DNS-Unique-Domains-ecs.json

{
    "attributes": {
        "description": "Detecting tunneling over DNS.",
        "hits": 0,
        "kibanaSavedObjectMeta": {
            "searchSourceJSON": "{\"filter\":[],\"highlightAll\":true,\"query\":{\"language\":\"kuery\",\"query\":\"NOT dns.question.type:PTR\"},\"version\":true}"
        },
        "optionsJSON": "{\"darkTheme\": false}",
        "panelsJSON": "[{\"version\":\"7.0.0-SNAPSHOT\",\"gridData\":{\"h\":20,\"i\":\"1\",\"w\":48,\"x\":0,\"y\":0},\"panelIndex\":\"1\",\"embeddableConfig\":{\"spy\":{\"mode\":{\"fill\":false,\"name\":null}},\"vis\":{\"colors\":{\"Count\":\"#1F78C1\",\"Unique Subdomain Count\":\"#EF843C\",\"Unique count of dns.question.name\":\"#E0752D\"},\"legendOpen\":false},\"enhancements\":{}},\"panelRefName\":\"panel_0\"},{\"version\":\"7.0.0-SNAPSHOT\",\"gridData\":{\"h\":20,\"i\":\"2\",\"w\":24,\"x\":0,\"y\":35},\"panelIndex\":\"2\",\"embeddableConfig\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}},\"enhancements\":{}},\"panelRefName\":\"panel_1\"},{\"version\":\"7.0.0-SNAPSHOT\",\"gridData\":{\"h\":15,\"i\":\"4\",\"w\":48,\"x\":0,\"y\":20},\"panelIndex\":\"4\",\"embeddableConfig\":{\"vis\":{\"legendOpen\":false},\"enhancements\":{}},\"panelRefName\":\"panel_2\"},{\"version\":\"7.0.0-SNAPSHOT\",\"gridData\":{\"h\":20,\"i\":\"5\",\"w\":24,\"x\":24,\"y\":35},\"panelIndex\":\"5\",\"embeddableConfig\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}},\"enhancements\":{}},\"panelRefName\":\"panel_3\"}]",
        "timeRestore": false,
        "title": "[Packetbeat] DNS Tunneling ECS",
        "version": 1
    },
    "coreMigrationVersion": "8.0.0",
    "id": "DNS-Unique-Domains-ecs",
    "migrationVersion": {
        "dashboard": "7.14.0"
    },
    "references": [
        {
            "id": "Unique-FQDNs-per-eTLD 1-ecs",
            "name": "panel_0",
            "type": "visualization"
        },
        {
            "id": "Unique-FQDNs-per-eTLD 1-Table-ecs",
            "name": "panel_1",
            "type": "visualization"
        },
        {
            "id": "Bytes-Transferred-per-Domain-ecs",
            "name": "panel_2",
            "type": "visualization"
        },
        {
            "id": "dc743240-1665-11e7-a6de-cbac1a3d0a7d-ecs",
            "name": "panel_3",
            "type": "visualization"
        }
    ],
    "type": "dashboard",
    "updated_at": "2021-08-04T16:28:38.960Z",
    "version": "WzMxNDIsMV0="
}