Grafana dashboard: Alertflex dashboard
Description: Visualization security alerts for alertflex solution

Alertflex project is a free, open-source continuous security monitoring solution designed for use in Hybrid Clouds (on-premises and cloud-based IT infrastructure). By monitoring security events and reports from well-known cybersecurity applications, Alertflex gives companies end-to-end security visibility. The project adapts and automates of third-party software products into a unified solution based on the CTI SOAR technology stack and DevSecOps best practices.

Alertflex requires fewer system resources compared with similar products and mostly integrates of free open-source third-party software. It can significantly reduce costs for your cybersecurity monitoring.

For more info please see alertflex site: https://alertflex.org

{
  "__inputs": [
    {
      "name": "DS_AFEVENTSMYSQL",
      "label": "AfeventsMySQL",
      "description": "https://alertflex.org",
      "type": "datasource",
      "pluginId": "mysql",
      "pluginName": "MySQL"
    }
  ],
  "__requires": [
    {
      "type": "grafana",
      "id": "grafana",
      "name": "Grafana",
      "version": "7.2.0"
    },
    {
      "type": "panel",
      "id": "graph",
      "name": "Graph",
      "version": ""
    },
    {
      "type": "datasource",
      "id": "mysql",
      "name": "MySQL",
      "version": "1.0.0"
    }
  ],
  "annotations": {
    "list": [
      {
        "builtIn": 1,
        "datasource": "-- Grafana --",
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "name": "Annotations & Alerts",
        "type": "dashboard"
      }
    ]
  },
  "editable": true,
  "gnetId": 13075,
  "graphTooltip": 0,
  "id": null,
  "links": [],
  "panels": [
    {
      "aliasColors": {
        "critical": "dark-red",
        "info": "dark-green",
        "major": "dark-yellow",
        "minor": "dark-blue"
      },
      "bars": true,
      "dashLength": 10,
      "dashes": false,
      "datasource": "${DS_AFEVENTSMYSQL}",
      "fieldConfig": {
        "defaults": {
          "custom": {},
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": []
      },
      "fill": 1,
      "fillGradient": 0,
      "gridPos": {
        "h": 9,
        "w": 24,
        "x": 0,
        "y": 0
      },
      "hiddenSeries": false,
      "id": 2,
      "legend": {
        "alignAsTable": false,
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "rightSide": true,
        "show": true,
        "total": true,
        "values": true
      },
      "lines": false,
      "linewidth": 1,
      "nullPointMode": "null",
      "options": {
        "alertThreshold": true
      },
      "percentage": false,
      "pluginVersion": "7.2.0",
      "pointradius": 2,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": false,
      "steppedLine": false,
      "targets": [
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"info\"\r\nFROM alert\r\nWHERE\r\n  alert_severity=0\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "A",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        },
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"minor\"\r\nFROM alert\r\nWHERE\r\n  alert_severity=1\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "B",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        },
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"major\"\r\nFROM alert\r\nWHERE\r\n  alert_severity=2\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "C",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        },
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"critical\"\r\nFROM alert\r\nWHERE\r\n  alert_severity=3\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "D",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeRegions": [],
      "timeShift": null,
      "title": "Alerts by Severity",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "$$hashKey": "object:501",
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        },
        {
          "$$hashKey": "object:502",
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ],
      "yaxis": {
        "align": false,
        "alignLevel": null
      }
    },
    {
      "aliasColors": {},
      "bars": true,
      "dashLength": 10,
      "dashes": false,
      "datasource": "${DS_AFEVENTSMYSQL}",
      "fieldConfig": {
        "defaults": {
          "custom": {},
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          }
        },
        "overrides": []
      },
      "fill": 1,
      "fillGradient": 0,
      "gridPos": {
        "h": 9,
        "w": 24,
        "x": 0,
        "y": 9
      },
      "hiddenSeries": false,
      "id": 3,
      "legend": {
        "avg": false,
        "current": false,
        "max": false,
        "min": false,
        "rightSide": true,
        "show": true,
        "total": true,
        "values": true
      },
      "lines": false,
      "linewidth": 1,
      "nullPointMode": "null",
      "options": {
        "alertThreshold": true
      },
      "percentage": false,
      "pluginVersion": "7.2.0",
      "pointradius": 2,
      "points": false,
      "renderer": "flot",
      "seriesOverrides": [],
      "spaceLength": 10,
      "stack": true,
      "steppedLine": false,
      "targets": [
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"host\"\r\nFROM alert\r\nWHERE\r\n  alert_type='HOST'\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "A",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        },
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"file\"\r\nFROM alert\r\nWHERE\r\n  alert_type='FILE'\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "B",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        },
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"net\"\r\nFROM alert\r\nWHERE\r\n  alert_type='NET'\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "C",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        },
        {
          "format": "time_series",
          "group": [],
          "metricColumn": "none",
          "rawQuery": true,
          "rawSql": "SELECT\r\n  $__timeGroupAlias(time_collr,1m,0),\r\n  count(*) AS \"misc\"\r\nFROM alert\r\nWHERE\r\n  alert_type='MISC'\r\n  and\r\n  $__timeFilter(time_collr)\r\nGROUP BY 1\r\nORDER BY 1",
          "refId": "D",
          "select": [
            [
              {
                "params": [
                  "alert_id"
                ],
                "type": "column"
              }
            ]
          ],
          "table": "alert",
          "timeColumn": "time_collr",
          "timeColumnType": "timestamp",
          "where": [
            {
              "name": "$__timeFilter",
              "params": [],
              "type": "macro"
            }
          ]
        }
      ],
      "thresholds": [],
      "timeFrom": null,
      "timeRegions": [],
      "timeShift": null,
      "title": "Alerts by Type",
      "tooltip": {
        "shared": true,
        "sort": 0,
        "value_type": "individual"
      },
      "type": "graph",
      "xaxis": {
        "buckets": null,
        "mode": "time",
        "name": null,
        "show": true,
        "values": []
      },
      "yaxes": [
        {
          "$$hashKey": "object:643",
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        },
        {
          "$$hashKey": "object:644",
          "format": "short",
          "label": null,
          "logBase": 1,
          "max": null,
          "min": null,
          "show": true
        }
      ],
      "yaxis": {
        "align": false,
        "alignLevel": null
      }
    }
  ],
  "schemaVersion": 26,
  "style": "dark",
  "tags": [],
  "templating": {
    "list": []
  },
  "time": {
    "from": "now-30m",
    "to": "now"
  },
  "timepicker": {},
  "timezone": "",
  "title": "Alertflex dashboard",
  "uid": "wNj-enKMz",
  "version": 1,
  "description": "Visualization security alerts for alertflex solution"
}