Grafana dashboard: GeoIP

This dashboard contains sample panels which visualize geoip enriched iptables logs. See the [blog post](https://medium.com/@bossm8/geoip-dashboards-in-grafana-from-iptables-logs-101a3b256d55) for instructions on how to setup.

{
  "__inputs": [
    {
      "name": "DS_LOKI",
      "label": "Loki",
      "description": "",
      "type": "datasource",
      "pluginId": "loki",
      "pluginName": "Loki"
    }
  ],
  "__elements": {
    "su2nbU24z": {
      "name": "Access by Country",
      "uid": "su2nbU24z",
      "kind": 1,
      "model": {
        "datasource": {
          "type": "loki",
          "uid": "${DS_LOKI}"
        },
        "description": "Count of how many times in the given range distinct IP addresses accessed the servers.",
        "fieldConfig": {
          "defaults": {
            "color": {
              "mode": "thresholds"
            },
            "custom": {
              "hideFrom": {
                "legend": false,
                "tooltip": false,
                "viz": false
              }
            },
            "mappings": [
              {
                "options": {
                  "-Infinity": {
                    "color": "green",
                    "index": 0,
                    "text": "0"
                  }
                },
                "type": "value"
              }
            ],
            "min": 0,
            "noValue": "0",
            "thresholds": {
              "mode": "absolute",
              "steps": [
                {
                  "color": "green",
                  "value": null
                },
                {
                  "color": "yellow",
                  "value": 10
                },
                {
                  "color": "orange",
                  "value": 20
                },
                {
                  "color": "red",
                  "value": 30
                }
              ]
            },
            "unit": "none"
          },
          "overrides": []
        },
        "options": {
          "basemap": {
            "config": {},
            "name": "Layer 0",
            "type": "default"
          },
          "controls": {
            "mouseWheelZoom": true,
            "showAttribution": false,
            "showDebug": true,
            "showMeasure": false,
            "showScale": false,
            "showZoom": true
          },
          "layers": [
            {
              "config": {
                "showLegend": true,
                "style": {
                  "color": {
                    "field": "Count",
                    "fixed": "dark-green"
                  },
                  "opacity": 0.4,
                  "rotation": {
                    "fixed": 0,
                    "max": 360,
                    "min": -360,
                    "mode": "mod"
                  },
                  "size": {
                    "field": "Count",
                    "fixed": 5,
                    "max": 30,
                    "min": 3
                  },
                  "symbol": {
                    "fixed": "img/icons/marker/circle.svg",
                    "mode": "fixed"
                  },
                  "text": {
                    "fixed": "",
                    "mode": "field"
                  },
                  "textConfig": {
                    "fontSize": 12,
                    "offsetX": 0,
                    "offsetY": 0,
                    "textAlign": "center",
                    "textBaseline": "middle"
                  }
                }
              },
              "location": {
                "gazetteer": "public/gazetteer/countries.json",
                "latitude": "geoip_location_latitude",
                "longitude": "geoip_location_longitude",
                "lookup": "Country Code",
                "mode": "lookup"
              },
              "name": "Hotspots",
              "tooltip": true,
              "type": "markers"
            }
          ],
          "tooltip": {
            "mode": "details"
          },
          "view": {
            "allLayers": true,
            "id": "coords",
            "lat": 30.206087,
            "lon": 2.499148,
            "zoom": 2.73
          }
        },
        "pluginVersion": "9.2.3",
        "targets": [
          {
            "datasource": {
              "type": "loki",
              "uid": "${DS_LOKI}"
            },
            "editorMode": "code",
            "expr": "sum by (geoip_country_iso_code) (count_over_time({job=\"iptables\"} | json | geoip_country_iso_code != \"\" [$__range]))",
            "legendFormat": "",
            "queryType": "instant",
            "refId": "A"
          }
        ],
        "title": "Access by Country",
        "transformations": [
          {
            "id": "labelsToFields",
            "options": {
              "mode": "columns"
            }
          },
          {
            "id": "convertFieldType",
            "options": {
              "conversions": [
                {
                  "destinationType": "string",
                  "targetField": "geoip_country_iso_code"
                }
              ],
              "fields": {}
            }
          },
          {
            "id": "organize",
            "options": {
              "excludeByName": {
                "Time": true
              },
              "indexByName": {},
              "renameByName": {
                "Time": "",
                "Value #A": "Count",
                "geoip_country_iso_code": "Country Code"
              }
            }
          }
        ],
        "type": "geomap"
      }
    },
    "OrPj7vZVk": {
      "name": "IP Locations (non SSH Traffic)",
      "uid": "OrPj7vZVk",
      "kind": 1,
      "model": {
        "datasource": {
          "type": "loki",
          "uid": "${DS_LOKI}"
        },
        "description": "Source IP addresses accessing webservices other than SSH",
        "fieldConfig": {
          "defaults": {
            "color": {
              "mode": "thresholds"
            },
            "custom": {
              "hideFrom": {
                "legend": false,
                "tooltip": false,
                "viz": false
              }
            },
            "mappings": [],
            "thresholds": {
              "mode": "absolute",
              "steps": [
                {
                  "color": "green",
                  "value": null
                },
                {
                  "color": "red",
                  "value": 80
                }
              ]
            }
          },
          "overrides": []
        },
        "options": {
          "basemap": {
            "config": {},
            "name": "Layer 0",
            "type": "default"
          },
          "controls": {
            "mouseWheelZoom": true,
            "showAttribution": false,
            "showDebug": true,
            "showMeasure": false,
            "showScale": false,
            "showZoom": true
          },
          "layers": [
            {
              "config": {
                "showLegend": false,
                "style": {
                  "color": {
                    "fixed": "dark-green"
                  },
                  "opacity": 0.4,
                  "rotation": {
                    "fixed": 0,
                    "max": 360,
                    "min": -360,
                    "mode": "mod"
                  },
                  "size": {
                    "fixed": 5,
                    "max": 15,
                    "min": 2
                  },
                  "symbol": {
                    "fixed": "img/icons/marker/circle.svg",
                    "mode": "fixed"
                  },
                  "text": {
                    "fixed": "",
                    "mode": "field"
                  },
                  "textConfig": {
                    "fontSize": 12,
                    "offsetX": 0,
                    "offsetY": 0,
                    "textAlign": "center",
                    "textBaseline": "middle"
                  }
                }
              },
              "location": {
                "latitude": "geoip_location_latitude",
                "longitude": "geoip_location_longitude",
                "mode": "coords"
              },
              "name": "Map",
              "tooltip": true,
              "type": "markers"
            }
          ],
          "tooltip": {
            "mode": "details"
          },
          "view": {
            "allLayers": true,
            "id": "europe",
            "lat": 46,
            "lon": 14,
            "zoom": 3
          }
        },
        "pluginVersion": "9.4.7",
        "targets": [
          {
            "datasource": {
              "type": "loki",
              "uid": "${DS_LOKI}"
            },
            "editorMode": "code",
            "expr": "{job=\"iptables\"} | json | geoip_continent_code != \"\" | ipt_DPT != 22 | geoip_location_longitude != \"\" | geoip_location_latitude != \"\"",
            "legendFormat": "",
            "queryType": "range",
            "refId": "A"
          }
        ],
        "title": "IP Locations (non SSH Traffic)",
        "transformations": [
          {
            "id": "extractFields",
            "options": {
              "format": "kvp",
              "replace": true,
              "source": "labels"
            }
          },
          {
            "id": "convertFieldType",
            "options": {
              "conversions": [
                {
                  "destinationType": "number",
                  "targetField": "geoip_location_latitude"
                },
                {
                  "destinationType": "number",
                  "targetField": "geoip_location_longitude"
                }
              ],
              "fields": {}
            }
          },
          {
            "id": "organize",
            "options": {
              "excludeByName": {
                "FACILITY": true,
                "FILE_NAME": true,
                "HOST": true,
                "HOST_FROM": true,
                "ISODATE": false,
                "LEGACY_MSGHDR": true,
                "MESSAGE": true,
                "PRIORITY": true,
                "PROGRAM": true,
                "SOURCE": true,
                "geoip_city_geoname_id": true,
                "geoip_city_names_en": false,
                "geoip_continent_geoname_id": true,
                "geoip_continent_names_en": true,
                "geoip_country_geoname_id": true,
                "geoip_country_is_in_european_union": true,
                "geoip_country_iso_code": true,
                "geoip_country_names_en": false,
                "geoip_location_accuracy_radius": false,
                "geoip_location_latitude": false,
                "geoip_location_location": true,
                "geoip_location_metro_code": true,
                "geoip_location_time_zone": true,
                "geoip_registered_country_geoname_id": true,
                "geoip_registered_country_is_in_european_union": true,
                "geoip_registered_country_iso_code": true,
                "geoip_registered_country_names_en": false,
                "geoip_subdivisions_0_geoname_id": true,
                "geoip_subdivisions_0_iso_code": true,
                "geoip_subdivisions_0_names_en": true,
                "geoip_subdivisions_1_geoname_id": true,
                "geoip_subdivisions_1_iso_code": true,
                "geoip_subdivisions_1_names_en": true,
                "ipt_CODE": true,
                "ipt_IN": true,
                "ipt_LEN": true,
                "ipt_TYPE": true,
                "job": true,
                "kv_DPT": false,
                "kv_DST": true,
                "kv_ID": true,
                "kv_IN": true,
                "kv_LEN": true,
                "kv_MAC": true,
                "kv_OUT": false,
                "kv_PREC": true,
                "kv_PROTO": true,
                "kv_RES": true,
                "kv_SPT": true,
                "kv_TOS": true,
                "kv_TTL": true,
                "kv_URGP": true,
                "kv_WINDOW": true
              },
              "indexByName": {},
              "renameByName": {
                "FACILITY": "",
                "ISODATE": "Time",
                "geoip_city_names_en": "City",
                "geoip_continent_code": "Continent",
                "geoip_country_names_en": "Country",
                "geoip_location_accuracy_radius": "Accuracy Radius",
                "geoip_location_latitude": "Latitude",
                "geoip_location_longitude": "Longitude",
                "geoip_postal_code": "Postal Code",
                "geoip_registered_country_is_in_european_union": "",
                "geoip_registered_country_names_en": "Registered Country",
                "geoip_subdivisions_1_iso_code": "",
                "ipt_DPT": "Destination Port",
                "ipt_DST": "Destintation",
                "ipt_IN": "Input Interface",
                "ipt_LEN": "",
                "ipt_OUT": "Output Interface",
                "ipt_PROTO": "Protocol",
                "ipt_SPT": "Source Port",
                "ipt_SRC": "Source",
                "job": "",
                "kv_DPT": "Destintation Port",
                "kv_OUT": "Output Interface",
                "kv_SRC": "Source"
              }
            }
          },
          {
            "id": "organize",
            "options": {
              "excludeByName": {},
              "indexByName": {
                "Accuracy Radius": 14,
                "City": 9,
                "Continent": 7,
                "Country": 8,
                "Destination Port": 5,
                "Destintation": 4,
                "Latitude": 12,
                "Longitude": 13,
                "Output Interface": 3,
                "Postal Code": 10,
                "Protocol": 6,
                "Registered Country": 11,
                "Source": 0,
                "Source Port": 1,
                "Time": 2
              },
              "renameByName": {}
            }
          },
          {
            "id": "convertFieldType",
            "options": {
              "conversions": [
                {
                  "destinationType": "time",
                  "targetField": "Time"
                }
              ],
              "fields": {}
            }
          }
        ],
        "type": "geomap"
      }
    }
  },
  "__requires": [
    {
      "type": "panel",
      "id": "geomap",
      "name": "Geomap",
      "version": ""
    },
    {
      "type": "grafana",
      "id": "grafana",
      "name": "Grafana",
      "version": "9.4.7"
    },
    {
      "type": "datasource",
      "id": "loki",
      "name": "Loki",
      "version": "1.0.0"
    }
  ],
  "annotations": {
    "list": [
      {
        "builtIn": 1,
        "datasource": {
          "type": "grafana",
          "uid": "-- Grafana --"
        },
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "name": "Annotations & Alerts",
        "target": {
          "limit": 100,
          "matchAny": false,
          "tags": [],
          "type": "dashboard"
        },
        "type": "dashboard"
      }
    ]
  },
  "editable": true,
  "fiscalYearStartMonth": 0,
  "graphTooltip": 0,
  "id": null,
  "links": [],
  "liveNow": false,
  "panels": [
    {
      "gridPos": {
        "h": 27,
        "w": 20,
        "x": 2,
        "y": 0
      },
      "id": 7,
      "libraryPanel": {
        "uid": "su2nbU24z",
        "name": "Access by Country"
      }
    },
    {
      "datasource": {
        "type": "loki",
        "uid": "${DS_LOKI}"
      },
      "description": "Source IP addresses accessing the infrastructure",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "green",
                "value": 0
              },
              {
                "color": "red",
                "value": 100
              }
            ]
          }
        },
        "overrides": []
      },
      "gridPos": {
        "h": 26,
        "w": 20,
        "x": 2,
        "y": 27
      },
      "id": 2,
      "options": {
        "basemap": {
          "config": {},
          "name": "Layer 0",
          "type": "default"
        },
        "controls": {
          "mouseWheelZoom": true,
          "showAttribution": false,
          "showDebug": true,
          "showMeasure": false,
          "showScale": false,
          "showZoom": true
        },
        "layers": [
          {
            "config": {
              "blur": 12,
              "radius": 5,
              "weight": {
                "fixed": 1,
                "max": 1,
                "min": 0
              }
            },
            "location": {
              "latitude": "Latitude",
              "longitude": "Longitude",
              "mode": "coords"
            },
            "name": "Map",
            "opacity": 0.7,
            "tooltip": true,
            "type": "heatmap"
          }
        ],
        "tooltip": {
          "mode": "none"
        },
        "view": {
          "allLayers": true,
          "id": "europe",
          "lat": 46,
          "lon": 14,
          "zoom": 3
        }
      },
      "pluginVersion": "9.4.7",
      "targets": [
        {
          "datasource": {
            "type": "loki",
            "uid": "${DS_LOKI}"
          },
          "editorMode": "code",
          "expr": "{job=\"iptables\"} | json | geoip_continent_code != \"\" | geoip_location_longitude != \"\" | geoip_location_latitude != \"\"",
          "legendFormat": "",
          "queryType": "range",
          "refId": "A"
        }
      ],
      "title": "IP Locations Heatmap",
      "transformations": [
        {
          "id": "extractFields",
          "options": {
            "format": "kvp",
            "replace": true,
            "source": "labels"
          }
        },
        {
          "id": "convertFieldType",
          "options": {
            "conversions": [
              {
                "destinationType": "number",
                "targetField": "geoip_location_latitude"
              },
              {
                "destinationType": "number",
                "targetField": "geoip_location_longitude"
              }
            ],
            "fields": {}
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {
              "FACILITY": true,
              "FILE_NAME": true,
              "HOST": true,
              "HOST_FROM": true,
              "ISODATE": false,
              "LEGACY_MSGHDR": true,
              "MESSAGE": true,
              "PRIORITY": true,
              "PROGRAM": true,
              "SOURCE": true,
              "geoip_city_geoname_id": true,
              "geoip_city_names_en": false,
              "geoip_continent_geoname_id": true,
              "geoip_continent_names_en": true,
              "geoip_country_geoname_id": true,
              "geoip_country_is_in_european_union": true,
              "geoip_country_iso_code": true,
              "geoip_country_names_en": false,
              "geoip_location_accuracy_radius": false,
              "geoip_location_latitude": false,
              "geoip_location_location": true,
              "geoip_location_metro_code": true,
              "geoip_location_time_zone": true,
              "geoip_registered_country_geoname_id": true,
              "geoip_registered_country_is_in_european_union": true,
              "geoip_registered_country_iso_code": true,
              "geoip_registered_country_names_en": false,
              "geoip_subdivisions_0_geoname_id": true,
              "geoip_subdivisions_0_iso_code": true,
              "geoip_subdivisions_0_names_en": true,
              "geoip_subdivisions_1_geoname_id": true,
              "geoip_subdivisions_1_iso_code": true,
              "geoip_subdivisions_1_names_en": true,
              "ipt_CODE": true,
              "ipt_IN": true,
              "ipt_LEN": true,
              "ipt_TYPE": true,
              "job": true,
              "kv_DPT": false,
              "kv_DST": true,
              "kv_ID": true,
              "kv_IN": true,
              "kv_LEN": true,
              "kv_MAC": true,
              "kv_OUT": false,
              "kv_PREC": true,
              "kv_PROTO": true,
              "kv_RES": true,
              "kv_SPT": true,
              "kv_TOS": true,
              "kv_TTL": true,
              "kv_URGP": true,
              "kv_WINDOW": true
            },
            "indexByName": {},
            "renameByName": {
              "FACILITY": "",
              "ISODATE": "Time",
              "geoip_city_names_en": "City",
              "geoip_continent_code": "Continent",
              "geoip_country_names_en": "Country",
              "geoip_location_accuracy_radius": "Accuracy Radius",
              "geoip_location_latitude": "Latitude",
              "geoip_location_longitude": "Longitude",
              "geoip_postal_code": "Postal Code",
              "geoip_registered_country_is_in_european_union": "",
              "geoip_registered_country_names_en": "Registered Country",
              "geoip_subdivisions_1_iso_code": "",
              "ipt_DPT": "Destination Port",
              "ipt_DST": "Destintation",
              "ipt_IN": "Input Interface",
              "ipt_LEN": "",
              "ipt_OUT": "Output Interface",
              "ipt_PROTO": "Protocol",
              "ipt_SPT": "Source Port",
              "ipt_SRC": "Source",
              "job": "",
              "kv_DPT": "Destintation Port",
              "kv_OUT": "Output Interface",
              "kv_SRC": "Source"
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {
              "Accuracy Radius": 14,
              "City": 9,
              "Continent": 7,
              "Country": 8,
              "Destination Port": 5,
              "Destintation": 4,
              "Latitude": 12,
              "Longitude": 13,
              "Output Interface": 3,
              "Postal Code": 10,
              "Protocol": 6,
              "Registered Country": 11,
              "Source": 0,
              "Source Port": 1,
              "Time": 2
            },
            "renameByName": {}
          }
        },
        {
          "id": "convertFieldType",
          "options": {
            "conversions": [
              {
                "destinationType": "time",
                "targetField": "Time"
              }
            ],
            "fields": {}
          }
        }
      ],
      "type": "geomap"
    },
    {
      "gridPos": {
        "h": 26,
        "w": 20,
        "x": 2,
        "y": 53
      },
      "id": 8,
      "libraryPanel": {
        "uid": "OrPj7vZVk",
        "name": "IP Locations (non SSH Traffic)"
      }
    },
    {
      "datasource": {
        "type": "loki",
        "uid": "${DS_LOKI}"
      },
      "description": "Source IP addresses by location accessing ssh",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": []
      },
      "gridPos": {
        "h": 26,
        "w": 20,
        "x": 2,
        "y": 79
      },
      "id": 3,
      "options": {
        "basemap": {
          "config": {},
          "name": "Layer 0",
          "type": "default"
        },
        "controls": {
          "mouseWheelZoom": true,
          "showAttribution": false,
          "showDebug": true,
          "showMeasure": false,
          "showScale": false,
          "showZoom": true
        },
        "layers": [
          {
            "config": {
              "showLegend": false,
              "style": {
                "color": {
                  "fixed": "red"
                },
                "opacity": 0.4,
                "rotation": {
                  "fixed": 0,
                  "max": 360,
                  "min": -360,
                  "mode": "mod"
                },
                "size": {
                  "fixed": 5,
                  "max": 15,
                  "min": 2
                },
                "symbol": {
                  "fixed": "img/icons/marker/circle.svg",
                  "mode": "fixed"
                },
                "text": {
                  "fixed": "",
                  "mode": "field"
                },
                "textConfig": {
                  "fontSize": 12,
                  "offsetX": 0,
                  "offsetY": 0,
                  "textAlign": "center",
                  "textBaseline": "middle"
                }
              }
            },
            "location": {
              "latitude": "geoip_location_latitude",
              "longitude": "geoip_location_longitude",
              "mode": "coords"
            },
            "name": "Map",
            "tooltip": true,
            "type": "markers"
          }
        ],
        "tooltip": {
          "mode": "details"
        },
        "view": {
          "allLayers": true,
          "id": "europe",
          "lat": 46,
          "lon": 14,
          "zoom": 3
        }
      },
      "pluginVersion": "9.4.7",
      "targets": [
        {
          "datasource": {
            "type": "loki",
            "uid": "${DS_LOKI}"
          },
          "editorMode": "code",
          "expr": "{job=\"iptables\"} | json | ipt_DPT == 22",
          "legendFormat": "",
          "queryType": "range",
          "refId": "A"
        }
      ],
      "title": "IP Locations (SSH)",
      "transformations": [
        {
          "id": "extractFields",
          "options": {
            "format": "kvp",
            "replace": true,
            "source": "labels"
          }
        },
        {
          "id": "convertFieldType",
          "options": {
            "conversions": [
              {
                "destinationType": "number",
                "targetField": "geoip_location_latitude"
              },
              {
                "destinationType": "number",
                "targetField": "geoip_location_longitude"
              }
            ],
            "fields": {}
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {
              "FACILITY": true,
              "FILE_NAME": true,
              "HOST": true,
              "HOST_FROM": true,
              "ISODATE": false,
              "LEGACY_MSGHDR": true,
              "MESSAGE": true,
              "PRIORITY": true,
              "PROGRAM": true,
              "SOURCE": true,
              "geoip_city_geoname_id": true,
              "geoip_city_names_en": false,
              "geoip_continent_geoname_id": true,
              "geoip_continent_names_en": true,
              "geoip_country_geoname_id": true,
              "geoip_country_is_in_european_union": true,
              "geoip_country_iso_code": true,
              "geoip_country_names_en": true,
              "geoip_location_accuracy_radius": false,
              "geoip_location_latitude": false,
              "geoip_location_location": true,
              "geoip_location_metro_code": true,
              "geoip_location_time_zone": true,
              "geoip_registered_country_geoname_id": true,
              "geoip_registered_country_is_in_european_union": true,
              "geoip_registered_country_iso_code": true,
              "geoip_registered_country_names_en": true,
              "geoip_subdivisions_0_geoname_id": true,
              "geoip_subdivisions_0_iso_code": true,
              "geoip_subdivisions_0_names_en": true,
              "geoip_subdivisions_1_geoname_id": true,
              "geoip_subdivisions_1_iso_code": true,
              "geoip_subdivisions_1_names_en": true,
              "ipt_CODE": true,
              "ipt_IN": true,
              "ipt_LEN": true,
              "ipt_TYPE": true,
              "job": true,
              "kv_DPT": false,
              "kv_DST": true,
              "kv_ID": true,
              "kv_IN": true,
              "kv_LEN": true,
              "kv_MAC": true,
              "kv_OUT": false,
              "kv_PREC": true,
              "kv_PROTO": true,
              "kv_RES": true,
              "kv_SPT": true,
              "kv_TOS": true,
              "kv_TTL": true,
              "kv_URGP": true,
              "kv_WINDOW": true
            },
            "indexByName": {},
            "renameByName": {
              "FACILITY": "",
              "ISODATE": "Time",
              "geoip_city_names_en": "City Name",
              "geoip_continent_code": "Continent Code",
              "geoip_location_accuracy_radius": "Accuracy Radius",
              "geoip_location_latitude": "Latitude",
              "geoip_location_longitude": "Longitude",
              "geoip_postal_code": "Postal Code",
              "ipt_DPT": "Destination Port",
              "ipt_DST": "Destintation",
              "ipt_IN": "Input Interface",
              "ipt_LEN": "",
              "ipt_OUT": "Output Interface",
              "ipt_PROTO": "Protocol",
              "ipt_SPT": "Source Port",
              "ipt_SRC": "Source",
              "job": "",
              "kv_DPT": "Destintation Port",
              "kv_OUT": "Output Interface",
              "kv_SRC": "Source"
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {
              "Accuracy Radius": 9,
              "City Name": 7,
              "Continent Code": 8,
              "Destination Port": 5,
              "Destintation": 4,
              "Latitude": 10,
              "Longitude": 11,
              "Output Interface": 3,
              "Postal Code": 12,
              "Protocol": 6,
              "Source": 0,
              "Source Port": 1,
              "Time": 2
            },
            "renameByName": {}
          }
        },
        {
          "id": "convertFieldType",
          "options": {
            "conversions": [
              {
                "destinationType": "time",
                "targetField": "Time"
              }
            ],
            "fields": {}
          }
        }
      ],
      "type": "geomap"
    }
  ],
  "refresh": "",
  "revision": 1,
  "schemaVersion": 38,
  "style": "dark",
  "tags": [],
  "templating": {
    "list": []
  },
  "time": {
    "from": "now-2d",
    "to": "now"
  },
  "timepicker": {},
  "timezone": "",
  "title": "GeoIP",
  "uid": "pV2rGDZ4z",
  "version": 30,
  "weekStart": "",
  "gnetId": 17877
}