{
"attributes": {
"description": "",
"kibanaSavedObjectMeta": {
"searchSourceJSON": {
"filter": [
{
"$state": {
"store": "appState"
},
"meta": {
"alias": null,
"disabled": false,
"indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
"key": "event.dataset",
"negate": false,
"params": {
"query": "user",
"type": "phrase"
},
"type": "phrase",
"value": "user"
},
"query": {
"match": {
"event.dataset": {
"query": "user",
"type": "phrase"
}
}
}
}
],
"indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.index",
"query": {
"language": "kuery",
"query": ""
}
}
},
"title": "User Documents Histogram [Auditbeat System] ECS",
"uiStateJSON": {},
"version": 1,
"visState": {
"aggs": [
{
"enabled": true,
"id": "1",
"params": {},
"schema": "metric",
"type": "count"
},
{
"enabled": true,
"id": "2",
"params": {
"drop_partials": false,
"extended_bounds": {},
"field": "@timestamp",
"interval": "auto",
"min_doc_count": 1,
"useNormalizedEsInterval": true
},
"schema": "segment",
"type": "date_histogram"
}
],
"params": {
"addLegend": true,
"addTimeMarker": false,
"addTooltip": true,
"categoryAxes": [
{
"id": "CategoryAxis-1",
"labels": {
"filter": true,
"show": true,
"truncate": 100
},
"position": "bottom",
"scale": {
"type": "linear"
},
"show": true,
"style": {},
"title": {},
"type": "category"
}
],
"detailedTooltip": true,
"grid": {
"categoryLines": false,
"style": {
"color": "#eee"
}
},
"isVislibVis": true,
"legendPosition": "right",
"palette": {
"name": "kibana_palette",
"type": "palette"
},
"seriesParams": [
{
"data": {
"id": "1",
"label": "Count"
},
"drawLinesBetweenPoints": true,
"mode": "stacked",
"show": "true",
"showCircles": true,
"type": "histogram",
"valueAxis": "ValueAxis-1"
}
],
"times": [],
"type": "histogram",
"valueAxes": [
{
"id": "ValueAxis-1",
"labels": {
"filter": false,
"rotate": 0,
"show": true,
"truncate": 100
},
"name": "LeftAxis-1",
"position": "left",
"scale": {
"mode": "normal",
"type": "linear"
},
"show": true,
"style": {},
"title": {
"text": "Count"
},
"type": "value"
}
]
},
"title": "User Documents Histogram [Auditbeat System] ECS",
"type": "histogram"
}
},
"coreMigrationVersion": "8.0.0",
"id": "30f4eff0-2864-11e9-97cb-474beda9f119-ecs",
"migrationVersion": {
"visualization": "7.14.0"
},
"references": [
{
"id": "auditbeat-*",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"type": "index-pattern"
},
{
"id": "auditbeat-*",
"name": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
"type": "index-pattern"
}
],
"type": "visualization",
"updated_at": "2021-08-04T16:36:07.028Z",
"version": "WzUwNTUsMV0="
}