Dashboard Refactor for LME 2.0

rgbrow1949 commented 7 months ago

All dashboards need to be refactored for 2.0's new logs* index.

Branch is here: https://github.com/cisagov/LME/tree/refactored_dashboards_2.0

NOTE: Make sure to change the dashboard ID when you refactor the dashboard so that the refactored dashboard has a different ID from the original dashboard. You can check the id of the dashboard/panel based on the URL when you're editing it. Each panel and its dashboard should have different IDs or could cause a data collision were Elastic doesn't know which dashboard and panel you're referring to.

@ddiabe

[x] Alerting Dashboard
[x] Computer Software Overview
[x] Credential Access Logs
[x] Healthcheck
[x] Identity Access Management
[ ] Policy Changes and System Activity
[ ] Privileged Activity Log
[ ] Process Explorer

@rishagg01

[ ] Security Dashboard Security Log
[ ] Sysmon Summary
[ ] User HR

@rgbrow1949

[ ] User Security (Need to check dashboard and panel IDs)

safiuddinr commented 5 months ago

Adding @cbaxley and @rishagg01 as watchers.

rishagg01 commented 1 day ago

@rgbrow1949 what is the path from where we need to import dashboard json files? Can you please put it in the comments.

rgbrow1949 commented 1 day ago

@rgbrow1949 what is the path from where we need to import dashboard json files? Can you please put it in the comments.

The path where the ndjson files that need to be imported and refactored are here: https://github.com/cisagov/LME/tree/refactored_dashboards_2.0/dashboard_refactor/needs_refactoring

When you've refactored a dashboard, put it here: https://github.com/cisagov/LME/tree/refactored_dashboards_2.0/dashboard_refactor/refactored

And you can import/export dashboards in Elastic>Stack Management>Kibana>Saved Objects

safiuddinr commented 1 day ago

@NVivero @ddiabe @causand22 @rgbrow1949 @rishagg01 created new ticket for Grant and Rishi. This one will be assigned to Divine.

cisagov / LME

Dashboard Refactor for LME 2.0 #215