awatch-rus/AWatch-rus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(1c): make file dashboards live and provisioned

Browse Source
This commit is contained in:
igor04091968
2026-05-22 00:36:54 +03:00
parent 04b45ecf03
commit 41f7a869e5
11 changed files with 2438 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
clickhouse-1c/grafana/provisioning/dashboards/files/1c-investigation-timeline.json
+369
View File
@@ -0,0 +1,369 @@
{
"annotations": {
"list": []
},
"editable": true,
"fiscalYearStartMonth": 0,
"graphTooltip": 1,
"id": null,
"links": [],
"panels": [
{
"id": 1,
"title": "Entity timeline",
"type": "table",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"pluginVersion": "11.2.2",
"gridPos": {
"x": 0,
"y": 0,
"w": 24,
"h": 10
},
"targets": [
{
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"editorType": "sql",
"format": 1,
"pluginVersion": "11.2.2",
"queryType": "table",
"rawSql": "SELECT ts, entity_type, entity_id, actor, source, event_type, severity, score, summary FROM analytics_1c.entity_timeline WHERE $__timeFilter(ts) AND entity_type = '${entity_type}' AND entity_id = '${entity_id}' ORDER BY ts DESC LIMIT 200",
"refId": "A"
}
],
"options": {
"showHeader": true,
"sortBy": [
{
"displayName": "ts",
"desc": true
}
]
},
"fieldConfig": {
"defaults": {},
"overrides": []
}
},
{
"id": 2,
"title": "Related detections",
"type": "table",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"pluginVersion": "11.2.2",
"gridPos": {
"x": 0,
"y": 10,
"w": 12,
"h": 8
},
"targets": [
{
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"editorType": "sql",
"format": 1,
"pluginVersion": "11.2.2",
"queryType": "table",
"rawSql": "SELECT ts, rule_title, severity, score, summary FROM analytics_1c.detections WHERE entity_type = '${entity_type}' AND entity_id = '${entity_id}' AND $__timeFilter(ts) ORDER BY ts DESC LIMIT 100",
"refId": "A"
}
],
"options": {
"showHeader": true,
"sortBy": [
{
"displayName": "ts",
"desc": true
}
]
},
"fieldConfig": {
"defaults": {},
"overrides": []
}
},
{
"id": 3,
"title": "Recent documents",
"type": "table",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"pluginVersion": "11.2.2",
"gridPos": {
"x": 12,
"y": 10,
"w": 12,
"h": 8
},
"targets": [
{
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"editorType": "sql",
"format": 1,
"pluginVersion": "11.2.2",
"queryType": "table",
"rawSql": "SELECT ts, infobase, doc_type, doc_number, author, amount, status FROM analytics_1c.documents WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 100",
"refId": "A"
}
],
"options": {
"showHeader": true,
"sortBy": [
{
"displayName": "ts",
"desc": true
}
]
},
"fieldConfig": {
"defaults": {},
"overrides": []
}
},
{
"id": 4,
"title": "Recent reglog",
"type": "table",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"pluginVersion": "11.2.2",
"gridPos": {
"x": 0,
"y": 18,
"w": 12,
"h": 8
},
"targets": [
{
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"editorType": "sql",
"format": 1,
"pluginVersion": "11.2.2",
"queryType": "table",
"rawSql": "SELECT ts, user, event_name, level, message FROM analytics_1c.reglog_events WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 100",
"refId": "A"
}
],
"options": {
"showHeader": true,
"sortBy": [
{
"displayName": "ts",
"desc": true
}
]
},
"fieldConfig": {
"defaults": {},
"overrides": []
}
},
{
"id": 5,
"title": "Recent audit",
"type": "table",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"pluginVersion": "11.2.2",
"gridPos": {
"x": 12,
"y": 18,
"w": 12,
"h": 8
},
"targets": [
{
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"editorType": "sql",
"format": 1,
"pluginVersion": "11.2.2",
"queryType": "table",
"rawSql": "SELECT ts, user, object_type, object_id, action, risk_tag FROM analytics_1c.audit_events WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 100",
"refId": "A"
}
],
"options": {
"showHeader": true,
"sortBy": [
{
"displayName": "ts",
"desc": true
}
]
},
"fieldConfig": {
"defaults": {},
"overrides": []
}
}
],
"refresh": "30s",
"schemaVersion": 39,
"style": "dark",
"tags": [
"1c",
"investigation",
"clickhouse"
],
"templating": {
"list": [
{
"name": "infobase",
"label": "Infobase",
"type": "query",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"refresh": 1,
"definition": "SELECT DISTINCT infobase FROM analytics_1c.documents ORDER BY infobase",
"query": "SELECT DISTINCT infobase FROM analytics_1c.documents ORDER BY infobase",
"multi": true,
"includeAll": true,
"sort": 1,
"current": {
"selected": false,
"text": "All",
"value": "$__all"
}
},
{
"name": "severity",
"label": "Severity",
"type": "query",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"refresh": 1,
"definition": "SELECT arrayJoin(['low','medium','high','critical'])",
"query": "SELECT arrayJoin(['low','medium','high','critical'])",
"multi": true,
"includeAll": true,
"sort": 1,
"current": {
"selected": false,
"text": "All",
"value": "$__all"
}
},
{
"name": "host",
"label": "Host",
"type": "query",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"refresh": 1,
"definition": "SELECT DISTINCT host FROM analytics_1c.host_events ORDER BY host",
"query": "SELECT DISTINCT host FROM analytics_1c.host_events ORDER BY host",
"multi": true,
"includeAll": true,
"sort": 1,
"current": {
"selected": false,
"text": "All",
"value": "$__all"
}
},
{
"name": "user",
"label": "User",
"type": "query",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"refresh": 1,
"definition": "SELECT DISTINCT user FROM analytics_1c.reglog_events ORDER BY user",
"query": "SELECT DISTINCT user FROM analytics_1c.reglog_events ORDER BY user",
"multi": true,
"includeAll": true,
"sort": 1,
"current": {
"selected": false,
"text": "All",
"value": "$__all"
}
},
{
"name": "entity_type",
"label": "Entity type",
"type": "query",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"refresh": 1,
"definition": "SELECT arrayJoin(['user','document','host'])",
"query": "SELECT arrayJoin(['user','document','host'])",
"multi": false,
"includeAll": false,
"sort": 1,
"current": {
"selected": false,
"text": "",
"value": ""
}
},
{
"name": "entity_id",
"label": "Entity id",
"type": "query",
"datasource": {
"type": "grafana-clickhouse-datasource",
"uid": "clickhouse-1c"
},
"refresh": 1,
"definition": "SELECT DISTINCT entity_id FROM analytics_1c.entity_timeline ORDER BY entity_id",
"query": "SELECT DISTINCT entity_id FROM analytics_1c.entity_timeline ORDER BY entity_id",
"multi": false,
"includeAll": false,
"sort": 1,
"current": {
"selected": false,
"text": "",
"value": ""
}
}
]
},
"time": {
"from": "now-7d",
"to": "now"
},
"timepicker": {},
"timezone": "browser",
"title": "1C File - Investigation Timeline",
"uid": "1c-file-investigation",
"version": 1,
"weekStart": ""
}