Skip to content
Draft
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
395 changes: 395 additions & 0 deletions monitoring/grafana-dashboards/security/virtual-audit.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,395 @@
{
"annotations": {
"list": [
{
"builtIn": 1,
"datasource": {
"type": "grafana",
"uid": "-- Grafana --"
},
"enable": true,
"hide": true,
"iconColor": "rgba(0, 211, 255, 1)",
"name": "Annotations & Alerts",
"type": "dashboard"
}
]
},
"editable": true,
"fiscalYearStartMonth": 0,
"graphTooltip": 0,
"id": 47,
"links": [],
"panels": [
{
"datasource": {
"type": "loki",
"uid": "${ds_loki}"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "palette-classic"
},
"custom": {
"axisBorderShow": false,
"axisCenteredZero": false,
"axisColorMode": "text",
"axisLabel": "",
"axisPlacement": "auto",
"barAlignment": 0,
"drawStyle": "bars",
"fillOpacity": 0,
"gradientMode": "none",
"hideFrom": {
"legend": false,
"tooltip": false,
"viz": false
},
"insertNulls": false,
"lineInterpolation": "linear",
"lineWidth": 1,
"pointSize": 5,
"scaleDistribution": {
"type": "linear"
},
"showPoints": "auto",
"spanNulls": false,
"stacking": {
"group": "A",
"mode": "none"
},
"thresholdsStyle": {
"mode": "off"
}
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": []
},
"gridPos": {
"h": 8,
"w": 24,
"x": 0,
"y": 0
},
"id": 3,
"options": {
"legend": {
"calcs": [
"count"
],
"displayMode": "table",
"placement": "right",
"showLegend": true
},
"tooltip": {
"mode": "single",
"sort": "none"
}
},
"targets": [
{
"datasource": {
"type": "loki",
"uid": "${ds_loki}"
},
"editorMode": "code",
"expr": "sum by (request_subject,name) (count_over_time({namespace=\"d8-virtualization\", pod=~\"virtualization-audit-.+\"} | json | request_subject!~\".*(serviceaccount|system:.+).\" [$__interval]))",
"legendFormat": "{{request_subject}} {{name}}",
"queryType": "range",
"refId": "A"
}
],
"title": "User Accounts activity",
"type": "timeseries"
},
{
"datasource": {
"type": "loki",
"uid": "${ds_loki}"
},
"fieldConfig": {
"defaults": {
"color": {
"mode": "thresholds"
},
"custom": {
"align": "auto",
"cellOptions": {
"type": "auto"
},
"filterable": true,
"inspect": false
},
"mappings": [],
"thresholds": {
"mode": "absolute",
"steps": [
{
"color": "green",
"value": null
},
{
"color": "red",
"value": 80
}
]
}
},
"overrides": [
{
"matcher": {
"id": "byName",
"options": "Time"
},
"properties": [
{
"id": "custom.width",
"value": 205
}
]
},
{
"matcher": {
"id": "byName",
"options": "Type"
},
"properties": [
{
"id": "custom.width",
"value": 160
}
]
},
{
"matcher": {
"id": "byName",
"options": "level"
},
"properties": [
{
"id": "custom.width",
"value": 49
}
]
},
{
"matcher": {
"id": "byName",
"options": "name"
},
"properties": [
{
"id": "custom.width",
"value": 164
}
]
},
{
"matcher": {
"id": "byName",
"options": "datetime"
},
"properties": [
{
"id": "custom.width",
"value": 176
}
]
},
{
"matcher": {
"id": "byName",
"options": "uid"
},
"properties": [
{
"id": "custom.width",
"value": 309
}
]
},
{
"matcher": {
"id": "byName",
"options": "operation_result"
},
"properties": [
{
"id": "custom.width",
"value": 132
}
]
},
{
"matcher": {
"id": "byName",
"options": "action_type"
},
"properties": [
{
"id": "custom.width",
"value": 109
}
]
},
{
"matcher": {
"id": "byName",
"options": "component"
},
"properties": [
{
"id": "custom.width",
"value": 193
}
]
},
{
"matcher": {
"id": "byName",
"options": "type"
},
"properties": [
{
"id": "custom.width",
"value": 158
}
]
},
{
"matcher": {
"id": "byName",
"options": "virtualization_version"
},
"properties": [
{
"id": "custom.width",
"value": 166
}
]
},
{
"matcher": {
"id": "byName",
"options": "virtualization_name"
},
"properties": [
{
"id": "custom.width",
"value": 169
}
]
}
]
},
"gridPos": {
"h": 13,
"w": 24,
"x": 0,
"y": 8
},
"id": 2,
"options": {
"cellHeight": "sm",
"footer": {
"countRows": false,
"fields": "",
"reducer": [
"sum"
],
"show": false
},
"showHeader": true,
"sortBy": []
},
"pluginVersion": "10.4.19",
"targets": [
{
"datasource": {
"type": "loki",
"uid": "${ds_loki}"
},
"editorMode": "code",
"expr": "{namespace=\"d8-virtualization\", pod=~\"virtualization-audit-.+\"} |= \"$query\"",
"queryType": "range",
"refId": "A"
}
],
"title": "Logs view",
"transformations": [
{
"id": "extractFields",
"options": {
"format": "json",
"jsonPaths": [],
"keepTime": true,
"replace": true,
"source": "Line"
}
}
],
"type": "table"
}
],
"refresh": "1m",
"schemaVersion": 39,
"tags": [],
"templating": {
"list": [
{
"current": {
"selected": false,
"text": "d8-loki",
"value": "d8-loki"
},
"hide": 0,
"includeAll": false,
"label": "Loki",
"multi": false,
"name": "ds_loki",
"options": [],
"query": "loki",
"queryValue": "",
"refresh": 1,
"regex": "",
"skipUrlSync": false,
"type": "datasource"
},
{
"current": {},
"hide": 0,
"label": "query",
"name": "query",
"options": [],
"query": "",
"skipUrlSync": false,
"type": "textbox"
}
]
},
"time": {
"from": "now-1h",
"to": "now"
},
"timepicker": {},
"timezone": "browser",
"title": "Virtualization Audit",
"uid": "cetic597nt7uoc",
"version": 9,
"weekStart": ""
}
Loading