{
    "attributes": {
        "description": "",
        "kibanaSavedObjectMeta": {
            "searchSourceJSON": {
                "filter": []
            }
        },
        "savedSearchRefName": "search_0",
        "title": "Unique Destinations and Ports by Source — ArcSight [Filebeat CEF]",
        "uiStateJSON": {},
        "version": 1,
        "visState": {
            "aggs": [
                {
                    "enabled": true,
                    "id": "1",
                    "params": {
                        "customLabel": "Destination Addresses",
                        "field": "destination.ip"
                    },
                    "schema": "metric",
                    "type": "cardinality"
                },
                {
                    "enabled": true,
                    "id": "2",
                    "params": {
                        "customLabel": "Source Addresses",
                        "field": "source.ip",
                        "order": "desc",
                        "orderBy": "1",
                        "size": 20
                    },
                    "schema": "segment",
                    "type": "terms"
                },
                {
                    "enabled": true,
                    "id": "3",
                    "params": {
                        "customLabel": "Destination Ports",
                        "field": "destination.port"
                    },
                    "schema": "metric",
                    "type": "cardinality"
                }
            ],
            "listeners": {},
            "params": {
                "addLegend": true,
                "addTimeMarker": false,
                "addTooltip": true,
                "categoryAxes": [
                    {
                        "id": "CategoryAxis-1",
                        "labels": {
                            "show": true,
                            "truncate": 100
                        },
                        "position": "bottom",
                        "scale": {
                            "type": "linear"
                        },
                        "show": true,
                        "style": {},
                        "title": {
                            "text": "Source Addresses"
                        },
                        "type": "category"
                    }
                ],
                "defaultYExtents": false,
                "drawLinesBetweenPoints": true,
                "grid": {
                    "categoryLines": false,
                    "style": {
                        "color": "#eee"
                    }
                },
                "interpolate": "linear",
                "legendPosition": "right",
                "legendSize": "auto",
                "radiusRatio": 9,
                "scale": "linear",
                "seriesParams": [
                    {
                        "data": {
                            "id": "1",
                            "label": "Destination Addresses"
                        },
                        "drawLinesBetweenPoints": true,
                        "mode": "stacked",
                        "show": "true",
                        "showCircles": true,
                        "type": "histogram",
                        "valueAxis": "ValueAxis-1"
                    },
                    {
                        "data": {
                            "id": "3",
                            "label": "Destination Ports"
                        },
                        "drawLinesBetweenPoints": true,
                        "interpolate": "linear",
                        "lineWidth": 2,
                        "mode": "stacked",
                        "show": true,
                        "showCircles": true,
                        "type": "line",
                        "valueAxis": "ValueAxis-2"
                    }
                ],
                "setYExtents": false,
                "showCircles": true,
                "times": [],
                "valueAxes": [
                    {
                        "id": "ValueAxis-1",
                        "labels": {
                            "filter": false,
                            "rotate": 0,
                            "show": true,
                            "truncate": 100
                        },
                        "name": "LeftAxis-1",
                        "position": "left",
                        "scale": {
                            "mode": "normal",
                            "type": "linear"
                        },
                        "show": true,
                        "style": {},
                        "title": {
                            "text": "Destination Addresses"
                        },
                        "type": "value"
                    },
                    {
                        "id": "ValueAxis-2",
                        "labels": {
                            "filter": false,
                            "rotate": 0,
                            "show": true,
                            "truncate": 100
                        },
                        "name": "RightAxis-1",
                        "position": "right",
                        "scale": {
                            "mode": "normal",
                            "type": "linear"
                        },
                        "show": true,
                        "style": {},
                        "title": {
                            "text": "Destination Ports"
                        },
                        "type": "value"
                    }
                ]
            },
            "title": "Unique Destinations and Ports by Source — ArcSight [Filebeat CEF]",
            "type": "histogram"
        }
    },
    "coreMigrationVersion": "8.3.3",
    "id": "cef-89236ffe-9484-472f-8e70-a58db4e2feb3",
    "migrationVersion": {
        "visualization": "8.3.0"
    },
    "references": [
        {
            "id": "cef-1da6dac6-7c41-47c5-bcba-567b5e83c7e1",
            "name": "search_0",
            "type": "search"
        }
    ],
    "type": "visualization",
    "updated_at": "2022-08-24T00:29:51.550Z",
    "version": "WzI0MjEsMV0="
}