|
248 | 248 | "graphs": [ |
249 | 249 | { |
250 | 250 | "title": "Total WAF Blocks", |
251 | | - "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events') action = 'block'\n| group count = count()", |
| 251 | + "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events','Gateway HTTP' ) action = 'block'\n| group count = count()", |
252 | 252 | "graphStyle": "number", |
253 | 253 | "sparklineConfig": { |
254 | 254 | "enabled": true |
255 | 255 | }, |
256 | 256 | "layout": { |
257 | 257 | h: 6, |
| 258 | + i: "0", |
| 259 | + minH: 3, |
| 260 | + minW: 6, |
258 | 261 | w: 30, |
259 | 262 | x: 0, |
260 | 263 | y: 0 |
|
285 | 288 | }, |
286 | 289 | { |
287 | 290 | "title": "WAF Action Trend", |
288 | | - "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events') action = *\n| group count = count() by timestamp = timebucket(), action\n| transpose action", |
| 291 | + "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events','Gateway HTTP' ) action = *\n| group count = count() by timestamp = timebucket(), action\n| transpose action", |
289 | 292 | "graphStyle": "line", |
290 | 293 | "layout": { |
291 | 294 | h: 12, |
| 295 | + i: "2", |
| 296 | + minH: 3, |
| 297 | + minW: 6, |
292 | 298 | w: 30, |
293 | 299 | x: 30, |
294 | 300 | y: 0 |
|
297 | 303 | }, |
298 | 304 | { |
299 | 305 | "title": "Top 20 Blocked IPs", |
300 | | - "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events') action = 'block'\n| group count = count() by src_endpoint.ip, src_endpoint.location.country\n| sort -count\n| limit 20", |
| 306 | + "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events','Gateway HTTP' ) action = 'block'\n| group count = count() by src_endpoint.ip, src_endpoint.location.country\n| sort -count\n| limit 20", |
301 | 307 | "graphStyle": "", |
302 | 308 | "layout": { |
303 | 309 | h: 15, |
| 310 | + i: "3", |
| 311 | + minH: 3, |
| 312 | + minW: 6, |
304 | 313 | w: 30, |
305 | 314 | x: 0, |
306 | 315 | y: 16 |
307 | 316 | } |
308 | 317 | }, |
309 | 318 | { |
310 | 319 | "title": "Top 20 Blocked Hostnames", |
311 | | - "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events') action = 'block' http_request.url.hostname = *\n| group count = count() by http_request.url.hostname\n| sort -count\n| limit 20", |
| 320 | + "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events','Gateway HTTP' ) action = 'block' http_request.url.hostname = *\n| group count = count() by http_request.url.hostname\n| sort -count\n| limit 20", |
312 | 321 | "graphStyle": "", |
313 | 322 | "layout": { |
314 | 323 | h: 15, |
| 324 | + i: "4", |
| 325 | + minH: 3, |
| 326 | + minW: 6, |
315 | 327 | w: 30, |
316 | 328 | x: 30, |
317 | 329 | y: 12 |
318 | 330 | } |
319 | 331 | }, |
320 | 332 | { |
321 | 333 | "title": "Top 20 Blocked URLs", |
322 | | - "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events') action = 'block' http_request.url.hostname = *\n| group count = count() by http_request.url.hostname, http_request.url.path\n| sort -count\n| limit 20", |
| 334 | + "query": "dataSource.cloudflare_dataset in ('HTTP Requests', 'Firewall events','Gateway HTTP' ) action = 'block' http_request.url.hostname = *\n| group count = count() by http_request.url.hostname, http_request.url.path\n| sort -count\n| limit 20", |
323 | 335 | "graphStyle": "", |
324 | 336 | "layout": { |
325 | 337 | h: 15, |
| 338 | + i: "5", |
| 339 | + minH: 3, |
| 340 | + minW: 6, |
326 | 341 | w: 30, |
327 | 342 | x: 0, |
328 | 343 | y: 31 |
329 | 344 | } |
330 | 345 | }, |
331 | 346 | { |
332 | 347 | "title": "WAF Rule Source Breakdown", |
333 | | - "query": "dataSource.cloudflare_dataset = 'Firewall events' firewall_rule.desc = *\n| group count = count() by firewall_rule.desc \n| sort -count", |
| 348 | + "query": "dataSource.cloudflare_dataset in ('HTTP Requests','Firewall events') firewall_rule.desc = *\n| group count = count() by firewall_rule.desc \n| sort -count", |
334 | 349 | "graphStyle": "pie", |
335 | 350 | "layout": { |
336 | 351 | h: 15, |
| 352 | + i: "6", |
| 353 | + minH: 3, |
| 354 | + minW: 6, |
337 | 355 | w: 30, |
338 | 356 | x: 30, |
339 | 357 | y: 27 |
|
348 | 366 | "graphStyle": "line", |
349 | 367 | "layout": { |
350 | 368 | h: 10, |
351 | | - i: "7", |
352 | | - minH: 3, |
353 | | - minW: 6, |
354 | 369 | w: 60, |
355 | 370 | x: 0, |
356 | 371 | y: 46 |
|
489 | 504 | "graphStyle": "line", |
490 | 505 | "layout": { |
491 | 506 | h: 10, |
492 | | - i: "1", |
493 | | - minH: 3, |
494 | | - minW: 6, |
495 | 507 | w: 30, |
496 | 508 | x: 30, |
497 | 509 | y: 0 |
|
575 | 587 | "graphStyle": "line", |
576 | 588 | "layout": { |
577 | 589 | h: 10, |
578 | | - i: "0", |
579 | | - minH: 3, |
580 | | - minW: 6, |
581 | 590 | w: 60, |
582 | 591 | x: 0, |
583 | 592 | y: 0 |
|
639 | 648 | "graphStyle": "line", |
640 | 649 | "layout": { |
641 | 650 | h: 10, |
642 | | - i: "0", |
643 | | - minH: 3, |
644 | | - minW: 6, |
645 | 651 | w: 60, |
646 | 652 | x: 0, |
647 | 653 | y: 0 |
|
0 commit comments