Add configuration for Audit indices
Change-Id: I3c1f7b5e85fe755c4d934f6844b0a6fdd03eeef7
diff --git a/kibana/files/objects/index-pattern_audit.json b/kibana/files/objects/index-pattern_audit.json
new file mode 100644
index 0000000..46584ed
--- /dev/null
+++ b/kibana/files/objects/index-pattern_audit.json
@@ -0,0 +1,5 @@
+{
+ "title" : "audit-*",
+ "timeFieldName" : "Timestamp",
+ "fields" : "[{\"name\":\"notification_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"Logger\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"environment_label\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"Timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"event_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"action\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"outcome\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"Hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"Severity\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"Pid\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"Type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"Payload\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":true,\"doc_values\":false},{\"name\":\"severity_label\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_score\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false}]"
+}
diff --git a/kibana/files/objects/search_audit.json b/kibana/files/objects/search_audit.json
new file mode 100644
index 0000000..d89744b
--- /dev/null
+++ b/kibana/files/objects/search_audit.json
@@ -0,0 +1,19 @@
+{
+ "title": "Audit",
+ "description": "",
+ "hits": 0,
+ "columns": [
+ "Logger",
+ "notification_type",
+ "outcome",
+ "Payload"
+ ],
+ "sort": [
+ "Timestamp",
+ "desc"
+ ],
+ "version": 1,
+ "kibanaSavedObjectMeta": {
+ "searchSourceJSON": "{\"index\":\"audit-*\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"
+ }
+}
diff --git a/metadata/service/client.yml b/metadata/service/client.yml
index 676d066..43531e6 100644
--- a/metadata/service/client.yml
+++ b/metadata/service/client.yml
@@ -25,6 +25,10 @@
enabled: true
template: kibana/files/objects/index-pattern_notifications.json
type: index-pattern
+ 'audit-*':
+ enabled: true
+ template: kibana/files/objects/index-pattern_audit.json
+ type: index-pattern
search-logs:
enabled: true
template: kibana/files/objects/search_logs.json
@@ -33,6 +37,10 @@
enabled: true
template: kibana/files/objects/search_notifications.json
type: search
+ search-audit:
+ enabled: true
+ template: kibana/files/objects/search_audit.json
+ type: search
LOG-MESSAGES-OVER-TIME-PER-SEVERITY:
enabled: true
template: kibana/files/objects/visualization_LOG-MESSAGES-OVER-TIME-PER-SEVERITY.json