruw63s7on2gc5dvom000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_entid\",\"preContext\":\"entId=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3fnz2gsza0\",\"constraints\":\"{\\\"searchTerms\\\":\\\"NSX comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_operation\",\"preContext\":\"Operation(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3pobsxeylunfxw4000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"},{\"displayName\":\"vmw_nsxt_user\",\"preContext\":\"UserName(?::'|=\\\")\",\"postContext\":\"(?:'|\\\")\",\"regexValue\":\".+?\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vonsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"comp subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"IPAM - Manager Errors",
          "info":"IPAM log errors reported by NSX Manager.",
          "gridWidth" : "1",
          "chartType":null,
          "chartOptions":"{\"logaxis\":false,\"legend\":true,\"stacking\":\"normal\",\"spline\":false}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"comp errorCode\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"operator\":\"CONTAINS\",\"value\":\"nsx-manager\"},{\"internalName\":\"msgid\",\"operator\":\"CONTAINS\",\"value\":\"POOL-MGMT\"},{\"internalName\":\"hostname\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"hostname\",\"internalName\":\"hostname\",\"displayNamespace\":null,\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_comp\",\"preContext\":\"comp=\\\"\",\"postContext\":\"\\\"\",\"regexValue\":\"\\\\S+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3dn5wxa000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"subcomp\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        ,{
            "name":"NSX - Unified Security Flow Logs",
            "constraints":[ ],
            
        "rows":[
            
        {"widgets":[
            {
          "name":"Top Security Service Sources",
          "info":"Top source IP addresses from all security services that are logging data.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"flow\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"operator\":\"CONTAINS\",\"value\":\"PASS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_src_ip\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_src_ip\",\"preContext\":\"src_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"src_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_final_action\",\"preContext\":\"final_action\\\":\\\\s+\\\"\",\"postContext\":\"\\\"\\\\s?}\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Top Security Service Destinations",
          "info":"Top destination IP addresses from all security services that are logging data.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"flow\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"operator\":\"CONTAINS\",\"value\":\"PASS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_final_action\",\"preContext\":\"final_action\\\":\\\\s+\\\"\",\"postContext\":\"\\\"\\\\s?}\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Application Ports Permitted",
          "info":"Measures all in / out connections permitted in the NSX-T environment by destination port.<br><br>The data is the summation of the specified time range.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"flow\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_port\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_dest_port\",\"preContext\":\"dest_port\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"proto\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"preContext\":\"bytes_toserver\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"bytes_toclient\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Application Ports Denied",
          "info":"All traffic deined by a security service.  Data is grouped by application (or destination) port number.  This widget displays only data associated with a port. Traffic types, such as ICMP, without an associated port are not displayed.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"pie",
          "chartOptions":"{\"logaxis\":false,\"pielabelstyle\":\"legend\",\"piestyle\":\"normal\"}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"flow\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false}],\"field\":null}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"includeAllContentPackFields\":true,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Count\",\"value\":\"COUNT\",\"requiresField\":false,\"numericOnly\":false},\"piqlFunctionField\":null,\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"operator\":\"CONTAINS\",\"value\":\"DROP, REJECT\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_port\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_dest_port\",\"preContext\":\"dest_port\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"proto\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3qn5zhi000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_final_action\",\"preContext\":\"final_action\\\":\\\\s+\\\"\",\"postContext\":\"\\\"\\\\s?}\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Top Security Service Sources by bytes - client to server",
          "info":"All security flows, in bytes by source IP address, from the client to a server. &nbsp;Data is only displayed if the security service is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"flow\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"displayNamespace\":\"VMware - NSX-T\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_src_ip\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"preContext\":\"bytes_toserver\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"bytes_toclient\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_src_ip\",\"preContext\":\"src_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"src_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Top Security Service Destinations by bytes - client to server",
          "info":"All security flows, in bytes by destination IP address, from the client to a server. &nbsp;Data is only displayed if the security service is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"flow\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"displayNamespace\":\"VMware - NSX-T\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"operator\":\"CONTAINS\",\"value\":\"PASS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"preContext\":\"bytes_toserver\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"bytes_toclient\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_final_action\",\"preContext\":\"final_action\\\":\\\\s+\\\"\",\"postContext\":\"\\\"\\\\s?}\",\"regexValue\":\"\\\\w+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3gnfxgc3c7mfrxi2lpny000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        }]}
        ,
        {"widgets":[
            {
          "name":"Top Security Service Sources by bytes - server to client",
          "info":"All security flows, in bytes by source IP address, from the server to a client. &nbsp;Data is only displayed if the security service is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"flow\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"displayName\":\"vmw_nsxt_ulog_bytes_toclient\",\"displayNamespace\":\"VMware - NSX-T\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_src_ip\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"preContext\":\"bytes_toserver\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"bytes_toclient\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_bytes_toclient\",\"preContext\":\"bytes_toclient\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"pkts_toserver\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_src_ip\",\"preContext\":\"src_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"src_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3tojrv62lq\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        },{
          "name":"Top Security Service Destinations by bytes - server to client",
          "info":"All security flows, in bytes by destination IP address, from the server to a client. &nbsp;Data is only displayed if the security service is logging its data.<br><br>The data is the summation of the specified time range.<br><br>Note that security service logging is disabled by default and will need to be enabled in order to have data shown in this widget.",
          "gridWidth" : "1/2",
          "chartType":"bar",
          "chartOptions":"{}",
          "widgetType":"chart",
          "chartQuery":"{\"query\":\"\\\"flow\\\"\",\"piqlFunctionGroups\":[{\"functions\":[{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true}],\"field\":{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"displayName\":\"vmw_nsxt_ulog_bytes_toclient\",\"displayNamespace\":\"VMware - NSX-T\"}}],\"dateFilterPreset\":\"CUSTOM\",\"shouldGroupByTime\":false,\"eventSortOrder\":\"DESC\",\"summarySortOrder\":\"DESC\",\"compareQueryOrderBy\":\"TREND\",\"compareQuerySortOrder\":\"DESC\",\"compareQueryOptions\":null,\"messageViewType\":\"EVENTS\",\"constraintToggle\":\"ALL\",\"piqlFunction\":{\"label\":\"Sum\",\"value\":\"SUM\",\"requiresField\":true,\"numericOnly\":true},\"piqlFunctionField\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"fieldConstraints\":[{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"operator\":\"EXISTS\"},{\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"operator\":\"EXISTS\"}],\"supplementalConstraints\":[],\"groupByFields\":[{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"displayNamespace\":\"VMware - NSX-T\",\"numericGroupByType\":\"EACH_VALUE\",\"numericGroupByValue\":null}],\"contentPacksToIncludeFields\":[],\"extractedFields\":[{\"displayName\":\"vmw_nsxt_ulog_bytes_toserver\",\"preContext\":\"bytes_toserver\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"bytes_toclient\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxxgzlsozsxe000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_flow_dest_ip\",\"preContext\":\"dest_ip\\\":\\\\s+\\\"\",\"postContext\":\"\\\",\\\\s+\\\"dest_port\",\"regexValue\":\"[A-Fa-f\\\\d\\\\.:]+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3gnrxxox3emvzxix3joa000000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"},{\"displayName\":\"vmw_nsxt_ulog_bytes_toclient\",\"preContext\":\"bytes_toclient\\\":\\\\s+\",\"postContext\":\",\\\\s+\\\"pkts_toserver\",\"regexValue\":\"-?\\\\d+\",\"internalName\":\"ibadcnk7mnxw2ltwnv3wc4tffzxhg6duozwxox3oon4hix3vnrxwox3cpf2gk427orxwg3djmvxhi000\",\"constraints\":\"{\\\"searchTerms\\\":\\\"flow\\\"}\"}]}",
          "messageQuery":""
        }]}
        ]
        
        }
        
    ],
    "header":""
  } ],
  "author":"VMware, Inc.",
  "url":"http://www.vmware.com",
  "contentVersion":"4.0.7",
  "info":"<span>The NSX-T Log Insight content pack provides health status dashboards for the logical switching and routing, distributed firewall, and DHCP components that make up the NSX infrastructure.  It also provides key audit logs for tracking create, add and delete changes to your NSX infrastructure.</span><br><br><span><span style=\"font-weight: bold;\">Minimum requirements</span><br>&nbsp;&nbsp;&nbsp; VMware Log Insight v3.0+<br>&nbsp;&nbsp;&nbsp; VMware NSX-T v1.0+<br></span>",
  "instructions":"<span>To populate data on the NSX-T content pack widgets, the following components' log forwarding to the Log Insight server needs to be configured:</span><br><br><span>&nbsp;&nbsp;1. NSX Appliance(s)</span><br><span>&nbsp;&nbsp;2. NSX Edge(s)</span><br><span>&nbsp;&nbsp;3. ESXi and KVM host(s)</span><br><br><span>The following are the configuration instructions that need to be done for each components.</span><br><br><span style=\"font-weight: bold;\">1. NSX appliance configuration:</span><br><span>Use NSX-T Command-Line Interface (CLI) to configure rsyslog server or vRLI agent for each components to send log messages to Log Insight server:</span><br>&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># set logging-server &lt;Log Insight server[:port]&gt; proto &lt;tcp|udp|tls|li|li-tls&gt; level &lt;alert|crit|debug|emerg|err|info|notice|warning&gt; [facility &lt;#&gt;] [messageid &lt;id&gt;] [structured-data &lt;structured-data&gt;] [certificate &lt;cert&gt;]</code><br><span style=\"font-weight: bold;\">Steps:</span><br><span>&nbsp;- Get access to the NSX Appliance and Edge components CLI</span><br><span>&nbsp;- Use one of the following CLI commands(depend on which forwarding method you would like to choose):</span><br><span>&nbsp;&nbsp;&nbsp;Use rsyslog server for log forwarding by udp protocol</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># set logging-server &lt;rsyslog server IP/FQDN&gt; proto udp level info</code><br><span>&nbsp;&nbsp;&nbsp;OR</span><br><span>&nbsp;&nbsp;&nbsp;Use rsyslog server for log forwarding by tls protocol</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># set logging-server &lt;rsyslog server IP/FQDN&gt; proto tls level info</code><br><span>&nbsp;&nbsp;&nbsp;OR</span><br><span>&nbsp;&nbsp;&nbsp;Use vRLI agent for log forwarding</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># set logging-server &lt;vRLI server IP/FQDN&gt; proto li level info</code><br><span>&nbsp;&nbsp;&nbsp;OR</span><br><span>&nbsp;&nbsp;&nbsp;Use vRLI agent for log forwarding by tls protocol</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># set logging-server &lt;vRLI server IP/FQDN&gt; proto li-tls level info</code><br><span style=\"font-weight: bold;\">Notes:</span><br><span>&nbsp;1) When using protocol li/li-tls, port number 9000/9543 should be used, respectively. These port definitions for li and li-tls are selected automatically by default starting in NSX-T 2.5.</span><br><span>&nbsp;2) When using protocol tls/li-tls, additional certificate file(s) are required. For tls, a CA certificate and a pair of certificate and private key for the NSX appliance need to be specified. For the li-tls protocol, a CA certificate file needs to be specified. </span><br><span>&nbsp;3) The certificate and key file(s) should be copied to /image/vmware/nsx/file-store for access from the NSX CLI.</span><br><span>&nbsp;4) If a logging server is already configured using udp/tcp/tls, please do not configure another one using li/li-tls to avoid duplicate logs, and vice versa.</span><br><br><span style=\"font-weight: bold;\">2. ESXi hosts configuration:</span><br><span>There are two ways to configure ESXi to forward logs to the vRLI servers.</span><br><span>1) If ESXi hosts are managed by vSphere instance, configure vSphere integration by using vRLI Administration -> vSphere page. </span><br><span>OR</span><br><span>2) Use ESXi CLI to configure vRLI server for log forwarding. </span><br><span style=\"font-weight: bold;\">Steps:</span><br><span>&nbsp;- Get access to the ESXi components Command-Line Interface</span><br><span>&nbsp;- Execute the following command</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># esxcli network firewall ruleset set -r syslog -e true</code><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># esxcli network firewall refresh</code><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># esxcli system syslog config set --loghost=udp://&lt;Log Insight server&gt;:514</code><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># esxcli system syslog reload</code><br><br><span style=\"font-weight: bold;\">3. KVM hosts configuration:</span><br><span>If there are KVM hosts in the environment, their log forwarding also need to be configured.</span><br><span style=\"font-weight: bold;\">Steps:</span><br><span>&nbsp;- Get access to the KVM shell</span><br><span>&nbsp;- Edit the /etc/rsyslog.d/10-vmware-enable-rfc5424.conf file</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># vim /etc/rsyslog.d/10-vmware-enable-rfc5424.conf</code><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># Add line `*.* @&lt;Log Insight server&gt;:514;RFC5424fmt`</code><br><span>&nbsp;- Restart rsyslog</span><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<code style=\"font-style: italic;\"># systemctl restart rsyslog</code><br><br><span style=\"font-weight: bold;\">Notes:</span><br><span>&nbsp;1) Currently, all Policy appliance UI and API operations such as Segment/Tier-0/1 gateway creation/update/deletion are not supported in the vRLI dashboard including alerting. Only the Manager UI and API is supported. To use the Manager UI and API please follow these steps:</span><br><span>&nbsp;&nbsp;- for NSX-t v2.x</span><br><span>&nbsp;&nbsp;&nbsp;&nbsp;Perform operations under the \"Advanced Networking & Security\" tab.</span><br><span>&nbsp;&nbsp;- for NSX-t v3.x</span><br><span>&nbsp;&nbsp;&nbsp;&nbsp;Go to the \"System\" tab in the NSX UI and then under \"User Interface Settings\", change the default mode to Manager.</span><br><span>&nbsp;2) Distributed firewall rule logging is disabled by default and needs to be enabled in order to have data shown in the \"NSX - Distributed Firewall - Traffic\" dashboard.</span><br><br><span>For additional facility and messageid options, or further syslog details, please check</span>&nbsp;<a href=\"https://docs.vmware.com/en/VMware-NSX-T/2.1/com.vmware.nsxt.admin.doc/GUID-406AF9C3-E8F7-447A-8E3D-92AFB9D5E973.html\"><span>NSX-T Administration Guide.</span><br><br>",
  "icon":"iVBORw0KGgoAAAANSUhEUgAAAJAAAACQCAYAAADnRuK4AAAS0klEQVR4nO2de5QcVZ3Hv7+eySRiIENIDAIq4bEuD5XlAOeIZKE7oJwluxpI1VmDwgLVA7KYoK6CuyTVlfDyuLsmcUGcrhEwRM5WJYiA4Ap0EwMInMPiKggBeeyCRHklvPKadP32j5nJTE/X49a7e3I/fyV17/39ftP963t/dR+/C0gkEolEIpFIJBKJRCKRSCQSiUQikUgkEomkBcrbgORggmYvBHAeiOaKN8MgwD8HCjfAXPBf6dk3MelsB9Lsa0C4PHG5zFtRwGL0q2bisicYneNAitWDXjwN0CG56Ge+D6Z6Wi6625j2dqA+6www3ZW3Ga0wg7Av+tW387Ykb9rTgTR7Ewj7522GEMzrYKoL8jYjL9rHgcrWJQB9P28zYsF8CEz1xbzNyJL2cKCy/X8APpKApGfB+FcMdtu4ef4WoRYXrfsQGs48AN8C8PEEbFiLqqIkIKcjyNeByjZHbstYDVM5J0FrWtGsARDOAyj858TYDFOZnoJVbUU+DlS2ngToqHCNeAsOmDkTRnFXOkYF6idoa18A4eCQ7a5GVf2XVExqA7J1oL41M8A9rwvXZ7wNU+lNz6AYaPYrIBwoXJ/5Qphqf4oW5UIhM02aXQ3lPCic0LbOAwCmchCIPylcn+iH6LNOT9GiXMimBxKNdRhvo8GH40Y1hKO1CWX7NQAzBWpuR1X5QNrmZEW6DnTuT3vRs2tz5PYEFf2KnaBF6aPZDZBAz15V2uMNOCbp/RGaNQii7uQEMqOBI/AjdWNyMiPQZ2lwoIDoswlIexZVJYmpg9xIx4HK9m0A5qcie4grUVWWpCh/DEzQ1vaDoKUinmg++hfcnorsDEjegYSWIfgugOYloo/4RPSrv05EFgD03bEXnB1Pg/DRxGQGwfgJTOXszPQlSLIOpNnvgjDVt47X2N9nTQPjZoA+H1n/tm1Tccs577vI/gQwuAn9Z7/h2k6zdBBVIutNAsYdMJXof3tOJOdAZesdgPb2LGdcDlP5TkiZFwN0XWhbiOcAdCgYN7mWNwYPRNekKwGcF1p2EMzPAGSB8Ry6dv0a/V98vqlcs68G4due7TssuE7G2KDXdNp1WMsHGUmP9SBAn4ktJy6MbQBfBFP9caT2QZ9XBzlRfEMDv1S+FVV1YWw9zTqXAmQkKjMIxkvo4U/jevVPsWUFORBjIUzl1th6MiCeA5WtxQCt8CyPMmyFtsF+E0Dyi5aMd1DYeahn3BQXVydiRlXNbnUgAaI70Pm3742uwXc8y7PuhjXrGBA9EUsG86/AmI8B9a2ErPJHsx4D0fFgfAWmckMmOhMm2pesrf0ciH/hWX7AjEm5rJrH2R4CdFTs0S5Emyn2cx7G73Nxnr41MxDVfZh3gHB1ovbsIYT/xZWtlwE6yLM8619x0FAqQhax2gQlXMDWt2aGr/NkjWa9Gtt5AIBwbezhL2FYL36W9ZOPy9uOIML1FiIfchY9kK4X8OrRjVRkM98OU01zHc9fvVG8s2WZh3kHVepTcjLJF/EvW7OfAuHIwHpTeS98T90Wxyhfypbju0eZ+ZeJrJRnOBTzsuJRYHpSrDJWUaW2OGWThBEfwkScBwDeFawXBc1+PWCDez9M9XNg/lKgrAYdHKBrUzjjosFGcaOw8wAAYREbJWb95AS3ykRHzAjNfiCEzJMBPB7FGF/8h8/mfTWmugbAGmj2PBDuHK3GjJ7umbjuzDeHHxA0ewUIrb9o4u8lYrcLbJQUAFYsIYWuQTZKgEOnkXH/fclYFp7gbrrP+gqYrnct6yrMQsP5c9Mz5odhqsmtV2n2rSD8vWc5cW/sI8Z6vRuvvjEI4FU4g8diYOGfA9tEwDW+SUx4PnFSsAN5/vKHp93dypOKHzTrDRDt51neARN/vPy02XAaL4RvCAZFXSngJaTXr4zWNhz+MVDfHXt5llHj8KSNaUKzzul45zGKGyM6z6VUqRVIrxEKfFh4zbQ8qzjJXwHvaN2cBQDMS1BNYHuGF5r9HRC+5aH7TJjqT1PTHZPI8Q3zm2DnaDLWN63205L68xgeKbhS2gnCJGGZGcRJ/r9ir+Fr7K8/6SFMs24C0bmuZV47DtuAyPFNhNdy1ueeigLfG15X8nGSdw+k2VvcjcD4Y7prASST3sTvTasNh6xQ8zdNDblBlXrk4WW4NyHWlR4U3twh3pAms1Ea+owTmk/y/lJEeh8AuMA6DAV6rulZlGO83sH6C6iqh4aSlTJsFK8F6LLwDfEQVWonpWASuFJaDMKK8A35RarUI2d9c3cgxepBL7l7tltP0PLl8xOoqscKW1FeexbAa4X15UT0+Rt+C127jqYrNqQ+OclGaRBRdllEjJPcFU2D+2lS4l4xsfRXwhZot/5FuztPjPimnyq1C1MwyRPSa5OACHFSge9loxQ6Tmr9gi62pmKQ3nWt7fWFRg2ky9YPALoolK6MyCu+SRpeefpkbNm5PVrj4Dip9Q8dJI9N4/yUj5zfADhG2DAAOH/d0YDTds7DldJKEBZF2Jz2MOm1/E+MjIMW/2IHRqcBwsVJQ+tuiwC8RHpttlsVt4nED7oKK0D1VMS4puWZZl3ga1yX8zuPkq/7tksJXlY8h40Sg7AoXENshtOY3Y7OMx6q1FaSXiMAYXeMHjw0MTn31BaZLVVF375E2nkOedZmgHpbnm/hybDVnb56EqaT4pukYaP0twDuCN9wNE5q/oI1+ygQ3Mf9IAfSrBqIik3PBnd9FDd98eVx9eaD6LaW9g6dgYEFdwdbnxy750SEG4CpUuuoYzciRI2TSK+1pF/5mbsGga0NpjIX5bVO07Purmcwfkh0cx7wUxhQMnWekDxCeu3TeRuRFnHipGYHIrhP2JmqQFxCDIzLBUXUvBjrOTyqRwfLz4Ep2/ehyx52fyOdoFClthLASl5+2mw0Go+DsK9f/exeN8uW++Krw+mu6kdhAsQ3caEl974IYHpQnCQwnvMjwlodPr/lmWZvwPnWx10vSZmyfRoG1D8Iy8+IPd15xkJ67U6/8lEHUqwu1xrc9TVhbQPqja0W4CR00TMutX+D7385/pEcSa6MOtA0fNm1hnmWeA/0NUs8+2hVEV/ukLQtow40/hU8Cu/R1tgyJB3F2BgoXo6+PitcTsE+K/mbBiWZM9aB3GMgUZj+N2T91uUPSccx4WZVJdkiHUgSC+lAklgkNxPNuMY3fW1LfX4zuFLnEHphNieGt3MkRnI9kKn8c7j66ozEdOcMG6X0spEkTNKOnuwQtm2bf5b6EZjXJao3f9oyd08WJOtAH5gilvmd6KxE9UpyI+EgOsS13Zp1RbK6c8TBp/I2QRjmRNMJp7+dg/Ge6wUsRMsBZJJBIm3IqP0WAHGluBpEk2OK87oyPP7Fe06jj4z1W2LLGUNyDlS2W09zEE4F4zgA17q20axBmKp4soA2hyp19wXpEHgFuaTXvA815MjoEMZ4MLKUi62pAGY1PWMMol+5fyh9Luuu7Yi6UbbFz3ZL2o4xMRDXI0sZxH+2PGOMbi6rqst8WvdE1ivJnbFBdOtmMAC4aN2HgsXQ37Q8GlBuGffE+2qkNsvRLBFn1IFM9UXXGg0nfBYKN6rKuWB4X01Ztiba3NAegchrvP+JjLJdaXnGcL8fzFRO9BZEZ+Krq/cRsEfSRiQxD9Q6n+N/WZr7UAkA26fEy7YqyRwxB+qzzvApDbcRraq0ntwYi4yHOopmB2J2P87C8D3aMY7gOywCj0nb6dyDIUmcZgfyTEvncb2AZrdObjF7zaSOE+mSHX60rICy/aiQHEmuxIuBCD9peSaagrdfWQVmvzQjJ6BsL49omSQjxB2obC11eRpvI76pBE0iTpwF1wlKqwM5HgcMU7lmm1go71CfdXryuiVJ0OpArTPIYYh22zHtnOlbznQP+taJZ32VZIb7EEYe6ezK1mjyKfdJv29GsqL/7DdA/E++ddh5HBdYJ0SSL0kNdwfqVzz2ntBRu/+5dcrftRQ7fHtkS/rVfwusUyD5ZtZmhH8LG7nBp4BvtJQNqNGGsBGG4iH/u7rKNqNsBzubCIyO2Qzfrng7EPEnXZ+P3uBzTPLmAKgq+4MxGFDr6yjbzwXUEYDfiC9jz8bbgfpVrzS84dK4RMFUesBwAmodFn/Zg34fr73Efwhjdr+zK4s0LqbSBXCwg8RyIn4oelsJEORApvrdjOxwp6qKxWhlm1Fed3xo+QwZlMdE5Aty32iWFVWFxI5BO4+5buz3gYz6L92es3GK3+4DyRB3AyIOVFVE75KK9wbmh6nOAGO9QM1ZKNvsme9RGFoVr/3EgZcX3VM/O3wVIPoaL3T5Cf9W3KwImMopYG6dOnCjl3ZBs9dEV+aSUXZPxSHXO8TIqD8MJHoylU6BZq1MTp4LpvrvAJ4Wq8xteY6qAznYr1DcgUR6IaJFKNsMzXpWWG5YqsqRgraIHppc7faQ9ZN7Q1i1xxK2B3K/WXA8RIcPzxgzypb7qdS4VBUSmHAMhPTaOe4FhT1+kpGXlb7kXsDmyD/DOVBVEdtt2ARdttuZNFs8+YIIptIDsPeeoTjBNFHMQHwCwO69M1Xq5ZF/h4+B4twmSLhkTM8UZp+1jz3qVZ6v+tPoLiEZDNcJRa4Uk1lz60DYKP6PSL1oQTR7XMobCpo3xpncdjuGY+hVv9kugthGNG641yPK5fbE9oDc10LRfJ9cNAcylelgvse/El8asOd5DGSMOpPN0Kzt0Kx/iGRX987pYZuRsf49rzI2intc8gdeVvQ8ekV67RNN/4+lqWw5nic2gObhTrNuAtG5sfQBAPMOAI8CtAFMj8LBU7hxwQst9c5bewi6+XkQz0O/+vNAscuKC8HkPne0/9s9dOHjsQN2EXzSu2R2EbFnHkXiY2hpvWloi29U0GJmdUFh6DK6cWj2PBBuBhC6xwiNYNzml4Ayqy+QjdJDAFqOgGeo/2UAB7mVudkQfyKxwK7KdjP+GswRTOUuVJX9UFVoOAjWwPzfse2Jg0cwDQC8vPixTGxYWjup9SFluZXX4/vkH7o9Tcary/aJgPeHDyCZu+AVqwvThjeyUWFfEA9dx8i0GexsxuTul3DdmbHyT7NR2gyg160s02GkUrwNwB+h1xcRRbjFPorOCD1wsh9I4N4c3oCq+teJ6kyBdhjKssY3f3TX4AF0xYZNbkXJZmkN7GVoTkckTyDyPELERvF9r7JOxT/5OL/m5TxA0j3QCEJOwqegqops0cgFNop/BOgAr/KJ0hMNTVOQ5wnhoL8znctWqgsE5NID6LMjLI1kA+n1A/3K2Sh5Z1vrEFgvHevnPHAwP0hGur8izf6D5130Y2E+Dqb6eKq2RICXnXoE2PHeeM/8MlXq4W5qbBNYLy1AwSf3dM/O6fTtBwNXHNLvhjV7Dgi/EqrbmLQPfvSFd1O2KDS+MQLzDqrUO+qujOALV5wvkP7Az0RkZTeOhwmemVfBVL3zB2UM63oBhQ3+Sa+cxmwy1r+UjUXRCXYeXkJ6XfgGgWwDwbL1DkB7C9Zu4IAne2AYQefDMoGN0joAZ/pWcuZ0UZvY64bIVU9hXw6yf5PoWzMD3PN6yFYbUVX+MhV7QsBG8QaA3NMA7q6ES6lSS3drb0jYKP0Y8ErbM1KJL6ZK/QdhZef3KqpZK0G0KELL98FYPnSFQvawUZoP4Db/SmB8sGtv+ua9uc8ZCV0w5+BTwxfGhCb/uQzN/kcQ/iOWDOZVYKzBgPpYQlYFqxT5Yph/R5W6176aVOFK6TKQxyU3Yzliv25Soyc1zd+BRihbiwFakYtuxh0wlc+HbmaUNgHYP7Di5EIvXX5fJjmw2Zh7PMBCP6QkJkPbx4FG0Ox7hHcSJknExV42ig2AgidOmZ+gSj3VLGtcKS0GYYVA1fdIr4m+zPjSfg40woXWgXDolUx1RnUi/eRuFLrENpw5fAYZ9buj6ElEP6CSXot/ed0w7etAY/nq6n2wbfImEO2Vui7GJTCV6yI1rRRfAZHvEshuYsYewPDZtUKX8P70NNbvOsOBxnPe2kPQxXeCcGQ6CvgWVNVItw/yVaVZ2AXxJA9Tt+5F33gkdKY0rpQckOD35zT29tv3HYfOdKCxaNZsEJaBoSRwX+lbYNjo4QquV0Nl+hgL66fvA9q5RfwL5s+MnDUPlM0gLCuJT1Y6jUlkrBc83BCeznegNoavnPNhNCa9GqKJZ3zCK0+fjC07t4fQbpBer4TQHQnpQBnAldJKEIQnTcfHKkOb2ATjv4xnwqUDZUiI12wAsAH+WIgN9X8ivfbhiKZFRjpQDvgdnQkvDBupUsttnTCdHYkSX0ivfQSM+FnQGJfn6TyA7IFyh41iBSA9ZKvXSK/PSsWgkEgHahPE5nV4KxxnWpqv5WGRDtRmeJ9Lp2Np6f1PZGxOIDIGajcKfFjLM+Z6OzqPRCKRSCQSiUQikUgkEolkz+H/Aeh0ebVXqTJyAAAAAElFTkSuQmCC"
}