Last active 1 week ago

Revision bed39f8deb484e33ba341646e12eac1ab0413936

grafana.json Raw
1{
2 "apiVersion": "dashboard.grafana.app/v2",
3 "kind": "Dashboard",
4 "metadata": {
5 "name": "ad-samba-audit2",
6 "generation": 46,
7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 "labels": {},
9 "annotations": {}
10 },
11 "spec": {
12 "annotations": [
13 {
14 "kind": "AnnotationQuery",
15 "spec": {
16 "query": {
17 "kind": "DataQuery",
18 "group": "grafana",
19 "version": "v0",
20 "spec": {}
21 },
22 "enable": true,
23 "hide": true,
24 "iconColor": "rgba(0, 211, 255, 1)",
25 "name": "Annotations & Alerts",
26 "builtIn": true
27 }
28 }
29 ],
30 "cursorSync": "Crosshair",
31 "editable": true,
32 "elements": {
33 "panel-1": {
34 "kind": "Panel",
35 "spec": {
36 "id": 1,
37 "title": "Logins OK",
38 "description": "Успешные входы в домен (samba_auth): машинные и пользовательские, разбивка по домену.",
39 "links": [],
40 "data": {
41 "kind": "QueryGroup",
42 "spec": {
43 "queries": [
44 {
45 "kind": "PanelQuery",
46 "spec": {
47 "query": {
48 "kind": "DataQuery",
49 "group": "influxdb",
50 "version": "v0",
51 "spec": {
52 "alias": "machine_login",
53 "groupBy": [
54 {
55 "params": [
56 "$interval"
57 ],
58 "type": "time"
59 },
60 {
61 "params": [
62 "domain::tag"
63 ],
64 "type": "tag"
65 },
66 {
67 "params": [
68 "null"
69 ],
70 "type": "fill"
71 }
72 ],
73 "measurement": "samba_auth",
74 "orderByTime": "ASC",
75 "policy": "default",
76 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
77 "rawQuery": false,
78 "resultFormat": "time_series",
79 "select": [
80 [
81 {
82 "params": [
83 "client_account"
84 ],
85 "type": "field"
86 },
87 {
88 "params": [],
89 "type": "count"
90 }
91 ]
92 ],
93 "tags": [
94 {
95 "key": "status::tag",
96 "operator": "=",
97 "value": "NT_STATUS_OK"
98 },
99 {
100 "condition": "AND",
101 "key": "account::tag",
102 "operator": "=~",
103 "value": "/^MACHINE/"
104 }
105 ]
106 },
107 "labels": {
108 "grafana.app/export-label": "influxdb-1"
109 }
110 },
111 "refId": "A",
112 "hidden": false
113 }
114 },
115 {
116 "kind": "PanelQuery",
117 "spec": {
118 "query": {
119 "kind": "DataQuery",
120 "group": "influxdb",
121 "version": "v0",
122 "spec": {
123 "alias": "user_login",
124 "groupBy": [
125 {
126 "params": [
127 "$interval"
128 ],
129 "type": "time"
130 },
131 {
132 "params": [
133 "domain::tag"
134 ],
135 "type": "tag"
136 },
137 {
138 "params": [
139 "null"
140 ],
141 "type": "fill"
142 }
143 ],
144 "measurement": "samba_auth",
145 "orderByTime": "ASC",
146 "policy": "default",
147 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^user/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
148 "rawQuery": false,
149 "resultFormat": "time_series",
150 "select": [
151 [
152 {
153 "params": [
154 "client_account"
155 ],
156 "type": "field"
157 },
158 {
159 "params": [],
160 "type": "count"
161 }
162 ]
163 ],
164 "tags": [
165 {
166 "key": "status::tag",
167 "operator": "=",
168 "value": "NT_STATUS_OK"
169 },
170 {
171 "condition": "AND",
172 "key": "account::tag",
173 "operator": "=~",
174 "value": "/^user/"
175 },
176 {
177 "condition": "OR",
178 "key": "account::tag",
179 "operator": "=~",
180 "value": "/^loadtest/"
181 }
182 ]
183 },
184 "labels": {
185 "grafana.app/export-label": "influxdb-1"
186 }
187 },
188 "refId": "B",
189 "hidden": false
190 }
191 }
192 ],
193 "transformations": [],
194 "queryOptions": {}
195 }
196 },
197 "vizConfig": {
198 "kind": "VizConfig",
199 "group": "timeseries",
200 "version": "13.0.1+security-01",
201 "spec": {
202 "options": {
203 "annotations": {
204 "clustering": -1,
205 "multiLane": false
206 },
207 "legend": {
208 "calcs": [],
209 "displayMode": "list",
210 "placement": "bottom",
211 "showLegend": true
212 },
213 "tooltip": {
214 "hideZeros": false,
215 "mode": "single",
216 "sort": "none"
217 }
218 },
219 "fieldConfig": {
220 "defaults": {
221 "thresholds": {
222 "mode": "absolute",
223 "steps": [
224 {
225 "value": 0,
226 "color": "green"
227 },
228 {
229 "value": 80,
230 "color": "red"
231 }
232 ]
233 },
234 "color": {
235 "mode": "palette-classic"
236 },
237 "custom": {
238 "axisBorderShow": false,
239 "axisCenteredZero": false,
240 "axisColorMode": "text",
241 "axisLabel": "",
242 "axisPlacement": "auto",
243 "barAlignment": 0,
244 "barWidthFactor": 0.6,
245 "drawStyle": "line",
246 "fillOpacity": 10,
247 "gradientMode": "none",
248 "hideFrom": {
249 "legend": false,
250 "tooltip": false,
251 "viz": false
252 },
253 "insertNulls": false,
254 "lineInterpolation": "smooth",
255 "lineWidth": 1,
256 "pointSize": 5,
257 "scaleDistribution": {
258 "type": "linear"
259 },
260 "showPoints": "auto",
261 "showValues": false,
262 "spanNulls": false,
263 "stacking": {
264 "group": "A",
265 "mode": "none"
266 },
267 "thresholdsStyle": {
268 "mode": "off"
269 }
270 }
271 },
272 "overrides": []
273 }
274 }
275 }
276 }
277 },
278 "panel-10": {
279 "kind": "Panel",
280 "spec": {
281 "id": 10,
282 "title": "Samba: подключённых клиентов",
283 "description": "История числа подключённых SMB-клиентов (samba_clients.count).",
284 "links": [],
285 "data": {
286 "kind": "QueryGroup",
287 "spec": {
288 "queries": [
289 {
290 "kind": "PanelQuery",
291 "spec": {
292 "query": {
293 "kind": "DataQuery",
294 "group": "influxdb",
295 "version": "v0",
296 "spec": {
297 "alias": "clients",
298 "groupBy": [
299 {
300 "params": [
301 "$__interval"
302 ],
303 "type": "time"
304 },
305 {
306 "params": [
307 "null"
308 ],
309 "type": "fill"
310 }
311 ],
312 "measurement": "samba_clients",
313 "orderByTime": "ASC",
314 "policy": "default",
315 "query": "SELECT last(\"count\") FROM \"samba_clients\" WHERE $timeFilter GROUP BY time($__interval) fill(null)",
316 "rawQuery": false,
317 "resultFormat": "time_series",
318 "select": [
319 [
320 {
321 "params": [
322 "count"
323 ],
324 "type": "field"
325 },
326 {
327 "params": [],
328 "type": "last"
329 }
330 ]
331 ],
332 "tags": []
333 },
334 "labels": {
335 "grafana.app/export-label": "influxdb-1"
336 }
337 },
338 "refId": "A",
339 "hidden": false
340 }
341 }
342 ],
343 "transformations": [],
344 "queryOptions": {}
345 }
346 },
347 "vizConfig": {
348 "kind": "VizConfig",
349 "group": "timeseries",
350 "version": "13.0.1+security-01",
351 "spec": {
352 "options": {
353 "annotations": {
354 "clustering": -1,
355 "multiLane": false
356 },
357 "legend": {
358 "calcs": [],
359 "displayMode": "list",
360 "placement": "bottom",
361 "showLegend": true
362 },
363 "tooltip": {
364 "hideZeros": false,
365 "mode": "single",
366 "sort": "none"
367 }
368 },
369 "fieldConfig": {
370 "defaults": {
371 "unit": "none",
372 "thresholds": {
373 "mode": "absolute",
374 "steps": [
375 {
376 "value": 0,
377 "color": "green"
378 }
379 ]
380 },
381 "color": {
382 "mode": "palette-classic"
383 },
384 "custom": {
385 "axisBorderShow": false,
386 "axisCenteredZero": false,
387 "axisColorMode": "text",
388 "axisLabel": "",
389 "axisPlacement": "auto",
390 "barAlignment": 0,
391 "barWidthFactor": 0.6,
392 "drawStyle": "line",
393 "fillOpacity": 15,
394 "gradientMode": "none",
395 "hideFrom": {
396 "legend": false,
397 "tooltip": false,
398 "viz": false
399 },
400 "insertNulls": false,
401 "lineInterpolation": "stepAfter",
402 "lineWidth": 2,
403 "pointSize": 5,
404 "scaleDistribution": {
405 "type": "linear"
406 },
407 "showPoints": "auto",
408 "showValues": false,
409 "spanNulls": false,
410 "stacking": {
411 "group": "A",
412 "mode": "none"
413 },
414 "thresholdsStyle": {
415 "mode": "off"
416 }
417 }
418 },
419 "overrides": []
420 }
421 }
422 }
423 }
424 },
425 "panel-11": {
426 "kind": "Panel",
427 "spec": {
428 "id": 11,
429 "title": "Authentifications",
430 "description": "Успешные входы в домен (samba_auth): машинные и пользовательские, разбивка по домену.",
431 "links": [],
432 "data": {
433 "kind": "QueryGroup",
434 "spec": {
435 "queries": [
436 {
437 "kind": "PanelQuery",
438 "spec": {
439 "query": {
440 "kind": "DataQuery",
441 "group": "influxdb",
442 "version": "v0",
443 "spec": {
444 "alias": "machine_logins",
445 "groupBy": [
446 {
447 "params": [
448 "$interval"
449 ],
450 "type": "time"
451 },
452 {
453 "params": [
454 "domain::tag"
455 ],
456 "type": "tag"
457 },
458 {
459 "params": [
460 "null"
461 ],
462 "type": "fill"
463 }
464 ],
465 "measurement": "samba_auth",
466 "orderByTime": "ASC",
467 "policy": "default",
468 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
469 "rawQuery": false,
470 "resultFormat": "time_series",
471 "select": [
472 [
473 {
474 "params": [
475 "client_account"
476 ],
477 "type": "field"
478 },
479 {
480 "params": [],
481 "type": "count"
482 }
483 ]
484 ],
485 "tags": [
486 {
487 "key": "status::tag",
488 "operator": "=",
489 "value": "NT_STATUS_OK"
490 },
491 {
492 "condition": "AND",
493 "key": "account::tag",
494 "operator": "=~",
495 "value": "/^MACHINE/"
496 }
497 ]
498 },
499 "labels": {
500 "grafana.app/export-label": "influxdb-1"
501 }
502 },
503 "refId": "A",
504 "hidden": false
505 }
506 },
507 {
508 "kind": "PanelQuery",
509 "spec": {
510 "query": {
511 "kind": "DataQuery",
512 "group": "influxdb",
513 "version": "v0",
514 "spec": {
515 "alias": "user_logins",
516 "groupBy": [
517 {
518 "params": [
519 "$interval"
520 ],
521 "type": "time"
522 },
523 {
524 "params": [
525 "domain::tag"
526 ],
527 "type": "tag"
528 },
529 {
530 "params": [
531 "null"
532 ],
533 "type": "fill"
534 }
535 ],
536 "measurement": "samba_auth",
537 "orderByTime": "ASC",
538 "policy": "default",
539 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^user/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
540 "rawQuery": false,
541 "resultFormat": "time_series",
542 "select": [
543 [
544 {
545 "params": [
546 "client_account"
547 ],
548 "type": "field"
549 },
550 {
551 "params": [],
552 "type": "count"
553 }
554 ]
555 ],
556 "tags": [
557 {
558 "key": "status::tag",
559 "operator": "=",
560 "value": "NT_STATUS_OK"
561 },
562 {
563 "condition": "AND",
564 "key": "account::tag",
565 "operator": "=~",
566 "value": "/^user/"
567 },
568 {
569 "condition": "OR",
570 "key": "account::tag",
571 "operator": "=~",
572 "value": "/^loadtest/"
573 }
574 ]
575 },
576 "labels": {
577 "grafana.app/export-label": "influxdb-1"
578 }
579 },
580 "refId": "B",
581 "hidden": false
582 }
583 }
584 ],
585 "transformations": [],
586 "queryOptions": {}
587 }
588 },
589 "vizConfig": {
590 "kind": "VizConfig",
591 "group": "stat",
592 "version": "13.0.1+security-01",
593 "spec": {
594 "options": {
595 "colorMode": "value",
596 "graphMode": "area",
597 "justifyMode": "auto",
598 "orientation": "auto",
599 "percentChangeColorMode": "standard",
600 "reduceOptions": {
601 "calcs": [
602 "sum"
603 ],
604 "fields": "",
605 "values": false
606 },
607 "showPercentChange": false,
608 "textMode": "auto",
609 "wideLayout": true
610 },
611 "fieldConfig": {
612 "defaults": {
613 "thresholds": {
614 "mode": "absolute",
615 "steps": [
616 {
617 "value": 0,
618 "color": "green"
619 },
620 {
621 "value": 80,
622 "color": "red"
623 }
624 ]
625 },
626 "color": {
627 "mode": "palette-classic"
628 }
629 },
630 "overrides": []
631 }
632 }
633 }
634 }
635 },
636 "panel-12": {
637 "kind": "Panel",
638 "spec": {
639 "id": 12,
640 "title": "vfs_fsync ops",
641 "description": "Метрика за каждую секунду: Каждый блок или строчка — это отчет за 1 секунду времени (так как в скрипте задан интервал interval:s:1).Имя функции (vfs_fsync_range): Ядро Linux обрабатывает запросы к файлу .ldb именно через системный вызов vfs_fsync_range. Это означает, что приложение не просто сохраняет весь файл целиком, а пытается очень часто и точечно сбрасывать из оперативной памяти на диск конкретные измененные участки (диапазоны байт).",
642 "links": [],
643 "data": {
644 "kind": "QueryGroup",
645 "spec": {
646 "queries": [
647 {
648 "kind": "PanelQuery",
649 "spec": {
650 "query": {
651 "kind": "DataQuery",
652 "group": "influxdb",
653 "version": "v0",
654 "spec": {
655 "alias": "machine_login",
656 "groupBy": [
657 {
658 "params": [
659 "$interval"
660 ],
661 "type": "time"
662 },
663 {
664 "params": [
665 "null"
666 ],
667 "type": "fill"
668 }
669 ],
670 "measurement": "samba_sync_ops",
671 "orderByTime": "ASC",
672 "policy": "default",
673 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
674 "rawQuery": false,
675 "resultFormat": "time_series",
676 "select": [
677 [
678 {
679 "params": [
680 "count"
681 ],
682 "type": "field"
683 },
684 {
685 "params": [],
686 "type": "sum"
687 }
688 ]
689 ],
690 "tags": []
691 },
692 "labels": {
693 "grafana.app/export-label": "influxdb-1"
694 }
695 },
696 "refId": "A",
697 "hidden": false
698 }
699 }
700 ],
701 "transformations": [],
702 "queryOptions": {}
703 }
704 },
705 "vizConfig": {
706 "kind": "VizConfig",
707 "group": "timeseries",
708 "version": "13.0.1+security-01",
709 "spec": {
710 "options": {
711 "annotations": {
712 "clustering": -1,
713 "multiLane": false
714 },
715 "legend": {
716 "calcs": [],
717 "displayMode": "list",
718 "placement": "bottom",
719 "showLegend": true
720 },
721 "tooltip": {
722 "hideZeros": false,
723 "mode": "single",
724 "sort": "none"
725 }
726 },
727 "fieldConfig": {
728 "defaults": {
729 "thresholds": {
730 "mode": "absolute",
731 "steps": [
732 {
733 "value": 0,
734 "color": "green"
735 },
736 {
737 "value": 80,
738 "color": "red"
739 }
740 ]
741 },
742 "color": {
743 "mode": "palette-classic"
744 },
745 "custom": {
746 "axisBorderShow": false,
747 "axisCenteredZero": false,
748 "axisColorMode": "text",
749 "axisLabel": "",
750 "axisPlacement": "auto",
751 "barAlignment": 0,
752 "barWidthFactor": 0.6,
753 "drawStyle": "line",
754 "fillOpacity": 10,
755 "gradientMode": "none",
756 "hideFrom": {
757 "legend": false,
758 "tooltip": false,
759 "viz": false
760 },
761 "insertNulls": false,
762 "lineInterpolation": "smooth",
763 "lineWidth": 1,
764 "pointSize": 5,
765 "scaleDistribution": {
766 "type": "linear"
767 },
768 "showPoints": "auto",
769 "showValues": false,
770 "spanNulls": false,
771 "stacking": {
772 "group": "A",
773 "mode": "none"
774 },
775 "thresholdsStyle": {
776 "mode": "off"
777 }
778 }
779 },
780 "overrides": []
781 }
782 }
783 }
784 }
785 },
786 "panel-13": {
787 "kind": "Panel",
788 "spec": {
789 "id": 13,
790 "title": "ldb ops process operation",
791 "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
792 "links": [],
793 "data": {
794 "kind": "QueryGroup",
795 "spec": {
796 "queries": [
797 {
798 "kind": "PanelQuery",
799 "spec": {
800 "query": {
801 "kind": "DataQuery",
802 "group": "influxdb",
803 "version": "v0",
804 "spec": {
805 "groupBy": [
806 {
807 "params": [
808 "$interval"
809 ],
810 "type": "time"
811 },
812 {
813 "params": [
814 "prog::tag"
815 ],
816 "type": "tag"
817 },
818 {
819 "params": [
820 "action::tag"
821 ],
822 "type": "tag"
823 },
824 {
825 "params": [
826 "null"
827 ],
828 "type": "fill"
829 }
830 ],
831 "measurement": "samba_file_access",
832 "orderByTime": "ASC",
833 "policy": "default",
834 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
835 "rawQuery": false,
836 "resultFormat": "time_series",
837 "select": [
838 [
839 {
840 "params": [
841 "path"
842 ],
843 "type": "field"
844 },
845 {
846 "params": [],
847 "type": "count"
848 }
849 ]
850 ],
851 "tags": []
852 },
853 "labels": {
854 "grafana.app/export-label": "influxdb-1"
855 }
856 },
857 "refId": "A",
858 "hidden": false
859 }
860 }
861 ],
862 "transformations": [],
863 "queryOptions": {}
864 }
865 },
866 "vizConfig": {
867 "kind": "VizConfig",
868 "group": "timeseries",
869 "version": "13.0.1+security-01",
870 "spec": {
871 "options": {
872 "annotations": {
873 "clustering": -1,
874 "multiLane": false
875 },
876 "legend": {
877 "calcs": [],
878 "displayMode": "list",
879 "placement": "bottom",
880 "showLegend": true
881 },
882 "tooltip": {
883 "hideZeros": false,
884 "mode": "single",
885 "sort": "none"
886 }
887 },
888 "fieldConfig": {
889 "defaults": {
890 "thresholds": {
891 "mode": "absolute",
892 "steps": [
893 {
894 "value": 0,
895 "color": "green"
896 },
897 {
898 "value": 80,
899 "color": "red"
900 }
901 ]
902 },
903 "color": {
904 "mode": "palette-classic"
905 },
906 "custom": {
907 "axisBorderShow": false,
908 "axisCenteredZero": false,
909 "axisColorMode": "text",
910 "axisLabel": "",
911 "axisPlacement": "auto",
912 "barAlignment": 0,
913 "barWidthFactor": 0.6,
914 "drawStyle": "line",
915 "fillOpacity": 10,
916 "gradientMode": "none",
917 "hideFrom": {
918 "legend": false,
919 "tooltip": false,
920 "viz": false
921 },
922 "insertNulls": false,
923 "lineInterpolation": "smooth",
924 "lineWidth": 1,
925 "pointSize": 5,
926 "scaleDistribution": {
927 "type": "linear"
928 },
929 "showPoints": "auto",
930 "showValues": false,
931 "spanNulls": false,
932 "stacking": {
933 "group": "A",
934 "mode": "none"
935 },
936 "thresholdsStyle": {
937 "mode": "off"
938 }
939 }
940 },
941 "overrides": []
942 }
943 }
944 }
945 }
946 },
947 "panel-14": {
948 "kind": "Panel",
949 "spec": {
950 "id": 14,
951 "title": "vmstat",
952 "description": "si=Swap In, Объем данных в КБ/сек, считываемый из свопа обратно в ОЗУ. Высокое значение = жесткие тормоза.\nso=Swap Out, Объем данных в КБ/сек, сбрасываемый из ОЗУ в своп на диск из-за нехватки памяти.\n\nbi=Blocks In, Количество блоков, считанных с диска в КБ/сек. Показывает активность чтения.\nbo=Blocks Out, Количество блоков, записанных на диск в КБ/сек. Связано с операциями W, CW и fsync.\n\nin=Interrupts, Количество аппаратных прерываний в секунду, включая системные часы.\n\nid=Idle Time, Процент времени, когда CPU ничем не занят. Если около 0 — процессор загружен полностью.",
953 "links": [],
954 "data": {
955 "kind": "QueryGroup",
956 "spec": {
957 "queries": [
958 {
959 "kind": "PanelQuery",
960 "spec": {
961 "query": {
962 "kind": "DataQuery",
963 "group": "influxdb",
964 "version": "v0",
965 "spec": {
966 "alias": "si",
967 "groupBy": [
968 {
969 "params": [
970 "$interval"
971 ],
972 "type": "time"
973 },
974 {
975 "params": [
976 "null"
977 ],
978 "type": "fill"
979 }
980 ],
981 "measurement": "host_vmstat",
982 "orderByTime": "ASC",
983 "policy": "default",
984 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
985 "rawQuery": false,
986 "resultFormat": "time_series",
987 "select": [
988 [
989 {
990 "params": [
991 "si"
992 ],
993 "type": "field"
994 },
995 {
996 "params": [],
997 "type": "sum"
998 }
999 ]
1000 ],
1001 "tags": []
1002 },
1003 "labels": {
1004 "grafana.app/export-label": "influxdb-1"
1005 }
1006 },
1007 "refId": "A",
1008 "hidden": false
1009 }
1010 },
1011 {
1012 "kind": "PanelQuery",
1013 "spec": {
1014 "query": {
1015 "kind": "DataQuery",
1016 "group": "influxdb",
1017 "version": "v0",
1018 "spec": {
1019 "alias": "so",
1020 "groupBy": [
1021 {
1022 "params": [
1023 "$interval"
1024 ],
1025 "type": "time"
1026 },
1027 {
1028 "params": [
1029 "null"
1030 ],
1031 "type": "fill"
1032 }
1033 ],
1034 "measurement": "host_vmstat",
1035 "orderByTime": "ASC",
1036 "policy": "default",
1037 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1038 "rawQuery": false,
1039 "resultFormat": "time_series",
1040 "select": [
1041 [
1042 {
1043 "params": [
1044 "so"
1045 ],
1046 "type": "field"
1047 },
1048 {
1049 "params": [],
1050 "type": "sum"
1051 }
1052 ]
1053 ],
1054 "tags": []
1055 },
1056 "labels": {
1057 "grafana.app/export-label": "influxdb-1"
1058 }
1059 },
1060 "refId": "E",
1061 "hidden": false
1062 }
1063 },
1064 {
1065 "kind": "PanelQuery",
1066 "spec": {
1067 "query": {
1068 "kind": "DataQuery",
1069 "group": "influxdb",
1070 "version": "v0",
1071 "spec": {
1072 "alias": "bi",
1073 "groupBy": [
1074 {
1075 "params": [
1076 "$interval"
1077 ],
1078 "type": "time"
1079 },
1080 {
1081 "params": [
1082 "null"
1083 ],
1084 "type": "fill"
1085 }
1086 ],
1087 "measurement": "host_vmstat",
1088 "orderByTime": "ASC",
1089 "policy": "default",
1090 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1091 "rawQuery": false,
1092 "resultFormat": "time_series",
1093 "select": [
1094 [
1095 {
1096 "params": [
1097 "bi"
1098 ],
1099 "type": "field"
1100 },
1101 {
1102 "params": [],
1103 "type": "sum"
1104 }
1105 ]
1106 ],
1107 "tags": []
1108 },
1109 "labels": {
1110 "grafana.app/export-label": "influxdb-1"
1111 }
1112 },
1113 "refId": "B",
1114 "hidden": false
1115 }
1116 },
1117 {
1118 "kind": "PanelQuery",
1119 "spec": {
1120 "query": {
1121 "kind": "DataQuery",
1122 "group": "influxdb",
1123 "version": "v0",
1124 "spec": {
1125 "alias": "bo",
1126 "groupBy": [
1127 {
1128 "params": [
1129 "$interval"
1130 ],
1131 "type": "time"
1132 },
1133 {
1134 "params": [
1135 "null"
1136 ],
1137 "type": "fill"
1138 }
1139 ],
1140 "measurement": "host_vmstat",
1141 "orderByTime": "ASC",
1142 "policy": "default",
1143 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1144 "rawQuery": false,
1145 "resultFormat": "time_series",
1146 "select": [
1147 [
1148 {
1149 "params": [
1150 "bo"
1151 ],
1152 "type": "field"
1153 },
1154 {
1155 "params": [],
1156 "type": "sum"
1157 }
1158 ]
1159 ],
1160 "tags": []
1161 },
1162 "labels": {
1163 "grafana.app/export-label": "influxdb-1"
1164 }
1165 },
1166 "refId": "F",
1167 "hidden": false
1168 }
1169 }
1170 ],
1171 "transformations": [],
1172 "queryOptions": {}
1173 }
1174 },
1175 "vizConfig": {
1176 "kind": "VizConfig",
1177 "group": "timeseries",
1178 "version": "13.0.1+security-01",
1179 "spec": {
1180 "options": {
1181 "annotations": {
1182 "clustering": -1,
1183 "multiLane": false
1184 },
1185 "legend": {
1186 "calcs": [],
1187 "displayMode": "list",
1188 "placement": "bottom",
1189 "showLegend": true
1190 },
1191 "tooltip": {
1192 "hideZeros": false,
1193 "mode": "single",
1194 "sort": "none"
1195 }
1196 },
1197 "fieldConfig": {
1198 "defaults": {
1199 "thresholds": {
1200 "mode": "absolute",
1201 "steps": [
1202 {
1203 "value": 0,
1204 "color": "green"
1205 },
1206 {
1207 "value": 80,
1208 "color": "red"
1209 }
1210 ]
1211 },
1212 "color": {
1213 "mode": "palette-classic"
1214 },
1215 "custom": {
1216 "axisBorderShow": false,
1217 "axisCenteredZero": false,
1218 "axisColorMode": "text",
1219 "axisLabel": "",
1220 "axisPlacement": "auto",
1221 "barAlignment": 0,
1222 "barWidthFactor": 0.6,
1223 "drawStyle": "line",
1224 "fillOpacity": 10,
1225 "gradientMode": "none",
1226 "hideFrom": {
1227 "legend": false,
1228 "tooltip": false,
1229 "viz": false
1230 },
1231 "insertNulls": false,
1232 "lineInterpolation": "smooth",
1233 "lineWidth": 1,
1234 "pointSize": 5,
1235 "scaleDistribution": {
1236 "type": "linear"
1237 },
1238 "showPoints": "auto",
1239 "showValues": false,
1240 "spanNulls": false,
1241 "stacking": {
1242 "group": "A",
1243 "mode": "none"
1244 },
1245 "thresholdsStyle": {
1246 "mode": "off"
1247 }
1248 }
1249 },
1250 "overrides": []
1251 }
1252 }
1253 }
1254 }
1255 },
1256 "panel-15": {
1257 "kind": "Panel",
1258 "spec": {
1259 "id": 15,
1260 "title": "pidstat",
1261 "description": "minflt/s = Скорость работы с ОЗУ. Сколько раз в секунду процесс запрашивал данные, \n которые ядро Linux успешно выдало из оперативной памяти (из кэша).\n Высокое значение — это норма при активных вычислениях или LDAP-запросах.\n\nmajflt/s = Скорость просадки на диск. Сколько раз в секунду процесс лез за данными \n на физический диск (или в SWAP), потому что их не оказалость в ОЗУ.\n В идеале должно быть равно 0. Если число растет — сервер сильно тормозит.\n\n%MEM = Процент ОЗУ. Доля оперативной памяти сервера, которую съел этот PID.",
1262 "links": [],
1263 "data": {
1264 "kind": "QueryGroup",
1265 "spec": {
1266 "queries": [
1267 {
1268 "kind": "PanelQuery",
1269 "spec": {
1270 "query": {
1271 "kind": "DataQuery",
1272 "group": "influxdb",
1273 "version": "v0",
1274 "spec": {
1275 "alias": "minfit",
1276 "groupBy": [
1277 {
1278 "params": [
1279 "$interval"
1280 ],
1281 "type": "time"
1282 },
1283 {
1284 "params": [
1285 "comm::tag"
1286 ],
1287 "type": "tag"
1288 },
1289 {
1290 "params": [
1291 "null"
1292 ],
1293 "type": "fill"
1294 }
1295 ],
1296 "measurement": "samba_pidstat",
1297 "orderByTime": "ASC",
1298 "policy": "default",
1299 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1300 "rawQuery": false,
1301 "resultFormat": "time_series",
1302 "select": [
1303 [
1304 {
1305 "params": [
1306 "minflt"
1307 ],
1308 "type": "field"
1309 },
1310 {
1311 "params": [],
1312 "type": "mean"
1313 }
1314 ]
1315 ],
1316 "tags": []
1317 },
1318 "labels": {
1319 "grafana.app/export-label": "influxdb-1"
1320 }
1321 },
1322 "refId": "A",
1323 "hidden": false
1324 }
1325 },
1326 {
1327 "kind": "PanelQuery",
1328 "spec": {
1329 "query": {
1330 "kind": "DataQuery",
1331 "group": "influxdb",
1332 "version": "v0",
1333 "spec": {
1334 "alias": "majfit",
1335 "groupBy": [
1336 {
1337 "params": [
1338 "$interval"
1339 ],
1340 "type": "time"
1341 },
1342 {
1343 "params": [
1344 "comm::tag"
1345 ],
1346 "type": "tag"
1347 },
1348 {
1349 "params": [
1350 "null"
1351 ],
1352 "type": "fill"
1353 }
1354 ],
1355 "measurement": "samba_pidstat",
1356 "orderByTime": "ASC",
1357 "policy": "default",
1358 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1359 "rawQuery": false,
1360 "resultFormat": "time_series",
1361 "select": [
1362 [
1363 {
1364 "params": [
1365 "majflt"
1366 ],
1367 "type": "field"
1368 },
1369 {
1370 "params": [],
1371 "type": "median"
1372 }
1373 ]
1374 ],
1375 "tags": []
1376 },
1377 "labels": {
1378 "grafana.app/export-label": "influxdb-1"
1379 }
1380 },
1381 "refId": "B",
1382 "hidden": false
1383 }
1384 }
1385 ],
1386 "transformations": [],
1387 "queryOptions": {}
1388 }
1389 },
1390 "vizConfig": {
1391 "kind": "VizConfig",
1392 "group": "timeseries",
1393 "version": "13.0.1+security-01",
1394 "spec": {
1395 "options": {
1396 "annotations": {
1397 "clustering": -1,
1398 "multiLane": false
1399 },
1400 "legend": {
1401 "calcs": [],
1402 "displayMode": "list",
1403 "placement": "bottom",
1404 "showLegend": true
1405 },
1406 "tooltip": {
1407 "hideZeros": false,
1408 "mode": "single",
1409 "sort": "none"
1410 }
1411 },
1412 "fieldConfig": {
1413 "defaults": {
1414 "thresholds": {
1415 "mode": "absolute",
1416 "steps": [
1417 {
1418 "value": 0,
1419 "color": "green"
1420 },
1421 {
1422 "value": 80,
1423 "color": "red"
1424 }
1425 ]
1426 },
1427 "color": {
1428 "mode": "palette-classic"
1429 },
1430 "custom": {
1431 "axisBorderShow": false,
1432 "axisCenteredZero": false,
1433 "axisColorMode": "text",
1434 "axisLabel": "",
1435 "axisPlacement": "auto",
1436 "barAlignment": 0,
1437 "barWidthFactor": 0.6,
1438 "drawStyle": "line",
1439 "fillOpacity": 10,
1440 "gradientMode": "none",
1441 "hideFrom": {
1442 "legend": false,
1443 "tooltip": false,
1444 "viz": false
1445 },
1446 "insertNulls": false,
1447 "lineInterpolation": "smooth",
1448 "lineWidth": 1,
1449 "pointSize": 5,
1450 "scaleDistribution": {
1451 "type": "linear"
1452 },
1453 "showPoints": "auto",
1454 "showValues": false,
1455 "spanNulls": false,
1456 "stacking": {
1457 "group": "A",
1458 "mode": "none"
1459 },
1460 "thresholdsStyle": {
1461 "mode": "off"
1462 }
1463 }
1464 },
1465 "overrides": [
1466 {
1467 "__systemRef": "hideSeriesFrom",
1468 "matcher": {
1469 "id": "byNames",
1470 "options": {
1471 "mode": "exclude",
1472 "names": [
1473 "MEM"
1474 ],
1475 "prefix": "All except:",
1476 "readOnly": true
1477 }
1478 },
1479 "properties": [
1480 {
1481 "id": "custom.hideFrom",
1482 "value": {
1483 "legend": false,
1484 "tooltip": true,
1485 "viz": true
1486 }
1487 }
1488 ]
1489 }
1490 ]
1491 }
1492 }
1493 }
1494 }
1495 },
1496 "panel-16": {
1497 "kind": "Panel",
1498 "spec": {
1499 "id": 16,
1500 "title": "ldb ops operation",
1501 "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
1502 "links": [],
1503 "data": {
1504 "kind": "QueryGroup",
1505 "spec": {
1506 "queries": [
1507 {
1508 "kind": "PanelQuery",
1509 "spec": {
1510 "query": {
1511 "kind": "DataQuery",
1512 "group": "influxdb",
1513 "version": "v0",
1514 "spec": {
1515 "groupBy": [
1516 {
1517 "params": [
1518 "$interval"
1519 ],
1520 "type": "time"
1521 },
1522 {
1523 "params": [
1524 "action::tag"
1525 ],
1526 "type": "tag"
1527 },
1528 {
1529 "params": [
1530 "null"
1531 ],
1532 "type": "fill"
1533 }
1534 ],
1535 "measurement": "samba_file_access",
1536 "orderByTime": "ASC",
1537 "policy": "default",
1538 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1539 "rawQuery": false,
1540 "resultFormat": "time_series",
1541 "select": [
1542 [
1543 {
1544 "params": [
1545 "path"
1546 ],
1547 "type": "field"
1548 },
1549 {
1550 "params": [],
1551 "type": "count"
1552 }
1553 ]
1554 ],
1555 "tags": []
1556 },
1557 "labels": {
1558 "grafana.app/export-label": "influxdb-1"
1559 }
1560 },
1561 "refId": "A",
1562 "hidden": false
1563 }
1564 }
1565 ],
1566 "transformations": [],
1567 "queryOptions": {}
1568 }
1569 },
1570 "vizConfig": {
1571 "kind": "VizConfig",
1572 "group": "timeseries",
1573 "version": "13.0.1+security-01",
1574 "spec": {
1575 "options": {
1576 "annotations": {
1577 "clustering": -1,
1578 "multiLane": false
1579 },
1580 "legend": {
1581 "calcs": [],
1582 "displayMode": "list",
1583 "placement": "bottom",
1584 "showLegend": true
1585 },
1586 "tooltip": {
1587 "hideZeros": false,
1588 "mode": "single",
1589 "sort": "none"
1590 }
1591 },
1592 "fieldConfig": {
1593 "defaults": {
1594 "thresholds": {
1595 "mode": "absolute",
1596 "steps": [
1597 {
1598 "value": 0,
1599 "color": "green"
1600 },
1601 {
1602 "value": 80,
1603 "color": "red"
1604 }
1605 ]
1606 },
1607 "color": {
1608 "mode": "palette-classic"
1609 },
1610 "custom": {
1611 "axisBorderShow": false,
1612 "axisCenteredZero": false,
1613 "axisColorMode": "text",
1614 "axisLabel": "",
1615 "axisPlacement": "auto",
1616 "barAlignment": 0,
1617 "barWidthFactor": 0.6,
1618 "drawStyle": "line",
1619 "fillOpacity": 0,
1620 "gradientMode": "none",
1621 "hideFrom": {
1622 "legend": false,
1623 "tooltip": false,
1624 "viz": false
1625 },
1626 "insertNulls": false,
1627 "lineInterpolation": "linear",
1628 "lineWidth": 1,
1629 "pointSize": 5,
1630 "scaleDistribution": {
1631 "type": "linear"
1632 },
1633 "showPoints": "auto",
1634 "showValues": false,
1635 "spanNulls": false,
1636 "stacking": {
1637 "group": "A",
1638 "mode": "none"
1639 },
1640 "thresholdsStyle": {
1641 "mode": "off"
1642 }
1643 }
1644 },
1645 "overrides": []
1646 }
1647 }
1648 }
1649 }
1650 },
1651 "panel-17": {
1652 "kind": "Panel",
1653 "spec": {
1654 "id": 17,
1655 "title": "Iostat await",
1656 "description": "",
1657 "links": [],
1658 "data": {
1659 "kind": "QueryGroup",
1660 "spec": {
1661 "queries": [
1662 {
1663 "kind": "PanelQuery",
1664 "spec": {
1665 "query": {
1666 "kind": "DataQuery",
1667 "group": "influxdb",
1668 "version": "v0",
1669 "spec": {
1670 "alias": "$tag_device f_await",
1671 "groupBy": [
1672 {
1673 "params": [
1674 "$interval"
1675 ],
1676 "type": "time"
1677 },
1678 {
1679 "params": [
1680 "device::tag"
1681 ],
1682 "type": "tag"
1683 },
1684 {
1685 "params": [
1686 "null"
1687 ],
1688 "type": "fill"
1689 }
1690 ],
1691 "measurement": "host_iostat",
1692 "orderByTime": "ASC",
1693 "policy": "default",
1694 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1695 "rawQuery": false,
1696 "resultFormat": "time_series",
1697 "select": [
1698 [
1699 {
1700 "params": [
1701 "f_await"
1702 ],
1703 "type": "field"
1704 },
1705 {
1706 "params": [],
1707 "type": "mean"
1708 }
1709 ]
1710 ],
1711 "tags": []
1712 },
1713 "labels": {
1714 "grafana.app/export-label": "influxdb-1"
1715 }
1716 },
1717 "refId": "A",
1718 "hidden": false
1719 }
1720 },
1721 {
1722 "kind": "PanelQuery",
1723 "spec": {
1724 "query": {
1725 "kind": "DataQuery",
1726 "group": "influxdb",
1727 "version": "v0",
1728 "spec": {
1729 "alias": "$tag_device r_await",
1730 "groupBy": [
1731 {
1732 "params": [
1733 "$interval"
1734 ],
1735 "type": "time"
1736 },
1737 {
1738 "params": [
1739 "device::tag"
1740 ],
1741 "type": "tag"
1742 },
1743 {
1744 "params": [
1745 "null"
1746 ],
1747 "type": "fill"
1748 }
1749 ],
1750 "measurement": "host_iostat",
1751 "orderByTime": "ASC",
1752 "policy": "default",
1753 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1754 "rawQuery": false,
1755 "resultFormat": "time_series",
1756 "select": [
1757 [
1758 {
1759 "params": [
1760 "r_await"
1761 ],
1762 "type": "field"
1763 },
1764 {
1765 "params": [],
1766 "type": "mean"
1767 }
1768 ]
1769 ],
1770 "tags": []
1771 },
1772 "labels": {
1773 "grafana.app/export-label": "influxdb-1"
1774 }
1775 },
1776 "refId": "B",
1777 "hidden": false
1778 }
1779 },
1780 {
1781 "kind": "PanelQuery",
1782 "spec": {
1783 "query": {
1784 "kind": "DataQuery",
1785 "group": "influxdb",
1786 "version": "v0",
1787 "spec": {
1788 "alias": "$tag_device w_await",
1789 "groupBy": [
1790 {
1791 "params": [
1792 "$interval"
1793 ],
1794 "type": "time"
1795 },
1796 {
1797 "params": [
1798 "device::tag"
1799 ],
1800 "type": "tag"
1801 },
1802 {
1803 "params": [
1804 "null"
1805 ],
1806 "type": "fill"
1807 }
1808 ],
1809 "measurement": "host_iostat",
1810 "orderByTime": "ASC",
1811 "policy": "default",
1812 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1813 "rawQuery": false,
1814 "resultFormat": "time_series",
1815 "select": [
1816 [
1817 {
1818 "params": [
1819 "w_await"
1820 ],
1821 "type": "field"
1822 },
1823 {
1824 "params": [],
1825 "type": "mean"
1826 }
1827 ]
1828 ],
1829 "tags": []
1830 },
1831 "labels": {
1832 "grafana.app/export-label": "influxdb-1"
1833 }
1834 },
1835 "refId": "C",
1836 "hidden": false
1837 }
1838 }
1839 ],
1840 "transformations": [],
1841 "queryOptions": {}
1842 }
1843 },
1844 "vizConfig": {
1845 "kind": "VizConfig",
1846 "group": "timeseries",
1847 "version": "13.0.1+security-01",
1848 "spec": {
1849 "options": {
1850 "annotations": {
1851 "clustering": -1,
1852 "multiLane": false
1853 },
1854 "legend": {
1855 "calcs": [],
1856 "displayMode": "list",
1857 "placement": "bottom",
1858 "showLegend": true
1859 },
1860 "tooltip": {
1861 "hideZeros": false,
1862 "mode": "single",
1863 "sort": "none"
1864 }
1865 },
1866 "fieldConfig": {
1867 "defaults": {
1868 "thresholds": {
1869 "mode": "absolute",
1870 "steps": [
1871 {
1872 "value": 0,
1873 "color": "green"
1874 },
1875 {
1876 "value": 80,
1877 "color": "red"
1878 }
1879 ]
1880 },
1881 "color": {
1882 "mode": "palette-classic"
1883 },
1884 "custom": {
1885 "axisBorderShow": false,
1886 "axisCenteredZero": false,
1887 "axisColorMode": "text",
1888 "axisLabel": "",
1889 "axisPlacement": "auto",
1890 "barAlignment": 0,
1891 "barWidthFactor": 0.6,
1892 "drawStyle": "line",
1893 "fillOpacity": 0,
1894 "gradientMode": "none",
1895 "hideFrom": {
1896 "legend": false,
1897 "tooltip": false,
1898 "viz": false
1899 },
1900 "insertNulls": false,
1901 "lineInterpolation": "linear",
1902 "lineWidth": 1,
1903 "pointSize": 5,
1904 "scaleDistribution": {
1905 "type": "linear"
1906 },
1907 "showPoints": "auto",
1908 "showValues": false,
1909 "spanNulls": false,
1910 "stacking": {
1911 "group": "A",
1912 "mode": "none"
1913 },
1914 "thresholdsStyle": {
1915 "mode": "off"
1916 }
1917 }
1918 },
1919 "overrides": []
1920 }
1921 }
1922 }
1923 }
1924 },
1925 "panel-18": {
1926 "kind": "Panel",
1927 "spec": {
1928 "id": 18,
1929 "title": "pidstat mem",
1930 "description": "minflt/s = Скорость работы с ОЗУ. Сколько раз в секунду процесс запрашивал данные, \n которые ядро Linux успешно выдало из оперативной памяти (из кэша).\n Высокое значение — это норма при активных вычислениях или LDAP-запросах.\n\nmajflt/s = Скорость просадки на диск. Сколько раз в секунду процесс лез за данными \n на физический диск (или в SWAP), потому что их не оказалость в ОЗУ.\n В идеале должно быть равно 0. Если число растет — сервер сильно тормозит.\n\n%MEM = Процент ОЗУ. Доля оперативной памяти сервера, которую съел этот PID.",
1931 "links": [],
1932 "data": {
1933 "kind": "QueryGroup",
1934 "spec": {
1935 "queries": [
1936 {
1937 "kind": "PanelQuery",
1938 "spec": {
1939 "query": {
1940 "kind": "DataQuery",
1941 "group": "influxdb",
1942 "version": "v0",
1943 "spec": {
1944 "alias": "%MEM",
1945 "groupBy": [
1946 {
1947 "params": [
1948 "$interval"
1949 ],
1950 "type": "time"
1951 },
1952 {
1953 "params": [
1954 "comm::tag"
1955 ],
1956 "type": "tag"
1957 },
1958 {
1959 "params": [
1960 "null"
1961 ],
1962 "type": "fill"
1963 }
1964 ],
1965 "measurement": "samba_pidstat",
1966 "orderByTime": "ASC",
1967 "policy": "default",
1968 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1969 "rawQuery": false,
1970 "resultFormat": "time_series",
1971 "select": [
1972 [
1973 {
1974 "params": [
1975 "mem"
1976 ],
1977 "type": "field"
1978 },
1979 {
1980 "params": [],
1981 "type": "median"
1982 }
1983 ]
1984 ],
1985 "tags": []
1986 },
1987 "labels": {
1988 "grafana.app/export-label": "influxdb-1"
1989 }
1990 },
1991 "refId": "C",
1992 "hidden": false
1993 }
1994 }
1995 ],
1996 "transformations": [],
1997 "queryOptions": {}
1998 }
1999 },
2000 "vizConfig": {
2001 "kind": "VizConfig",
2002 "group": "timeseries",
2003 "version": "13.0.1+security-01",
2004 "spec": {
2005 "options": {
2006 "annotations": {
2007 "clustering": -1,
2008 "multiLane": false
2009 },
2010 "legend": {
2011 "calcs": [],
2012 "displayMode": "list",
2013 "placement": "bottom",
2014 "showLegend": true
2015 },
2016 "tooltip": {
2017 "hideZeros": false,
2018 "mode": "single",
2019 "sort": "none"
2020 }
2021 },
2022 "fieldConfig": {
2023 "defaults": {
2024 "thresholds": {
2025 "mode": "absolute",
2026 "steps": [
2027 {
2028 "value": 0,
2029 "color": "green"
2030 },
2031 {
2032 "value": 80,
2033 "color": "red"
2034 }
2035 ]
2036 },
2037 "color": {
2038 "mode": "palette-classic"
2039 },
2040 "custom": {
2041 "axisBorderShow": false,
2042 "axisCenteredZero": false,
2043 "axisColorMode": "text",
2044 "axisLabel": "",
2045 "axisPlacement": "auto",
2046 "barAlignment": 0,
2047 "barWidthFactor": 0.6,
2048 "drawStyle": "line",
2049 "fillOpacity": 10,
2050 "gradientMode": "none",
2051 "hideFrom": {
2052 "legend": false,
2053 "tooltip": false,
2054 "viz": false
2055 },
2056 "insertNulls": false,
2057 "lineInterpolation": "smooth",
2058 "lineWidth": 1,
2059 "pointSize": 5,
2060 "scaleDistribution": {
2061 "type": "linear"
2062 },
2063 "showPoints": "auto",
2064 "showValues": false,
2065 "spanNulls": false,
2066 "stacking": {
2067 "group": "A",
2068 "mode": "none"
2069 },
2070 "thresholdsStyle": {
2071 "mode": "off"
2072 }
2073 }
2074 },
2075 "overrides": []
2076 }
2077 }
2078 }
2079 }
2080 },
2081 "panel-19": {
2082 "kind": "Panel",
2083 "spec": {
2084 "id": 19,
2085 "title": "RSS",
2086 "description": "minflt/s = Скорость работы с ОЗУ. Сколько раз в секунду процесс запрашивал данные, \n которые ядро Linux успешно выдало из оперативной памяти (из кэша).\n Высокое значение — это норма при активных вычислениях или LDAP-запросах.\n\nmajflt/s = Скорость просадки на диск. Сколько раз в секунду процесс лез за данными \n на физический диск (или в SWAP), потому что их не оказалость в ОЗУ.\n В идеале должно быть равно 0. Если число растет — сервер сильно тормозит.\n\n%MEM = Процент ОЗУ. Доля оперативной памяти сервера, которую съел этот PID.",
2087 "links": [],
2088 "data": {
2089 "kind": "QueryGroup",
2090 "spec": {
2091 "queries": [
2092 {
2093 "kind": "PanelQuery",
2094 "spec": {
2095 "query": {
2096 "kind": "DataQuery",
2097 "group": "influxdb",
2098 "version": "v0",
2099 "spec": {
2100 "alias": "RSS",
2101 "groupBy": [
2102 {
2103 "params": [
2104 "$interval"
2105 ],
2106 "type": "time"
2107 },
2108 {
2109 "params": [
2110 "comm::tag"
2111 ],
2112 "type": "tag"
2113 },
2114 {
2115 "params": [
2116 "null"
2117 ],
2118 "type": "fill"
2119 }
2120 ],
2121 "measurement": "samba_pidstat",
2122 "orderByTime": "ASC",
2123 "policy": "default",
2124 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2125 "rawQuery": false,
2126 "resultFormat": "time_series",
2127 "select": [
2128 [
2129 {
2130 "params": [
2131 "rss"
2132 ],
2133 "type": "field"
2134 },
2135 {
2136 "params": [],
2137 "type": "median"
2138 }
2139 ]
2140 ],
2141 "tags": []
2142 },
2143 "labels": {
2144 "grafana.app/export-label": "influxdb-1"
2145 }
2146 },
2147 "refId": "C",
2148 "hidden": false
2149 }
2150 }
2151 ],
2152 "transformations": [],
2153 "queryOptions": {}
2154 }
2155 },
2156 "vizConfig": {
2157 "kind": "VizConfig",
2158 "group": "timeseries",
2159 "version": "13.0.1+security-01",
2160 "spec": {
2161 "options": {
2162 "annotations": {
2163 "clustering": -1,
2164 "multiLane": false
2165 },
2166 "legend": {
2167 "calcs": [],
2168 "displayMode": "list",
2169 "placement": "bottom",
2170 "showLegend": true
2171 },
2172 "tooltip": {
2173 "hideZeros": false,
2174 "mode": "single",
2175 "sort": "none"
2176 }
2177 },
2178 "fieldConfig": {
2179 "defaults": {
2180 "thresholds": {
2181 "mode": "absolute",
2182 "steps": [
2183 {
2184 "value": 0,
2185 "color": "green"
2186 },
2187 {
2188 "value": 80,
2189 "color": "red"
2190 }
2191 ]
2192 },
2193 "color": {
2194 "mode": "palette-classic"
2195 },
2196 "custom": {
2197 "axisBorderShow": false,
2198 "axisCenteredZero": false,
2199 "axisColorMode": "text",
2200 "axisLabel": "",
2201 "axisPlacement": "auto",
2202 "barAlignment": 0,
2203 "barWidthFactor": 0.6,
2204 "drawStyle": "line",
2205 "fillOpacity": 10,
2206 "gradientMode": "none",
2207 "hideFrom": {
2208 "legend": false,
2209 "tooltip": false,
2210 "viz": false
2211 },
2212 "insertNulls": false,
2213 "lineInterpolation": "smooth",
2214 "lineWidth": 1,
2215 "pointSize": 5,
2216 "scaleDistribution": {
2217 "type": "linear"
2218 },
2219 "showPoints": "auto",
2220 "showValues": false,
2221 "spanNulls": false,
2222 "stacking": {
2223 "group": "A",
2224 "mode": "none"
2225 },
2226 "thresholdsStyle": {
2227 "mode": "off"
2228 }
2229 }
2230 },
2231 "overrides": []
2232 }
2233 }
2234 }
2235 }
2236 },
2237 "panel-2": {
2238 "kind": "Panel",
2239 "spec": {
2240 "id": 2,
2241 "title": "DSDB: изменения по операциям",
2242 "description": "Число изменений объектов каталога (samba_dsdb), разбивка по типу операции.",
2243 "links": [],
2244 "data": {
2245 "kind": "QueryGroup",
2246 "spec": {
2247 "queries": [
2248 {
2249 "kind": "PanelQuery",
2250 "spec": {
2251 "query": {
2252 "kind": "DataQuery",
2253 "group": "influxdb",
2254 "version": "v0",
2255 "spec": {
2256 "groupBy": [],
2257 "measurement": "samba_dsdb",
2258 "orderByTime": "ASC",
2259 "policy": "default",
2260 "query": "SELECT count(\"status_code\") FROM \"samba_dsdb\" WHERE $timeFilter GROUP BY time($interval), \"operation\"::tag fill(null)",
2261 "rawQuery": true,
2262 "resultFormat": "time_series",
2263 "select": [],
2264 "tags": []
2265 },
2266 "labels": {
2267 "grafana.app/export-label": "influxdb-1"
2268 }
2269 },
2270 "refId": "A",
2271 "hidden": false
2272 }
2273 }
2274 ],
2275 "transformations": [],
2276 "queryOptions": {}
2277 }
2278 },
2279 "vizConfig": {
2280 "kind": "VizConfig",
2281 "group": "timeseries",
2282 "version": "13.0.1+security-01",
2283 "spec": {
2284 "options": {
2285 "annotations": {
2286 "clustering": -1,
2287 "multiLane": false
2288 },
2289 "legend": {
2290 "calcs": [],
2291 "displayMode": "list",
2292 "placement": "bottom",
2293 "showLegend": true
2294 },
2295 "tooltip": {
2296 "hideZeros": false,
2297 "mode": "multi",
2298 "sort": "desc"
2299 }
2300 },
2301 "fieldConfig": {
2302 "defaults": {
2303 "thresholds": {
2304 "mode": "absolute",
2305 "steps": [
2306 {
2307 "value": 0,
2308 "color": "green"
2309 },
2310 {
2311 "value": 80,
2312 "color": "red"
2313 }
2314 ]
2315 },
2316 "color": {
2317 "mode": "palette-classic"
2318 },
2319 "custom": {
2320 "axisBorderShow": false,
2321 "axisCenteredZero": false,
2322 "axisColorMode": "text",
2323 "axisLabel": "",
2324 "axisPlacement": "auto",
2325 "barAlignment": 0,
2326 "barWidthFactor": 0.6,
2327 "drawStyle": "bars",
2328 "fillOpacity": 50,
2329 "gradientMode": "none",
2330 "hideFrom": {
2331 "legend": false,
2332 "tooltip": false,
2333 "viz": false
2334 },
2335 "insertNulls": false,
2336 "lineInterpolation": "linear",
2337 "lineWidth": 1,
2338 "pointSize": 5,
2339 "scaleDistribution": {
2340 "type": "linear"
2341 },
2342 "showPoints": "auto",
2343 "showValues": false,
2344 "spanNulls": false,
2345 "stacking": {
2346 "group": "A",
2347 "mode": "normal"
2348 },
2349 "thresholdsStyle": {
2350 "mode": "off"
2351 }
2352 }
2353 },
2354 "overrides": []
2355 }
2356 }
2357 }
2358 }
2359 },
2360 "panel-20": {
2361 "kind": "Panel",
2362 "spec": {
2363 "id": 20,
2364 "title": "ldb ops",
2365 "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
2366 "links": [],
2367 "data": {
2368 "kind": "QueryGroup",
2369 "spec": {
2370 "queries": [
2371 {
2372 "kind": "PanelQuery",
2373 "spec": {
2374 "query": {
2375 "kind": "DataQuery",
2376 "group": "influxdb",
2377 "version": "v0",
2378 "spec": {
2379 "groupBy": [
2380 {
2381 "params": [
2382 "$interval"
2383 ],
2384 "type": "time"
2385 },
2386 {
2387 "params": [
2388 "null"
2389 ],
2390 "type": "fill"
2391 }
2392 ],
2393 "measurement": "samba_file_access",
2394 "orderByTime": "ASC",
2395 "policy": "default",
2396 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2397 "rawQuery": false,
2398 "resultFormat": "time_series",
2399 "select": [
2400 [
2401 {
2402 "params": [
2403 "path"
2404 ],
2405 "type": "field"
2406 },
2407 {
2408 "params": [],
2409 "type": "count"
2410 }
2411 ]
2412 ],
2413 "tags": []
2414 },
2415 "labels": {
2416 "grafana.app/export-label": "influxdb-1"
2417 }
2418 },
2419 "refId": "A",
2420 "hidden": false
2421 }
2422 }
2423 ],
2424 "transformations": [],
2425 "queryOptions": {}
2426 }
2427 },
2428 "vizConfig": {
2429 "kind": "VizConfig",
2430 "group": "timeseries",
2431 "version": "13.0.1+security-01",
2432 "spec": {
2433 "options": {
2434 "annotations": {
2435 "clustering": -1,
2436 "multiLane": false
2437 },
2438 "legend": {
2439 "calcs": [],
2440 "displayMode": "list",
2441 "placement": "bottom",
2442 "showLegend": true
2443 },
2444 "tooltip": {
2445 "hideZeros": false,
2446 "mode": "single",
2447 "sort": "none"
2448 }
2449 },
2450 "fieldConfig": {
2451 "defaults": {
2452 "thresholds": {
2453 "mode": "absolute",
2454 "steps": [
2455 {
2456 "value": 0,
2457 "color": "green"
2458 },
2459 {
2460 "value": 80,
2461 "color": "red"
2462 }
2463 ]
2464 },
2465 "color": {
2466 "mode": "palette-classic"
2467 },
2468 "custom": {
2469 "axisBorderShow": false,
2470 "axisCenteredZero": false,
2471 "axisColorMode": "text",
2472 "axisLabel": "",
2473 "axisPlacement": "auto",
2474 "barAlignment": 0,
2475 "barWidthFactor": 0.6,
2476 "drawStyle": "line",
2477 "fillOpacity": 10,
2478 "gradientMode": "none",
2479 "hideFrom": {
2480 "legend": false,
2481 "tooltip": false,
2482 "viz": false
2483 },
2484 "insertNulls": false,
2485 "lineInterpolation": "smooth",
2486 "lineWidth": 1,
2487 "pointSize": 5,
2488 "scaleDistribution": {
2489 "type": "linear"
2490 },
2491 "showPoints": "auto",
2492 "showValues": false,
2493 "spanNulls": false,
2494 "stacking": {
2495 "group": "A",
2496 "mode": "none"
2497 },
2498 "thresholdsStyle": {
2499 "mode": "off"
2500 }
2501 }
2502 },
2503 "overrides": []
2504 }
2505 }
2506 }
2507 }
2508 },
2509 "panel-21": {
2510 "kind": "Panel",
2511 "spec": {
2512 "id": 21,
2513 "title": "ldb ops summ",
2514 "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
2515 "links": [],
2516 "data": {
2517 "kind": "QueryGroup",
2518 "spec": {
2519 "queries": [
2520 {
2521 "kind": "PanelQuery",
2522 "spec": {
2523 "query": {
2524 "kind": "DataQuery",
2525 "group": "influxdb",
2526 "version": "v0",
2527 "spec": {
2528 "groupBy": [
2529 {
2530 "params": [
2531 "$interval"
2532 ],
2533 "type": "time"
2534 },
2535 {
2536 "params": [
2537 "null"
2538 ],
2539 "type": "fill"
2540 }
2541 ],
2542 "measurement": "samba_file_access",
2543 "orderByTime": "ASC",
2544 "policy": "default",
2545 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2546 "rawQuery": false,
2547 "resultFormat": "time_series",
2548 "select": [
2549 [
2550 {
2551 "params": [
2552 "path"
2553 ],
2554 "type": "field"
2555 },
2556 {
2557 "params": [],
2558 "type": "count"
2559 },
2560 {
2561 "params": [],
2562 "type": "cumulative_sum"
2563 }
2564 ]
2565 ],
2566 "tags": []
2567 },
2568 "labels": {
2569 "grafana.app/export-label": "influxdb-1"
2570 }
2571 },
2572 "refId": "A",
2573 "hidden": false
2574 }
2575 }
2576 ],
2577 "transformations": [],
2578 "queryOptions": {}
2579 }
2580 },
2581 "vizConfig": {
2582 "kind": "VizConfig",
2583 "group": "stat",
2584 "version": "13.0.1+security-01",
2585 "spec": {
2586 "options": {
2587 "colorMode": "value",
2588 "graphMode": "area",
2589 "justifyMode": "auto",
2590 "orientation": "auto",
2591 "percentChangeColorMode": "standard",
2592 "reduceOptions": {
2593 "calcs": [
2594 "lastNotNull"
2595 ],
2596 "fields": "",
2597 "values": false
2598 },
2599 "showPercentChange": false,
2600 "textMode": "auto",
2601 "wideLayout": true
2602 },
2603 "fieldConfig": {
2604 "defaults": {
2605 "thresholds": {
2606 "mode": "absolute",
2607 "steps": [
2608 {
2609 "value": 0,
2610 "color": "green"
2611 },
2612 {
2613 "value": 80,
2614 "color": "red"
2615 }
2616 ]
2617 },
2618 "color": {
2619 "mode": "palette-classic"
2620 }
2621 },
2622 "overrides": []
2623 }
2624 }
2625 }
2626 }
2627 },
2628 "panel-22": {
2629 "kind": "Panel",
2630 "spec": {
2631 "id": 22,
2632 "title": "Iostat kb/s",
2633 "description": "",
2634 "links": [],
2635 "data": {
2636 "kind": "QueryGroup",
2637 "spec": {
2638 "queries": [
2639 {
2640 "kind": "PanelQuery",
2641 "spec": {
2642 "query": {
2643 "kind": "DataQuery",
2644 "group": "influxdb",
2645 "version": "v0",
2646 "spec": {
2647 "alias": "$tag_device d kb/s",
2648 "groupBy": [
2649 {
2650 "params": [
2651 "$interval"
2652 ],
2653 "type": "time"
2654 },
2655 {
2656 "params": [
2657 "device::tag"
2658 ],
2659 "type": "tag"
2660 },
2661 {
2662 "params": [
2663 "null"
2664 ],
2665 "type": "fill"
2666 }
2667 ],
2668 "measurement": "host_iostat",
2669 "orderByTime": "ASC",
2670 "policy": "default",
2671 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2672 "rawQuery": false,
2673 "resultFormat": "time_series",
2674 "select": [
2675 [
2676 {
2677 "params": [
2678 "dkb_s"
2679 ],
2680 "type": "field"
2681 },
2682 {
2683 "params": [],
2684 "type": "mean"
2685 }
2686 ]
2687 ],
2688 "tags": []
2689 },
2690 "labels": {
2691 "grafana.app/export-label": "influxdb-1"
2692 }
2693 },
2694 "refId": "A",
2695 "hidden": false
2696 }
2697 },
2698 {
2699 "kind": "PanelQuery",
2700 "spec": {
2701 "query": {
2702 "kind": "DataQuery",
2703 "group": "influxdb",
2704 "version": "v0",
2705 "spec": {
2706 "alias": "$tag_device r kb/s",
2707 "groupBy": [
2708 {
2709 "params": [
2710 "$interval"
2711 ],
2712 "type": "time"
2713 },
2714 {
2715 "params": [
2716 "device::tag"
2717 ],
2718 "type": "tag"
2719 },
2720 {
2721 "params": [
2722 "null"
2723 ],
2724 "type": "fill"
2725 }
2726 ],
2727 "measurement": "host_iostat",
2728 "orderByTime": "ASC",
2729 "policy": "default",
2730 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2731 "rawQuery": false,
2732 "resultFormat": "time_series",
2733 "select": [
2734 [
2735 {
2736 "params": [
2737 "rkb_s"
2738 ],
2739 "type": "field"
2740 },
2741 {
2742 "params": [],
2743 "type": "mean"
2744 }
2745 ]
2746 ],
2747 "tags": []
2748 },
2749 "labels": {
2750 "grafana.app/export-label": "influxdb-1"
2751 }
2752 },
2753 "refId": "B",
2754 "hidden": false
2755 }
2756 },
2757 {
2758 "kind": "PanelQuery",
2759 "spec": {
2760 "query": {
2761 "kind": "DataQuery",
2762 "group": "influxdb",
2763 "version": "v0",
2764 "spec": {
2765 "alias": "$tag_device w kb/s",
2766 "groupBy": [
2767 {
2768 "params": [
2769 "$interval"
2770 ],
2771 "type": "time"
2772 },
2773 {
2774 "params": [
2775 "device::tag"
2776 ],
2777 "type": "tag"
2778 },
2779 {
2780 "params": [
2781 "null"
2782 ],
2783 "type": "fill"
2784 }
2785 ],
2786 "measurement": "host_iostat",
2787 "orderByTime": "ASC",
2788 "policy": "default",
2789 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2790 "rawQuery": false,
2791 "resultFormat": "time_series",
2792 "select": [
2793 [
2794 {
2795 "params": [
2796 "wkb_s"
2797 ],
2798 "type": "field"
2799 },
2800 {
2801 "params": [],
2802 "type": "mean"
2803 }
2804 ]
2805 ],
2806 "tags": []
2807 },
2808 "labels": {
2809 "grafana.app/export-label": "influxdb-1"
2810 }
2811 },
2812 "refId": "C",
2813 "hidden": false
2814 }
2815 }
2816 ],
2817 "transformations": [],
2818 "queryOptions": {}
2819 }
2820 },
2821 "vizConfig": {
2822 "kind": "VizConfig",
2823 "group": "timeseries",
2824 "version": "13.0.1+security-01",
2825 "spec": {
2826 "options": {
2827 "annotations": {
2828 "clustering": -1,
2829 "multiLane": false
2830 },
2831 "legend": {
2832 "calcs": [],
2833 "displayMode": "list",
2834 "placement": "bottom",
2835 "showLegend": true
2836 },
2837 "tooltip": {
2838 "hideZeros": false,
2839 "mode": "single",
2840 "sort": "none"
2841 }
2842 },
2843 "fieldConfig": {
2844 "defaults": {
2845 "thresholds": {
2846 "mode": "absolute",
2847 "steps": [
2848 {
2849 "value": 0,
2850 "color": "green"
2851 },
2852 {
2853 "value": 80,
2854 "color": "red"
2855 }
2856 ]
2857 },
2858 "color": {
2859 "mode": "palette-classic"
2860 },
2861 "custom": {
2862 "axisBorderShow": false,
2863 "axisCenteredZero": false,
2864 "axisColorMode": "text",
2865 "axisLabel": "",
2866 "axisPlacement": "auto",
2867 "barAlignment": 0,
2868 "barWidthFactor": 0.6,
2869 "drawStyle": "line",
2870 "fillOpacity": 0,
2871 "gradientMode": "none",
2872 "hideFrom": {
2873 "legend": false,
2874 "tooltip": false,
2875 "viz": false
2876 },
2877 "insertNulls": false,
2878 "lineInterpolation": "linear",
2879 "lineWidth": 1,
2880 "pointSize": 5,
2881 "scaleDistribution": {
2882 "type": "linear"
2883 },
2884 "showPoints": "auto",
2885 "showValues": false,
2886 "spanNulls": false,
2887 "stacking": {
2888 "group": "A",
2889 "mode": "none"
2890 },
2891 "thresholdsStyle": {
2892 "mode": "off"
2893 }
2894 }
2895 },
2896 "overrides": []
2897 }
2898 }
2899 }
2900 }
2901 },
2902 "panel-23": {
2903 "kind": "Panel",
2904 "spec": {
2905 "id": 23,
2906 "title": "Iostat util",
2907 "description": "",
2908 "links": [],
2909 "data": {
2910 "kind": "QueryGroup",
2911 "spec": {
2912 "queries": [
2913 {
2914 "kind": "PanelQuery",
2915 "spec": {
2916 "query": {
2917 "kind": "DataQuery",
2918 "group": "influxdb",
2919 "version": "v0",
2920 "spec": {
2921 "alias": "$tag_device util",
2922 "groupBy": [
2923 {
2924 "params": [
2925 "$interval"
2926 ],
2927 "type": "time"
2928 },
2929 {
2930 "params": [
2931 "device::tag"
2932 ],
2933 "type": "tag"
2934 },
2935 {
2936 "params": [
2937 "null"
2938 ],
2939 "type": "fill"
2940 }
2941 ],
2942 "measurement": "host_iostat",
2943 "orderByTime": "ASC",
2944 "policy": "default",
2945 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2946 "rawQuery": false,
2947 "resultFormat": "time_series",
2948 "select": [
2949 [
2950 {
2951 "params": [
2952 "util"
2953 ],
2954 "type": "field"
2955 },
2956 {
2957 "params": [],
2958 "type": "mean"
2959 }
2960 ]
2961 ],
2962 "tags": []
2963 },
2964 "labels": {
2965 "grafana.app/export-label": "influxdb-1"
2966 }
2967 },
2968 "refId": "A",
2969 "hidden": false
2970 }
2971 }
2972 ],
2973 "transformations": [],
2974 "queryOptions": {}
2975 }
2976 },
2977 "vizConfig": {
2978 "kind": "VizConfig",
2979 "group": "timeseries",
2980 "version": "13.0.1+security-01",
2981 "spec": {
2982 "options": {
2983 "annotations": {
2984 "clustering": -1,
2985 "multiLane": false
2986 },
2987 "legend": {
2988 "calcs": [],
2989 "displayMode": "list",
2990 "placement": "bottom",
2991 "showLegend": true
2992 },
2993 "tooltip": {
2994 "hideZeros": false,
2995 "mode": "single",
2996 "sort": "none"
2997 }
2998 },
2999 "fieldConfig": {
3000 "defaults": {
3001 "thresholds": {
3002 "mode": "absolute",
3003 "steps": [
3004 {
3005 "value": 0,
3006 "color": "green"
3007 },
3008 {
3009 "value": 80,
3010 "color": "red"
3011 }
3012 ]
3013 },
3014 "color": {
3015 "mode": "palette-classic"
3016 },
3017 "custom": {
3018 "axisBorderShow": false,
3019 "axisCenteredZero": false,
3020 "axisColorMode": "text",
3021 "axisLabel": "",
3022 "axisPlacement": "auto",
3023 "barAlignment": 0,
3024 "barWidthFactor": 0.6,
3025 "drawStyle": "line",
3026 "fillOpacity": 0,
3027 "gradientMode": "none",
3028 "hideFrom": {
3029 "legend": false,
3030 "tooltip": false,
3031 "viz": false
3032 },
3033 "insertNulls": false,
3034 "lineInterpolation": "linear",
3035 "lineWidth": 1,
3036 "pointSize": 5,
3037 "scaleDistribution": {
3038 "type": "linear"
3039 },
3040 "showPoints": "auto",
3041 "showValues": false,
3042 "spanNulls": false,
3043 "stacking": {
3044 "group": "A",
3045 "mode": "none"
3046 },
3047 "thresholdsStyle": {
3048 "mode": "off"
3049 }
3050 }
3051 },
3052 "overrides": []
3053 }
3054 }
3055 }
3056 }
3057 },
3058 "panel-24": {
3059 "kind": "Panel",
3060 "spec": {
3061 "id": 24,
3062 "title": "Iostat s",
3063 "description": "",
3064 "links": [],
3065 "data": {
3066 "kind": "QueryGroup",
3067 "spec": {
3068 "queries": [
3069 {
3070 "kind": "PanelQuery",
3071 "spec": {
3072 "query": {
3073 "kind": "DataQuery",
3074 "group": "influxdb",
3075 "version": "v0",
3076 "spec": {
3077 "alias": "$tag_device f/s",
3078 "groupBy": [
3079 {
3080 "params": [
3081 "$interval"
3082 ],
3083 "type": "time"
3084 },
3085 {
3086 "params": [
3087 "device::tag"
3088 ],
3089 "type": "tag"
3090 },
3091 {
3092 "params": [
3093 "null"
3094 ],
3095 "type": "fill"
3096 }
3097 ],
3098 "measurement": "host_iostat",
3099 "orderByTime": "ASC",
3100 "policy": "default",
3101 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3102 "rawQuery": false,
3103 "resultFormat": "time_series",
3104 "select": [
3105 [
3106 {
3107 "params": [
3108 "f_s"
3109 ],
3110 "type": "field"
3111 },
3112 {
3113 "params": [],
3114 "type": "mean"
3115 }
3116 ]
3117 ],
3118 "tags": []
3119 },
3120 "labels": {
3121 "grafana.app/export-label": "influxdb-1"
3122 }
3123 },
3124 "refId": "A",
3125 "hidden": false
3126 }
3127 },
3128 {
3129 "kind": "PanelQuery",
3130 "spec": {
3131 "query": {
3132 "kind": "DataQuery",
3133 "group": "influxdb",
3134 "version": "v0",
3135 "spec": {
3136 "alias": "$tag_device r/s",
3137 "groupBy": [
3138 {
3139 "params": [
3140 "$interval"
3141 ],
3142 "type": "time"
3143 },
3144 {
3145 "params": [
3146 "device::tag"
3147 ],
3148 "type": "tag"
3149 },
3150 {
3151 "params": [
3152 "null"
3153 ],
3154 "type": "fill"
3155 }
3156 ],
3157 "measurement": "host_iostat",
3158 "orderByTime": "ASC",
3159 "policy": "default",
3160 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3161 "rawQuery": false,
3162 "resultFormat": "time_series",
3163 "select": [
3164 [
3165 {
3166 "params": [
3167 "r_s"
3168 ],
3169 "type": "field"
3170 },
3171 {
3172 "params": [],
3173 "type": "mean"
3174 }
3175 ]
3176 ],
3177 "tags": []
3178 },
3179 "labels": {
3180 "grafana.app/export-label": "influxdb-1"
3181 }
3182 },
3183 "refId": "B",
3184 "hidden": false
3185 }
3186 },
3187 {
3188 "kind": "PanelQuery",
3189 "spec": {
3190 "query": {
3191 "kind": "DataQuery",
3192 "group": "influxdb",
3193 "version": "v0",
3194 "spec": {
3195 "alias": "$tag_device w/s",
3196 "groupBy": [
3197 {
3198 "params": [
3199 "$interval"
3200 ],
3201 "type": "time"
3202 },
3203 {
3204 "params": [
3205 "device::tag"
3206 ],
3207 "type": "tag"
3208 },
3209 {
3210 "params": [
3211 "null"
3212 ],
3213 "type": "fill"
3214 }
3215 ],
3216 "measurement": "host_iostat",
3217 "orderByTime": "ASC",
3218 "policy": "default",
3219 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3220 "rawQuery": false,
3221 "resultFormat": "time_series",
3222 "select": [
3223 [
3224 {
3225 "params": [
3226 "w_s"
3227 ],
3228 "type": "field"
3229 },
3230 {
3231 "params": [],
3232 "type": "mean"
3233 }
3234 ]
3235 ],
3236 "tags": []
3237 },
3238 "labels": {
3239 "grafana.app/export-label": "influxdb-1"
3240 }
3241 },
3242 "refId": "C",
3243 "hidden": false
3244 }
3245 }
3246 ],
3247 "transformations": [],
3248 "queryOptions": {}
3249 }
3250 },
3251 "vizConfig": {
3252 "kind": "VizConfig",
3253 "group": "timeseries",
3254 "version": "13.0.1+security-01",
3255 "spec": {
3256 "options": {
3257 "annotations": {
3258 "clustering": -1,
3259 "multiLane": false
3260 },
3261 "legend": {
3262 "calcs": [],
3263 "displayMode": "list",
3264 "placement": "bottom",
3265 "showLegend": true
3266 },
3267 "tooltip": {
3268 "hideZeros": false,
3269 "mode": "single",
3270 "sort": "none"
3271 }
3272 },
3273 "fieldConfig": {
3274 "defaults": {
3275 "thresholds": {
3276 "mode": "absolute",
3277 "steps": [
3278 {
3279 "value": 0,
3280 "color": "green"
3281 },
3282 {
3283 "value": 80,
3284 "color": "red"
3285 }
3286 ]
3287 },
3288 "color": {
3289 "mode": "palette-classic"
3290 },
3291 "custom": {
3292 "axisBorderShow": false,
3293 "axisCenteredZero": false,
3294 "axisColorMode": "text",
3295 "axisLabel": "",
3296 "axisPlacement": "auto",
3297 "barAlignment": 0,
3298 "barWidthFactor": 0.6,
3299 "drawStyle": "line",
3300 "fillOpacity": 0,
3301 "gradientMode": "none",
3302 "hideFrom": {
3303 "legend": false,
3304 "tooltip": false,
3305 "viz": false
3306 },
3307 "insertNulls": false,
3308 "lineInterpolation": "linear",
3309 "lineWidth": 1,
3310 "pointSize": 5,
3311 "scaleDistribution": {
3312 "type": "linear"
3313 },
3314 "showPoints": "auto",
3315 "showValues": false,
3316 "spanNulls": false,
3317 "stacking": {
3318 "group": "A",
3319 "mode": "none"
3320 },
3321 "thresholdsStyle": {
3322 "mode": "off"
3323 }
3324 }
3325 },
3326 "overrides": []
3327 }
3328 }
3329 }
3330 }
3331 },
3332 "panel-25": {
3333 "kind": "Panel",
3334 "spec": {
3335 "id": 25,
3336 "title": "vmstat idle",
3337 "description": "si=Swap In, Объем данных в КБ/сек, считываемый из свопа обратно в ОЗУ. Высокое значение = жесткие тормоза.\nso=Swap Out, Объем данных в КБ/сек, сбрасываемый из ОЗУ в своп на диск из-за нехватки памяти.\n\nbi=Blocks In, Количество блоков, считанных с диска в КБ/сек. Показывает активность чтения.\nbo=Blocks Out, Количество блоков, записанных на диск в КБ/сек. Связано с операциями W, CW и fsync.\n\nin=Interrupts, Количество аппаратных прерываний в секунду, включая системные часы.\n\nid=Idle Time, Процент времени, когда CPU ничем не занят. Если около 0 — процессор загружен полностью.",
3338 "links": [],
3339 "data": {
3340 "kind": "QueryGroup",
3341 "spec": {
3342 "queries": [
3343 {
3344 "kind": "PanelQuery",
3345 "spec": {
3346 "query": {
3347 "kind": "DataQuery",
3348 "group": "influxdb",
3349 "version": "v0",
3350 "spec": {
3351 "alias": "idle",
3352 "groupBy": [
3353 {
3354 "params": [
3355 "$interval"
3356 ],
3357 "type": "time"
3358 },
3359 {
3360 "params": [
3361 "null"
3362 ],
3363 "type": "fill"
3364 }
3365 ],
3366 "measurement": "host_vmstat",
3367 "orderByTime": "ASC",
3368 "policy": "default",
3369 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3370 "rawQuery": false,
3371 "resultFormat": "time_series",
3372 "select": [
3373 [
3374 {
3375 "params": [
3376 "idle"
3377 ],
3378 "type": "field"
3379 },
3380 {
3381 "params": [],
3382 "type": "sum"
3383 }
3384 ]
3385 ],
3386 "tags": []
3387 },
3388 "labels": {
3389 "grafana.app/export-label": "influxdb-1"
3390 }
3391 },
3392 "refId": "D",
3393 "hidden": false
3394 }
3395 }
3396 ],
3397 "transformations": [],
3398 "queryOptions": {}
3399 }
3400 },
3401 "vizConfig": {
3402 "kind": "VizConfig",
3403 "group": "timeseries",
3404 "version": "13.0.1+security-01",
3405 "spec": {
3406 "options": {
3407 "annotations": {
3408 "clustering": -1,
3409 "multiLane": false
3410 },
3411 "legend": {
3412 "calcs": [],
3413 "displayMode": "list",
3414 "placement": "bottom",
3415 "showLegend": true
3416 },
3417 "tooltip": {
3418 "hideZeros": false,
3419 "mode": "single",
3420 "sort": "none"
3421 }
3422 },
3423 "fieldConfig": {
3424 "defaults": {
3425 "thresholds": {
3426 "mode": "absolute",
3427 "steps": [
3428 {
3429 "value": 0,
3430 "color": "green"
3431 },
3432 {
3433 "value": 80,
3434 "color": "red"
3435 }
3436 ]
3437 },
3438 "color": {
3439 "mode": "palette-classic"
3440 },
3441 "custom": {
3442 "axisBorderShow": false,
3443 "axisCenteredZero": false,
3444 "axisColorMode": "text",
3445 "axisLabel": "",
3446 "axisPlacement": "auto",
3447 "barAlignment": 0,
3448 "barWidthFactor": 0.6,
3449 "drawStyle": "line",
3450 "fillOpacity": 10,
3451 "gradientMode": "none",
3452 "hideFrom": {
3453 "legend": false,
3454 "tooltip": false,
3455 "viz": false
3456 },
3457 "insertNulls": false,
3458 "lineInterpolation": "smooth",
3459 "lineWidth": 1,
3460 "pointSize": 5,
3461 "scaleDistribution": {
3462 "type": "linear"
3463 },
3464 "showPoints": "auto",
3465 "showValues": false,
3466 "spanNulls": false,
3467 "stacking": {
3468 "group": "A",
3469 "mode": "none"
3470 },
3471 "thresholdsStyle": {
3472 "mode": "off"
3473 }
3474 }
3475 },
3476 "overrides": []
3477 }
3478 }
3479 }
3480 }
3481 },
3482 "panel-26": {
3483 "kind": "Panel",
3484 "spec": {
3485 "id": 26,
3486 "title": "vmstat interrupts",
3487 "description": "si=Swap In, Объем данных в КБ/сек, считываемый из свопа обратно в ОЗУ. Высокое значение = жесткие тормоза.\nso=Swap Out, Объем данных в КБ/сек, сбрасываемый из ОЗУ в своп на диск из-за нехватки памяти.\n\nbi=Blocks In, Количество блоков, считанных с диска в КБ/сек. Показывает активность чтения.\nbo=Blocks Out, Количество блоков, записанных на диск в КБ/сек. Связано с операциями W, CW и fsync.\n\nin=Interrupts, Количество аппаратных прерываний в секунду, включая системные часы.\n\nid=Idle Time, Процент времени, когда CPU ничем не занят. Если около 0 — процессор загружен полностью.",
3488 "links": [],
3489 "data": {
3490 "kind": "QueryGroup",
3491 "spec": {
3492 "queries": [
3493 {
3494 "kind": "PanelQuery",
3495 "spec": {
3496 "query": {
3497 "kind": "DataQuery",
3498 "group": "influxdb",
3499 "version": "v0",
3500 "spec": {
3501 "alias": "in",
3502 "groupBy": [
3503 {
3504 "params": [
3505 "$interval"
3506 ],
3507 "type": "time"
3508 },
3509 {
3510 "params": [
3511 "null"
3512 ],
3513 "type": "fill"
3514 }
3515 ],
3516 "measurement": "host_vmstat",
3517 "orderByTime": "ASC",
3518 "policy": "default",
3519 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3520 "rawQuery": false,
3521 "resultFormat": "time_series",
3522 "select": [
3523 [
3524 {
3525 "params": [
3526 "intr"
3527 ],
3528 "type": "field"
3529 },
3530 {
3531 "params": [],
3532 "type": "sum"
3533 }
3534 ]
3535 ],
3536 "tags": []
3537 },
3538 "labels": {
3539 "grafana.app/export-label": "influxdb-1"
3540 }
3541 },
3542 "refId": "C",
3543 "hidden": false
3544 }
3545 }
3546 ],
3547 "transformations": [],
3548 "queryOptions": {}
3549 }
3550 },
3551 "vizConfig": {
3552 "kind": "VizConfig",
3553 "group": "timeseries",
3554 "version": "13.0.1+security-01",
3555 "spec": {
3556 "options": {
3557 "annotations": {
3558 "clustering": -1,
3559 "multiLane": false
3560 },
3561 "legend": {
3562 "calcs": [],
3563 "displayMode": "list",
3564 "placement": "bottom",
3565 "showLegend": true
3566 },
3567 "tooltip": {
3568 "hideZeros": false,
3569 "mode": "single",
3570 "sort": "none"
3571 }
3572 },
3573 "fieldConfig": {
3574 "defaults": {
3575 "thresholds": {
3576 "mode": "absolute",
3577 "steps": [
3578 {
3579 "value": 0,
3580 "color": "green"
3581 },
3582 {
3583 "value": 80,
3584 "color": "red"
3585 }
3586 ]
3587 },
3588 "color": {
3589 "mode": "palette-classic"
3590 },
3591 "custom": {
3592 "axisBorderShow": false,
3593 "axisCenteredZero": false,
3594 "axisColorMode": "text",
3595 "axisLabel": "",
3596 "axisPlacement": "auto",
3597 "barAlignment": 0,
3598 "barWidthFactor": 0.6,
3599 "drawStyle": "line",
3600 "fillOpacity": 10,
3601 "gradientMode": "none",
3602 "hideFrom": {
3603 "legend": false,
3604 "tooltip": false,
3605 "viz": false
3606 },
3607 "insertNulls": false,
3608 "lineInterpolation": "smooth",
3609 "lineWidth": 1,
3610 "pointSize": 5,
3611 "scaleDistribution": {
3612 "type": "linear"
3613 },
3614 "showPoints": "auto",
3615 "showValues": false,
3616 "spanNulls": false,
3617 "stacking": {
3618 "group": "A",
3619 "mode": "none"
3620 },
3621 "thresholdsStyle": {
3622 "mode": "off"
3623 }
3624 }
3625 },
3626 "overrides": []
3627 }
3628 }
3629 }
3630 }
3631 },
3632 "panel-27": {
3633 "kind": "Panel",
3634 "spec": {
3635 "id": 27,
3636 "title": "ebpf",
3637 "description": "",
3638 "links": [],
3639 "data": {
3640 "kind": "QueryGroup",
3641 "spec": {
3642 "queries": [
3643 {
3644 "kind": "PanelQuery",
3645 "spec": {
3646 "query": {
3647 "kind": "DataQuery",
3648 "group": "influxdb",
3649 "version": "v0",
3650 "spec": {
3651 "alias": "fsync",
3652 "groupBy": [
3653 {
3654 "params": [
3655 "$interval"
3656 ],
3657 "type": "time"
3658 },
3659 {
3660 "params": [
3661 "null"
3662 ],
3663 "type": "fill"
3664 }
3665 ],
3666 "measurement": "samba_ebpf",
3667 "orderByTime": "ASC",
3668 "policy": "default",
3669 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3670 "rawQuery": false,
3671 "resultFormat": "time_series",
3672 "select": [
3673 [
3674 {
3675 "params": [
3676 "fsync"
3677 ],
3678 "type": "field"
3679 },
3680 {
3681 "params": [],
3682 "type": "sum"
3683 }
3684 ]
3685 ],
3686 "tags": []
3687 },
3688 "labels": {
3689 "grafana.app/export-label": "influxdb-1"
3690 }
3691 },
3692 "refId": "A",
3693 "hidden": false
3694 }
3695 },
3696 {
3697 "kind": "PanelQuery",
3698 "spec": {
3699 "query": {
3700 "kind": "DataQuery",
3701 "group": "influxdb",
3702 "version": "v0",
3703 "spec": {
3704 "alias": "ldb",
3705 "groupBy": [
3706 {
3707 "params": [
3708 "$interval"
3709 ],
3710 "type": "time"
3711 },
3712 {
3713 "params": [
3714 "null"
3715 ],
3716 "type": "fill"
3717 }
3718 ],
3719 "measurement": "samba_ebpf",
3720 "orderByTime": "ASC",
3721 "policy": "default",
3722 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3723 "rawQuery": false,
3724 "resultFormat": "time_series",
3725 "select": [
3726 [
3727 {
3728 "params": [
3729 "ldb"
3730 ],
3731 "type": "field"
3732 },
3733 {
3734 "params": [],
3735 "type": "sum"
3736 }
3737 ]
3738 ],
3739 "tags": []
3740 },
3741 "labels": {
3742 "grafana.app/export-label": "influxdb-1"
3743 }
3744 },
3745 "refId": "B",
3746 "hidden": false
3747 }
3748 }
3749 ],
3750 "transformations": [],
3751 "queryOptions": {}
3752 }
3753 },
3754 "vizConfig": {
3755 "kind": "VizConfig",
3756 "group": "timeseries",
3757 "version": "13.0.1+security-01",
3758 "spec": {
3759 "options": {
3760 "annotations": {
3761 "clustering": -1,
3762 "multiLane": false
3763 },
3764 "legend": {
3765 "calcs": [],
3766 "displayMode": "list",
3767 "placement": "bottom",
3768 "showLegend": true
3769 },
3770 "tooltip": {
3771 "hideZeros": false,
3772 "mode": "single",
3773 "sort": "none"
3774 }
3775 },
3776 "fieldConfig": {
3777 "defaults": {
3778 "thresholds": {
3779 "mode": "absolute",
3780 "steps": [
3781 {
3782 "value": 0,
3783 "color": "green"
3784 },
3785 {
3786 "value": 80,
3787 "color": "red"
3788 }
3789 ]
3790 },
3791 "color": {
3792 "mode": "palette-classic"
3793 },
3794 "custom": {
3795 "axisBorderShow": false,
3796 "axisCenteredZero": false,
3797 "axisColorMode": "text",
3798 "axisLabel": "",
3799 "axisPlacement": "auto",
3800 "barAlignment": 0,
3801 "barWidthFactor": 0.6,
3802 "drawStyle": "line",
3803 "fillOpacity": 10,
3804 "gradientMode": "none",
3805 "hideFrom": {
3806 "legend": false,
3807 "tooltip": false,
3808 "viz": false
3809 },
3810 "insertNulls": false,
3811 "lineInterpolation": "smooth",
3812 "lineWidth": 1,
3813 "pointSize": 5,
3814 "scaleDistribution": {
3815 "type": "linear"
3816 },
3817 "showPoints": "auto",
3818 "showValues": false,
3819 "spanNulls": false,
3820 "stacking": {
3821 "group": "A",
3822 "mode": "none"
3823 },
3824 "thresholdsStyle": {
3825 "mode": "off"
3826 }
3827 }
3828 },
3829 "overrides": []
3830 }
3831 }
3832 }
3833 }
3834 },
3835 "panel-28": {
3836 "kind": "Panel",
3837 "spec": {
3838 "id": 28,
3839 "title": "ebpf summ",
3840 "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
3841 "links": [],
3842 "data": {
3843 "kind": "QueryGroup",
3844 "spec": {
3845 "queries": [
3846 {
3847 "kind": "PanelQuery",
3848 "spec": {
3849 "query": {
3850 "kind": "DataQuery",
3851 "group": "influxdb",
3852 "version": "v0",
3853 "spec": {
3854 "alias": "fsync",
3855 "groupBy": [
3856 {
3857 "params": [
3858 "$interval"
3859 ],
3860 "type": "time"
3861 },
3862 {
3863 "params": [
3864 "null"
3865 ],
3866 "type": "fill"
3867 }
3868 ],
3869 "measurement": "samba_ebpf",
3870 "orderByTime": "ASC",
3871 "policy": "default",
3872 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3873 "rawQuery": false,
3874 "resultFormat": "time_series",
3875 "select": [
3876 [
3877 {
3878 "params": [
3879 "fsync"
3880 ],
3881 "type": "field"
3882 },
3883 {
3884 "params": [],
3885 "type": "sum"
3886 },
3887 {
3888 "params": [],
3889 "type": "cumulative_sum"
3890 }
3891 ]
3892 ],
3893 "tags": []
3894 },
3895 "labels": {
3896 "grafana.app/export-label": "influxdb-1"
3897 }
3898 },
3899 "refId": "A",
3900 "hidden": false
3901 }
3902 },
3903 {
3904 "kind": "PanelQuery",
3905 "spec": {
3906 "query": {
3907 "kind": "DataQuery",
3908 "group": "influxdb",
3909 "version": "v0",
3910 "spec": {
3911 "alias": "ldb",
3912 "groupBy": [
3913 {
3914 "params": [
3915 "$interval"
3916 ],
3917 "type": "time"
3918 },
3919 {
3920 "params": [
3921 "null"
3922 ],
3923 "type": "fill"
3924 }
3925 ],
3926 "measurement": "samba_ebpf",
3927 "orderByTime": "ASC",
3928 "policy": "default",
3929 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3930 "rawQuery": false,
3931 "resultFormat": "time_series",
3932 "select": [
3933 [
3934 {
3935 "params": [
3936 "ldb"
3937 ],
3938 "type": "field"
3939 },
3940 {
3941 "params": [],
3942 "type": "sum"
3943 },
3944 {
3945 "params": [],
3946 "type": "cumulative_sum"
3947 }
3948 ]
3949 ],
3950 "tags": []
3951 },
3952 "labels": {
3953 "grafana.app/export-label": "influxdb-1"
3954 }
3955 },
3956 "refId": "B",
3957 "hidden": false
3958 }
3959 }
3960 ],
3961 "transformations": [],
3962 "queryOptions": {}
3963 }
3964 },
3965 "vizConfig": {
3966 "kind": "VizConfig",
3967 "group": "stat",
3968 "version": "13.0.1+security-01",
3969 "spec": {
3970 "options": {
3971 "colorMode": "value",
3972 "graphMode": "area",
3973 "justifyMode": "auto",
3974 "orientation": "auto",
3975 "percentChangeColorMode": "standard",
3976 "reduceOptions": {
3977 "calcs": [
3978 "lastNotNull"
3979 ],
3980 "fields": "",
3981 "values": false
3982 },
3983 "showPercentChange": false,
3984 "textMode": "auto",
3985 "wideLayout": true
3986 },
3987 "fieldConfig": {
3988 "defaults": {
3989 "thresholds": {
3990 "mode": "absolute",
3991 "steps": [
3992 {
3993 "value": 0,
3994 "color": "green"
3995 },
3996 {
3997 "value": 80,
3998 "color": "red"
3999 }
4000 ]
4001 },
4002 "color": {
4003 "mode": "palette-classic"
4004 }
4005 },
4006 "overrides": []
4007 }
4008 }
4009 }
4010 }
4011 },
4012 "panel-3": {
4013 "kind": "Panel",
4014 "spec": {
4015 "id": 3,
4016 "title": "DSDB: система vs пользователь",
4017 "description": "Изменения каталога с разбивкой по performedAsSystem (true = выполнено системой).",
4018 "links": [],
4019 "data": {
4020 "kind": "QueryGroup",
4021 "spec": {
4022 "queries": [
4023 {
4024 "kind": "PanelQuery",
4025 "spec": {
4026 "query": {
4027 "kind": "DataQuery",
4028 "group": "influxdb",
4029 "version": "v0",
4030 "spec": {
4031 "groupBy": [],
4032 "measurement": "samba_dsdb",
4033 "orderByTime": "ASC",
4034 "policy": "default",
4035 "query": "SELECT count(\"status_code\") FROM \"samba_dsdb\" WHERE $timeFilter GROUP BY time($interval), \"as_system\"::tag fill(null)",
4036 "rawQuery": true,
4037 "resultFormat": "time_series",
4038 "select": [],
4039 "tags": []
4040 },
4041 "labels": {
4042 "grafana.app/export-label": "influxdb-1"
4043 }
4044 },
4045 "refId": "A",
4046 "hidden": false
4047 }
4048 }
4049 ],
4050 "transformations": [],
4051 "queryOptions": {}
4052 }
4053 },
4054 "vizConfig": {
4055 "kind": "VizConfig",
4056 "group": "timeseries",
4057 "version": "13.0.1+security-01",
4058 "spec": {
4059 "options": {
4060 "annotations": {
4061 "clustering": -1,
4062 "multiLane": false
4063 },
4064 "legend": {
4065 "calcs": [],
4066 "displayMode": "list",
4067 "placement": "bottom",
4068 "showLegend": true
4069 },
4070 "tooltip": {
4071 "hideZeros": false,
4072 "mode": "multi",
4073 "sort": "desc"
4074 }
4075 },
4076 "fieldConfig": {
4077 "defaults": {
4078 "thresholds": {
4079 "mode": "absolute",
4080 "steps": [
4081 {
4082 "value": 0,
4083 "color": "green"
4084 },
4085 {
4086 "value": 80,
4087 "color": "red"
4088 }
4089 ]
4090 },
4091 "color": {
4092 "mode": "palette-classic"
4093 },
4094 "custom": {
4095 "axisBorderShow": false,
4096 "axisCenteredZero": false,
4097 "axisColorMode": "text",
4098 "axisLabel": "",
4099 "axisPlacement": "auto",
4100 "barAlignment": 0,
4101 "barWidthFactor": 0.6,
4102 "drawStyle": "line",
4103 "fillOpacity": 20,
4104 "gradientMode": "none",
4105 "hideFrom": {
4106 "legend": false,
4107 "tooltip": false,
4108 "viz": false
4109 },
4110 "insertNulls": false,
4111 "lineInterpolation": "smooth",
4112 "lineWidth": 1,
4113 "pointSize": 5,
4114 "scaleDistribution": {
4115 "type": "linear"
4116 },
4117 "showPoints": "auto",
4118 "showValues": false,
4119 "spanNulls": false,
4120 "stacking": {
4121 "group": "A",
4122 "mode": "none"
4123 },
4124 "thresholdsStyle": {
4125 "mode": "off"
4126 }
4127 }
4128 },
4129 "overrides": []
4130 }
4131 }
4132 }
4133 }
4134 },
4135 "panel-4": {
4136 "kind": "Panel",
4137 "spec": {
4138 "id": 4,
4139 "title": "DSDB: топ инициаторов (SID)",
4140 "description": "Кто инициировал изменения каталога — разбивка по userSid.",
4141 "links": [],
4142 "data": {
4143 "kind": "QueryGroup",
4144 "spec": {
4145 "queries": [
4146 {
4147 "kind": "PanelQuery",
4148 "spec": {
4149 "query": {
4150 "kind": "DataQuery",
4151 "group": "influxdb",
4152 "version": "v0",
4153 "spec": {
4154 "groupBy": [],
4155 "measurement": "samba_dsdb",
4156 "orderByTime": "ASC",
4157 "policy": "default",
4158 "query": "SELECT count(\"status_code\") FROM \"samba_dsdb\" WHERE $timeFilter GROUP BY time($interval), \"user_sid\"::tag fill(null)",
4159 "rawQuery": true,
4160 "resultFormat": "time_series",
4161 "select": [],
4162 "tags": []
4163 },
4164 "labels": {
4165 "grafana.app/export-label": "influxdb-1"
4166 }
4167 },
4168 "refId": "A",
4169 "hidden": false
4170 }
4171 }
4172 ],
4173 "transformations": [],
4174 "queryOptions": {}
4175 }
4176 },
4177 "vizConfig": {
4178 "kind": "VizConfig",
4179 "group": "timeseries",
4180 "version": "13.0.1+security-01",
4181 "spec": {
4182 "options": {
4183 "annotations": {
4184 "clustering": -1,
4185 "multiLane": false
4186 },
4187 "legend": {
4188 "calcs": [
4189 "sum"
4190 ],
4191 "displayMode": "table",
4192 "placement": "right",
4193 "showLegend": true
4194 },
4195 "tooltip": {
4196 "hideZeros": false,
4197 "mode": "multi",
4198 "sort": "desc"
4199 }
4200 },
4201 "fieldConfig": {
4202 "defaults": {
4203 "thresholds": {
4204 "mode": "absolute",
4205 "steps": [
4206 {
4207 "value": 0,
4208 "color": "green"
4209 },
4210 {
4211 "value": 80,
4212 "color": "red"
4213 }
4214 ]
4215 },
4216 "color": {
4217 "mode": "palette-classic"
4218 },
4219 "custom": {
4220 "axisBorderShow": false,
4221 "axisCenteredZero": false,
4222 "axisColorMode": "text",
4223 "axisLabel": "",
4224 "axisPlacement": "auto",
4225 "barAlignment": 0,
4226 "barWidthFactor": 0.6,
4227 "drawStyle": "bars",
4228 "fillOpacity": 50,
4229 "gradientMode": "none",
4230 "hideFrom": {
4231 "legend": false,
4232 "tooltip": false,
4233 "viz": false
4234 },
4235 "insertNulls": false,
4236 "lineInterpolation": "linear",
4237 "lineWidth": 1,
4238 "pointSize": 5,
4239 "scaleDistribution": {
4240 "type": "linear"
4241 },
4242 "showPoints": "auto",
4243 "showValues": false,
4244 "spanNulls": false,
4245 "stacking": {
4246 "group": "A",
4247 "mode": "normal"
4248 },
4249 "thresholdsStyle": {
4250 "mode": "off"
4251 }
4252 }
4253 },
4254 "overrides": []
4255 }
4256 }
4257 }
4258 }
4259 },
4260 "panel-5": {
4261 "kind": "Panel",
4262 "spec": {
4263 "id": 5,
4264 "title": "Транзакции: длительность (mean/max)",
4265 "description": "Длительность транзакций каталога (samba_dsdb_tx) в микросекундах.",
4266 "links": [],
4267 "data": {
4268 "kind": "QueryGroup",
4269 "spec": {
4270 "queries": [
4271 {
4272 "kind": "PanelQuery",
4273 "spec": {
4274 "query": {
4275 "kind": "DataQuery",
4276 "group": "influxdb",
4277 "version": "v0",
4278 "spec": {
4279 "groupBy": [],
4280 "measurement": "samba_dsdb_tx",
4281 "orderByTime": "ASC",
4282 "policy": "default",
4283 "query": "SELECT mean(\"duration\") AS \"mean\", max(\"duration\") AS \"max\" FROM \"samba_dsdb_tx\" WHERE $timeFilter GROUP BY time($interval) fill(null)",
4284 "rawQuery": true,
4285 "resultFormat": "time_series",
4286 "select": [],
4287 "tags": []
4288 },
4289 "labels": {
4290 "grafana.app/export-label": "influxdb-1"
4291 }
4292 },
4293 "refId": "A",
4294 "hidden": false
4295 }
4296 }
4297 ],
4298 "transformations": [],
4299 "queryOptions": {}
4300 }
4301 },
4302 "vizConfig": {
4303 "kind": "VizConfig",
4304 "group": "timeseries",
4305 "version": "13.0.1+security-01",
4306 "spec": {
4307 "options": {
4308 "annotations": {
4309 "clustering": -1,
4310 "multiLane": false
4311 },
4312 "legend": {
4313 "calcs": [
4314 "mean",
4315 "max"
4316 ],
4317 "displayMode": "table",
4318 "placement": "bottom",
4319 "showLegend": true
4320 },
4321 "tooltip": {
4322 "hideZeros": false,
4323 "mode": "multi",
4324 "sort": "desc"
4325 }
4326 },
4327 "fieldConfig": {
4328 "defaults": {
4329 "unit": "µs",
4330 "thresholds": {
4331 "mode": "absolute",
4332 "steps": [
4333 {
4334 "value": 0,
4335 "color": "green"
4336 },
4337 {
4338 "value": 80,
4339 "color": "red"
4340 }
4341 ]
4342 },
4343 "color": {
4344 "mode": "palette-classic"
4345 },
4346 "custom": {
4347 "axisBorderShow": false,
4348 "axisCenteredZero": false,
4349 "axisColorMode": "text",
4350 "axisLabel": "",
4351 "axisPlacement": "auto",
4352 "barAlignment": 0,
4353 "barWidthFactor": 0.6,
4354 "drawStyle": "line",
4355 "fillOpacity": 10,
4356 "gradientMode": "none",
4357 "hideFrom": {
4358 "legend": false,
4359 "tooltip": false,
4360 "viz": false
4361 },
4362 "insertNulls": false,
4363 "lineInterpolation": "smooth",
4364 "lineWidth": 1,
4365 "pointSize": 5,
4366 "scaleDistribution": {
4367 "type": "linear"
4368 },
4369 "showPoints": "auto",
4370 "showValues": false,
4371 "spanNulls": false,
4372 "stacking": {
4373 "group": "A",
4374 "mode": "none"
4375 },
4376 "thresholdsStyle": {
4377 "mode": "off"
4378 }
4379 }
4380 },
4381 "overrides": []
4382 }
4383 }
4384 }
4385 }
4386 },
4387 "panel-6": {
4388 "kind": "Panel",
4389 "spec": {
4390 "id": 6,
4391 "title": "Транзакции по типу действия",
4392 "description": "Число транзакций каталога, разбивка по action (commit / rollback / prepare commit / begin).",
4393 "links": [],
4394 "data": {
4395 "kind": "QueryGroup",
4396 "spec": {
4397 "queries": [
4398 {
4399 "kind": "PanelQuery",
4400 "spec": {
4401 "query": {
4402 "kind": "DataQuery",
4403 "group": "influxdb",
4404 "version": "v0",
4405 "spec": {
4406 "groupBy": [],
4407 "measurement": "samba_dsdb_tx",
4408 "orderByTime": "ASC",
4409 "policy": "default",
4410 "query": "SELECT count(\"duration\") FROM \"samba_dsdb_tx\" WHERE $timeFilter GROUP BY time($interval), \"action\"::tag fill(null)",
4411 "rawQuery": true,
4412 "resultFormat": "time_series",
4413 "select": [],
4414 "tags": []
4415 },
4416 "labels": {
4417 "grafana.app/export-label": "influxdb-1"
4418 }
4419 },
4420 "refId": "A",
4421 "hidden": false
4422 }
4423 }
4424 ],
4425 "transformations": [],
4426 "queryOptions": {}
4427 }
4428 },
4429 "vizConfig": {
4430 "kind": "VizConfig",
4431 "group": "timeseries",
4432 "version": "13.0.1+security-01",
4433 "spec": {
4434 "options": {
4435 "annotations": {
4436 "clustering": -1,
4437 "multiLane": false
4438 },
4439 "legend": {
4440 "calcs": [],
4441 "displayMode": "list",
4442 "placement": "bottom",
4443 "showLegend": true
4444 },
4445 "tooltip": {
4446 "hideZeros": false,
4447 "mode": "multi",
4448 "sort": "desc"
4449 }
4450 },
4451 "fieldConfig": {
4452 "defaults": {
4453 "thresholds": {
4454 "mode": "absolute",
4455 "steps": [
4456 {
4457 "value": 0,
4458 "color": "green"
4459 },
4460 {
4461 "value": 80,
4462 "color": "red"
4463 }
4464 ]
4465 },
4466 "color": {
4467 "mode": "palette-classic"
4468 },
4469 "custom": {
4470 "axisBorderShow": false,
4471 "axisCenteredZero": false,
4472 "axisColorMode": "text",
4473 "axisLabel": "",
4474 "axisPlacement": "auto",
4475 "barAlignment": 0,
4476 "barWidthFactor": 0.6,
4477 "drawStyle": "bars",
4478 "fillOpacity": 50,
4479 "gradientMode": "none",
4480 "hideFrom": {
4481 "legend": false,
4482 "tooltip": false,
4483 "viz": false
4484 },
4485 "insertNulls": false,
4486 "lineInterpolation": "linear",
4487 "lineWidth": 1,
4488 "pointSize": 5,
4489 "scaleDistribution": {
4490 "type": "linear"
4491 },
4492 "showPoints": "auto",
4493 "showValues": false,
4494 "spanNulls": false,
4495 "stacking": {
4496 "group": "A",
4497 "mode": "normal"
4498 },
4499 "thresholdsStyle": {
4500 "mode": "off"
4501 }
4502 }
4503 },
4504 "overrides": []
4505 }
4506 }
4507 }
4508 }
4509 },
4510 "panel-7": {
4511 "kind": "Panel",
4512 "spec": {
4513 "id": 7,
4514 "title": "SMB activity",
4515 "description": "",
4516 "links": [],
4517 "data": {
4518 "kind": "QueryGroup",
4519 "spec": {
4520 "queries": [
4521 {
4522 "kind": "PanelQuery",
4523 "spec": {
4524 "query": {
4525 "kind": "DataQuery",
4526 "group": "influxdb",
4527 "version": "v0",
4528 "spec": {
4529 "alias": "user_smb",
4530 "groupBy": [
4531 {
4532 "params": [
4533 "$interval"
4534 ],
4535 "type": "time"
4536 },
4537 {
4538 "params": [
4539 "domain::tag"
4540 ],
4541 "type": "tag"
4542 },
4543 {
4544 "params": [
4545 "null"
4546 ],
4547 "type": "fill"
4548 }
4549 ],
4550 "measurement": "samba_authz",
4551 "orderByTime": "ASC",
4552 "policy": "default",
4553 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4554 "rawQuery": false,
4555 "resultFormat": "time_series",
4556 "select": [
4557 [
4558 {
4559 "params": [
4560 "auth_type"
4561 ],
4562 "type": "field"
4563 },
4564 {
4565 "params": [],
4566 "type": "count"
4567 }
4568 ]
4569 ],
4570 "tags": [
4571 {
4572 "key": "service::tag",
4573 "operator": "=",
4574 "value": "SMB2"
4575 },
4576 {
4577 "condition": "AND",
4578 "key": "auth_type::field",
4579 "operator": "=",
4580 "value": "krb5"
4581 },
4582 {
4583 "condition": "AND",
4584 "key": "account::tag",
4585 "operator": "=~",
4586 "value": "/^user-/"
4587 }
4588 ]
4589 },
4590 "labels": {
4591 "grafana.app/export-label": "influxdb-1"
4592 }
4593 },
4594 "refId": "A",
4595 "hidden": false
4596 }
4597 },
4598 {
4599 "kind": "PanelQuery",
4600 "spec": {
4601 "query": {
4602 "kind": "DataQuery",
4603 "group": "influxdb",
4604 "version": "v0",
4605 "spec": {
4606 "alias": "machine_smb",
4607 "groupBy": [
4608 {
4609 "params": [
4610 "$interval"
4611 ],
4612 "type": "time"
4613 },
4614 {
4615 "params": [
4616 "domain::tag"
4617 ],
4618 "type": "tag"
4619 },
4620 {
4621 "params": [
4622 "null"
4623 ],
4624 "type": "fill"
4625 }
4626 ],
4627 "measurement": "samba_authz",
4628 "orderByTime": "ASC",
4629 "policy": "default",
4630 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4631 "rawQuery": false,
4632 "resultFormat": "time_series",
4633 "select": [
4634 [
4635 {
4636 "params": [
4637 "auth_type"
4638 ],
4639 "type": "field"
4640 },
4641 {
4642 "params": [],
4643 "type": "count"
4644 }
4645 ]
4646 ],
4647 "tags": [
4648 {
4649 "key": "service::tag",
4650 "operator": "=",
4651 "value": "SMB2"
4652 },
4653 {
4654 "condition": "AND",
4655 "key": "auth_type::field",
4656 "operator": "=",
4657 "value": "krb5"
4658 },
4659 {
4660 "condition": "AND",
4661 "key": "account::tag",
4662 "operator": "=~",
4663 "value": "/^MACHINE/"
4664 }
4665 ]
4666 },
4667 "labels": {
4668 "grafana.app/export-label": "influxdb-1"
4669 }
4670 },
4671 "refId": "B",
4672 "hidden": false
4673 }
4674 }
4675 ],
4676 "transformations": [],
4677 "queryOptions": {}
4678 }
4679 },
4680 "vizConfig": {
4681 "kind": "VizConfig",
4682 "group": "timeseries",
4683 "version": "13.0.1+security-01",
4684 "spec": {
4685 "options": {
4686 "annotations": {
4687 "clustering": -1,
4688 "multiLane": false
4689 },
4690 "legend": {
4691 "calcs": [],
4692 "displayMode": "list",
4693 "placement": "bottom",
4694 "showLegend": true
4695 },
4696 "tooltip": {
4697 "hideZeros": false,
4698 "mode": "single",
4699 "sort": "none"
4700 }
4701 },
4702 "fieldConfig": {
4703 "defaults": {
4704 "thresholds": {
4705 "mode": "absolute",
4706 "steps": [
4707 {
4708 "value": 0,
4709 "color": "green"
4710 },
4711 {
4712 "value": 80,
4713 "color": "red"
4714 }
4715 ]
4716 },
4717 "color": {
4718 "mode": "palette-classic"
4719 },
4720 "custom": {
4721 "axisBorderShow": false,
4722 "axisCenteredZero": false,
4723 "axisColorMode": "text",
4724 "axisLabel": "",
4725 "axisPlacement": "auto",
4726 "barAlignment": 0,
4727 "barWidthFactor": 0.6,
4728 "drawStyle": "line",
4729 "fillOpacity": 10,
4730 "gradientMode": "none",
4731 "hideFrom": {
4732 "legend": false,
4733 "tooltip": false,
4734 "viz": false
4735 },
4736 "insertNulls": false,
4737 "lineInterpolation": "smooth",
4738 "lineWidth": 1,
4739 "pointSize": 5,
4740 "scaleDistribution": {
4741 "type": "linear"
4742 },
4743 "showPoints": "auto",
4744 "showValues": false,
4745 "spanNulls": false,
4746 "stacking": {
4747 "group": "A",
4748 "mode": "none"
4749 },
4750 "thresholdsStyle": {
4751 "mode": "off"
4752 }
4753 }
4754 },
4755 "overrides": []
4756 }
4757 }
4758 }
4759 }
4760 },
4761 "panel-8": {
4762 "kind": "Panel",
4763 "spec": {
4764 "id": 8,
4765 "title": "DNS activity",
4766 "description": "",
4767 "links": [],
4768 "data": {
4769 "kind": "QueryGroup",
4770 "spec": {
4771 "queries": [
4772 {
4773 "kind": "PanelQuery",
4774 "spec": {
4775 "query": {
4776 "kind": "DataQuery",
4777 "group": "influxdb",
4778 "version": "v0",
4779 "spec": {
4780 "alias": "rcode=0",
4781 "groupBy": [
4782 {
4783 "params": [
4784 "$interval"
4785 ],
4786 "type": "time"
4787 },
4788 {
4789 "params": [
4790 "null"
4791 ],
4792 "type": "fill"
4793 }
4794 ],
4795 "measurement": "samba_dns_rcode",
4796 "orderByTime": "ASC",
4797 "policy": "default",
4798 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4799 "rawQuery": false,
4800 "resultFormat": "time_series",
4801 "select": [
4802 [
4803 {
4804 "params": [
4805 "rcode"
4806 ],
4807 "type": "field"
4808 },
4809 {
4810 "params": [],
4811 "type": "count"
4812 }
4813 ]
4814 ],
4815 "tags": [
4816 {
4817 "key": "rcode::field",
4818 "operator": "=",
4819 "value": "0"
4820 },
4821 {
4822 "condition": "AND",
4823 "key": "direction::tag",
4824 "operator": "=",
4825 "value": "out_packet"
4826 }
4827 ]
4828 },
4829 "labels": {
4830 "grafana.app/export-label": "influxdb-1"
4831 }
4832 },
4833 "refId": "A",
4834 "hidden": false
4835 }
4836 },
4837 {
4838 "kind": "PanelQuery",
4839 "spec": {
4840 "query": {
4841 "kind": "DataQuery",
4842 "group": "influxdb",
4843 "version": "v0",
4844 "spec": {
4845 "alias": "rcode=3",
4846 "groupBy": [
4847 {
4848 "params": [
4849 "$interval"
4850 ],
4851 "type": "time"
4852 },
4853 {
4854 "params": [
4855 "null"
4856 ],
4857 "type": "fill"
4858 }
4859 ],
4860 "measurement": "samba_dns_rcode",
4861 "orderByTime": "ASC",
4862 "policy": "default",
4863 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4864 "rawQuery": false,
4865 "resultFormat": "time_series",
4866 "select": [
4867 [
4868 {
4869 "params": [
4870 "rcode"
4871 ],
4872 "type": "field"
4873 },
4874 {
4875 "params": [],
4876 "type": "count"
4877 }
4878 ]
4879 ],
4880 "tags": [
4881 {
4882 "key": "rcode::field",
4883 "operator": "=",
4884 "value": "3"
4885 },
4886 {
4887 "condition": "AND",
4888 "key": "direction::tag",
4889 "operator": "=",
4890 "value": "out_packet"
4891 }
4892 ]
4893 },
4894 "labels": {
4895 "grafana.app/export-label": "influxdb-1"
4896 }
4897 },
4898 "refId": "B",
4899 "hidden": false
4900 }
4901 }
4902 ],
4903 "transformations": [],
4904 "queryOptions": {}
4905 }
4906 },
4907 "vizConfig": {
4908 "kind": "VizConfig",
4909 "group": "timeseries",
4910 "version": "13.0.1+security-01",
4911 "spec": {
4912 "options": {
4913 "annotations": {
4914 "clustering": -1,
4915 "multiLane": false
4916 },
4917 "legend": {
4918 "calcs": [],
4919 "displayMode": "list",
4920 "placement": "bottom",
4921 "showLegend": true
4922 },
4923 "tooltip": {
4924 "hideZeros": false,
4925 "mode": "single",
4926 "sort": "none"
4927 }
4928 },
4929 "fieldConfig": {
4930 "defaults": {
4931 "thresholds": {
4932 "mode": "absolute",
4933 "steps": [
4934 {
4935 "value": 0,
4936 "color": "green"
4937 },
4938 {
4939 "value": 80,
4940 "color": "red"
4941 }
4942 ]
4943 },
4944 "color": {
4945 "mode": "palette-classic"
4946 },
4947 "custom": {
4948 "axisBorderShow": false,
4949 "axisCenteredZero": false,
4950 "axisColorMode": "text",
4951 "axisLabel": "",
4952 "axisPlacement": "auto",
4953 "barAlignment": 0,
4954 "barWidthFactor": 0.6,
4955 "drawStyle": "line",
4956 "fillOpacity": 10,
4957 "gradientMode": "none",
4958 "hideFrom": {
4959 "legend": false,
4960 "tooltip": false,
4961 "viz": false
4962 },
4963 "insertNulls": false,
4964 "lineInterpolation": "smooth",
4965 "lineWidth": 1,
4966 "pointSize": 5,
4967 "scaleDistribution": {
4968 "type": "linear"
4969 },
4970 "showPoints": "auto",
4971 "showValues": false,
4972 "spanNulls": false,
4973 "stacking": {
4974 "group": "A",
4975 "mode": "none"
4976 },
4977 "thresholdsStyle": {
4978 "mode": "off"
4979 }
4980 }
4981 },
4982 "overrides": []
4983 }
4984 }
4985 }
4986 }
4987 },
4988 "panel-9": {
4989 "kind": "Panel",
4990 "spec": {
4991 "id": 9,
4992 "title": "Samba: клиентов сейчас",
4993 "description": "Текущее число подключённых SMB-клиентов (последний опрос smbstatus -v, первый блок).",
4994 "links": [],
4995 "data": {
4996 "kind": "QueryGroup",
4997 "spec": {
4998 "queries": [
4999 {
5000 "kind": "PanelQuery",
5001 "spec": {
5002 "query": {
5003 "kind": "DataQuery",
5004 "group": "influxdb",
5005 "version": "v0",
5006 "spec": {
5007 "alias": "clients",
5008 "groupBy": [
5009 {
5010 "params": [
5011 "$interval"
5012 ],
5013 "type": "time"
5014 },
5015 {
5016 "params": [
5017 "null"
5018 ],
5019 "type": "fill"
5020 }
5021 ],
5022 "measurement": "samba_clients",
5023 "orderByTime": "ASC",
5024 "policy": "default",
5025 "query": "SELECT last(\"count\") FROM \"samba_clients\" WHERE $timeFilter GROUP BY time($interval) fill(null)",
5026 "rawQuery": false,
5027 "resultFormat": "time_series",
5028 "select": [
5029 [
5030 {
5031 "params": [
5032 "count"
5033 ],
5034 "type": "field"
5035 },
5036 {
5037 "params": [],
5038 "type": "last"
5039 }
5040 ]
5041 ],
5042 "tags": []
5043 },
5044 "labels": {
5045 "grafana.app/export-label": "influxdb-1"
5046 }
5047 },
5048 "refId": "A",
5049 "hidden": false
5050 }
5051 }
5052 ],
5053 "transformations": [],
5054 "queryOptions": {}
5055 }
5056 },
5057 "vizConfig": {
5058 "kind": "VizConfig",
5059 "group": "stat",
5060 "version": "13.0.1+security-01",
5061 "spec": {
5062 "options": {
5063 "colorMode": "value",
5064 "graphMode": "area",
5065 "justifyMode": "auto",
5066 "orientation": "auto",
5067 "percentChangeColorMode": "standard",
5068 "reduceOptions": {
5069 "calcs": [
5070 "lastNotNull"
5071 ],
5072 "fields": "",
5073 "values": false
5074 },
5075 "showPercentChange": false,
5076 "textMode": "auto",
5077 "wideLayout": true
5078 },
5079 "fieldConfig": {
5080 "defaults": {
5081 "unit": "none",
5082 "thresholds": {
5083 "mode": "absolute",
5084 "steps": [
5085 {
5086 "value": 0,
5087 "color": "green"
5088 },
5089 {
5090 "value": null,
5091 "color": "red"
5092 }
5093 ]
5094 },
5095 "color": {
5096 "mode": "palette-classic"
5097 }
5098 },
5099 "overrides": []
5100 }
5101 }
5102 }
5103 }
5104 }
5105 },
5106 "layout": {
5107 "kind": "GridLayout",
5108 "spec": {
5109 "items": [
5110 {
5111 "kind": "GridLayoutItem",
5112 "spec": {
5113 "x": 0,
5114 "y": 0,
5115 "width": 11,
5116 "height": 10,
5117 "element": {
5118 "kind": "ElementReference",
5119 "name": "panel-11"
5120 }
5121 }
5122 },
5123 {
5124 "kind": "GridLayoutItem",
5125 "spec": {
5126 "x": 11,
5127 "y": 0,
5128 "width": 13,
5129 "height": 10,
5130 "element": {
5131 "kind": "ElementReference",
5132 "name": "panel-1"
5133 }
5134 }
5135 },
5136 {
5137 "kind": "GridLayoutItem",
5138 "spec": {
5139 "x": 0,
5140 "y": 10,
5141 "width": 24,
5142 "height": 10,
5143 "element": {
5144 "kind": "ElementReference",
5145 "name": "panel-12"
5146 }
5147 }
5148 },
5149 {
5150 "kind": "GridLayoutItem",
5151 "spec": {
5152 "x": 0,
5153 "y": 20,
5154 "width": 9,
5155 "height": 10,
5156 "element": {
5157 "kind": "ElementReference",
5158 "name": "panel-28"
5159 }
5160 }
5161 },
5162 {
5163 "kind": "GridLayoutItem",
5164 "spec": {
5165 "x": 9,
5166 "y": 20,
5167 "width": 15,
5168 "height": 10,
5169 "element": {
5170 "kind": "ElementReference",
5171 "name": "panel-27"
5172 }
5173 }
5174 },
5175 {
5176 "kind": "GridLayoutItem",
5177 "spec": {
5178 "x": 0,
5179 "y": 30,
5180 "width": 8,
5181 "height": 11,
5182 "element": {
5183 "kind": "ElementReference",
5184 "name": "panel-21"
5185 }
5186 }
5187 },
5188 {
5189 "kind": "GridLayoutItem",
5190 "spec": {
5191 "x": 8,
5192 "y": 30,
5193 "width": 16,
5194 "height": 11,
5195 "element": {
5196 "kind": "ElementReference",
5197 "name": "panel-20"
5198 }
5199 }
5200 },
5201 {
5202 "kind": "GridLayoutItem",
5203 "spec": {
5204 "x": 0,
5205 "y": 41,
5206 "width": 11,
5207 "height": 11,
5208 "element": {
5209 "kind": "ElementReference",
5210 "name": "panel-16"
5211 }
5212 }
5213 },
5214 {
5215 "kind": "GridLayoutItem",
5216 "spec": {
5217 "x": 11,
5218 "y": 41,
5219 "width": 13,
5220 "height": 11,
5221 "element": {
5222 "kind": "ElementReference",
5223 "name": "panel-13"
5224 }
5225 }
5226 },
5227 {
5228 "kind": "GridLayoutItem",
5229 "spec": {
5230 "x": 0,
5231 "y": 52,
5232 "width": 11,
5233 "height": 10,
5234 "element": {
5235 "kind": "ElementReference",
5236 "name": "panel-17"
5237 }
5238 }
5239 },
5240 {
5241 "kind": "GridLayoutItem",
5242 "spec": {
5243 "x": 11,
5244 "y": 52,
5245 "width": 13,
5246 "height": 10,
5247 "element": {
5248 "kind": "ElementReference",
5249 "name": "panel-22"
5250 }
5251 }
5252 },
5253 {
5254 "kind": "GridLayoutItem",
5255 "spec": {
5256 "x": 0,
5257 "y": 62,
5258 "width": 16,
5259 "height": 10,
5260 "element": {
5261 "kind": "ElementReference",
5262 "name": "panel-24"
5263 }
5264 }
5265 },
5266 {
5267 "kind": "GridLayoutItem",
5268 "spec": {
5269 "x": 16,
5270 "y": 62,
5271 "width": 8,
5272 "height": 10,
5273 "element": {
5274 "kind": "ElementReference",
5275 "name": "panel-23"
5276 }
5277 }
5278 },
5279 {
5280 "kind": "GridLayoutItem",
5281 "spec": {
5282 "x": 0,
5283 "y": 72,
5284 "width": 8,
5285 "height": 9,
5286 "element": {
5287 "kind": "ElementReference",
5288 "name": "panel-14"
5289 }
5290 }
5291 },
5292 {
5293 "kind": "GridLayoutItem",
5294 "spec": {
5295 "x": 8,
5296 "y": 72,
5297 "width": 9,
5298 "height": 9,
5299 "element": {
5300 "kind": "ElementReference",
5301 "name": "panel-26"
5302 }
5303 }
5304 },
5305 {
5306 "kind": "GridLayoutItem",
5307 "spec": {
5308 "x": 17,
5309 "y": 72,
5310 "width": 7,
5311 "height": 9,
5312 "element": {
5313 "kind": "ElementReference",
5314 "name": "panel-25"
5315 }
5316 }
5317 },
5318 {
5319 "kind": "GridLayoutItem",
5320 "spec": {
5321 "x": 0,
5322 "y": 81,
5323 "width": 8,
5324 "height": 8,
5325 "element": {
5326 "kind": "ElementReference",
5327 "name": "panel-15"
5328 }
5329 }
5330 },
5331 {
5332 "kind": "GridLayoutItem",
5333 "spec": {
5334 "x": 8,
5335 "y": 81,
5336 "width": 8,
5337 "height": 8,
5338 "element": {
5339 "kind": "ElementReference",
5340 "name": "panel-18"
5341 }
5342 }
5343 },
5344 {
5345 "kind": "GridLayoutItem",
5346 "spec": {
5347 "x": 16,
5348 "y": 81,
5349 "width": 8,
5350 "height": 8,
5351 "element": {
5352 "kind": "ElementReference",
5353 "name": "panel-19"
5354 }
5355 }
5356 },
5357 {
5358 "kind": "GridLayoutItem",
5359 "spec": {
5360 "x": 0,
5361 "y": 89,
5362 "width": 12,
5363 "height": 7,
5364 "element": {
5365 "kind": "ElementReference",
5366 "name": "panel-7"
5367 }
5368 }
5369 },
5370 {
5371 "kind": "GridLayoutItem",
5372 "spec": {
5373 "x": 12,
5374 "y": 89,
5375 "width": 12,
5376 "height": 7,
5377 "element": {
5378 "kind": "ElementReference",
5379 "name": "panel-8"
5380 }
5381 }
5382 },
5383 {
5384 "kind": "GridLayoutItem",
5385 "spec": {
5386 "x": 0,
5387 "y": 96,
5388 "width": 12,
5389 "height": 8,
5390 "element": {
5391 "kind": "ElementReference",
5392 "name": "panel-2"
5393 }
5394 }
5395 },
5396 {
5397 "kind": "GridLayoutItem",
5398 "spec": {
5399 "x": 12,
5400 "y": 96,
5401 "width": 12,
5402 "height": 8,
5403 "element": {
5404 "kind": "ElementReference",
5405 "name": "panel-3"
5406 }
5407 }
5408 },
5409 {
5410 "kind": "GridLayoutItem",
5411 "spec": {
5412 "x": 0,
5413 "y": 104,
5414 "width": 12,
5415 "height": 8,
5416 "element": {
5417 "kind": "ElementReference",
5418 "name": "panel-4"
5419 }
5420 }
5421 },
5422 {
5423 "kind": "GridLayoutItem",
5424 "spec": {
5425 "x": 12,
5426 "y": 104,
5427 "width": 12,
5428 "height": 8,
5429 "element": {
5430 "kind": "ElementReference",
5431 "name": "panel-5"
5432 }
5433 }
5434 },
5435 {
5436 "kind": "GridLayoutItem",
5437 "spec": {
5438 "x": 0,
5439 "y": 112,
5440 "width": 12,
5441 "height": 8,
5442 "element": {
5443 "kind": "ElementReference",
5444 "name": "panel-6"
5445 }
5446 }
5447 },
5448 {
5449 "kind": "GridLayoutItem",
5450 "spec": {
5451 "x": 0,
5452 "y": 120,
5453 "width": 6,
5454 "height": 8,
5455 "element": {
5456 "kind": "ElementReference",
5457 "name": "panel-9"
5458 }
5459 }
5460 },
5461 {
5462 "kind": "GridLayoutItem",
5463 "spec": {
5464 "x": 6,
5465 "y": 120,
5466 "width": 18,
5467 "height": 8,
5468 "element": {
5469 "kind": "ElementReference",
5470 "name": "panel-10"
5471 }
5472 }
5473 }
5474 ]
5475 }
5476 },
5477 "links": [],
5478 "liveNow": false,
5479 "preload": false,
5480 "tags": [
5481 "samba",
5482 "ad",
5483 "audit"
5484 ],
5485 "timeSettings": {
5486 "timezone": "browser",
5487 "from": "now-6h",
5488 "to": "now",
5489 "autoRefresh": "",
5490 "autoRefreshIntervals": [
5491 "5s",
5492 "10s",
5493 "30s",
5494 "1m",
5495 "5m",
5496 "15m",
5497 "30m",
5498 "1h",
5499 "2h",
5500 "1d"
5501 ],
5502 "hideTimepicker": false,
5503 "fiscalYearStartMonth": 0
5504 },
5505 "title": "Samba AD audit2",
5506 "variables": [
5507 {
5508 "kind": "IntervalVariable",
5509 "spec": {
5510 "name": "interval",
5511 "query": "1s,3s,5s,10s,30s,1m,10m,30m,1h,6h,12h,1d,7d,14d,30d",
5512 "current": {
5513 "text": "1m",
5514 "value": "1m"
5515 },
5516 "options": [
5517 {
5518 "selected": true,
5519 "text": "1m",
5520 "value": "1m"
5521 },
5522 {
5523 "selected": false,
5524 "text": "10m",
5525 "value": "10m"
5526 },
5527 {
5528 "selected": false,
5529 "text": "30m",
5530 "value": "30m"
5531 },
5532 {
5533 "selected": false,
5534 "text": "1h",
5535 "value": "1h"
5536 },
5537 {
5538 "selected": false,
5539 "text": "6h",
5540 "value": "6h"
5541 },
5542 {
5543 "selected": false,
5544 "text": "12h",
5545 "value": "12h"
5546 },
5547 {
5548 "selected": false,
5549 "text": "1d",
5550 "value": "1d"
5551 }
5552 ],
5553 "auto": false,
5554 "auto_min": "10s",
5555 "auto_count": 30,
5556 "refresh": "onTimeRangeChanged",
5557 "hide": "dontHide",
5558 "skipUrlSync": false
5559 }
5560 }
5561 ],
5562 "preferences": {
5563 "layout": {
5564 "kind": "GridLayout",
5565 "spec": {
5566 "items": []
5567 }
5568 }
5569 }
5570 }
5571}