{"attributes":{"fieldAttrs":"{\"event.code\":{\"count\":3},\"@timestamp\":{\"count\":2},\"agent.hostname\":{\"count\":1},\"event.module\":{\"count\":1},\"event.provider\":{\"count\":1},\"user.name\":{\"count\":2},\"winlog.keywords\":{\"count\":1},\"message\":{\"count\":1},\"related.user\":{\"count\":1},\"source.domain\":{\"count\":1},\"winlog.provider_name\":{\"count\":1},\"winlog.computer_name\":{\"count\":1},\"agent.name\":{\"count\":2},\"event.action\":{\"count\":3},\"event.category\":{\"count\":2},\"event.outcome\":{\"count\":2},\"log.level\":{\"count\":1},\"winlog.event_data.LogonProcessName\":{\"count\":2},\"winlog.event_data.TargetUserName\":{\"count\":13},\"winlog.task\":{\"count\":3},\"winlog.event_data.LogonType\":{\"count\":1},\"winlog.event_data.SubjectUserName\":{\"count\":1},\"winlog.event_id\":{\"count\":1}}","fieldFormatMap":"{\"client.bytes\":{\"id\":\"bytes\"},\"client.nat.port\":{\"id\":\"string\"},\"client.port\":{\"id\":\"string\"},\"destination.bytes\":{\"id\":\"bytes\"},\"destination.nat.port\":{\"id\":\"string\"},\"destination.port\":{\"id\":\"string\"},\"event.duration\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"nanoseconds\",\"outputFormat\":\"asMilliseconds\",\"outputPrecision\":1}},\"event.sequence\":{\"id\":\"string\"},\"event.severity\":{\"id\":\"string\"},\"http.request.body.bytes\":{\"id\":\"bytes\"},\"http.request.bytes\":{\"id\":\"bytes\"},\"http.response.body.bytes\":{\"id\":\"bytes\"},\"http.response.bytes\":{\"id\":\"bytes\"},\"http.response.status_code\":{\"id\":\"string\"},\"log.syslog.facility.code\":{\"id\":\"string\"},\"log.syslog.priority\":{\"id\":\"string\"},\"network.bytes\":{\"id\":\"bytes\"},\"package.size\":{\"id\":\"string\"},\"process.parent.pgid\":{\"id\":\"string\"},\"process.parent.pid\":{\"id\":\"string\"},\"process.parent.ppid\":{\"id\":\"string\"},\"process.parent.thread.id\":{\"id\":\"string\"},\"process.pgid\":{\"id\":\"string\"},\"process.pid\":{\"id\":\"string\"},\"process.ppid\":{\"id\":\"string\"},\"process.thread.id\":{\"id\":\"string\"},\"server.bytes\":{\"id\":\"bytes\"},\"server.nat.port\":{\"id\":\"string\"},\"server.port\":{\"id\":\"string\"},\"source.bytes\":{\"id\":\"bytes\"},\"source.nat.port\":{\"id\":\"string\"},\"source.port\":{\"id\":\"string\"},\"url.port\":{\"id\":\"string\"}}","fields":"[]","runtimeFieldMap":"{}","timeFieldName":"@timestamp","title":"winlogbeat-*","typeMeta":"{}"},"coreMigrationVersion":"7.15.2","id":"winlogbeat-*","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2022-02-03T21:10:16.220Z","version":"WzExMzc4NjQsN10="}
{"attributes":{"description":"","state":{"datasourceStates":{"indexpattern":{"layers":{"aabe8946-cf1a-4d8c-a9ce-33ab66437ca1":{"columnOrder":["12373e2d-ed16-4482-865d-0f3fdda778f0","c700289e-0c86-41b0-8151-8293ad04aa64","c700289e-0c86-41b0-8151-8293ad04aa64X0"],"columns":{"12373e2d-ed16-4482-865d-0f3fdda778f0":{"dataType":"date","isBucketed":true,"label":"@timestamp","operationType":"date_histogram","params":{"interval":"auto"},"scale":"interval","sourceField":"@timestamp"},"c700289e-0c86-41b0-8151-8293ad04aa64":{"dataType":"number","isBucketed":false,"label":"count()","operationType":"formula","params":{"formula":"count()","isFormulaBroken":false},"references":["c700289e-0c86-41b0-8151-8293ad04aa64X0"],"scale":"ratio"},"c700289e-0c86-41b0-8151-8293ad04aa64X0":{"customLabel":true,"dataType":"number","isBucketed":false,"label":"Part of count()","operationType":"count","scale":"ratio","sourceField":"Records"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"indexRefName":"filter-index-pattern-0","key":"winlog.provider_name","negate":false,"params":{"query":"NPS"},"type":"phrase"},"query":{"match_phrase":{"winlog.provider_name":"NPS"}}}],"query":{"language":"kuery","query":""},"visualization":{"axisTitlesVisibilitySettings":{"x":true,"yLeft":true,"yRight":true},"fittingFunction":"None","gridlinesVisibilitySettings":{"x":true,"yLeft":true,"yRight":true},"labelsOrientation":{"x":0,"yLeft":0,"yRight":0},"layers":[{"accessors":["c700289e-0c86-41b0-8151-8293ad04aa64"],"layerId":"aabe8946-cf1a-4d8c-a9ce-33ab66437ca1","layerType":"data","seriesType":"bar_stacked","xAccessor":"12373e2d-ed16-4482-865d-0f3fdda778f0"}],"legend":{"isVisible":true,"position":"right"},"preferredSeriesType":"bar_stacked","tickLabelsVisibilitySettings":{"x":true,"yLeft":true,"yRight":true},"valueLabels":"hide","yLeftExtent":{"mode":"full"},"yRightExtent":{"mode":"full"}}},"title":"NPS - Provider name NPS Count by day","visualizationType":"lnsXY"},"coreMigrationVersion":"7.15.2","id":"1a052680-867a-11ec-98c3-23fd93af3d37","migrationVersion":{"lens":"7.15.0"},"references":[{"id":"winlogbeat-*","name":"indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"indexpattern-datasource-layer-aabe8946-cf1a-4d8c-a9ce-33ab66437ca1","type":"index-pattern"},{"id":"winlogbeat-*","name":"filter-index-pattern-0","type":"index-pattern"}],"type":"lens","updated_at":"2022-02-05T11:52:32.239Z","version":"WzExNjYxMDgsN10="}
{"attributes":{"description":"","state":{"datasourceStates":{"indexpattern":{"layers":{"41ca7625-684c-48a7-ac7e-599eabfec015":{"columnOrder":["23112f1b-2de1-473e-aec3-8a4fb4ce870e","b3bd3399-14f0-4dc9-9b98-03ec504f5472"],"columns":{"23112f1b-2de1-473e-aec3-8a4fb4ce870e":{"dataType":"date","isBucketed":true,"label":"@timestamp","operationType":"date_histogram","params":{"interval":"auto"},"scale":"interval","sourceField":"@timestamp"},"b3bd3399-14f0-4dc9-9b98-03ec504f5472":{"dataType":"number","isBucketed":false,"label":"Count of records","operationType":"count","scale":"ratio","sourceField":"Records"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"indexRefName":"filter-index-pattern-0","key":"winlog.event_data.LogonProcessName","negate":false,"params":{"query":"IAS"},"type":"phrase"},"query":{"match_phrase":{"winlog.event_data.LogonProcessName":"IAS"}}}],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"accessors":["b3bd3399-14f0-4dc9-9b98-03ec504f5472"],"layerId":"41ca7625-684c-48a7-ac7e-599eabfec015","layerType":"data","position":"top","seriesType":"bar_stacked","showGridlines":false,"xAccessor":"23112f1b-2de1-473e-aec3-8a4fb4ce870e","yConfig":[{"color":"#c2d117","forAccessor":"b3bd3399-14f0-4dc9-9b98-03ec504f5472"}]}],"legend":{"isVisible":true,"position":"right"},"preferredSeriesType":"bar_stacked","title":"Empty XY chart","valueLabels":"hide","yLeftExtent":{"mode":"full"},"yRightExtent":{"mode":"full"}}},"title":"NPS - ProcessLogonName IAS","visualizationType":"lnsXY"},"coreMigrationVersion":"7.15.2","id":"2b588150-867c-11ec-98c3-23fd93af3d37","migrationVersion":{"lens":"7.15.0"},"references":[{"id":"winlogbeat-*","name":"indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"indexpattern-datasource-layer-41ca7625-684c-48a7-ac7e-599eabfec015","type":"index-pattern"},{"id":"winlogbeat-*","name":"filter-index-pattern-0","type":"index-pattern"}],"type":"lens","updated_at":"2022-02-05T12:07:20.297Z","version":"WzExNjYzOTAsN10="}
{"attributes":{"description":"","state":{"datasourceStates":{"indexpattern":{"layers":{"3572ca1c-946a-4b8a-a375-af26f9a5f0cb":{"columnOrder":["00de6c4a-9c20-4d73-bd32-6e68548ff912","87b28b7b-ec91-4ad8-a166-c39037e702ba"],"columns":{"00de6c4a-9c20-4d73-bd32-6e68548ff912":{"dataType":"string","isBucketed":true,"label":"Top values of winlog.event_data.NASPortType","operationType":"terms","params":{"missingBucket":false,"orderBy":{"columnId":"87b28b7b-ec91-4ad8-a166-c39037e702ba","type":"column"},"orderDirection":"desc","otherBucket":true,"size":5},"scale":"ordinal","sourceField":"winlog.event_data.NASPortType"},"87b28b7b-ec91-4ad8-a166-c39037e702ba":{"dataType":"number","isBucketed":false,"label":"Unique count of winlog.event_data.NASPortType","operationType":"unique_count","scale":"ratio","sourceField":"winlog.event_data.NASPortType"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"indexRefName":"filter-index-pattern-0","key":"event.action","negate":false,"params":{"query":"Network Policy Server"},"type":"phrase"},"query":{"match_phrase":{"event.action":"Network Policy Server"}}}],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"default","groups":["00de6c4a-9c20-4d73-bd32-6e68548ff912"],"layerId":"3572ca1c-946a-4b8a-a375-af26f9a5f0cb","layerType":"data","legendDisplay":"default","metric":"87b28b7b-ec91-4ad8-a166-c39037e702ba","nestedLegend":false,"numberDisplay":"percent"}],"shape":"donut"}},"title":"NPS - NAS Port Type","visualizationType":"lnsPie"},"coreMigrationVersion":"7.15.2","id":"9c8d6970-867d-11ec-98c3-23fd93af3d37","migrationVersion":{"lens":"7.15.0"},"references":[{"id":"winlogbeat-*","name":"indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"indexpattern-datasource-layer-3572ca1c-946a-4b8a-a375-af26f9a5f0cb","type":"index-pattern"},{"id":"winlogbeat-*","name":"filter-index-pattern-0","type":"index-pattern"}],"type":"lens","updated_at":"2022-02-05T12:17:39.722Z","version":"WzExNjY2NDAsN10="}
{"attributes":{"description":"","state":{"datasourceStates":{"indexpattern":{"layers":{"a18b1d20-18a0-4af5-b66b-9af15a92dd8e":{"columnOrder":["5ade059d-65a8-4526-a9c6-bb12afca0b73","f0c8f0eb-0059-4d27-9614-d5cb8f81591f"],"columns":{"5ade059d-65a8-4526-a9c6-bb12afca0b73":{"dataType":"string","isBucketed":true,"label":"Top values of winlog.event_data.AuthenticationType","operationType":"terms","params":{"missingBucket":false,"orderBy":{"columnId":"f0c8f0eb-0059-4d27-9614-d5cb8f81591f","type":"column"},"orderDirection":"desc","otherBucket":true,"size":5},"scale":"ordinal","sourceField":"winlog.event_data.AuthenticationType"},"f0c8f0eb-0059-4d27-9614-d5cb8f81591f":{"dataType":"number","isBucketed":false,"label":"Unique count of winlog.event_data.AuthenticationType","operationType":"unique_count","scale":"ratio","sourceField":"winlog.event_data.AuthenticationType"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"indexRefName":"filter-index-pattern-0","key":"event.action","negate":false,"params":{"query":"Network Policy Server"},"type":"phrase"},"query":{"match_phrase":{"event.action":"Network Policy Server"}}}],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"default","groups":["5ade059d-65a8-4526-a9c6-bb12afca0b73"],"layerId":"a18b1d20-18a0-4af5-b66b-9af15a92dd8e","layerType":"data","legendDisplay":"default","metric":"f0c8f0eb-0059-4d27-9614-d5cb8f81591f","nestedLegend":false,"numberDisplay":"percent"}],"shape":"pie"}},"title":"NPS - Authentication Type","visualizationType":"lnsPie"},"coreMigrationVersion":"7.15.2","id":"422d63b0-877f-11ec-98c3-23fd93af3d37","migrationVersion":{"lens":"7.15.0"},"references":[{"id":"winlogbeat-*","name":"indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"indexpattern-datasource-layer-a18b1d20-18a0-4af5-b66b-9af15a92dd8e","type":"index-pattern"},{"id":"winlogbeat-*","name":"filter-index-pattern-0","type":"index-pattern"}],"type":"lens","updated_at":"2022-02-06T19:01:58.255Z","version":"WzExODkwNDUsN10="}
{"attributes":{"description":"","state":{"datasourceStates":{"indexpattern":{"layers":{"6a99a7b9-e94a-45ac-a536-630634a5c65d":{"columnOrder":["e8927c03-e58c-4c0d-9f38-72d5fe61726b","9ad76a39-8fdf-44c5-bf18-e7cb41683cb4"],"columns":{"9ad76a39-8fdf-44c5-bf18-e7cb41683cb4":{"dataType":"number","isBucketed":false,"label":"Unique count of event.outcome","operationType":"unique_count","scale":"ratio","sourceField":"event.outcome"},"e8927c03-e58c-4c0d-9f38-72d5fe61726b":{"dataType":"string","isBucketed":true,"label":"Top values of event.outcome","operationType":"terms","params":{"missingBucket":false,"orderBy":{"columnId":"9ad76a39-8fdf-44c5-bf18-e7cb41683cb4","type":"column"},"orderDirection":"desc","otherBucket":false,"size":5},"scale":"ordinal","sourceField":"event.outcome"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"indexRefName":"filter-index-pattern-0","key":"event.action","negate":false,"params":{"query":"Network Policy Server"},"type":"phrase"},"query":{"match_phrase":{"event.action":"Network Policy Server"}}}],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"default","groups":["e8927c03-e58c-4c0d-9f38-72d5fe61726b"],"layerId":"6a99a7b9-e94a-45ac-a536-630634a5c65d","layerType":"data","legendDisplay":"default","metric":"9ad76a39-8fdf-44c5-bf18-e7cb41683cb4","nestedLegend":false,"numberDisplay":"percent"}],"shape":"pie"}},"title":"NPS - Security Outcome","visualizationType":"lnsPie"},"coreMigrationVersion":"7.15.2","id":"8a6f3490-872b-11ec-98c3-23fd93af3d37","migrationVersion":{"lens":"7.15.0"},"references":[{"id":"winlogbeat-*","name":"indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"indexpattern-datasource-layer-6a99a7b9-e94a-45ac-a536-630634a5c65d","type":"index-pattern"},{"id":"winlogbeat-*","name":"filter-index-pattern-0","type":"index-pattern"}],"type":"lens","updated_at":"2022-02-06T09:02:41.757Z","version":"WzExODE3MzUsN10="}
{"attributes":{"description":"","state":{"datasourceStates":{"indexpattern":{"layers":{"3d33a523-ffd4-4922-8751-5d018983b9bf":{"columnOrder":["3e92465f-d06d-4e5b-9ecc-2c63c3613199","7924af8b-548d-4eca-b6b0-e2c347304c32","7924af8b-548d-4eca-b6b0-e2c347304c32X0"],"columns":{"3e92465f-d06d-4e5b-9ecc-2c63c3613199":{"dataType":"string","isBucketed":true,"label":"Top values of winlog.event_data.NetworkPolicyName","operationType":"terms","params":{"missingBucket":false,"orderBy":{"fallback":true,"type":"alphabetical"},"orderDirection":"asc","otherBucket":false,"size":5},"scale":"ordinal","sourceField":"winlog.event_data.NetworkPolicyName"},"7924af8b-548d-4eca-b6b0-e2c347304c32":{"dataType":"number","isBucketed":false,"label":"unique_count(winlog.event_data.NetworkPolicyName)","operationType":"formula","params":{"formula":"unique_count(winlog.event_data.NetworkPolicyName)","isFormulaBroken":false},"references":["7924af8b-548d-4eca-b6b0-e2c347304c32X0"],"scale":"ratio"},"7924af8b-548d-4eca-b6b0-e2c347304c32X0":{"customLabel":true,"dataType":"number","isBucketed":false,"label":"Part of unique_count(winlog.event_data.NetworkPolicyName)","operationType":"unique_count","scale":"ratio","sourceField":"winlog.event_data.NetworkPolicyName"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"indexRefName":"filter-index-pattern-0","key":"event.action","negate":false,"params":{"query":"Network Policy Server"},"type":"phrase"},"query":{"match_phrase":{"event.action":"Network Policy Server"}}}],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"default","groups":["3e92465f-d06d-4e5b-9ecc-2c63c3613199"],"layerId":"3d33a523-ffd4-4922-8751-5d018983b9bf","layerType":"data","legendDisplay":"default","metric":"7924af8b-548d-4eca-b6b0-e2c347304c32","nestedLegend":false,"numberDisplay":"percent"}],"shape":"pie"}},"title":"NPS - Network Policy Name","visualizationType":"lnsPie"},"coreMigrationVersion":"7.15.2","id":"8b5f2eb0-877f-11ec-98c3-23fd93af3d37","migrationVersion":{"lens":"7.15.0"},"references":[{"id":"winlogbeat-*","name":"indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"indexpattern-datasource-layer-3d33a523-ffd4-4922-8751-5d018983b9bf","type":"index-pattern"},{"id":"winlogbeat-*","name":"filter-index-pattern-0","type":"index-pattern"}],"type":"lens","updated_at":"2022-02-06T19:04:46.485Z","version":"WzExODkxMjAsN10="}
{"attributes":{"columns":["event.category","event.action","winlog.event_id","winlog.event_data.SubjectUserName","winlog.event_data.AuthenticationType","event.outcome","winlog.event_data.ProxyPolicyName","winlog.event_data.EAPType","winlog.event_data.NetworkPolicyName","winlog.event_data.NASPortType","winlog.event_data.LoggingResult"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.action\",\"negate\":false,\"params\":{\"query\":\"Network Policy Server\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.action\":\"Network Policy Server\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"Network Policy Server Audit Events","version":1},"coreMigrationVersion":"7.15.2","id":"e0254d10-8533-11ec-98c3-23fd93af3d37","migrationVersion":{"search":"7.9.3"},"references":[{"id":"winlogbeat-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"winlogbeat-*","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2022-02-03T21:44:15.030Z","version":"WzExMzg0NjksN10="}
{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"version\":\"7.15.2\",\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":15,\"i\":\"1d9db4fe-dcac-4884-a7d7-a3c009c733e9\"},\"panelIndex\":\"1d9db4fe-dcac-4884-a7d7-a3c009c733e9\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_1d9db4fe-dcac-4884-a7d7-a3c009c733e9\"},{\"version\":\"7.15.2\",\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":15,\"w\":48,\"h\":16,\"i\":\"b743b264-8c3b-4cdd-859a-de2976c5103b\"},\"panelIndex\":\"b743b264-8c3b-4cdd-859a-de2976c5103b\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_b743b264-8c3b-4cdd-859a-de2976c5103b\"},{\"version\":\"7.15.2\",\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":31,\"w\":12,\"h\":10,\"i\":\"5961f816-2a91-453a-8c3b-3ffcdae76180\"},\"panelIndex\":\"5961f816-2a91-453a-8c3b-3ffcdae76180\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsPie\",\"type\":\"lens\",\"references\":[{\"name\":\"panel_5961f816-2a91-453a-8c3b-3ffcdae76180\",\"type\":\"lens\",\"id\":\"9c8d6970-867d-11ec-98c3-23fd93af3d37\"},{\"name\":\"panel_5961f816-2a91-453a-8c3b-3ffcdae76180\",\"type\":\"lens\",\"id\":\"9c8d6970-867d-11ec-98c3-23fd93af3d37\"},{\"type\":\"index-pattern\",\"id\":\"winlogbeat-*\",\"name\":\"indexpattern-datasource-current-indexpattern\"},{\"type\":\"index-pattern\",\"id\":\"winlogbeat-*\",\"name\":\"indexpattern-datasource-layer-3572ca1c-946a-4b8a-a375-af26f9a5f0cb\"},{\"name\":\"filter-index-pattern-0\",\"type\":\"index-pattern\",\"id\":\"winlogbeat-*\"}],\"state\":{\"visualization\":{\"shape\":\"donut\",\"layers\":[{\"layerId\":\"3572ca1c-946a-4b8a-a375-af26f9a5f0cb\",\"groups\":[\"00de6c4a-9c20-4d73-bd32-6e68548ff912\"],\"metric\":\"87b28b7b-ec91-4ad8-a166-c39037e702ba\",\"numberDisplay\":\"percent\",\"categoryDisplay\":\"default\",\"legendDisplay\":\"default\",\"nestedLegend\":false,\"layerType\":\"data\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"event.action\",\"params\":{\"query\":\"Network Policy Server\"},\"indexRefName\":\"filter-index-pattern-0\"},\"query\":{\"match_phrase\":{\"event.action\":\"Network Policy Server\"}},\"$state\":{\"store\":\"appState\"}}],\"datasourceStates\":{\"indexpattern\":{\"layers\":{\"3572ca1c-946a-4b8a-a375-af26f9a5f0cb\":{\"columns\":{\"87b28b7b-ec91-4ad8-a166-c39037e702ba\":{\"label\":\"Unique count of winlog.event_data.NASPortType\",\"dataType\":\"number\",\"operationType\":\"unique_count\",\"scale\":\"ratio\",\"sourceField\":\"winlog.event_data.NASPortType\",\"isBucketed\":false},\"00de6c4a-9c20-4d73-bd32-6e68548ff912\":{\"label\":\"Top values of winlog.event_data.NASPortType\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"winlog.event_data.NASPortType\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"87b28b7b-ec91-4ad8-a166-c39037e702ba\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false}}},\"columnOrder\":[\"00de6c4a-9c20-4d73-bd32-6e68548ff912\",\"87b28b7b-ec91-4ad8-a166-c39037e702ba\"],\"incompleteColumns\":{}}}}}}},\"enhancements\":{}},\"panelRefName\":\"panel_5961f816-2a91-453a-8c3b-3ffcdae76180\"},{\"version\":\"7.15.2\",\"type\":\"lens\",\"gridData\":{\"x\":12,\"y\":31,\"w\":12,\"h\":10,\"i\":\"b7341063-b976-406a-97d4-6be623555f9e\"},\"panelIndex\":\"b7341063-b976-406a-97d4-6be623555f9e\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_b7341063-b976-406a-97d4-6be623555f9e\"},{\"version\":\"7.15.2\",\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":31,\"w\":11,\"h\":10,\"i\":\"e6eb82d7-6780-481e-8d3c-bfb82cca8326\"},\"panelIndex\":\"e6eb82d7-6780-481e-8d3c-bfb82cca8326\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_e6eb82d7-6780-481e-8d3c-bfb82cca8326\"},{\"version\":\"7.15.2\",\"type\":\"lens\",\"gridData\":{\"x\":35,\"y\":31,\"w\":13,\"h\":10,\"i\":\"6f58aeb9-b301-4dfe-9c9d-83054e496192\"},\"panelIndex\":\"6f58aeb9-b301-4dfe-9c9d-83054e496192\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_6f58aeb9-b301-4dfe-9c9d-83054e496192\"},{\"version\":\"7.15.2\",\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":41,\"w\":48,\"h\":32,\"i\":\"3d39cb33-c066-49ae-9db5-64aaf9cb76d4\"},\"panelIndex\":\"3d39cb33-c066-49ae-9db5-64aaf9cb76d4\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_3d39cb33-c066-49ae-9db5-64aaf9cb76d4\"}]","timeRestore":false,"title":"NPS Dashboard","version":1},"coreMigrationVersion":"7.15.2","id":"538e2780-867a-11ec-98c3-23fd93af3d37","migrationVersion":{"dashboard":"7.15.0"},"references":[{"id":"1a052680-867a-11ec-98c3-23fd93af3d37","name":"1d9db4fe-dcac-4884-a7d7-a3c009c733e9:panel_1d9db4fe-dcac-4884-a7d7-a3c009c733e9","type":"lens"},{"id":"2b588150-867c-11ec-98c3-23fd93af3d37","name":"b743b264-8c3b-4cdd-859a-de2976c5103b:panel_b743b264-8c3b-4cdd-859a-de2976c5103b","type":"lens"},{"id":"9c8d6970-867d-11ec-98c3-23fd93af3d37","name":"5961f816-2a91-453a-8c3b-3ffcdae76180:panel_5961f816-2a91-453a-8c3b-3ffcdae76180","type":"lens"},{"id":"9c8d6970-867d-11ec-98c3-23fd93af3d37","name":"5961f816-2a91-453a-8c3b-3ffcdae76180:panel_5961f816-2a91-453a-8c3b-3ffcdae76180","type":"lens"},{"id":"9c8d6970-867d-11ec-98c3-23fd93af3d37","name":"5961f816-2a91-453a-8c3b-3ffcdae76180:panel_5961f816-2a91-453a-8c3b-3ffcdae76180","type":"lens"},{"id":"winlogbeat-*","name":"5961f816-2a91-453a-8c3b-3ffcdae76180:indexpattern-datasource-current-indexpattern","type":"index-pattern"},{"id":"winlogbeat-*","name":"5961f816-2a91-453a-8c3b-3ffcdae76180:indexpattern-datasource-layer-3572ca1c-946a-4b8a-a375-af26f9a5f0cb","type":"index-pattern"},{"id":"winlogbeat-*","name":"5961f816-2a91-453a-8c3b-3ffcdae76180:filter-index-pattern-0","type":"index-pattern"},{"id":"422d63b0-877f-11ec-98c3-23fd93af3d37","name":"b7341063-b976-406a-97d4-6be623555f9e:panel_b7341063-b976-406a-97d4-6be623555f9e","type":"lens"},{"id":"8a6f3490-872b-11ec-98c3-23fd93af3d37","name":"e6eb82d7-6780-481e-8d3c-bfb82cca8326:panel_e6eb82d7-6780-481e-8d3c-bfb82cca8326","type":"lens"},{"id":"8b5f2eb0-877f-11ec-98c3-23fd93af3d37","name":"6f58aeb9-b301-4dfe-9c9d-83054e496192:panel_6f58aeb9-b301-4dfe-9c9d-83054e496192","type":"lens"},{"id":"e0254d10-8533-11ec-98c3-23fd93af3d37","name":"3d39cb33-c066-49ae-9db5-64aaf9cb76d4:panel_3d39cb33-c066-49ae-9db5-64aaf9cb76d4","type":"search"}],"type":"dashboard","updated_at":"2022-02-06T19:20:55.836Z","version":"WzExODk0MDQsN10="}
{"excludedObjects":[],"excludedObjectsCount":0,"exportedCount":9,"missingRefCount":0,"missingReferences":[]}