diff --git a/dashboards/dashboards/9ee51f94-3316-4fc5-bd89-93a52af69714.json b/dashboards/dashboards/9ee51f94-3316-4fc5-bd89-93a52af69714.json index 6015bec27..9d34ced82 100644 --- a/dashboards/dashboards/9ee51f94-3316-4fc5-bd89-93a52af69714.json +++ b/dashboards/dashboards/9ee51f94-3316-4fc5-bd89-93a52af69714.json @@ -353,7 +353,7 @@ "version": "WzEyODAsMV0=", "attributes": { "title": "Extracted File Downloads", - "visState": "{\"title\":\"Extracted File Downloads\",\"type\":\"transform\",\"aggs\":[],\"params\":{\"meta\":\"({})\",\"multiquerydsl\":\"{\\n \\\"topn\\\": {\\n \\\"index\\\": \\\"MALCOLM_NETWORK_INDEX_PATTERN_REPLACER\\\",\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"_DASHBOARD_CONTEXT_\\\",\\n \\\"_TIME_RANGE_[firstPacket]\\\",\\n {\\n \\\"match\\\": {\\n \\\"event.dataset\\\": \\\"files\\\"\\n }\\n },\\n {\\n \\\"match\\\": {\\n \\\"event.provider\\\": \\\"zeek\\\"\\n }\\n }\\n ]\\n }\\n },\\n \\\"aggs\\\": {\\n \\\"uris\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"zeek.files.extracted_uri\\\",\\n \\\"size\\\": 10,\\n \\\"order\\\": { \\\"_key\\\": \\\"asc\\\" }\\n }\\n }\\n }\\n }\\n}\",\"formula\":\"\\n\\n

Extracted File Downloads

\\n

Only the first 10 matching results are displayed, sorted alphabetically. Apply filters ⊕ to narrow scope.

\\n\\n \\n \\n \\n \\n \\n \\n {{#response.topn.aggregations.uris.buckets}} \\n \\n \\n \\n {{/response.topn.aggregations.uris.buckets}} \\n \\n
Download Link (if preserved)
💾 {{key}}
\\n

You can also 📁 Browse extracted files. See Automatic file extraction and scanning for more information.

\"}}", + "visState": "{\"title\":\"Extracted File Downloads\",\"type\":\"transform\",\"aggs\":[],\"params\":{\"meta\":\"({})\",\"multiquerydsl\":\"{\\n \\\"topn\\\": {\\n \\\"index\\\": \\\"MALCOLM_NETWORK_INDEX_PATTERN_REPLACER\\\",\\n \\\"query\\\": {\\n \\\"bool\\\": {\\n \\\"must\\\": [\\n \\\"_DASHBOARD_CONTEXT_\\\",\\n \\\"_TIME_RANGE_[firstPacket]\\\",\\n {\\n \\\"match\\\": {\\n \\\"event.dataset\\\": \\\"files\\\"\\n }\\n },\\n {\\n \\\"match\\\": {\\n \\\"event.provider\\\": \\\"zeek\\\"\\n }\\n }\\n ]\\n }\\n },\\n \\\"aggs\\\": {\\n \\\"uris\\\": {\\n \\\"terms\\\": {\\n \\\"field\\\": \\\"zeek.files.extracted_uri\\\",\\n \\\"size\\\": 10,\\n \\\"order\\\": { \\\"_key\\\": \\\"asc\\\" }\\n }\\n }\\n }\\n }\\n}\",\"formula\":\"\\n\\n

Extracted File Downloads

\\n

Only the first 10 matching results are displayed, sorted alphabetically. Apply filters ⊕ to narrow scope.

\\n\\n \\n \\n \\n \\n \\n \\n {{#response.topn.aggregations.uris.buckets}} \\n \\n \\n \\n {{/response.topn.aggregations.uris.buckets}} \\n \\n
Download Link (if preserved)
💾 {{key}}
\\n

You can also 📁Browse extracted files. See Automatic file extraction and scanning for more information.

\"}}", "uiStateJSON": "{}", "description": "", "version": 1,