type: index-pattern

title: wazuh-alerts-*


type: visualization

title: Proposal Appendix A+B - Events Over Time

type: histogram

legendPosition: right

scale: linear

type: count

schema: metric

schema: segment

interval: auto

description: Combined Appendix A and B simulated events


title: Proposal Appendix A vs B

title: Proposal Appendix A vs B

type: pie

type: filters

query: full_log:*fortigate* OR full_log:*dns-fw-01* OR full_log:*win-dc01*

label: Appendix A

query: full_log:*vmware* OR full_log:*windows_sysmon* OR full_log:*log_monitor*

label: Appendix B

description: Split by Appendix A and B markers


title: Proposal Appendix A+B - Top Rules

title: Proposal Appendix A+B - Top Rules

type: table

type: terms

schema: bucket

order: desc

description: Top matched Wazuh rules for Appendix A+B simulations


title: Proposal Appendix A+B - Severity

title: Proposal Appendix A+B - Severity

description: Severity distribution for Appendix A+B simulations


title: Proposal Appendix A+B - Use Case Items

title: Proposal Appendix A+B - Use Case Items

description: Table for each Appendix A+B use-case item. Click + on a row to filter logs.


type: dashboard

title: SOC Proposal Appendix A+B Overview

description: Combined dashboard for Appendix A and B simulation logs