Grafana dashboard: FMADIO PCAP2JSON Dashboard
Description: Visualisation of granular network metadata

#### FMADIO PCAP2JSON Dashboard is for visualising granular metadata produced by FMADIO 10G 40G 100G Packet Capture Appliances running the PCAP2JSON module

###### PCAP2JSON produces high granularity Netflow-like metadata at up to 60Gbps and exports as JSON documents direct to Elasticsearch or other software. This dashboard visualises that data from Elasticsearch.

Metrics reported include:
- MAC addresses
- IP addresses
- Protocols
- Ports
- Applications
- GeoIP locations
- VLANs
- Data and Packet rates
- TCP flags
- TCP Zero Windows

More info
[FMADIO 10G 40G 100G Packet Capture](https://fmad.io)


{
  "__inputs": [
    {
      "name": "DS_ELASTICSEARCH_PCAP2JSON",
      "label": "Elasticsearch PCAP2JSON",
      "description": "",
      "type": "datasource",
      "pluginId": "elasticsearch",
      "pluginName": "Elasticsearch"
    }
  ],
  "__elements": {},
  "__requires": [
    {
      "type": "datasource",
      "id": "elasticsearch",
      "name": "Elasticsearch",
      "version": "1.0.0"
    },
    {
      "type": "grafana",
      "id": "grafana",
      "name": "Grafana",
      "version": "9.1.2"
    },
    {
      "type": "panel",
      "id": "grafana-worldmap-panel",
      "name": "Worldmap Panel",
      "version": "0.3.3"
    },
    {
      "type": "panel",
      "id": "table",
      "name": "Table",
      "version": ""
    },
    {
      "type": "panel",
      "id": "timeseries",
      "name": "Time series",
      "version": ""
    }
  ],
  "annotations": {
    "list": [
      {
        "builtIn": 1,
        "datasource": {
          "type": "datasource",
          "uid": "grafana"
        },
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "name": "Annotations & Alerts",
        "target": {
          "limit": 100,
          "matchAny": false,
          "tags": [],
          "type": "dashboard"
        },
        "type": "dashboard"
      }
    ]
  },
  "description": "Visualisation of granular network metadata",
  "editable": true,
  "fiscalYearStartMonth": 0,
  "gnetId": 16081,
  "graphTooltip": 0,
  "id": null,
  "links": [],
  "liveNow": false,
  "panels": [
    {
      "circleMaxSize": 30,
      "circleMinSize": 2,
      "colors": [
        "#73BF69",
        "rgba(237, 129, 40, 0.89)",
        "#F2495C"
      ],
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "decimals": 0,
      "esGeoPoint": "geoipSrcLocation",
      "esLocationName": "",
      "esMetric": "Count",
      "gridPos": {
        "h": 14,
        "w": 12,
        "x": 0,
        "y": 0
      },
      "hideEmpty": false,
      "hideZero": false,
      "id": 4,
      "initialZoom": "2",
      "locationData": "geohash",
      "mapCenter": "(0°, 0°)",
      "mapCenterLatitude": 0,
      "mapCenterLongitude": 0,
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geohash",
        "labelField": "",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "metric",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "geoipSrcLocation",
              "id": "2",
              "settings": {
                "precision": "9"
              },
              "type": "geohash_grid"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "thresholds": "5000,20000",
      "title": "WorldMap Source Host",
      "transformations": [],
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "unitSingular": "",
      "valueName": "total"
    },
    {
      "circleMaxSize": 30,
      "circleMinSize": 2,
      "colors": [
        "#73BF69",
        "rgba(237, 129, 40, 0.89)",
        "#F2495C"
      ],
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "decimals": 0,
      "esGeoPoint": "geoipDstLocation",
      "esLocationName": "",
      "esMetric": "Count",
      "gridPos": {
        "h": 14,
        "w": 12,
        "x": 12,
        "y": 0
      },
      "hideEmpty": false,
      "hideZero": false,
      "id": 5,
      "initialZoom": "2",
      "locationData": "geohash",
      "mapCenter": "(0°, 0°)",
      "mapCenterLatitude": 0,
      "mapCenterLongitude": 0,
      "maxDataPoints": 1,
      "mouseWheelZoom": false,
      "showLegend": true,
      "stickyLabels": false,
      "tableQueryOptions": {
        "geohashField": "geohash",
        "labelField": "",
        "latitudeField": "latitude",
        "longitudeField": "longitude",
        "metricField": "metric",
        "queryType": "geohash"
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "geoipDstLocation",
              "id": "2",
              "settings": {
                "precision": "9"
              },
              "type": "geohash_grid"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "thresholds": "5000,20000",
      "title": "WorldMap Destination Host",
      "transformations": [],
      "type": "grafana-worldmap-panel",
      "unitPlural": "",
      "unitSingle": "",
      "unitSingular": "",
      "valueName": "total"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 11,
        "w": 24,
        "x": 0,
        "y": 14
      },
      "id": 2,
      "options": {
        "legend": {
          "calcs": [
            "last",
            "min",
            "max",
            "mean"
          ],
          "displayMode": "table",
          "placement": "bottom",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "10"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Total Bandwidth",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": [
          {
            "__systemRef": "hideSeriesFrom",
            "matcher": {
              "id": "byNames",
              "options": {
                "mode": "exclude",
                "names": [
                  "https"
                ],
                "prefix": "All except:",
                "readOnly": true
              }
            },
            "properties": [
              {
                "id": "custom.hideFrom",
                "value": {
                  "legend": false,
                  "tooltip": false,
                  "viz": true
                }
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 11,
        "w": 24,
        "x": 0,
        "y": 25
      },
      "id": 22,
      "options": {
        "legend": {
          "calcs": [
            "last",
            "min",
            "max",
            "mean"
          ],
          "displayMode": "table",
          "placement": "bottom",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "application",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            },
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Total Bandwidth Per Application",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": [
          {
            "__systemRef": "hideSeriesFrom",
            "matcher": {
              "id": "byNames",
              "options": {
                "mode": "exclude",
                "names": [
                  "GOOGLE"
                ],
                "prefix": "All except:",
                "readOnly": true
              }
            },
            "properties": [
              {
                "id": "custom.hideFrom",
                "value": {
                  "legend": false,
                  "tooltip": false,
                  "viz": true
                }
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 17,
        "w": 24,
        "x": 0,
        "y": 36
      },
      "id": 23,
      "options": {
        "legend": {
          "calcs": [
            "last",
            "min",
            "max",
            "mean"
          ],
          "displayMode": "table",
          "placement": "bottom",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "geoipSrcOrg",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            },
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Total Bandwidth Per Source ",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 12,
        "x": 0,
        "y": 53
      },
      "id": 6,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "list",
          "placement": "right",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "hostSrc",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            },
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Host (Source)",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 12,
        "x": 12,
        "y": 53
      },
      "id": 7,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "list",
          "placement": "right",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "hostDst",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            },
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Host (Destination)",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 12,
        "x": 0,
        "y": 59
      },
      "id": 21,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "list",
          "placement": "right",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "macSrc",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            },
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per MAC (Source)",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisCenteredZero": false,
            "axisColorMode": "text",
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "smooth",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": false,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "bps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 12,
        "x": 12,
        "y": 59
      },
      "id": 20,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "list",
          "placement": "right",
          "showLegend": true
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "macDst",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "20"
              },
              "type": "terms"
            },
            {
              "field": "timestamp",
              "id": "2",
              "settings": {
                "interval": "1s",
                "min_doc_count": "1"
              },
              "type": "date_histogram"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBits",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per MAC (Destination)",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "hostSrc"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Host Source"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Host Source"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 148
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 0,
        "y": 65
      },
      "id": 9,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "hostSrc",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "hide": true,
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Source Host",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "hostDst"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Host Destination"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "hostDst"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 150
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 4,
        "y": 65
      },
      "id": 17,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "hostDst",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Dest Host",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "application"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Application"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Application"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 117
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 8,
        "y": 65
      },
      "id": 11,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "application",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Application",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "portSrc"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Source Port"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "auto"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Source Port"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 123
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 12,
        "y": 65
      },
      "id": 12,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "portSrc",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Source Port",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "decbytes"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "portDst"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Destination Port"
              },
              {
                "id": "unit",
                "value": "none"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Destination Port"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 131
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 16,
        "y": 65
      },
      "id": 13,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "portDst",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Destination Port",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "hostSrc"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Source"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "hostDst"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Destination"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 20,
        "y": 65
      },
      "id": 14,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Bytes"
          }
        ]
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "hostSrc",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "10"
              },
              "type": "terms"
            },
            {
              "field": "hostDst",
              "id": "5",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "10"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Bandwidth per Source and Destination",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "decbytes"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "hostSrc"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Host Source"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "portSrc"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Port Source"
              },
              {
                "id": "unit",
                "value": "none"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "hostDst"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Host Destination"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "portDst"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Port Destination"
              },
              {
                "id": "unit",
                "value": "none"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "application"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Application"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 12,
        "x": 0,
        "y": 77
      },
      "id": 16,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "hostSrc",
              "id": "3",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "portSrc",
              "id": "4",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "hostDst",
              "id": "5",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "portDst",
              "id": "6",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            },
            {
              "field": "application",
              "id": "7",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "1",
                "size": "5"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "field": "totalBytes",
              "id": "1",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "5 Tuple",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoipSrcCountry_iso_code"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Source Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Source Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 121
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 12,
        "y": 77
      },
      "id": 10,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "geoipSrcCountry_iso_code",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Country Source",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoipDstCountry_iso_code"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Destination Country"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Destination Country"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 141
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 16,
        "y": 77
      },
      "id": 18,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "geoipDstCountry_iso_code",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top Country Destination",
      "type": "table"
    },
    {
      "datasource": {
        "type": "elasticsearch",
        "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
      },
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "inspect": false,
            "minWidth": 50
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green"
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "geoipDstIsp"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "ISP"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Sum"
            },
            "properties": [
              {
                "id": "displayName",
                "value": "Total Bytes"
              },
              {
                "id": "unit",
                "value": "decbytes"
              },
              {
                "id": "custom.displayMode",
                "value": "lcd-gauge"
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Count"
            },
            "properties": [
              {
                "id": "custom.hidden",
                "value": true
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 12,
        "w": 4,
        "x": 20,
        "y": 77
      },
      "id": 19,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true
      },
      "pluginVersion": "9.1.2",
      "targets": [
        {
          "alias": "",
          "bucketAggs": [
            {
              "field": "geoipDstIsp",
              "id": "2",
              "settings": {
                "min_doc_count": "1",
                "order": "desc",
                "orderBy": "4",
                "size": "20"
              },
              "type": "terms"
            }
          ],
          "datasource": {
            "type": "elasticsearch",
            "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
          },
          "metrics": [
            {
              "id": "1",
              "type": "count"
            },
            {
              "field": "totalBytes",
              "id": "4",
              "type": "sum"
            }
          ],
          "query": "device:$capture_device",
          "refId": "A",
          "timeField": "timestamp"
        }
      ],
      "title": "Top ISP Destination",
      "type": "table"
    }
  ],
  "refresh": "1m",
  "schemaVersion": 37,
  "style": "dark",
  "tags": [],
  "templating": {
    "list": [
      {
        "current": {},
        "datasource": {
          "type": "elasticsearch",
          "uid": "${DS_ELASTICSEARCH_PCAP2JSON}"
        },
        "definition": "{\"find\":\"terms\",\"field\":\"device\"}",
        "hide": 0,
        "includeAll": true,
        "label": "Device:",
        "multi": false,
        "name": "capture_device",
        "options": [],
        "query": "{\"find\":\"terms\",\"field\":\"device\"}",
        "refresh": 2,
        "regex": "",
        "skipUrlSync": false,
        "sort": 1,
        "type": "query"
      }
    ]
  },
  "time": {
    "from": "now-15m",
    "to": "now"
  },
  "timepicker": {},
  "timezone": "Asia/Bangkok",
  "title": "FMADIO PCAP2JSON Dashboard",
  "uid": "UfUJGT8nzasdh",
  "version": 3,
  "weekStart": ""
}