type: index-pattern

title: wazuh-alerts-*


type: visualization

title: Proposal Custom Rules - Events Over Time

type: histogram

legendPosition: right

scale: linear

type: count

schema: metric

schema: segment

interval: auto

description: Timeline of events matching Appendix A+B custom rule IDs

query: rule.id:1003* OR rule.id:1004*


title: Proposal Custom Rules - Top Rule IDs

title: Proposal Custom Rules - Top Rule IDs

type: table

type: terms

schema: bucket

order: asc

description: Counts by custom Appendix rule IDs

query: rule.id:1003* OR rule.id:1004*


title: Proposal Custom Rules - Top Descriptions

order: desc

description: Most frequent custom rule descriptions

query: rule.id:1003* OR rule.id:1004*


title: Proposal Custom Rules - Severity

title: Proposal Custom Rules - Severity

type: pie

description: Severity distribution for custom Appendix rules

query: rule.id:1003* OR rule.id:1004*


type: dashboard

title: SOC Proposal Custom Rules Overview

description: Dashboard for custom Wazuh Appendix A+B rules (100301..100426)