fix(grafana): make investigation timeline load by default
This commit is contained in:
@@ -33,7 +33,7 @@
|
|||||||
"format": 1,
|
"format": 1,
|
||||||
"pluginVersion": "11.2.2",
|
"pluginVersion": "11.2.2",
|
||||||
"queryType": "table",
|
"queryType": "table",
|
||||||
"rawSql": "SELECT ts, entity_type, entity_id, actor, source, event_type, severity, score, summary FROM analytics_1c.entity_timeline WHERE $__timeFilter(ts) AND ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') AND ('${entity_id}' IN ('', '$__all') OR entity_id = '${entity_id}') ORDER BY ts DESC LIMIT 200",
|
"rawSql": "SELECT ts, entity_type, entity_id, actor, source, event_type, severity, score, summary FROM analytics_1c.entity_timeline WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 200",
|
||||||
"refId": "A"
|
"refId": "A"
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
@@ -76,7 +76,7 @@
|
|||||||
"format": 1,
|
"format": 1,
|
||||||
"pluginVersion": "11.2.2",
|
"pluginVersion": "11.2.2",
|
||||||
"queryType": "table",
|
"queryType": "table",
|
||||||
"rawSql": "SELECT ts, rule_title, severity, score, summary FROM analytics_1c.detections WHERE $__timeFilter(ts) AND ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') AND ('${entity_id}' IN ('', '$__all') OR entity_id = '${entity_id}') ORDER BY ts DESC LIMIT 100",
|
"rawSql": "SELECT ts, entity_type, entity_id, rule_title, severity, score, summary FROM analytics_1c.detections WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 100",
|
||||||
"refId": "A"
|
"refId": "A"
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
@@ -313,46 +313,6 @@
|
|||||||
"text": "All",
|
"text": "All",
|
||||||
"value": "$__all"
|
"value": "$__all"
|
||||||
}
|
}
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "entity_type",
|
|
||||||
"label": "Entity type",
|
|
||||||
"type": "query",
|
|
||||||
"datasource": {
|
|
||||||
"type": "grafana-clickhouse-datasource",
|
|
||||||
"uid": "clickhouse-1c"
|
|
||||||
},
|
|
||||||
"refresh": 1,
|
|
||||||
"definition": "SELECT DISTINCT entity_type FROM analytics_1c.entity_timeline ORDER BY entity_type",
|
|
||||||
"query": "SELECT DISTINCT entity_type FROM analytics_1c.entity_timeline ORDER BY entity_type",
|
|
||||||
"multi": false,
|
|
||||||
"includeAll": true,
|
|
||||||
"sort": 1,
|
|
||||||
"current": {
|
|
||||||
"selected": false,
|
|
||||||
"text": "All",
|
|
||||||
"value": "$__all"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "entity_id",
|
|
||||||
"label": "Entity id",
|
|
||||||
"type": "query",
|
|
||||||
"datasource": {
|
|
||||||
"type": "grafana-clickhouse-datasource",
|
|
||||||
"uid": "clickhouse-1c"
|
|
||||||
},
|
|
||||||
"refresh": 1,
|
|
||||||
"definition": "SELECT DISTINCT entity_id FROM analytics_1c.entity_timeline WHERE ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') ORDER BY entity_id",
|
|
||||||
"query": "SELECT DISTINCT entity_id FROM analytics_1c.entity_timeline WHERE ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') ORDER BY entity_id",
|
|
||||||
"multi": false,
|
|
||||||
"includeAll": true,
|
|
||||||
"sort": 1,
|
|
||||||
"current": {
|
|
||||||
"selected": false,
|
|
||||||
"text": "All",
|
|
||||||
"value": "$__all"
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
@@ -364,6 +324,6 @@
|
|||||||
"timezone": "browser",
|
"timezone": "browser",
|
||||||
"title": "1C File - Investigation Timeline",
|
"title": "1C File - Investigation Timeline",
|
||||||
"uid": "1c-file-investigation",
|
"uid": "1c-file-investigation",
|
||||||
"version": 2,
|
"version": 3,
|
||||||
"weekStart": ""
|
"weekStart": ""
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user