Grafana dashboard: Firewall / Security Dashboard (Maps only)
Description: Thought I share this amateurishly done Firewall / Security Dashboard for Opnsense (Maps only). 

Thought I share this amateurishly done Security Dashboard for Opnsense (Maps only). 

It requires Elasticsearch, Logstash, opnsense-logstash-config, World Map Panel.

My setup is : 

1. Router with Opnsense , Save logs to a remote server System: Settings: Logging / targets.
2. Ubuntu Server with grafana , logstash, opnsesne-logstash-conf, World Map Panel.
3. Change the opnsense-logstash entries for source to destination : 

>     geoip { source => "source" }
to
>     geoip { source => "destination" }

I wanted to see all the remote IP's which I have blocked no matter if I initiate or them. 

for the VPN part, I use a custom TCP OpenVPN ports , so adjust with yours. 

And that is all, it should work. 

The dashboard has not been exported with variables but it is a simple dash you can adjust that yourself. 

Hope it works for you! 




opnsesne-logstash-conf can be found here :

 >     https://github.com/fabianfrz/opnsense-logstash-config/blob/master/opnsense.logstash.conf 

Please feel free to modify and do share with all of us if you improve it , that will be nice! 


{
  "__inputs": [
    {
      "name": "DS_ELASTICSEARCH_OPNSENSE",
      "label": "Elasticsearch OpnSense",
      "description": "",
      "type": "datasource",
      "pluginId": "elasticsearch",
      "pluginName": "Elasticsearch"
    }
  ],
  "__requires": [
    {
      "type": "datasource",
      "id": "elasticsearch",
      "name": "Elasticsearch",
      "version": "1.0.0"
    },
    {
      "type": "grafana",
      "id": "grafana",
      "name": "Grafana",
      "version": "7.0.1"
    },
    {
      "type": "panel",
      "id": "grafana-worldmap-panel",
      "name": "Worldmap Panel",
      "version": "0.3.2"
    },
    {
      "type": "panel",
      "id": "table",
      "name": "Table",
      "version": ""
    }
  ],
  "annotations": {
    "list": [
      {
        "builtIn": 1,
        "datasource": "-- Grafana --",
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "name": "Annotations & Alerts",
        "type": "dashboard"
      }
    ]
  },
  "editable": true,
  "gnetId": 12506,
  "graphTooltip": 0,
  "id": null,
  "links": [],
  "panels": [
    {
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "description": "",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              },
              {
                "id": "displayName",
                "value": "Source Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Tries"
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 11,
        "w": 3,
        "x": 0,
        "y": 0
      },
      "hideTimeOverride": true,
      "id": 30,
      "maxDataPoints": 1,
      "options": {
        "showHeader": false,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Tries"
          }
        ]
      },
      "pluginVersion": "7.0.1",
      "targets": [
        {
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "geoip.country_name.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            }
          ],
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND rule:77",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "timeFrom": "1h",
      "timeShift": null,
      "title": " ",
      "transparent": true,
      "type": "table"
    },
    {
      "circleMaxSize": "5",
      "circleMinSize": 2,
      "colors": [
        "#56A64B",
        "rgba(237, 129, 40, 0.89)",
        "#C4162A"
      ],
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "decimals": 0,
      "description": "",
      "esGeoPoint": "geoip.location",
      "esLocationName": "source.keyword",
      "esMetric": "Count",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 287
              },
              {
                "id": "displayName",
                "value": "Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Unique Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 65
              },
              {
                "id": "displayName",
                "value": "Count"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 103
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 279
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "direction_of_traffic.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 168
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.location"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 166
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "facility_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 162
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "host.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 164
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "logsource.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 250
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "rule"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "severity_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "action.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 186
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 107
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "program.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 132
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Time"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 256
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 325
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 11,
        "w": 9,
        "x": 3,
        "y": 0
      },
      "hideEmpty": false,
      "hideTimeOverride": true,
      "hideZero": false,
      "id": 18,
      "initialZoom": "3",
      "locationData": "geohash",
      "mapCenter": "custom",
      "mapCenterLatitude": "40",
      "mapCenterLongitude": "85",
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "pluginVersion": "7.0.1",
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geoip.location",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "Count",
        "queryType": "geohash"
      },
      "targets": [
        {
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND rule:77",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": "2,9",
      "timeFrom": "1h",
      "timeShift": null,
      "title": "Block MEA - Rule 77 - (1h)",
      "transparent": true,
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "valueName": "total"
    },
    {
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "description": "",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": "left",
            "displayMode": "auto",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 5
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              },
              {
                "id": "displayName",
                "value": "Source Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 135
              },
              {
                "id": "displayName",
                "value": "Source"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Destination (me)"
              },
              {
                "id": "custom.width",
                "value": 135
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Dport"
              },
              {
                "id": "custom.displayMode",
                "value": "color-text"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Tries"
              },
              {
                "id": "custom.displayMode",
                "value": "color-text"
              },
              {
                "id": "custom.align",
                "value": "right"
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 11,
        "w": 3,
        "x": 12,
        "y": 0
      },
      "hideTimeOverride": true,
      "id": 28,
      "maxDataPoints": 1,
      "options": {
        "showHeader": false,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Tries"
          }
        ]
      },
      "pluginVersion": "7.0.1",
      "targets": [
        {
          "alias": "23",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "geoip.country_name.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND dpt:23",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "timeFrom": "6h",
      "timeShift": null,
      "title": " ",
      "transparent": true,
      "type": "table"
    },
    {
      "circleMaxSize": "5",
      "circleMinSize": 2,
      "colors": [
        "#56A64B",
        "rgba(237, 129, 40, 0.89)",
        "#C4162A"
      ],
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "decimals": 0,
      "description": "",
      "esGeoPoint": "geoip.location",
      "esLocationName": "source.keyword",
      "esMetric": "Count",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 287
              },
              {
                "id": "displayName",
                "value": "Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Unique Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 65
              },
              {
                "id": "displayName",
                "value": "Count"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 103
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 279
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "direction_of_traffic.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 168
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.location"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 166
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "facility_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 162
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "host.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 164
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "logsource.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 250
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "rule"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "severity_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "action.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 186
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 107
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "program.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 132
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Time"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 256
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 325
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 11,
        "w": 9,
        "x": 15,
        "y": 0
      },
      "hideEmpty": false,
      "hideTimeOverride": false,
      "hideZero": false,
      "id": 16,
      "initialZoom": 1,
      "locationData": "geohash",
      "mapCenter": "custom",
      "mapCenterLatitude": "30",
      "mapCenterLongitude": "30",
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "pluginVersion": "7.0.1",
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geoip.location",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "Count",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "23",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND dpt:23",
          "refId": "A",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": "2,9",
      "timeFrom": "6h",
      "timeShift": null,
      "title": "Block TELNET",
      "transparent": true,
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "valueName": "total"
    },
    {
      "circleMaxSize": "5",
      "circleMinSize": 2,
      "colors": [
        "#56A64B",
        "rgba(237, 129, 40, 0.89)",
        "#C4162A"
      ],
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "decimals": 0,
      "description": "",
      "esGeoPoint": "geoip.location",
      "esLocationName": "source.keyword",
      "esMetric": "Count",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 287
              },
              {
                "id": "displayName",
                "value": "Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Unique Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 65
              },
              {
                "id": "displayName",
                "value": "Count"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 103
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 279
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "direction_of_traffic.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 168
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.location"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 166
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "facility_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 162
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "host.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 164
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "logsource.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 250
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "rule"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "severity_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "action.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 186
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 107
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "program.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 132
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Time"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 256
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 325
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 9,
        "w": 6,
        "x": 0,
        "y": 11
      },
      "hideEmpty": false,
      "hideTimeOverride": false,
      "hideZero": false,
      "id": 24,
      "initialZoom": 1,
      "locationData": "geohash",
      "mapCenter": "(0°, 0°)",
      "mapCenterLatitude": 0,
      "mapCenterLongitude": 0,
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "pluginVersion": "7.0.1",
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geoip.location",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "Count",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "80",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND dpt:80",
          "refId": "D",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": "2,9",
      "timeFrom": "6h",
      "timeShift": null,
      "title": "Block HTTP",
      "transparent": true,
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "valueName": "total"
    },
    {
      "circleMaxSize": "5",
      "circleMinSize": 2,
      "colors": [
        "#56A64B",
        "rgba(237, 129, 40, 0.89)",
        "#C4162A"
      ],
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "decimals": 0,
      "description": "",
      "esGeoPoint": "geoip.location",
      "esLocationName": "source.keyword",
      "esMetric": "Count",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 287
              },
              {
                "id": "displayName",
                "value": "Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Unique Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 65
              },
              {
                "id": "displayName",
                "value": "Count"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 103
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 279
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "direction_of_traffic.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 168
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.location"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 166
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "facility_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 162
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "host.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 164
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "logsource.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 250
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "rule"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "severity_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "action.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 186
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 107
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "program.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 132
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Time"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 256
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 325
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 9,
        "w": 6,
        "x": 6,
        "y": 11
      },
      "hideEmpty": false,
      "hideTimeOverride": false,
      "hideZero": false,
      "id": 22,
      "initialZoom": 1,
      "locationData": "geohash",
      "mapCenter": "(0°, 0°)",
      "mapCenterLatitude": 0,
      "mapCenterLongitude": 0,
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "pluginVersion": "7.0.1",
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geoip.location",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "Count",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "443",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND dpt:443",
          "refId": "C",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": "2,9",
      "timeFrom": "6h",
      "timeShift": null,
      "title": "Block HTTPS / SSL",
      "transparent": true,
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "valueName": "total"
    },
    {
      "circleMaxSize": "5",
      "circleMinSize": 2,
      "colors": [
        "#56A64B",
        "rgba(237, 129, 40, 0.89)",
        "#C4162A"
      ],
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "decimals": 0,
      "description": "",
      "esGeoPoint": "geoip.location",
      "esLocationName": "source.keyword",
      "esMetric": "Count",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 287
              },
              {
                "id": "displayName",
                "value": "Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Unique Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 65
              },
              {
                "id": "displayName",
                "value": "Count"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 103
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 279
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "direction_of_traffic.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 168
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.location"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 166
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "facility_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 162
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "host.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 164
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "logsource.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 250
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "rule"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "severity_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "action.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 186
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 107
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "program.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 132
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Time"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 256
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 325
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 9,
        "w": 6,
        "x": 12,
        "y": 11
      },
      "hideEmpty": false,
      "hideTimeOverride": false,
      "hideZero": false,
      "id": 20,
      "initialZoom": 1,
      "locationData": "geohash",
      "mapCenter": "(0°, 0°)",
      "mapCenterLatitude": 0,
      "mapCenterLongitude": 0,
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "pluginVersion": "7.0.1",
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geoip.location",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "Count",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "22",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "block AND dpt:22",
          "refId": "B",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": "2,9",
      "timeFrom": "6h",
      "timeShift": null,
      "title": "Block SSH",
      "transparent": true,
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "valueName": "total"
    },
    {
      "circleMaxSize": "5",
      "circleMinSize": 2,
      "colors": [
        "#56A64B",
        "rgba(237, 129, 40, 0.89)",
        "#C4162A"
      ],
      "datasource": "${DS_ELASTICSEARCH_OPNSENSE}",
      "decimals": 0,
      "description": "",
      "esGeoPoint": "geoip.location",
      "esLocationName": "source.keyword",
      "esMetric": "Count",
      "fieldConfig": {
        "defaults": {
          "custom": {
            "align": null,
            "displayMode": "color-text",
            "width": 60
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-orange",
                "value": 10
              },
              {
                "color": "dark-red",
                "value": 20
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.country_name.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 287
              },
              {
                "id": "displayName",
                "value": "Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Unique Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 65
              },
              {
                "id": "displayName",
                "value": "Count"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 103
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "source.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 279
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "direction_of_traffic.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 168
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "geoip.location"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 166
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "facility_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 162
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "host.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 164
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "logsource.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 250
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "rule"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "severity_label.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "action.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 186
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "dpt"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 107
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "program.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 132
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "destination.keyword"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Time"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 256
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 325
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 9,
        "w": 6,
        "x": 18,
        "y": 11
      },
      "hideEmpty": false,
      "hideTimeOverride": false,
      "hideZero": false,
      "id": 26,
      "initialZoom": 1,
      "locationData": "geohash",
      "mapCenter": "(0°, 0°)",
      "mapCenterLatitude": 0,
      "mapCenterLongitude": 0,
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "pluginVersion": "7.0.1",
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geoip.location",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "Count",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "5678",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "pass AND dpt:5678",
          "refId": "E",
          "timeField": "@timestamp"
        },
        {
          "alias": "6789",
          "bucketAggs": [
            {
              "$$hashKey": "object:444",
              "fake": true,
              "field": "source.keyword",
              "id": "5",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:459",
              "fake": true,
              "field": "destination.keyword",
              "id": "6",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:466",
              "fake": true,
              "field": "dpt",
              "id": "7",
              "settings": {
                "min_doc_count": 1,
                "order": "desc",
                "orderBy": "_term",
                "size": "0"
              },
              "type": "terms"
            },
            {
              "$$hashKey": "object:356",
              "fake": true,
              "field": "geoip.location",
              "id": "4",
              "settings": {
                "precision": 7
              },
              "type": "geohash_grid"
            }
          ],
          "hide": false,
          "metrics": [
            {
              "$$hashKey": "object:217",
              "field": "select field",
              "id": "1",
              "meta": {},
              "settings": {},
              "type": "count"
            }
          ],
          "query": "pass AND dpt:6789",
          "refId": "F",
          "timeField": "@timestamp"
        }
      ],
      "thresholds": "2,9",
      "timeFrom": "24h",
      "timeShift": null,
      "title": "Block VPN",
      "transparent": true,
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "valueName": "total"
    }
  ],
  "refresh": "5s",
  "schemaVersion": 25,
  "style": "dark",
  "tags": [],
  "templating": {
    "list": []
  },
  "time": {
    "from": "now-5m",
    "to": "now"
  },
  "timepicker": {
    "refresh_intervals": [
      "10s",
      "30s",
      "1m",
      "5m",
      "15m",
      "30m",
      "1h",
      "2h",
      "1d"
    ]
  },
  "timezone": "",
  "title": "Firewall / Security Dashboard (Maps only)",
  "uid": "tmIHJcZMk",
  "version": 2,
  "description": "Thought I share this amateurishly done Firewall / Security Dashboard for Opnsense (Maps only). "
}