Last active 1 week ago

guest revised this gist 1 week ago. Go to revision

1 file changed, 330 insertions, 40 deletions

grafana.json

@@ -2,9 +2,9 @@
2 2 "apiVersion": "dashboard.grafana.app/v2",
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 - "name": "ad-samba-audit2",
6 - "generation": 52,
7 - "creationTimestamp": "2026-07-03T12:41:09Z",
5 + "name": "ad-samba-audit3",
6 + "generation": 2,
7 + "creationTimestamp": "2026-07-29T13:12:35Z",
8 8 "labels": {},
9 9 "annotations": {}
10 10 },
@@ -144,8 +144,8 @@
144 144 "measurement": "samba_auth",
145 145 "orderByTime": "ASC",
146 146 "policy": "default",
147 - "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^user/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
148 - "rawQuery": false,
147 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND (\"account\"::tag =~ /^user/ OR \"account\"::tag =~ /^loadtest/ OR \"account\"::tag =~ /^tuser/)) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
148 + "rawQuery": true,
149 149 "resultFormat": "time_series",
150 150 "select": [
151 151 [
@@ -542,8 +542,8 @@
542 542 "measurement": "samba_auth",
543 543 "orderByTime": "ASC",
544 544 "policy": "default",
545 - "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^user/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
546 - "rawQuery": false,
545 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND (\"account\"::tag =~ /^user/ OR \"account\"::tag =~ /^loadtest/ OR \"account\"::tag =~ /^tuser/)) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
546 + "rawQuery": true,
547 547 "resultFormat": "time_series",
548 548 "select": [
549 549 [
@@ -4602,6 +4602,283 @@
4602 4602 }
4603 4603 }
4604 4604 },
4605 + "panel-32": {
4606 + "kind": "Panel",
4607 + "spec": {
4608 + "id": 32,
4609 + "title": "Логины (user) MIN/MAX/AVG",
4610 + "description": "Успешные пользовательские логины (account =~ /^user|^loadtest|^tuser/, status = NT_STATUS_OK) за один интервал $interval, максимум по выбранному диапазону времени.",
4611 + "links": [],
4612 + "data": {
4613 + "kind": "QueryGroup",
4614 + "spec": {
4615 + "queries": [
4616 + {
4617 + "kind": "PanelQuery",
4618 + "spec": {
4619 + "query": {
4620 + "kind": "DataQuery",
4621 + "group": "influxdb",
4622 + "version": "v0",
4623 + "spec": {
4624 + "alias": "user_logins",
4625 + "groupBy": [
4626 + {
4627 + "params": [
4628 + "$interval"
4629 + ],
4630 + "type": "time"
4631 + },
4632 + {
4633 + "params": [
4634 + "null"
4635 + ],
4636 + "type": "fill"
4637 + }
4638 + ],
4639 + "measurement": "samba_auth",
4640 + "orderByTime": "ASC",
4641 + "policy": "default",
4642 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND (\"account\"::tag =~ /^user/ OR \"account\"::tag =~ /^loadtest/ OR \"account\"::tag =~ /^tuser/)) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4643 + "rawQuery": true,
4644 + "resultFormat": "time_series",
4645 + "select": [
4646 + [
4647 + {
4648 + "params": [
4649 + "client_account"
4650 + ],
4651 + "type": "field"
4652 + },
4653 + {
4654 + "params": [],
4655 + "type": "count"
4656 + }
4657 + ]
4658 + ],
4659 + "tags": [
4660 + {
4661 + "key": "status::tag",
4662 + "operator": "=",
4663 + "value": "NT_STATUS_OK"
4664 + },
4665 + {
4666 + "condition": "AND",
4667 + "key": "account::tag",
4668 + "operator": "=~",
4669 + "value": "/^user/"
4670 + },
4671 + {
4672 + "condition": "OR",
4673 + "key": "account::tag",
4674 + "operator": "=~",
4675 + "value": "/^loadtest/"
4676 + },
4677 + {
4678 + "condition": "OR",
4679 + "key": "account::tag",
4680 + "operator": "=~",
4681 + "value": "/^tuser/"
4682 + }
4683 + ]
4684 + },
4685 + "labels": {
4686 + "grafana.app/export-label": "influxdb-1"
4687 + }
4688 + },
4689 + "refId": "A",
4690 + "hidden": true
4691 + }
4692 + },
4693 + {
4694 + "kind": "PanelQuery",
4695 + "spec": {
4696 + "query": {
4697 + "kind": "DataQuery",
4698 + "group": "__expr__",
4699 + "version": "v0",
4700 + "spec": {
4701 + "conditions": [
4702 + {
4703 + "evaluator": {
4704 + "params": [
4705 + 0,
4706 + 0
4707 + ],
4708 + "type": "gt"
4709 + },
4710 + "query": {
4711 + "params": []
4712 + },
4713 + "reducer": {
4714 + "params": [],
4715 + "type": "last"
4716 + },
4717 + "type": "query"
4718 + }
4719 + ],
4720 + "downsampler": "max",
4721 + "expression": "A",
4722 + "reducer": "min",
4723 + "type": "reduce",
4724 + "upsampler": "backfilling",
4725 + "window": "$interval"
4726 + },
4727 + "labels": {
4728 + "grafana.app/export-label": "__expr__-1"
4729 + }
4730 + },
4731 + "refId": "B",
4732 + "hidden": false
4733 + }
4734 + },
4735 + {
4736 + "kind": "PanelQuery",
4737 + "spec": {
4738 + "query": {
4739 + "kind": "DataQuery",
4740 + "group": "__expr__",
4741 + "version": "v0",
4742 + "spec": {
4743 + "conditions": [
4744 + {
4745 + "evaluator": {
4746 + "params": [
4747 + 0,
4748 + 0
4749 + ],
4750 + "type": "gt"
4751 + },
4752 + "query": {
4753 + "params": []
4754 + },
4755 + "reducer": {
4756 + "params": [],
4757 + "type": "last"
4758 + },
4759 + "type": "query"
4760 + }
4761 + ],
4762 + "downsampler": "max",
4763 + "expression": "A",
4764 + "reducer": "max",
4765 + "type": "reduce",
4766 + "upsampler": "backfilling",
4767 + "window": "$interval"
4768 + },
4769 + "labels": {
4770 + "grafana.app/export-label": "__expr__-1"
4771 + }
4772 + },
4773 + "refId": "C",
4774 + "hidden": false
4775 + }
4776 + },
4777 + {
4778 + "kind": "PanelQuery",
4779 + "spec": {
4780 + "query": {
4781 + "kind": "DataQuery",
4782 + "group": "__expr__",
4783 + "version": "v0",
4784 + "spec": {
4785 + "conditions": [
4786 + {
4787 + "evaluator": {
4788 + "params": [
4789 + 0,
4790 + 0
4791 + ],
4792 + "type": "gt"
4793 + },
4794 + "query": {
4795 + "params": []
4796 + },
4797 + "reducer": {
4798 + "params": [],
4799 + "type": "last"
4800 + },
4801 + "type": "query"
4802 + }
4803 + ],
4804 + "downsampler": "max",
4805 + "expression": "A",
4806 + "reducer": "median",
4807 + "type": "reduce",
4808 + "upsampler": "backfilling",
4809 + "window": "$interval"
4810 + },
4811 + "labels": {
4812 + "grafana.app/export-label": "__expr__-1"
4813 + }
4814 + },
4815 + "refId": "D",
4816 + "hidden": false
4817 + }
4818 + }
4819 + ],
4820 + "transformations": [],
4821 + "queryOptions": {}
4822 + }
4823 + },
4824 + "vizConfig": {
4825 + "kind": "VizConfig",
4826 + "group": "gauge",
4827 + "version": "13.0.1+security-01",
4828 + "spec": {
4829 + "options": {
4830 + "barShape": "flat",
4831 + "barWidthFactor": 0.5,
4832 + "effects": {
4833 + "barGlow": false,
4834 + "centerGlow": false,
4835 + "gradient": true
4836 + },
4837 + "endpointMarker": "point",
4838 + "minVizHeight": 75,
4839 + "minVizWidth": 75,
4840 + "orientation": "auto",
4841 + "reduceOptions": {
4842 + "calcs": [
4843 + "max"
4844 + ],
4845 + "fields": "",
4846 + "values": false
4847 + },
4848 + "segmentCount": 1,
4849 + "segmentSpacing": 0.3,
4850 + "shape": "gauge",
4851 + "showThresholdLabels": false,
4852 + "showThresholdMarkers": true,
4853 + "sizing": "auto",
4854 + "sparkline": true,
4855 + "textMode": "auto"
4856 + },
4857 + "fieldConfig": {
4858 + "defaults": {
4859 + "thresholds": {
4860 + "mode": "absolute",
4861 + "steps": [
4862 + {
4863 + "value": 0,
4864 + "color": "green"
4865 + },
4866 + {
4867 + "value": 80,
4868 + "color": "red"
4869 + }
4870 + ]
4871 + },
4872 + "color": {
4873 + "mode": "thresholds"
4874 + }
4875 + },
4876 + "overrides": []
4877 + }
4878 + }
4879 + }
4880 + }
4881 + },
4605 4882 "panel-4": {
4606 4883 "kind": "Panel",
4607 4884 "spec": {
@@ -5481,21 +5758,34 @@
5481 5758 "spec": {
5482 5759 "x": 0,
5483 5760 "y": 0,
5484 - "width": 11,
5485 - "height": 10,
5761 + "width": 6,
5762 + "height": 8,
5486 5763 "element": {
5487 5764 "kind": "ElementReference",
5488 5765 "name": "panel-11"
5489 5766 }
5490 5767 }
5491 5768 },
5769 + {
5770 + "kind": "GridLayoutItem",
5771 + "spec": {
5772 + "x": 6,
5773 + "y": 0,
5774 + "width": 5,
5775 + "height": 8,
5776 + "element": {
5777 + "kind": "ElementReference",
5778 + "name": "panel-32"
5779 + }
5780 + }
5781 + },
5492 5782 {
5493 5783 "kind": "GridLayoutItem",
5494 5784 "spec": {
5495 5785 "x": 11,
5496 5786 "y": 0,
5497 5787 "width": 13,
5498 - "height": 10,
5788 + "height": 8,
5499 5789 "element": {
5500 5790 "kind": "ElementReference",
5501 5791 "name": "panel-1"
@@ -5506,9 +5796,9 @@
5506 5796 "kind": "GridLayoutItem",
5507 5797 "spec": {
5508 5798 "x": 0,
5509 - "y": 10,
5799 + "y": 8,
5510 5800 "width": 24,
5511 - "height": 10,
5801 + "height": 8,
5512 5802 "element": {
5513 5803 "kind": "ElementReference",
5514 5804 "name": "panel-12"
@@ -5519,7 +5809,7 @@
5519 5809 "kind": "GridLayoutItem",
5520 5810 "spec": {
5521 5811 "x": 0,
5522 - "y": 20,
5812 + "y": 16,
5523 5813 "width": 9,
5524 5814 "height": 10,
5525 5815 "element": {
@@ -5532,7 +5822,7 @@
5532 5822 "kind": "GridLayoutItem",
5533 5823 "spec": {
5534 5824 "x": 9,
5535 - "y": 20,
5825 + "y": 16,
5536 5826 "width": 15,
5537 5827 "height": 10,
5538 5828 "element": {
@@ -5545,7 +5835,7 @@
5545 5835 "kind": "GridLayoutItem",
5546 5836 "spec": {
5547 5837 "x": 0,
5548 - "y": 30,
5838 + "y": 26,
5549 5839 "width": 8,
5550 5840 "height": 11,
5551 5841 "element": {
@@ -5558,7 +5848,7 @@
5558 5848 "kind": "GridLayoutItem",
5559 5849 "spec": {
5560 5850 "x": 8,
5561 - "y": 30,
5851 + "y": 26,
5562 5852 "width": 16,
5563 5853 "height": 11,
5564 5854 "element": {
@@ -5571,7 +5861,7 @@
5571 5861 "kind": "GridLayoutItem",
5572 5862 "spec": {
5573 5863 "x": 0,
5574 - "y": 41,
5864 + "y": 37,
5575 5865 "width": 11,
5576 5866 "height": 11,
5577 5867 "element": {
@@ -5584,7 +5874,7 @@
5584 5874 "kind": "GridLayoutItem",
5585 5875 "spec": {
5586 5876 "x": 11,
5587 - "y": 41,
5877 + "y": 37,
5588 5878 "width": 13,
5589 5879 "height": 11,
5590 5880 "element": {
@@ -5597,7 +5887,7 @@
5597 5887 "kind": "GridLayoutItem",
5598 5888 "spec": {
5599 5889 "x": 0,
5600 - "y": 52,
5890 + "y": 48,
5601 5891 "width": 11,
5602 5892 "height": 10,
5603 5893 "element": {
@@ -5610,7 +5900,7 @@
5610 5900 "kind": "GridLayoutItem",
5611 5901 "spec": {
5612 5902 "x": 11,
5613 - "y": 52,
5903 + "y": 48,
5614 5904 "width": 13,
5615 5905 "height": 10,
5616 5906 "element": {
@@ -5623,7 +5913,7 @@
5623 5913 "kind": "GridLayoutItem",
5624 5914 "spec": {
5625 5915 "x": 0,
5626 - "y": 62,
5916 + "y": 58,
5627 5917 "width": 16,
5628 5918 "height": 10,
5629 5919 "element": {
@@ -5636,7 +5926,7 @@
5636 5926 "kind": "GridLayoutItem",
5637 5927 "spec": {
5638 5928 "x": 16,
5639 - "y": 62,
5929 + "y": 58,
5640 5930 "width": 8,
5641 5931 "height": 10,
5642 5932 "element": {
@@ -5649,7 +5939,7 @@
5649 5939 "kind": "GridLayoutItem",
5650 5940 "spec": {
5651 5941 "x": 0,
5652 - "y": 72,
5942 + "y": 68,
5653 5943 "width": 8,
5654 5944 "height": 9,
5655 5945 "element": {
@@ -5662,7 +5952,7 @@
5662 5952 "kind": "GridLayoutItem",
5663 5953 "spec": {
5664 5954 "x": 8,
5665 - "y": 72,
5955 + "y": 68,
5666 5956 "width": 9,
5667 5957 "height": 9,
5668 5958 "element": {
@@ -5675,7 +5965,7 @@
5675 5965 "kind": "GridLayoutItem",
5676 5966 "spec": {
5677 5967 "x": 17,
5678 - "y": 72,
5968 + "y": 68,
5679 5969 "width": 7,
5680 5970 "height": 9,
5681 5971 "element": {
@@ -5688,7 +5978,7 @@
5688 5978 "kind": "GridLayoutItem",
5689 5979 "spec": {
5690 5980 "x": 0,
5691 - "y": 81,
5981 + "y": 77,
5692 5982 "width": 8,
5693 5983 "height": 8,
5694 5984 "element": {
@@ -5701,7 +5991,7 @@
5701 5991 "kind": "GridLayoutItem",
5702 5992 "spec": {
5703 5993 "x": 8,
5704 - "y": 81,
5994 + "y": 77,
5705 5995 "width": 8,
5706 5996 "height": 8,
5707 5997 "element": {
@@ -5714,7 +6004,7 @@
5714 6004 "kind": "GridLayoutItem",
5715 6005 "spec": {
5716 6006 "x": 16,
5717 - "y": 81,
6007 + "y": 77,
5718 6008 "width": 8,
5719 6009 "height": 8,
5720 6010 "element": {
@@ -5727,7 +6017,7 @@
5727 6017 "kind": "GridLayoutItem",
5728 6018 "spec": {
5729 6019 "x": 0,
5730 - "y": 89,
6020 + "y": 85,
5731 6021 "width": 14,
5732 6022 "height": 7,
5733 6023 "element": {
@@ -5740,7 +6030,7 @@
5740 6030 "kind": "GridLayoutItem",
5741 6031 "spec": {
5742 6032 "x": 14,
5743 - "y": 89,
6033 + "y": 85,
5744 6034 "width": 10,
5745 6035 "height": 7,
5746 6036 "element": {
@@ -5753,7 +6043,7 @@
5753 6043 "kind": "GridLayoutItem",
5754 6044 "spec": {
5755 6045 "x": 0,
5756 - "y": 96,
6046 + "y": 92,
5757 6047 "width": 15,
5758 6048 "height": 7,
5759 6049 "element": {
@@ -5766,7 +6056,7 @@
5766 6056 "kind": "GridLayoutItem",
5767 6057 "spec": {
5768 6058 "x": 15,
5769 - "y": 96,
6059 + "y": 92,
5770 6060 "width": 9,
5771 6061 "height": 7,
5772 6062 "element": {
@@ -5779,7 +6069,7 @@
5779 6069 "kind": "GridLayoutItem",
5780 6070 "spec": {
5781 6071 "x": 0,
5782 - "y": 103,
6072 + "y": 99,
5783 6073 "width": 12,
5784 6074 "height": 8,
5785 6075 "element": {
@@ -5792,7 +6082,7 @@
5792 6082 "kind": "GridLayoutItem",
5793 6083 "spec": {
5794 6084 "x": 12,
5795 - "y": 103,
6085 + "y": 99,
5796 6086 "width": 12,
5797 6087 "height": 8,
5798 6088 "element": {
@@ -5805,7 +6095,7 @@
5805 6095 "kind": "GridLayoutItem",
5806 6096 "spec": {
5807 6097 "x": 0,
5808 - "y": 111,
6098 + "y": 107,
5809 6099 "width": 12,
5810 6100 "height": 8,
5811 6101 "element": {
@@ -5818,7 +6108,7 @@
5818 6108 "kind": "GridLayoutItem",
5819 6109 "spec": {
5820 6110 "x": 12,
5821 - "y": 111,
6111 + "y": 107,
5822 6112 "width": 12,
5823 6113 "height": 8,
5824 6114 "element": {
@@ -5831,7 +6121,7 @@
5831 6121 "kind": "GridLayoutItem",
5832 6122 "spec": {
5833 6123 "x": 0,
5834 - "y": 119,
6124 + "y": 115,
5835 6125 "width": 12,
5836 6126 "height": 8,
5837 6127 "element": {
@@ -5844,7 +6134,7 @@
5844 6134 "kind": "GridLayoutItem",
5845 6135 "spec": {
5846 6136 "x": 0,
5847 - "y": 127,
6137 + "y": 123,
5848 6138 "width": 6,
5849 6139 "height": 8,
5850 6140 "element": {
@@ -5857,7 +6147,7 @@
5857 6147 "kind": "GridLayoutItem",
5858 6148 "spec": {
5859 6149 "x": 6,
5860 - "y": 127,
6150 + "y": 123,
5861 6151 "width": 18,
5862 6152 "height": 8,
5863 6153 "element": {
@@ -5897,7 +6187,7 @@
5897 6187 "hideTimepicker": false,
5898 6188 "fiscalYearStartMonth": 0
5899 6189 },
5900 - "title": "Samba AD audit2",
6190 + "title": "Samba AD audit3",
5901 6191 "variables": [
5902 6192 {
5903 6193 "kind": "IntervalVariable",

guest revised this gist 2 weeks ago. Go to revision

1 file changed, 270 insertions, 8 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 49,
6 + "generation": 52,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -178,6 +178,12 @@
178 178 "key": "account::tag",
179 179 "operator": "=~",
180 180 "value": "/^loadtest/"
181 + },
182 + {
183 + "condition": "OR",
184 + "key": "account::tag",
185 + "operator": "=~",
186 + "value": "/^tuser/"
181 187 }
182 188 ]
183 189 },
@@ -570,6 +576,12 @@
570 576 "key": "account::tag",
571 577 "operator": "=~",
572 578 "value": "/^loadtest/"
579 + },
580 + {
581 + "condition": "OR",
582 + "key": "account::tag",
583 + "operator": "=~",
584 + "value": "/^tuser/"
573 585 }
574 586 ]
575 587 },
@@ -4359,6 +4371,237 @@
4359 4371 }
4360 4372 }
4361 4373 },
4374 + "panel-30": {
4375 + "kind": "Panel",
4376 + "spec": {
4377 + "id": 30,
4378 + "title": "SMB activity",
4379 + "description": "",
4380 + "links": [],
4381 + "data": {
4382 + "kind": "QueryGroup",
4383 + "spec": {
4384 + "queries": [
4385 + {
4386 + "kind": "PanelQuery",
4387 + "spec": {
4388 + "query": {
4389 + "kind": "DataQuery",
4390 + "group": "influxdb",
4391 + "version": "v0",
4392 + "spec": {
4393 + "alias": "user_smb",
4394 + "groupBy": [
4395 + {
4396 + "params": [
4397 + "$interval"
4398 + ],
4399 + "type": "time"
4400 + },
4401 + {
4402 + "params": [
4403 + "domain::tag"
4404 + ],
4405 + "type": "tag"
4406 + },
4407 + {
4408 + "params": [
4409 + "null"
4410 + ],
4411 + "type": "fill"
4412 + }
4413 + ],
4414 + "measurement": "samba_authz",
4415 + "orderByTime": "ASC",
4416 + "policy": "default",
4417 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4418 + "rawQuery": false,
4419 + "resultFormat": "time_series",
4420 + "select": [
4421 + [
4422 + {
4423 + "params": [
4424 + "auth_type"
4425 + ],
4426 + "type": "field"
4427 + },
4428 + {
4429 + "params": [],
4430 + "type": "count"
4431 + },
4432 + {
4433 + "params": [],
4434 + "type": "cumulative_sum"
4435 + }
4436 + ]
4437 + ],
4438 + "tags": [
4439 + {
4440 + "key": "service::tag",
4441 + "operator": "=",
4442 + "value": "SMB2"
4443 + },
4444 + {
4445 + "condition": "AND",
4446 + "key": "auth_type::field",
4447 + "operator": "=",
4448 + "value": "krb5"
4449 + },
4450 + {
4451 + "condition": "AND",
4452 + "key": "account::tag",
4453 + "operator": "=~",
4454 + "value": "/^user-/"
4455 + },
4456 + {
4457 + "condition": "OR",
4458 + "key": "account::tag",
4459 + "operator": "=~",
4460 + "value": "/^tuser/"
4461 + }
4462 + ]
4463 + },
4464 + "labels": {
4465 + "grafana.app/export-label": "influxdb-1"
4466 + }
4467 + },
4468 + "refId": "A",
4469 + "hidden": false
4470 + }
4471 + },
4472 + {
4473 + "kind": "PanelQuery",
4474 + "spec": {
4475 + "query": {
4476 + "kind": "DataQuery",
4477 + "group": "influxdb",
4478 + "version": "v0",
4479 + "spec": {
4480 + "alias": "machine_smb",
4481 + "groupBy": [
4482 + {
4483 + "params": [
4484 + "$interval"
4485 + ],
4486 + "type": "time"
4487 + },
4488 + {
4489 + "params": [
4490 + "domain::tag"
4491 + ],
4492 + "type": "tag"
4493 + },
4494 + {
4495 + "params": [
4496 + "null"
4497 + ],
4498 + "type": "fill"
4499 + }
4500 + ],
4501 + "measurement": "samba_authz",
4502 + "orderByTime": "ASC",
4503 + "policy": "default",
4504 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4505 + "rawQuery": false,
4506 + "resultFormat": "time_series",
4507 + "select": [
4508 + [
4509 + {
4510 + "params": [
4511 + "auth_type"
4512 + ],
4513 + "type": "field"
4514 + },
4515 + {
4516 + "params": [],
4517 + "type": "count"
4518 + },
4519 + {
4520 + "params": [],
4521 + "type": "cumulative_sum"
4522 + }
4523 + ]
4524 + ],
4525 + "tags": [
4526 + {
4527 + "key": "service::tag",
4528 + "operator": "=",
4529 + "value": "SMB2"
4530 + },
4531 + {
4532 + "condition": "AND",
4533 + "key": "auth_type::field",
4534 + "operator": "=",
4535 + "value": "krb5"
4536 + },
4537 + {
4538 + "condition": "AND",
4539 + "key": "account::tag",
4540 + "operator": "=~",
4541 + "value": "/^MACHINE/"
4542 + }
4543 + ]
4544 + },
4545 + "labels": {
4546 + "grafana.app/export-label": "influxdb-1"
4547 + }
4548 + },
4549 + "refId": "B",
4550 + "hidden": false
4551 + }
4552 + }
4553 + ],
4554 + "transformations": [],
4555 + "queryOptions": {}
4556 + }
4557 + },
4558 + "vizConfig": {
4559 + "kind": "VizConfig",
4560 + "group": "stat",
4561 + "version": "13.0.1+security-01",
4562 + "spec": {
4563 + "options": {
4564 + "colorMode": "value",
4565 + "graphMode": "area",
4566 + "justifyMode": "auto",
4567 + "orientation": "auto",
4568 + "percentChangeColorMode": "standard",
4569 + "reduceOptions": {
4570 + "calcs": [
4571 + "lastNotNull"
4572 + ],
4573 + "fields": "",
4574 + "values": false
4575 + },
4576 + "showPercentChange": false,
4577 + "textMode": "auto",
4578 + "wideLayout": true
4579 + },
4580 + "fieldConfig": {
4581 + "defaults": {
4582 + "thresholds": {
4583 + "mode": "absolute",
4584 + "steps": [
4585 + {
4586 + "value": 0,
4587 + "color": "green"
4588 + },
4589 + {
4590 + "value": 80,
4591 + "color": "red"
4592 + }
4593 + ]
4594 + },
4595 + "color": {
4596 + "mode": "palette-classic"
4597 + }
4598 + },
4599 + "overrides": []
4600 + }
4601 + }
4602 + }
4603 + }
4604 + },
4362 4605 "panel-4": {
4363 4606 "kind": "Panel",
4364 4607 "spec": {
@@ -4811,6 +5054,12 @@
4811 5054 "key": "account::tag",
4812 5055 "operator": "=~",
4813 5056 "value": "/^user-/"
5057 + },
5058 + {
5059 + "condition": "OR",
5060 + "key": "account::tag",
5061 + "operator": "=~",
5062 + "value": "/^tuser/"
4814 5063 }
4815 5064 ]
4816 5065 },
@@ -5505,7 +5754,7 @@
5505 5754 "spec": {
5506 5755 "x": 0,
5507 5756 "y": 96,
5508 - "width": 12,
5757 + "width": 15,
5509 5758 "height": 7,
5510 5759 "element": {
5511 5760 "kind": "ElementReference",
@@ -5516,13 +5765,13 @@
5516 5765 {
5517 5766 "kind": "GridLayoutItem",
5518 5767 "spec": {
5519 - "x": 12,
5768 + "x": 15,
5520 5769 "y": 96,
5521 - "width": 12,
5522 - "height": 8,
5770 + "width": 9,
5771 + "height": 7,
5523 5772 "element": {
5524 5773 "kind": "ElementReference",
5525 - "name": "panel-3"
5774 + "name": "panel-30"
5526 5775 }
5527 5776 }
5528 5777 },
@@ -5543,12 +5792,12 @@
5543 5792 "kind": "GridLayoutItem",
5544 5793 "spec": {
5545 5794 "x": 12,
5546 - "y": 104,
5795 + "y": 103,
5547 5796 "width": 12,
5548 5797 "height": 8,
5549 5798 "element": {
5550 5799 "kind": "ElementReference",
5551 - "name": "panel-5"
5800 + "name": "panel-3"
5552 5801 }
5553 5802 }
5554 5803 },
@@ -5565,6 +5814,19 @@
5565 5814 }
5566 5815 }
5567 5816 },
5817 + {
5818 + "kind": "GridLayoutItem",
5819 + "spec": {
5820 + "x": 12,
5821 + "y": 111,
5822 + "width": 12,
5823 + "height": 8,
5824 + "element": {
5825 + "kind": "ElementReference",
5826 + "name": "panel-5"
5827 + }
5828 + }
5829 + },
5568 5830 {
5569 5831 "kind": "GridLayoutItem",
5570 5832 "spec": {

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 274 insertions, 141 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 47,
6 + "generation": 49,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -4009,6 +4009,233 @@
4009 4009 }
4010 4010 }
4011 4011 },
4012 + "panel-29": {
4013 + "kind": "Panel",
4014 + "spec": {
4015 + "id": 29,
4016 + "title": "DNS activity",
4017 + "description": "",
4018 + "links": [],
4019 + "data": {
4020 + "kind": "QueryGroup",
4021 + "spec": {
4022 + "queries": [
4023 + {
4024 + "kind": "PanelQuery",
4025 + "spec": {
4026 + "query": {
4027 + "kind": "DataQuery",
4028 + "group": "influxdb",
4029 + "version": "v0",
4030 + "spec": {
4031 + "alias": "rcode=0",
4032 + "groupBy": [
4033 + {
4034 + "params": [
4035 + "$interval"
4036 + ],
4037 + "type": "time"
4038 + },
4039 + {
4040 + "params": [
4041 + "null"
4042 + ],
4043 + "type": "fill"
4044 + }
4045 + ],
4046 + "measurement": "samba_dns_rcode",
4047 + "orderByTime": "ASC",
4048 + "policy": "default",
4049 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4050 + "rawQuery": false,
4051 + "resultFormat": "time_series",
4052 + "select": [
4053 + [
4054 + {
4055 + "params": [
4056 + "rcode"
4057 + ],
4058 + "type": "field"
4059 + },
4060 + {
4061 + "params": [],
4062 + "type": "count"
4063 + }
4064 + ]
4065 + ],
4066 + "tags": [
4067 + {
4068 + "key": "rcode::field",
4069 + "operator": "=",
4070 + "value": "0"
4071 + },
4072 + {
4073 + "condition": "AND",
4074 + "key": "direction::tag",
4075 + "operator": "=",
4076 + "value": "out_packet"
4077 + }
4078 + ]
4079 + },
4080 + "labels": {
4081 + "grafana.app/export-label": "influxdb-1"
4082 + }
4083 + },
4084 + "refId": "A",
4085 + "hidden": false
4086 + }
4087 + },
4088 + {
4089 + "kind": "PanelQuery",
4090 + "spec": {
4091 + "query": {
4092 + "kind": "DataQuery",
4093 + "group": "influxdb",
4094 + "version": "v0",
4095 + "spec": {
4096 + "alias": "rcode=3",
4097 + "groupBy": [
4098 + {
4099 + "params": [
4100 + "$interval"
4101 + ],
4102 + "type": "time"
4103 + },
4104 + {
4105 + "params": [
4106 + "null"
4107 + ],
4108 + "type": "fill"
4109 + }
4110 + ],
4111 + "measurement": "samba_dns_rcode",
4112 + "orderByTime": "ASC",
4113 + "policy": "default",
4114 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4115 + "rawQuery": false,
4116 + "resultFormat": "time_series",
4117 + "select": [
4118 + [
4119 + {
4120 + "params": [
4121 + "rcode"
4122 + ],
4123 + "type": "field"
4124 + },
4125 + {
4126 + "params": [],
4127 + "type": "count"
4128 + }
4129 + ]
4130 + ],
4131 + "tags": [
4132 + {
4133 + "key": "rcode::field",
4134 + "operator": "=",
4135 + "value": "3"
4136 + },
4137 + {
4138 + "condition": "AND",
4139 + "key": "direction::tag",
4140 + "operator": "=",
4141 + "value": "out_packet"
4142 + }
4143 + ]
4144 + },
4145 + "labels": {
4146 + "grafana.app/export-label": "influxdb-1"
4147 + }
4148 + },
4149 + "refId": "B",
4150 + "hidden": false
4151 + }
4152 + }
4153 + ],
4154 + "transformations": [],
4155 + "queryOptions": {}
4156 + }
4157 + },
4158 + "vizConfig": {
4159 + "kind": "VizConfig",
4160 + "group": "timeseries",
4161 + "version": "13.0.1+security-01",
4162 + "spec": {
4163 + "options": {
4164 + "annotations": {
4165 + "clustering": -1,
4166 + "multiLane": false
4167 + },
4168 + "legend": {
4169 + "calcs": [],
4170 + "displayMode": "list",
4171 + "placement": "bottom",
4172 + "showLegend": true
4173 + },
4174 + "tooltip": {
4175 + "hideZeros": false,
4176 + "mode": "single",
4177 + "sort": "none"
4178 + }
4179 + },
4180 + "fieldConfig": {
4181 + "defaults": {
4182 + "thresholds": {
4183 + "mode": "absolute",
4184 + "steps": [
4185 + {
4186 + "value": 0,
4187 + "color": "green"
4188 + },
4189 + {
4190 + "value": 80,
4191 + "color": "red"
4192 + }
4193 + ]
4194 + },
4195 + "color": {
4196 + "mode": "palette-classic"
4197 + },
4198 + "custom": {
4199 + "axisBorderShow": false,
4200 + "axisCenteredZero": false,
4201 + "axisColorMode": "text",
4202 + "axisLabel": "",
4203 + "axisPlacement": "auto",
4204 + "barAlignment": 0,
4205 + "barWidthFactor": 0.6,
4206 + "drawStyle": "line",
4207 + "fillOpacity": 10,
4208 + "gradientMode": "none",
4209 + "hideFrom": {
4210 + "legend": false,
4211 + "tooltip": false,
4212 + "viz": false
4213 + },
4214 + "insertNulls": false,
4215 + "lineInterpolation": "smooth",
4216 + "lineWidth": 1,
4217 + "pointSize": 5,
4218 + "scaleDistribution": {
4219 + "type": "linear"
4220 + },
4221 + "showPoints": "auto",
4222 + "showValues": false,
4223 + "spanNulls": false,
4224 + "stacking": {
4225 + "group": "A",
4226 + "mode": "none"
4227 + },
4228 + "thresholdsStyle": {
4229 + "mode": "off"
4230 + }
4231 + }
4232 + },
4233 + "overrides": []
4234 + }
4235 + }
4236 + }
4237 + }
4238 + },
4012 4239 "panel-3": {
4013 4240 "kind": "Panel",
4014 4241 "spec": {
@@ -4762,7 +4989,7 @@
4762 4989 "kind": "Panel",
4763 4990 "spec": {
4764 4991 "id": 8,
4765 - "title": "DNS activity",
4992 + "title": "all DNS query count",
4766 4993 "description": "",
4767 4994 "links": [],
4768 4995 "data": {
@@ -4777,7 +5004,7 @@
4777 5004 "group": "influxdb",
4778 5005 "version": "v0",
4779 5006 "spec": {
4780 - "alias": "rcode=0",
5007 + "alias": "count",
4781 5008 "groupBy": [
4782 5009 {
4783 5010 "params": [
@@ -4792,7 +5019,7 @@
4792 5019 "type": "fill"
4793 5020 }
4794 5021 ],
4795 - "measurement": "samba_dns_rcode",
5022 + "measurement": "dns_query",
4796 5023 "orderByTime": "ASC",
4797 5024 "policy": "default",
4798 5025 "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
@@ -4802,100 +5029,27 @@
4802 5029 [
4803 5030 {
4804 5031 "params": [
4805 - "rcode"
5032 + "server"
4806 5033 ],
4807 5034 "type": "field"
4808 5035 },
4809 5036 {
4810 5037 "params": [],
4811 5038 "type": "count"
4812 - }
4813 - ]
4814 - ],
4815 - "tags": [
4816 - {
4817 - "key": "rcode::field",
4818 - "operator": "=",
4819 - "value": "0"
4820 - },
4821 - {
4822 - "condition": "AND",
4823 - "key": "direction::tag",
4824 - "operator": "=",
4825 - "value": "out_packet"
4826 - }
4827 - ]
4828 - },
4829 - "labels": {
4830 - "grafana.app/export-label": "influxdb-1"
4831 - }
4832 - },
4833 - "refId": "A",
4834 - "hidden": false
4835 - }
4836 - },
4837 - {
4838 - "kind": "PanelQuery",
4839 - "spec": {
4840 - "query": {
4841 - "kind": "DataQuery",
4842 - "group": "influxdb",
4843 - "version": "v0",
4844 - "spec": {
4845 - "alias": "rcode=3",
4846 - "groupBy": [
4847 - {
4848 - "params": [
4849 - "$interval"
4850 - ],
4851 - "type": "time"
4852 - },
4853 - {
4854 - "params": [
4855 - "null"
4856 - ],
4857 - "type": "fill"
4858 - }
4859 - ],
4860 - "measurement": "samba_dns_rcode",
4861 - "orderByTime": "ASC",
4862 - "policy": "default",
4863 - "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
4864 - "rawQuery": false,
4865 - "resultFormat": "time_series",
4866 - "select": [
4867 - [
4868 - {
4869 - "params": [
4870 - "rcode"
4871 - ],
4872 - "type": "field"
4873 5039 },
4874 5040 {
4875 5041 "params": [],
4876 - "type": "count"
5042 + "type": "cumulative_sum"
4877 5043 }
4878 5044 ]
4879 5045 ],
4880 - "tags": [
4881 - {
4882 - "key": "rcode::field",
4883 - "operator": "=",
4884 - "value": "3"
4885 - },
4886 - {
4887 - "condition": "AND",
4888 - "key": "direction::tag",
4889 - "operator": "=",
4890 - "value": "out_packet"
4891 - }
4892 - ]
5046 + "tags": []
4893 5047 },
4894 5048 "labels": {
4895 5049 "grafana.app/export-label": "influxdb-1"
4896 5050 }
4897 5051 },
4898 - "refId": "B",
5052 + "refId": "A",
4899 5053 "hidden": false
4900 5054 }
4901 5055 }
@@ -4906,25 +5060,25 @@
4906 5060 },
4907 5061 "vizConfig": {
4908 5062 "kind": "VizConfig",
4909 - "group": "timeseries",
5063 + "group": "stat",
4910 5064 "version": "13.0.1+security-01",
4911 5065 "spec": {
4912 5066 "options": {
4913 - "annotations": {
4914 - "clustering": -1,
4915 - "multiLane": false
4916 - },
4917 - "legend": {
4918 - "calcs": [],
4919 - "displayMode": "list",
4920 - "placement": "bottom",
4921 - "showLegend": true
5067 + "colorMode": "value",
5068 + "graphMode": "area",
5069 + "justifyMode": "auto",
5070 + "orientation": "auto",
5071 + "percentChangeColorMode": "standard",
5072 + "reduceOptions": {
5073 + "calcs": [
5074 + "lastNotNull"
5075 + ],
5076 + "fields": "",
5077 + "values": false
4922 5078 },
4923 - "tooltip": {
4924 - "hideZeros": false,
4925 - "mode": "single",
4926 - "sort": "none"
4927 - }
5079 + "showPercentChange": false,
5080 + "textMode": "auto",
5081 + "wideLayout": true
4928 5082 },
4929 5083 "fieldConfig": {
4930 5084 "defaults": {
@@ -4943,40 +5097,6 @@
4943 5097 },
4944 5098 "color": {
4945 5099 "mode": "palette-classic"
4946 - },
4947 - "custom": {
4948 - "axisBorderShow": false,
4949 - "axisCenteredZero": false,
4950 - "axisColorMode": "text",
4951 - "axisLabel": "",
4952 - "axisPlacement": "auto",
4953 - "barAlignment": 0,
4954 - "barWidthFactor": 0.6,
4955 - "drawStyle": "line",
4956 - "fillOpacity": 10,
4957 - "gradientMode": "none",
4958 - "hideFrom": {
4959 - "legend": false,
4960 - "tooltip": false,
4961 - "viz": false
4962 - },
4963 - "insertNulls": false,
4964 - "lineInterpolation": "smooth",
4965 - "lineWidth": 1,
4966 - "pointSize": 5,
4967 - "scaleDistribution": {
4968 - "type": "linear"
4969 - },
4970 - "showPoints": "auto",
4971 - "showValues": false,
4972 - "spanNulls": false,
4973 - "stacking": {
4974 - "group": "A",
4975 - "mode": "none"
4976 - },
4977 - "thresholdsStyle": {
4978 - "mode": "off"
4979 - }
4980 5100 }
4981 5101 },
4982 5102 "overrides": []
@@ -5359,20 +5479,20 @@
5359 5479 "spec": {
5360 5480 "x": 0,
5361 5481 "y": 89,
5362 - "width": 12,
5482 + "width": 14,
5363 5483 "height": 7,
5364 5484 "element": {
5365 5485 "kind": "ElementReference",
5366 - "name": "panel-7"
5486 + "name": "panel-29"
5367 5487 }
5368 5488 }
5369 5489 },
5370 5490 {
5371 5491 "kind": "GridLayoutItem",
5372 5492 "spec": {
5373 - "x": 12,
5493 + "x": 14,
5374 5494 "y": 89,
5375 - "width": 12,
5495 + "width": 10,
5376 5496 "height": 7,
5377 5497 "element": {
5378 5498 "kind": "ElementReference",
@@ -5386,10 +5506,10 @@
5386 5506 "x": 0,
5387 5507 "y": 96,
5388 5508 "width": 12,
5389 - "height": 8,
5509 + "height": 7,
5390 5510 "element": {
5391 5511 "kind": "ElementReference",
5392 - "name": "panel-2"
5512 + "name": "panel-7"
5393 5513 }
5394 5514 }
5395 5515 },
@@ -5410,12 +5530,12 @@
5410 5530 "kind": "GridLayoutItem",
5411 5531 "spec": {
5412 5532 "x": 0,
5413 - "y": 104,
5533 + "y": 103,
5414 5534 "width": 12,
5415 5535 "height": 8,
5416 5536 "element": {
5417 5537 "kind": "ElementReference",
5418 - "name": "panel-4"
5538 + "name": "panel-2"
5419 5539 }
5420 5540 }
5421 5541 },
@@ -5436,7 +5556,20 @@
5436 5556 "kind": "GridLayoutItem",
5437 5557 "spec": {
5438 5558 "x": 0,
5439 - "y": 112,
5559 + "y": 111,
5560 + "width": 12,
5561 + "height": 8,
5562 + "element": {
5563 + "kind": "ElementReference",
5564 + "name": "panel-4"
5565 + }
5566 + }
5567 + },
5568 + {
5569 + "kind": "GridLayoutItem",
5570 + "spec": {
5571 + "x": 0,
5572 + "y": 119,
5440 5573 "width": 12,
5441 5574 "height": 8,
5442 5575 "element": {
@@ -5449,7 +5582,7 @@
5449 5582 "kind": "GridLayoutItem",
5450 5583 "spec": {
5451 5584 "x": 0,
5452 - "y": 120,
5585 + "y": 127,
5453 5586 "width": 6,
5454 5587 "height": 8,
5455 5588 "element": {
@@ -5462,7 +5595,7 @@
5462 5595 "kind": "GridLayoutItem",
5463 5596 "spec": {
5464 5597 "x": 6,
5465 - "y": 120,
5598 + "y": 127,
5466 5599 "width": 18,
5467 5600 "height": 8,
5468 5601 "element": {

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 2 insertions, 2 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 46,
6 + "generation": 47,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -652,7 +652,7 @@
652 652 "group": "influxdb",
653 653 "version": "v0",
654 654 "spec": {
655 - "alias": "machine_login",
655 + "alias": "vfs_sync",
656 656 "groupBy": [
657 657 {
658 658 "params": [

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 192 insertions, 2 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 45,
6 + "generation": 46,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -3832,6 +3832,183 @@
3832 3832 }
3833 3833 }
3834 3834 },
3835 + "panel-28": {
3836 + "kind": "Panel",
3837 + "spec": {
3838 + "id": 28,
3839 + "title": "ebpf summ",
3840 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
3841 + "links": [],
3842 + "data": {
3843 + "kind": "QueryGroup",
3844 + "spec": {
3845 + "queries": [
3846 + {
3847 + "kind": "PanelQuery",
3848 + "spec": {
3849 + "query": {
3850 + "kind": "DataQuery",
3851 + "group": "influxdb",
3852 + "version": "v0",
3853 + "spec": {
3854 + "alias": "fsync",
3855 + "groupBy": [
3856 + {
3857 + "params": [
3858 + "$interval"
3859 + ],
3860 + "type": "time"
3861 + },
3862 + {
3863 + "params": [
3864 + "null"
3865 + ],
3866 + "type": "fill"
3867 + }
3868 + ],
3869 + "measurement": "samba_ebpf",
3870 + "orderByTime": "ASC",
3871 + "policy": "default",
3872 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3873 + "rawQuery": false,
3874 + "resultFormat": "time_series",
3875 + "select": [
3876 + [
3877 + {
3878 + "params": [
3879 + "fsync"
3880 + ],
3881 + "type": "field"
3882 + },
3883 + {
3884 + "params": [],
3885 + "type": "sum"
3886 + },
3887 + {
3888 + "params": [],
3889 + "type": "cumulative_sum"
3890 + }
3891 + ]
3892 + ],
3893 + "tags": []
3894 + },
3895 + "labels": {
3896 + "grafana.app/export-label": "influxdb-1"
3897 + }
3898 + },
3899 + "refId": "A",
3900 + "hidden": false
3901 + }
3902 + },
3903 + {
3904 + "kind": "PanelQuery",
3905 + "spec": {
3906 + "query": {
3907 + "kind": "DataQuery",
3908 + "group": "influxdb",
3909 + "version": "v0",
3910 + "spec": {
3911 + "alias": "ldb",
3912 + "groupBy": [
3913 + {
3914 + "params": [
3915 + "$interval"
3916 + ],
3917 + "type": "time"
3918 + },
3919 + {
3920 + "params": [
3921 + "null"
3922 + ],
3923 + "type": "fill"
3924 + }
3925 + ],
3926 + "measurement": "samba_ebpf",
3927 + "orderByTime": "ASC",
3928 + "policy": "default",
3929 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3930 + "rawQuery": false,
3931 + "resultFormat": "time_series",
3932 + "select": [
3933 + [
3934 + {
3935 + "params": [
3936 + "ldb"
3937 + ],
3938 + "type": "field"
3939 + },
3940 + {
3941 + "params": [],
3942 + "type": "sum"
3943 + },
3944 + {
3945 + "params": [],
3946 + "type": "cumulative_sum"
3947 + }
3948 + ]
3949 + ],
3950 + "tags": []
3951 + },
3952 + "labels": {
3953 + "grafana.app/export-label": "influxdb-1"
3954 + }
3955 + },
3956 + "refId": "B",
3957 + "hidden": false
3958 + }
3959 + }
3960 + ],
3961 + "transformations": [],
3962 + "queryOptions": {}
3963 + }
3964 + },
3965 + "vizConfig": {
3966 + "kind": "VizConfig",
3967 + "group": "stat",
3968 + "version": "13.0.1+security-01",
3969 + "spec": {
3970 + "options": {
3971 + "colorMode": "value",
3972 + "graphMode": "area",
3973 + "justifyMode": "auto",
3974 + "orientation": "auto",
3975 + "percentChangeColorMode": "standard",
3976 + "reduceOptions": {
3977 + "calcs": [
3978 + "lastNotNull"
3979 + ],
3980 + "fields": "",
3981 + "values": false
3982 + },
3983 + "showPercentChange": false,
3984 + "textMode": "auto",
3985 + "wideLayout": true
3986 + },
3987 + "fieldConfig": {
3988 + "defaults": {
3989 + "thresholds": {
3990 + "mode": "absolute",
3991 + "steps": [
3992 + {
3993 + "value": 0,
3994 + "color": "green"
3995 + },
3996 + {
3997 + "value": 80,
3998 + "color": "red"
3999 + }
4000 + ]
4001 + },
4002 + "color": {
4003 + "mode": "palette-classic"
4004 + }
4005 + },
4006 + "overrides": []
4007 + }
4008 + }
4009 + }
4010 + }
4011 + },
3835 4012 "panel-3": {
3836 4013 "kind": "Panel",
3837 4014 "spec": {
@@ -4974,7 +5151,20 @@
4974 5151 "spec": {
4975 5152 "x": 0,
4976 5153 "y": 20,
4977 - "width": 24,
5154 + "width": 9,
5155 + "height": 10,
5156 + "element": {
5157 + "kind": "ElementReference",
5158 + "name": "panel-28"
5159 + }
5160 + }
5161 + },
5162 + {
5163 + "kind": "GridLayoutItem",
5164 + "spec": {
5165 + "x": 9,
5166 + "y": 20,
5167 + "width": 15,
4978 5168 "height": 10,
4979 5169 "element": {
4980 5170 "kind": "ElementReference",

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 239 insertions, 23 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 44,
6 + "generation": 45,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -3629,6 +3629,209 @@
3629 3629 }
3630 3630 }
3631 3631 },
3632 + "panel-27": {
3633 + "kind": "Panel",
3634 + "spec": {
3635 + "id": 27,
3636 + "title": "ebpf",
3637 + "description": "",
3638 + "links": [],
3639 + "data": {
3640 + "kind": "QueryGroup",
3641 + "spec": {
3642 + "queries": [
3643 + {
3644 + "kind": "PanelQuery",
3645 + "spec": {
3646 + "query": {
3647 + "kind": "DataQuery",
3648 + "group": "influxdb",
3649 + "version": "v0",
3650 + "spec": {
3651 + "alias": "fsync",
3652 + "groupBy": [
3653 + {
3654 + "params": [
3655 + "$interval"
3656 + ],
3657 + "type": "time"
3658 + },
3659 + {
3660 + "params": [
3661 + "null"
3662 + ],
3663 + "type": "fill"
3664 + }
3665 + ],
3666 + "measurement": "samba_ebpf",
3667 + "orderByTime": "ASC",
3668 + "policy": "default",
3669 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3670 + "rawQuery": false,
3671 + "resultFormat": "time_series",
3672 + "select": [
3673 + [
3674 + {
3675 + "params": [
3676 + "fsync"
3677 + ],
3678 + "type": "field"
3679 + },
3680 + {
3681 + "params": [],
3682 + "type": "sum"
3683 + }
3684 + ]
3685 + ],
3686 + "tags": []
3687 + },
3688 + "labels": {
3689 + "grafana.app/export-label": "influxdb-1"
3690 + }
3691 + },
3692 + "refId": "A",
3693 + "hidden": false
3694 + }
3695 + },
3696 + {
3697 + "kind": "PanelQuery",
3698 + "spec": {
3699 + "query": {
3700 + "kind": "DataQuery",
3701 + "group": "influxdb",
3702 + "version": "v0",
3703 + "spec": {
3704 + "alias": "ldb",
3705 + "groupBy": [
3706 + {
3707 + "params": [
3708 + "$interval"
3709 + ],
3710 + "type": "time"
3711 + },
3712 + {
3713 + "params": [
3714 + "null"
3715 + ],
3716 + "type": "fill"
3717 + }
3718 + ],
3719 + "measurement": "samba_ebpf",
3720 + "orderByTime": "ASC",
3721 + "policy": "default",
3722 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3723 + "rawQuery": false,
3724 + "resultFormat": "time_series",
3725 + "select": [
3726 + [
3727 + {
3728 + "params": [
3729 + "ldb"
3730 + ],
3731 + "type": "field"
3732 + },
3733 + {
3734 + "params": [],
3735 + "type": "sum"
3736 + }
3737 + ]
3738 + ],
3739 + "tags": []
3740 + },
3741 + "labels": {
3742 + "grafana.app/export-label": "influxdb-1"
3743 + }
3744 + },
3745 + "refId": "B",
3746 + "hidden": false
3747 + }
3748 + }
3749 + ],
3750 + "transformations": [],
3751 + "queryOptions": {}
3752 + }
3753 + },
3754 + "vizConfig": {
3755 + "kind": "VizConfig",
3756 + "group": "timeseries",
3757 + "version": "13.0.1+security-01",
3758 + "spec": {
3759 + "options": {
3760 + "annotations": {
3761 + "clustering": -1,
3762 + "multiLane": false
3763 + },
3764 + "legend": {
3765 + "calcs": [],
3766 + "displayMode": "list",
3767 + "placement": "bottom",
3768 + "showLegend": true
3769 + },
3770 + "tooltip": {
3771 + "hideZeros": false,
3772 + "mode": "single",
3773 + "sort": "none"
3774 + }
3775 + },
3776 + "fieldConfig": {
3777 + "defaults": {
3778 + "thresholds": {
3779 + "mode": "absolute",
3780 + "steps": [
3781 + {
3782 + "value": 0,
3783 + "color": "green"
3784 + },
3785 + {
3786 + "value": 80,
3787 + "color": "red"
3788 + }
3789 + ]
3790 + },
3791 + "color": {
3792 + "mode": "palette-classic"
3793 + },
3794 + "custom": {
3795 + "axisBorderShow": false,
3796 + "axisCenteredZero": false,
3797 + "axisColorMode": "text",
3798 + "axisLabel": "",
3799 + "axisPlacement": "auto",
3800 + "barAlignment": 0,
3801 + "barWidthFactor": 0.6,
3802 + "drawStyle": "line",
3803 + "fillOpacity": 10,
3804 + "gradientMode": "none",
3805 + "hideFrom": {
3806 + "legend": false,
3807 + "tooltip": false,
3808 + "viz": false
3809 + },
3810 + "insertNulls": false,
3811 + "lineInterpolation": "smooth",
3812 + "lineWidth": 1,
3813 + "pointSize": 5,
3814 + "scaleDistribution": {
3815 + "type": "linear"
3816 + },
3817 + "showPoints": "auto",
3818 + "showValues": false,
3819 + "spanNulls": false,
3820 + "stacking": {
3821 + "group": "A",
3822 + "mode": "none"
3823 + },
3824 + "thresholdsStyle": {
3825 + "mode": "off"
3826 + }
3827 + }
3828 + },
3829 + "overrides": []
3830 + }
3831 + }
3832 + }
3833 + }
3834 + },
3632 3835 "panel-3": {
3633 3836 "kind": "Panel",
3634 3837 "spec": {
@@ -4771,6 +4974,19 @@
4771 4974 "spec": {
4772 4975 "x": 0,
4773 4976 "y": 20,
4977 + "width": 24,
4978 + "height": 10,
4979 + "element": {
4980 + "kind": "ElementReference",
4981 + "name": "panel-27"
4982 + }
4983 + }
4984 + },
4985 + {
4986 + "kind": "GridLayoutItem",
4987 + "spec": {
4988 + "x": 0,
4989 + "y": 30,
4774 4990 "width": 8,
4775 4991 "height": 11,
4776 4992 "element": {
@@ -4783,7 +4999,7 @@
4783 4999 "kind": "GridLayoutItem",
4784 5000 "spec": {
4785 5001 "x": 8,
4786 - "y": 20,
5002 + "y": 30,
4787 5003 "width": 16,
4788 5004 "height": 11,
4789 5005 "element": {
@@ -4796,7 +5012,7 @@
4796 5012 "kind": "GridLayoutItem",
4797 5013 "spec": {
4798 5014 "x": 0,
4799 - "y": 31,
5015 + "y": 41,
4800 5016 "width": 11,
4801 5017 "height": 11,
4802 5018 "element": {
@@ -4809,7 +5025,7 @@
4809 5025 "kind": "GridLayoutItem",
4810 5026 "spec": {
4811 5027 "x": 11,
4812 - "y": 31,
5028 + "y": 41,
4813 5029 "width": 13,
4814 5030 "height": 11,
4815 5031 "element": {
@@ -4822,7 +5038,7 @@
4822 5038 "kind": "GridLayoutItem",
4823 5039 "spec": {
4824 5040 "x": 0,
4825 - "y": 42,
5041 + "y": 52,
4826 5042 "width": 11,
4827 5043 "height": 10,
4828 5044 "element": {
@@ -4835,7 +5051,7 @@
4835 5051 "kind": "GridLayoutItem",
4836 5052 "spec": {
4837 5053 "x": 11,
4838 - "y": 42,
5054 + "y": 52,
4839 5055 "width": 13,
4840 5056 "height": 10,
4841 5057 "element": {
@@ -4848,7 +5064,7 @@
4848 5064 "kind": "GridLayoutItem",
4849 5065 "spec": {
4850 5066 "x": 0,
4851 - "y": 52,
5067 + "y": 62,
4852 5068 "width": 16,
4853 5069 "height": 10,
4854 5070 "element": {
@@ -4861,7 +5077,7 @@
4861 5077 "kind": "GridLayoutItem",
4862 5078 "spec": {
4863 5079 "x": 16,
4864 - "y": 52,
5080 + "y": 62,
4865 5081 "width": 8,
4866 5082 "height": 10,
4867 5083 "element": {
@@ -4874,7 +5090,7 @@
4874 5090 "kind": "GridLayoutItem",
4875 5091 "spec": {
4876 5092 "x": 0,
4877 - "y": 62,
5093 + "y": 72,
4878 5094 "width": 8,
4879 5095 "height": 9,
4880 5096 "element": {
@@ -4887,7 +5103,7 @@
4887 5103 "kind": "GridLayoutItem",
4888 5104 "spec": {
4889 5105 "x": 8,
4890 - "y": 62,
5106 + "y": 72,
4891 5107 "width": 9,
4892 5108 "height": 9,
4893 5109 "element": {
@@ -4900,7 +5116,7 @@
4900 5116 "kind": "GridLayoutItem",
4901 5117 "spec": {
4902 5118 "x": 17,
4903 - "y": 62,
5119 + "y": 72,
4904 5120 "width": 7,
4905 5121 "height": 9,
4906 5122 "element": {
@@ -4913,7 +5129,7 @@
4913 5129 "kind": "GridLayoutItem",
4914 5130 "spec": {
4915 5131 "x": 0,
4916 - "y": 71,
5132 + "y": 81,
4917 5133 "width": 8,
4918 5134 "height": 8,
4919 5135 "element": {
@@ -4926,7 +5142,7 @@
4926 5142 "kind": "GridLayoutItem",
4927 5143 "spec": {
4928 5144 "x": 8,
4929 - "y": 71,
5145 + "y": 81,
4930 5146 "width": 8,
4931 5147 "height": 8,
4932 5148 "element": {
@@ -4939,7 +5155,7 @@
4939 5155 "kind": "GridLayoutItem",
4940 5156 "spec": {
4941 5157 "x": 16,
4942 - "y": 71,
5158 + "y": 81,
4943 5159 "width": 8,
4944 5160 "height": 8,
4945 5161 "element": {
@@ -4952,7 +5168,7 @@
4952 5168 "kind": "GridLayoutItem",
4953 5169 "spec": {
4954 5170 "x": 0,
4955 - "y": 79,
5171 + "y": 89,
4956 5172 "width": 12,
4957 5173 "height": 7,
4958 5174 "element": {
@@ -4965,7 +5181,7 @@
4965 5181 "kind": "GridLayoutItem",
4966 5182 "spec": {
4967 5183 "x": 12,
4968 - "y": 79,
5184 + "y": 89,
4969 5185 "width": 12,
4970 5186 "height": 7,
4971 5187 "element": {
@@ -4978,7 +5194,7 @@
4978 5194 "kind": "GridLayoutItem",
4979 5195 "spec": {
4980 5196 "x": 0,
4981 - "y": 86,
5197 + "y": 96,
4982 5198 "width": 12,
4983 5199 "height": 8,
4984 5200 "element": {
@@ -4991,7 +5207,7 @@
4991 5207 "kind": "GridLayoutItem",
4992 5208 "spec": {
4993 5209 "x": 12,
4994 - "y": 86,
5210 + "y": 96,
4995 5211 "width": 12,
4996 5212 "height": 8,
4997 5213 "element": {
@@ -5004,7 +5220,7 @@
5004 5220 "kind": "GridLayoutItem",
5005 5221 "spec": {
5006 5222 "x": 0,
5007 - "y": 94,
5223 + "y": 104,
5008 5224 "width": 12,
5009 5225 "height": 8,
5010 5226 "element": {
@@ -5017,7 +5233,7 @@
5017 5233 "kind": "GridLayoutItem",
5018 5234 "spec": {
5019 5235 "x": 12,
5020 - "y": 94,
5236 + "y": 104,
5021 5237 "width": 12,
5022 5238 "height": 8,
5023 5239 "element": {
@@ -5030,7 +5246,7 @@
5030 5246 "kind": "GridLayoutItem",
5031 5247 "spec": {
5032 5248 "x": 0,
5033 - "y": 102,
5249 + "y": 112,
5034 5250 "width": 12,
5035 5251 "height": 8,
5036 5252 "element": {
@@ -5043,7 +5259,7 @@
5043 5259 "kind": "GridLayoutItem",
5044 5260 "spec": {
5045 5261 "x": 0,
5046 - "y": 110,
5262 + "y": 120,
5047 5263 "width": 6,
5048 5264 "height": 8,
5049 5265 "element": {
@@ -5056,7 +5272,7 @@
5056 5272 "kind": "GridLayoutItem",
5057 5273 "spec": {
5058 5274 "x": 6,
5059 - "y": 110,
5275 + "y": 120,
5060 5276 "width": 18,
5061 5277 "height": 8,
5062 5278 "element": {

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 344 insertions, 174 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 43,
6 + "generation": 44,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -1166,112 +1166,6 @@
1166 1166 "refId": "F",
1167 1167 "hidden": false
1168 1168 }
1169 - },
1170 - {
1171 - "kind": "PanelQuery",
1172 - "spec": {
1173 - "query": {
1174 - "kind": "DataQuery",
1175 - "group": "influxdb",
1176 - "version": "v0",
1177 - "spec": {
1178 - "alias": "in",
1179 - "groupBy": [
1180 - {
1181 - "params": [
1182 - "$interval"
1183 - ],
1184 - "type": "time"
1185 - },
1186 - {
1187 - "params": [
1188 - "null"
1189 - ],
1190 - "type": "fill"
1191 - }
1192 - ],
1193 - "measurement": "host_vmstat",
1194 - "orderByTime": "ASC",
1195 - "policy": "default",
1196 - "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1197 - "rawQuery": false,
1198 - "resultFormat": "time_series",
1199 - "select": [
1200 - [
1201 - {
1202 - "params": [
1203 - "intr"
1204 - ],
1205 - "type": "field"
1206 - },
1207 - {
1208 - "params": [],
1209 - "type": "sum"
1210 - }
1211 - ]
1212 - ],
1213 - "tags": []
1214 - },
1215 - "labels": {
1216 - "grafana.app/export-label": "influxdb-1"
1217 - }
1218 - },
1219 - "refId": "C",
1220 - "hidden": false
1221 - }
1222 - },
1223 - {
1224 - "kind": "PanelQuery",
1225 - "spec": {
1226 - "query": {
1227 - "kind": "DataQuery",
1228 - "group": "influxdb",
1229 - "version": "v0",
1230 - "spec": {
1231 - "alias": "id",
1232 - "groupBy": [
1233 - {
1234 - "params": [
1235 - "$interval"
1236 - ],
1237 - "type": "time"
1238 - },
1239 - {
1240 - "params": [
1241 - "null"
1242 - ],
1243 - "type": "fill"
1244 - }
1245 - ],
1246 - "measurement": "host_vmstat",
1247 - "orderByTime": "ASC",
1248 - "policy": "default",
1249 - "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1250 - "rawQuery": false,
1251 - "resultFormat": "time_series",
1252 - "select": [
1253 - [
1254 - {
1255 - "params": [
1256 - "idle"
1257 - ],
1258 - "type": "field"
1259 - },
1260 - {
1261 - "params": [],
1262 - "type": "sum"
1263 - }
1264 - ]
1265 - ],
1266 - "tags": []
1267 - },
1268 - "labels": {
1269 - "grafana.app/export-label": "influxdb-1"
1270 - }
1271 - },
1272 - "refId": "D",
1273 - "hidden": false
1274 - }
1275 1169 }
1276 1170 ],
1277 1171 "transformations": [],
@@ -1353,32 +1247,7 @@
1353 1247 }
1354 1248 }
1355 1249 },
1356 - "overrides": [
1357 - {
1358 - "__systemRef": "hideSeriesFrom",
1359 - "matcher": {
1360 - "id": "byNames",
1361 - "options": {
1362 - "mode": "exclude",
1363 - "names": [
1364 - "bo"
1365 - ],
1366 - "prefix": "All except:",
1367 - "readOnly": true
1368 - }
1369 - },
1370 - "properties": [
1371 - {
1372 - "id": "custom.hideFrom",
1373 - "value": {
1374 - "legend": false,
1375 - "tooltip": true,
1376 - "viz": true
1377 - }
1378 - }
1379 - ]
1380 - }
1381 - ]
1250 + "overrides": []
1382 1251 }
1383 1252 }
1384 1253 }
@@ -2072,7 +1941,7 @@
2072 1941 "group": "influxdb",
2073 1942 "version": "v0",
2074 1943 "spec": {
2075 - "alias": "MEM",
1944 + "alias": "%MEM",
2076 1945 "groupBy": [
2077 1946 {
2078 1947 "params": [
@@ -2203,32 +2072,7 @@
2203 2072 }
2204 2073 }
2205 2074 },
2206 - "overrides": [
2207 - {
2208 - "__systemRef": "hideSeriesFrom",
2209 - "matcher": {
2210 - "id": "byNames",
2211 - "options": {
2212 - "mode": "exclude",
2213 - "names": [
2214 - "MEM"
2215 - ],
2216 - "prefix": "All except:",
2217 - "readOnly": true
2218 - }
2219 - },
2220 - "properties": [
2221 - {
2222 - "id": "custom.hideFrom",
2223 - "value": {
2224 - "legend": false,
2225 - "tooltip": true,
2226 - "viz": true
2227 - }
2228 - }
2229 - ]
2230 - }
2231 - ]
2075 + "overrides": []
2232 2076 }
2233 2077 }
2234 2078 }
@@ -3485,6 +3329,306 @@
3485 3329 }
3486 3330 }
3487 3331 },
3332 + "panel-25": {
3333 + "kind": "Panel",
3334 + "spec": {
3335 + "id": 25,
3336 + "title": "vmstat idle",
3337 + "description": "si=Swap In, Объем данных в КБ/сек, считываемый из свопа обратно в ОЗУ. Высокое значение = жесткие тормоза.\nso=Swap Out, Объем данных в КБ/сек, сбрасываемый из ОЗУ в своп на диск из-за нехватки памяти.\n\nbi=Blocks In, Количество блоков, считанных с диска в КБ/сек. Показывает активность чтения.\nbo=Blocks Out, Количество блоков, записанных на диск в КБ/сек. Связано с операциями W, CW и fsync.\n\nin=Interrupts, Количество аппаратных прерываний в секунду, включая системные часы.\n\nid=Idle Time, Процент времени, когда CPU ничем не занят. Если около 0 — процессор загружен полностью.",
3338 + "links": [],
3339 + "data": {
3340 + "kind": "QueryGroup",
3341 + "spec": {
3342 + "queries": [
3343 + {
3344 + "kind": "PanelQuery",
3345 + "spec": {
3346 + "query": {
3347 + "kind": "DataQuery",
3348 + "group": "influxdb",
3349 + "version": "v0",
3350 + "spec": {
3351 + "alias": "idle",
3352 + "groupBy": [
3353 + {
3354 + "params": [
3355 + "$interval"
3356 + ],
3357 + "type": "time"
3358 + },
3359 + {
3360 + "params": [
3361 + "null"
3362 + ],
3363 + "type": "fill"
3364 + }
3365 + ],
3366 + "measurement": "host_vmstat",
3367 + "orderByTime": "ASC",
3368 + "policy": "default",
3369 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3370 + "rawQuery": false,
3371 + "resultFormat": "time_series",
3372 + "select": [
3373 + [
3374 + {
3375 + "params": [
3376 + "idle"
3377 + ],
3378 + "type": "field"
3379 + },
3380 + {
3381 + "params": [],
3382 + "type": "sum"
3383 + }
3384 + ]
3385 + ],
3386 + "tags": []
3387 + },
3388 + "labels": {
3389 + "grafana.app/export-label": "influxdb-1"
3390 + }
3391 + },
3392 + "refId": "D",
3393 + "hidden": false
3394 + }
3395 + }
3396 + ],
3397 + "transformations": [],
3398 + "queryOptions": {}
3399 + }
3400 + },
3401 + "vizConfig": {
3402 + "kind": "VizConfig",
3403 + "group": "timeseries",
3404 + "version": "13.0.1+security-01",
3405 + "spec": {
3406 + "options": {
3407 + "annotations": {
3408 + "clustering": -1,
3409 + "multiLane": false
3410 + },
3411 + "legend": {
3412 + "calcs": [],
3413 + "displayMode": "list",
3414 + "placement": "bottom",
3415 + "showLegend": true
3416 + },
3417 + "tooltip": {
3418 + "hideZeros": false,
3419 + "mode": "single",
3420 + "sort": "none"
3421 + }
3422 + },
3423 + "fieldConfig": {
3424 + "defaults": {
3425 + "thresholds": {
3426 + "mode": "absolute",
3427 + "steps": [
3428 + {
3429 + "value": 0,
3430 + "color": "green"
3431 + },
3432 + {
3433 + "value": 80,
3434 + "color": "red"
3435 + }
3436 + ]
3437 + },
3438 + "color": {
3439 + "mode": "palette-classic"
3440 + },
3441 + "custom": {
3442 + "axisBorderShow": false,
3443 + "axisCenteredZero": false,
3444 + "axisColorMode": "text",
3445 + "axisLabel": "",
3446 + "axisPlacement": "auto",
3447 + "barAlignment": 0,
3448 + "barWidthFactor": 0.6,
3449 + "drawStyle": "line",
3450 + "fillOpacity": 10,
3451 + "gradientMode": "none",
3452 + "hideFrom": {
3453 + "legend": false,
3454 + "tooltip": false,
3455 + "viz": false
3456 + },
3457 + "insertNulls": false,
3458 + "lineInterpolation": "smooth",
3459 + "lineWidth": 1,
3460 + "pointSize": 5,
3461 + "scaleDistribution": {
3462 + "type": "linear"
3463 + },
3464 + "showPoints": "auto",
3465 + "showValues": false,
3466 + "spanNulls": false,
3467 + "stacking": {
3468 + "group": "A",
3469 + "mode": "none"
3470 + },
3471 + "thresholdsStyle": {
3472 + "mode": "off"
3473 + }
3474 + }
3475 + },
3476 + "overrides": []
3477 + }
3478 + }
3479 + }
3480 + }
3481 + },
3482 + "panel-26": {
3483 + "kind": "Panel",
3484 + "spec": {
3485 + "id": 26,
3486 + "title": "vmstat interrupts",
3487 + "description": "si=Swap In, Объем данных в КБ/сек, считываемый из свопа обратно в ОЗУ. Высокое значение = жесткие тормоза.\nso=Swap Out, Объем данных в КБ/сек, сбрасываемый из ОЗУ в своп на диск из-за нехватки памяти.\n\nbi=Blocks In, Количество блоков, считанных с диска в КБ/сек. Показывает активность чтения.\nbo=Blocks Out, Количество блоков, записанных на диск в КБ/сек. Связано с операциями W, CW и fsync.\n\nin=Interrupts, Количество аппаратных прерываний в секунду, включая системные часы.\n\nid=Idle Time, Процент времени, когда CPU ничем не занят. Если около 0 — процессор загружен полностью.",
3488 + "links": [],
3489 + "data": {
3490 + "kind": "QueryGroup",
3491 + "spec": {
3492 + "queries": [
3493 + {
3494 + "kind": "PanelQuery",
3495 + "spec": {
3496 + "query": {
3497 + "kind": "DataQuery",
3498 + "group": "influxdb",
3499 + "version": "v0",
3500 + "spec": {
3501 + "alias": "in",
3502 + "groupBy": [
3503 + {
3504 + "params": [
3505 + "$interval"
3506 + ],
3507 + "type": "time"
3508 + },
3509 + {
3510 + "params": [
3511 + "null"
3512 + ],
3513 + "type": "fill"
3514 + }
3515 + ],
3516 + "measurement": "host_vmstat",
3517 + "orderByTime": "ASC",
3518 + "policy": "default",
3519 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3520 + "rawQuery": false,
3521 + "resultFormat": "time_series",
3522 + "select": [
3523 + [
3524 + {
3525 + "params": [
3526 + "intr"
3527 + ],
3528 + "type": "field"
3529 + },
3530 + {
3531 + "params": [],
3532 + "type": "sum"
3533 + }
3534 + ]
3535 + ],
3536 + "tags": []
3537 + },
3538 + "labels": {
3539 + "grafana.app/export-label": "influxdb-1"
3540 + }
3541 + },
3542 + "refId": "C",
3543 + "hidden": false
3544 + }
3545 + }
3546 + ],
3547 + "transformations": [],
3548 + "queryOptions": {}
3549 + }
3550 + },
3551 + "vizConfig": {
3552 + "kind": "VizConfig",
3553 + "group": "timeseries",
3554 + "version": "13.0.1+security-01",
3555 + "spec": {
3556 + "options": {
3557 + "annotations": {
3558 + "clustering": -1,
3559 + "multiLane": false
3560 + },
3561 + "legend": {
3562 + "calcs": [],
3563 + "displayMode": "list",
3564 + "placement": "bottom",
3565 + "showLegend": true
3566 + },
3567 + "tooltip": {
3568 + "hideZeros": false,
3569 + "mode": "single",
3570 + "sort": "none"
3571 + }
3572 + },
3573 + "fieldConfig": {
3574 + "defaults": {
3575 + "thresholds": {
3576 + "mode": "absolute",
3577 + "steps": [
3578 + {
3579 + "value": 0,
3580 + "color": "green"
3581 + },
3582 + {
3583 + "value": 80,
3584 + "color": "red"
3585 + }
3586 + ]
3587 + },
3588 + "color": {
3589 + "mode": "palette-classic"
3590 + },
3591 + "custom": {
3592 + "axisBorderShow": false,
3593 + "axisCenteredZero": false,
3594 + "axisColorMode": "text",
3595 + "axisLabel": "",
3596 + "axisPlacement": "auto",
3597 + "barAlignment": 0,
3598 + "barWidthFactor": 0.6,
3599 + "drawStyle": "line",
3600 + "fillOpacity": 10,
3601 + "gradientMode": "none",
3602 + "hideFrom": {
3603 + "legend": false,
3604 + "tooltip": false,
3605 + "viz": false
3606 + },
3607 + "insertNulls": false,
3608 + "lineInterpolation": "smooth",
3609 + "lineWidth": 1,
3610 + "pointSize": 5,
3611 + "scaleDistribution": {
3612 + "type": "linear"
3613 + },
3614 + "showPoints": "auto",
3615 + "showValues": false,
3616 + "spanNulls": false,
3617 + "stacking": {
3618 + "group": "A",
3619 + "mode": "none"
3620 + },
3621 + "thresholdsStyle": {
3622 + "mode": "off"
3623 + }
3624 + }
3625 + },
3626 + "overrides": []
3627 + }
3628 + }
3629 + }
3630 + }
3631 + },
3488 3632 "panel-3": {
3489 3633 "kind": "Panel",
3490 3634 "spec": {
@@ -4731,19 +4875,45 @@
4731 4875 "spec": {
4732 4876 "x": 0,
4733 4877 "y": 62,
4734 - "width": 24,
4735 - "height": 10,
4878 + "width": 8,
4879 + "height": 9,
4736 4880 "element": {
4737 4881 "kind": "ElementReference",
4738 4882 "name": "panel-14"
4739 4883 }
4740 4884 }
4741 4885 },
4886 + {
4887 + "kind": "GridLayoutItem",
4888 + "spec": {
4889 + "x": 8,
4890 + "y": 62,
4891 + "width": 9,
4892 + "height": 9,
4893 + "element": {
4894 + "kind": "ElementReference",
4895 + "name": "panel-26"
4896 + }
4897 + }
4898 + },
4899 + {
4900 + "kind": "GridLayoutItem",
4901 + "spec": {
4902 + "x": 17,
4903 + "y": 62,
4904 + "width": 7,
4905 + "height": 9,
4906 + "element": {
4907 + "kind": "ElementReference",
4908 + "name": "panel-25"
4909 + }
4910 + }
4911 + },
4742 4912 {
4743 4913 "kind": "GridLayoutItem",
4744 4914 "spec": {
4745 4915 "x": 0,
4746 - "y": 72,
4916 + "y": 71,
4747 4917 "width": 8,
4748 4918 "height": 8,
4749 4919 "element": {
@@ -4756,7 +4926,7 @@
4756 4926 "kind": "GridLayoutItem",
4757 4927 "spec": {
4758 4928 "x": 8,
4759 - "y": 72,
4929 + "y": 71,
4760 4930 "width": 8,
4761 4931 "height": 8,
4762 4932 "element": {
@@ -4769,7 +4939,7 @@
4769 4939 "kind": "GridLayoutItem",
4770 4940 "spec": {
4771 4941 "x": 16,
4772 - "y": 72,
4942 + "y": 71,
4773 4943 "width": 8,
4774 4944 "height": 8,
4775 4945 "element": {
@@ -4782,7 +4952,7 @@
4782 4952 "kind": "GridLayoutItem",
4783 4953 "spec": {
4784 4954 "x": 0,
4785 - "y": 80,
4955 + "y": 79,
4786 4956 "width": 12,
4787 4957 "height": 7,
4788 4958 "element": {
@@ -4795,7 +4965,7 @@
4795 4965 "kind": "GridLayoutItem",
4796 4966 "spec": {
4797 4967 "x": 12,
4798 - "y": 80,
4968 + "y": 79,
4799 4969 "width": 12,
4800 4970 "height": 7,
4801 4971 "element": {
@@ -4808,7 +4978,7 @@
4808 4978 "kind": "GridLayoutItem",
4809 4979 "spec": {
4810 4980 "x": 0,
4811 - "y": 87,
4981 + "y": 86,
4812 4982 "width": 12,
4813 4983 "height": 8,
4814 4984 "element": {
@@ -4821,7 +4991,7 @@
4821 4991 "kind": "GridLayoutItem",
4822 4992 "spec": {
4823 4993 "x": 12,
4824 - "y": 87,
4994 + "y": 86,
4825 4995 "width": 12,
4826 4996 "height": 8,
4827 4997 "element": {
@@ -4834,7 +5004,7 @@
4834 5004 "kind": "GridLayoutItem",
4835 5005 "spec": {
4836 5006 "x": 0,
4837 - "y": 95,
5007 + "y": 94,
4838 5008 "width": 12,
4839 5009 "height": 8,
4840 5010 "element": {
@@ -4847,7 +5017,7 @@
4847 5017 "kind": "GridLayoutItem",
4848 5018 "spec": {
4849 5019 "x": 12,
4850 - "y": 95,
5020 + "y": 94,
4851 5021 "width": 12,
4852 5022 "height": 8,
4853 5023 "element": {
@@ -4860,7 +5030,7 @@
4860 5030 "kind": "GridLayoutItem",
4861 5031 "spec": {
4862 5032 "x": 0,
4863 - "y": 103,
5033 + "y": 102,
4864 5034 "width": 12,
4865 5035 "height": 8,
4866 5036 "element": {
@@ -4873,7 +5043,7 @@
4873 5043 "kind": "GridLayoutItem",
4874 5044 "spec": {
4875 5045 "x": 0,
4876 - "y": 111,
5046 + "y": 110,
4877 5047 "width": 6,
4878 5048 "height": 8,
4879 5049 "element": {
@@ -4886,7 +5056,7 @@
4886 5056 "kind": "GridLayoutItem",
4887 5057 "spec": {
4888 5058 "x": 6,
4889 - "y": 111,
5059 + "y": 110,
4890 5060 "width": 18,
4891 5061 "height": 8,
4892 5062 "element": {

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 5 insertions, 5 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 42,
6 + "generation": 43,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -441,11 +441,11 @@
441 441 "group": "influxdb",
442 442 "version": "v0",
443 443 "spec": {
444 - "alias": "machine_login_5m",
444 + "alias": "machine_logins",
445 445 "groupBy": [
446 446 {
447 447 "params": [
448 - "5m"
448 + "$interval"
449 449 ],
450 450 "type": "time"
451 451 },
@@ -512,11 +512,11 @@
512 512 "group": "influxdb",
513 513 "version": "v0",
514 514 "spec": {
515 - "alias": "user_login_5m",
515 + "alias": "user_logins",
516 516 "groupBy": [
517 517 {
518 518 "params": [
519 - "5m"
519 + "$interval"
520 520 ],
521 521 "type": "time"
522 522 },

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 1567 insertions, 107 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 35,
6 + "generation": 42,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -787,8 +787,8 @@
787 787 "kind": "Panel",
788 788 "spec": {
789 789 "id": 13,
790 - "title": "ldb ops",
791 - "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\nRO=Read Only (Открытие файла строго для чтения)\nR=Read (Чтение данных из файла)\nW=Write (Запись измененных данных в кэш памяти)\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
790 + "title": "ldb ops process operation",
791 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
792 792 "links": [],
793 793 "data": {
794 794 "kind": "QueryGroup",
@@ -1512,65 +1512,6 @@
1512 1512 "refId": "B",
1513 1513 "hidden": false
1514 1514 }
1515 - },
1516 - {
1517 - "kind": "PanelQuery",
1518 - "spec": {
1519 - "query": {
1520 - "kind": "DataQuery",
1521 - "group": "influxdb",
1522 - "version": "v0",
1523 - "spec": {
1524 - "alias": "MEM",
1525 - "groupBy": [
1526 - {
1527 - "params": [
1528 - "$interval"
1529 - ],
1530 - "type": "time"
1531 - },
1532 - {
1533 - "params": [
1534 - "comm::tag"
1535 - ],
1536 - "type": "tag"
1537 - },
1538 - {
1539 - "params": [
1540 - "null"
1541 - ],
1542 - "type": "fill"
1543 - }
1544 - ],
1545 - "measurement": "samba_pidstat",
1546 - "orderByTime": "ASC",
1547 - "policy": "default",
1548 - "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1549 - "rawQuery": false,
1550 - "resultFormat": "time_series",
1551 - "select": [
1552 - [
1553 - {
1554 - "params": [
1555 - "mem"
1556 - ],
1557 - "type": "field"
1558 - },
1559 - {
1560 - "params": [],
1561 - "type": "median"
1562 - }
1563 - ]
1564 - ],
1565 - "tags": []
1566 - },
1567 - "labels": {
1568 - "grafana.app/export-label": "influxdb-1"
1569 - }
1570 - },
1571 - "refId": "C",
1572 - "hidden": false
1573 - }
1574 1515 }
1575 1516 ],
1576 1517 "transformations": [],
@@ -1687,8 +1628,8 @@
1687 1628 "kind": "Panel",
1688 1629 "spec": {
1689 1630 "id": 16,
1690 - "title": "ldb ops2",
1691 - "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\nRO=Read Only (Открытие файла строго для чтения)\nR=Read (Чтение данных из файла)\nW=Write (Запись измененных данных в кэш памяти)\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
1631 + "title": "ldb ops operation",
1632 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
1692 1633 "links": [],
1693 1634 "data": {
1694 1635 "kind": "QueryGroup",
@@ -1842,8 +1783,8 @@
1842 1783 "kind": "Panel",
1843 1784 "spec": {
1844 1785 "id": 17,
1845 - "title": "Iostat",
1846 - "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\nRO=Read Only (Открытие файла строго для чтения)\nR=Read (Чтение данных из файла)\nW=Write (Запись измененных данных в кэш памяти)\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
1786 + "title": "Iostat await",
1787 + "description": "",
1847 1788 "links": [],
1848 1789 "data": {
1849 1790 "kind": "QueryGroup",
@@ -1857,6 +1798,7 @@
1857 1798 "group": "influxdb",
1858 1799 "version": "v0",
1859 1800 "spec": {
1801 + "alias": "$tag_device f_await",
1860 1802 "groupBy": [
1861 1803 {
1862 1804 "params": [
@@ -1866,7 +1808,7 @@
1866 1808 },
1867 1809 {
1868 1810 "params": [
1869 - "action::tag"
1811 + "device::tag"
1870 1812 ],
1871 1813 "type": "tag"
1872 1814 },
@@ -1887,13 +1829,1289 @@
1887 1829 [
1888 1830 {
1889 1831 "params": [
1890 - "path"
1832 + "f_await"
1833 + ],
1834 + "type": "field"
1835 + },
1836 + {
1837 + "params": [],
1838 + "type": "mean"
1839 + }
1840 + ]
1841 + ],
1842 + "tags": []
1843 + },
1844 + "labels": {
1845 + "grafana.app/export-label": "influxdb-1"
1846 + }
1847 + },
1848 + "refId": "A",
1849 + "hidden": false
1850 + }
1851 + },
1852 + {
1853 + "kind": "PanelQuery",
1854 + "spec": {
1855 + "query": {
1856 + "kind": "DataQuery",
1857 + "group": "influxdb",
1858 + "version": "v0",
1859 + "spec": {
1860 + "alias": "$tag_device r_await",
1861 + "groupBy": [
1862 + {
1863 + "params": [
1864 + "$interval"
1865 + ],
1866 + "type": "time"
1867 + },
1868 + {
1869 + "params": [
1870 + "device::tag"
1871 + ],
1872 + "type": "tag"
1873 + },
1874 + {
1875 + "params": [
1876 + "null"
1877 + ],
1878 + "type": "fill"
1879 + }
1880 + ],
1881 + "measurement": "host_iostat",
1882 + "orderByTime": "ASC",
1883 + "policy": "default",
1884 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1885 + "rawQuery": false,
1886 + "resultFormat": "time_series",
1887 + "select": [
1888 + [
1889 + {
1890 + "params": [
1891 + "r_await"
1892 + ],
1893 + "type": "field"
1894 + },
1895 + {
1896 + "params": [],
1897 + "type": "mean"
1898 + }
1899 + ]
1900 + ],
1901 + "tags": []
1902 + },
1903 + "labels": {
1904 + "grafana.app/export-label": "influxdb-1"
1905 + }
1906 + },
1907 + "refId": "B",
1908 + "hidden": false
1909 + }
1910 + },
1911 + {
1912 + "kind": "PanelQuery",
1913 + "spec": {
1914 + "query": {
1915 + "kind": "DataQuery",
1916 + "group": "influxdb",
1917 + "version": "v0",
1918 + "spec": {
1919 + "alias": "$tag_device w_await",
1920 + "groupBy": [
1921 + {
1922 + "params": [
1923 + "$interval"
1924 + ],
1925 + "type": "time"
1926 + },
1927 + {
1928 + "params": [
1929 + "device::tag"
1930 + ],
1931 + "type": "tag"
1932 + },
1933 + {
1934 + "params": [
1935 + "null"
1936 + ],
1937 + "type": "fill"
1938 + }
1939 + ],
1940 + "measurement": "host_iostat",
1941 + "orderByTime": "ASC",
1942 + "policy": "default",
1943 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1944 + "rawQuery": false,
1945 + "resultFormat": "time_series",
1946 + "select": [
1947 + [
1948 + {
1949 + "params": [
1950 + "w_await"
1951 + ],
1952 + "type": "field"
1953 + },
1954 + {
1955 + "params": [],
1956 + "type": "mean"
1957 + }
1958 + ]
1959 + ],
1960 + "tags": []
1961 + },
1962 + "labels": {
1963 + "grafana.app/export-label": "influxdb-1"
1964 + }
1965 + },
1966 + "refId": "C",
1967 + "hidden": false
1968 + }
1969 + }
1970 + ],
1971 + "transformations": [],
1972 + "queryOptions": {}
1973 + }
1974 + },
1975 + "vizConfig": {
1976 + "kind": "VizConfig",
1977 + "group": "timeseries",
1978 + "version": "13.0.1+security-01",
1979 + "spec": {
1980 + "options": {
1981 + "annotations": {
1982 + "clustering": -1,
1983 + "multiLane": false
1984 + },
1985 + "legend": {
1986 + "calcs": [],
1987 + "displayMode": "list",
1988 + "placement": "bottom",
1989 + "showLegend": true
1990 + },
1991 + "tooltip": {
1992 + "hideZeros": false,
1993 + "mode": "single",
1994 + "sort": "none"
1995 + }
1996 + },
1997 + "fieldConfig": {
1998 + "defaults": {
1999 + "thresholds": {
2000 + "mode": "absolute",
2001 + "steps": [
2002 + {
2003 + "value": 0,
2004 + "color": "green"
2005 + },
2006 + {
2007 + "value": 80,
2008 + "color": "red"
2009 + }
2010 + ]
2011 + },
2012 + "color": {
2013 + "mode": "palette-classic"
2014 + },
2015 + "custom": {
2016 + "axisBorderShow": false,
2017 + "axisCenteredZero": false,
2018 + "axisColorMode": "text",
2019 + "axisLabel": "",
2020 + "axisPlacement": "auto",
2021 + "barAlignment": 0,
2022 + "barWidthFactor": 0.6,
2023 + "drawStyle": "line",
2024 + "fillOpacity": 0,
2025 + "gradientMode": "none",
2026 + "hideFrom": {
2027 + "legend": false,
2028 + "tooltip": false,
2029 + "viz": false
2030 + },
2031 + "insertNulls": false,
2032 + "lineInterpolation": "linear",
2033 + "lineWidth": 1,
2034 + "pointSize": 5,
2035 + "scaleDistribution": {
2036 + "type": "linear"
2037 + },
2038 + "showPoints": "auto",
2039 + "showValues": false,
2040 + "spanNulls": false,
2041 + "stacking": {
2042 + "group": "A",
2043 + "mode": "none"
2044 + },
2045 + "thresholdsStyle": {
2046 + "mode": "off"
2047 + }
2048 + }
2049 + },
2050 + "overrides": []
2051 + }
2052 + }
2053 + }
2054 + }
2055 + },
2056 + "panel-18": {
2057 + "kind": "Panel",
2058 + "spec": {
2059 + "id": 18,
2060 + "title": "pidstat mem",
2061 + "description": "minflt/s = Скорость работы с ОЗУ. Сколько раз в секунду процесс запрашивал данные, \n которые ядро Linux успешно выдало из оперативной памяти (из кэша).\n Высокое значение — это норма при активных вычислениях или LDAP-запросах.\n\nmajflt/s = Скорость просадки на диск. Сколько раз в секунду процесс лез за данными \n на физический диск (или в SWAP), потому что их не оказалость в ОЗУ.\n В идеале должно быть равно 0. Если число растет — сервер сильно тормозит.\n\n%MEM = Процент ОЗУ. Доля оперативной памяти сервера, которую съел этот PID.",
2062 + "links": [],
2063 + "data": {
2064 + "kind": "QueryGroup",
2065 + "spec": {
2066 + "queries": [
2067 + {
2068 + "kind": "PanelQuery",
2069 + "spec": {
2070 + "query": {
2071 + "kind": "DataQuery",
2072 + "group": "influxdb",
2073 + "version": "v0",
2074 + "spec": {
2075 + "alias": "MEM",
2076 + "groupBy": [
2077 + {
2078 + "params": [
2079 + "$interval"
2080 + ],
2081 + "type": "time"
2082 + },
2083 + {
2084 + "params": [
2085 + "comm::tag"
2086 + ],
2087 + "type": "tag"
2088 + },
2089 + {
2090 + "params": [
2091 + "null"
2092 + ],
2093 + "type": "fill"
2094 + }
2095 + ],
2096 + "measurement": "samba_pidstat",
2097 + "orderByTime": "ASC",
2098 + "policy": "default",
2099 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2100 + "rawQuery": false,
2101 + "resultFormat": "time_series",
2102 + "select": [
2103 + [
2104 + {
2105 + "params": [
2106 + "mem"
2107 + ],
2108 + "type": "field"
2109 + },
2110 + {
2111 + "params": [],
2112 + "type": "median"
2113 + }
2114 + ]
2115 + ],
2116 + "tags": []
2117 + },
2118 + "labels": {
2119 + "grafana.app/export-label": "influxdb-1"
2120 + }
2121 + },
2122 + "refId": "C",
2123 + "hidden": false
2124 + }
2125 + }
2126 + ],
2127 + "transformations": [],
2128 + "queryOptions": {}
2129 + }
2130 + },
2131 + "vizConfig": {
2132 + "kind": "VizConfig",
2133 + "group": "timeseries",
2134 + "version": "13.0.1+security-01",
2135 + "spec": {
2136 + "options": {
2137 + "annotations": {
2138 + "clustering": -1,
2139 + "multiLane": false
2140 + },
2141 + "legend": {
2142 + "calcs": [],
2143 + "displayMode": "list",
2144 + "placement": "bottom",
2145 + "showLegend": true
2146 + },
2147 + "tooltip": {
2148 + "hideZeros": false,
2149 + "mode": "single",
2150 + "sort": "none"
2151 + }
2152 + },
2153 + "fieldConfig": {
2154 + "defaults": {
2155 + "thresholds": {
2156 + "mode": "absolute",
2157 + "steps": [
2158 + {
2159 + "value": 0,
2160 + "color": "green"
2161 + },
2162 + {
2163 + "value": 80,
2164 + "color": "red"
2165 + }
2166 + ]
2167 + },
2168 + "color": {
2169 + "mode": "palette-classic"
2170 + },
2171 + "custom": {
2172 + "axisBorderShow": false,
2173 + "axisCenteredZero": false,
2174 + "axisColorMode": "text",
2175 + "axisLabel": "",
2176 + "axisPlacement": "auto",
2177 + "barAlignment": 0,
2178 + "barWidthFactor": 0.6,
2179 + "drawStyle": "line",
2180 + "fillOpacity": 10,
2181 + "gradientMode": "none",
2182 + "hideFrom": {
2183 + "legend": false,
2184 + "tooltip": false,
2185 + "viz": false
2186 + },
2187 + "insertNulls": false,
2188 + "lineInterpolation": "smooth",
2189 + "lineWidth": 1,
2190 + "pointSize": 5,
2191 + "scaleDistribution": {
2192 + "type": "linear"
2193 + },
2194 + "showPoints": "auto",
2195 + "showValues": false,
2196 + "spanNulls": false,
2197 + "stacking": {
2198 + "group": "A",
2199 + "mode": "none"
2200 + },
2201 + "thresholdsStyle": {
2202 + "mode": "off"
2203 + }
2204 + }
2205 + },
2206 + "overrides": [
2207 + {
2208 + "__systemRef": "hideSeriesFrom",
2209 + "matcher": {
2210 + "id": "byNames",
2211 + "options": {
2212 + "mode": "exclude",
2213 + "names": [
2214 + "MEM"
2215 + ],
2216 + "prefix": "All except:",
2217 + "readOnly": true
2218 + }
2219 + },
2220 + "properties": [
2221 + {
2222 + "id": "custom.hideFrom",
2223 + "value": {
2224 + "legend": false,
2225 + "tooltip": true,
2226 + "viz": true
2227 + }
2228 + }
2229 + ]
2230 + }
2231 + ]
2232 + }
2233 + }
2234 + }
2235 + }
2236 + },
2237 + "panel-19": {
2238 + "kind": "Panel",
2239 + "spec": {
2240 + "id": 19,
2241 + "title": "RSS",
2242 + "description": "minflt/s = Скорость работы с ОЗУ. Сколько раз в секунду процесс запрашивал данные, \n которые ядро Linux успешно выдало из оперативной памяти (из кэша).\n Высокое значение — это норма при активных вычислениях или LDAP-запросах.\n\nmajflt/s = Скорость просадки на диск. Сколько раз в секунду процесс лез за данными \n на физический диск (или в SWAP), потому что их не оказалость в ОЗУ.\n В идеале должно быть равно 0. Если число растет — сервер сильно тормозит.\n\n%MEM = Процент ОЗУ. Доля оперативной памяти сервера, которую съел этот PID.",
2243 + "links": [],
2244 + "data": {
2245 + "kind": "QueryGroup",
2246 + "spec": {
2247 + "queries": [
2248 + {
2249 + "kind": "PanelQuery",
2250 + "spec": {
2251 + "query": {
2252 + "kind": "DataQuery",
2253 + "group": "influxdb",
2254 + "version": "v0",
2255 + "spec": {
2256 + "alias": "RSS",
2257 + "groupBy": [
2258 + {
2259 + "params": [
2260 + "$interval"
2261 + ],
2262 + "type": "time"
2263 + },
2264 + {
2265 + "params": [
2266 + "comm::tag"
2267 + ],
2268 + "type": "tag"
2269 + },
2270 + {
2271 + "params": [
2272 + "null"
2273 + ],
2274 + "type": "fill"
2275 + }
2276 + ],
2277 + "measurement": "samba_pidstat",
2278 + "orderByTime": "ASC",
2279 + "policy": "default",
2280 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2281 + "rawQuery": false,
2282 + "resultFormat": "time_series",
2283 + "select": [
2284 + [
2285 + {
2286 + "params": [
2287 + "rss"
2288 + ],
2289 + "type": "field"
2290 + },
2291 + {
2292 + "params": [],
2293 + "type": "median"
2294 + }
2295 + ]
2296 + ],
2297 + "tags": []
2298 + },
2299 + "labels": {
2300 + "grafana.app/export-label": "influxdb-1"
2301 + }
2302 + },
2303 + "refId": "C",
2304 + "hidden": false
2305 + }
2306 + }
2307 + ],
2308 + "transformations": [],
2309 + "queryOptions": {}
2310 + }
2311 + },
2312 + "vizConfig": {
2313 + "kind": "VizConfig",
2314 + "group": "timeseries",
2315 + "version": "13.0.1+security-01",
2316 + "spec": {
2317 + "options": {
2318 + "annotations": {
2319 + "clustering": -1,
2320 + "multiLane": false
2321 + },
2322 + "legend": {
2323 + "calcs": [],
2324 + "displayMode": "list",
2325 + "placement": "bottom",
2326 + "showLegend": true
2327 + },
2328 + "tooltip": {
2329 + "hideZeros": false,
2330 + "mode": "single",
2331 + "sort": "none"
2332 + }
2333 + },
2334 + "fieldConfig": {
2335 + "defaults": {
2336 + "thresholds": {
2337 + "mode": "absolute",
2338 + "steps": [
2339 + {
2340 + "value": 0,
2341 + "color": "green"
2342 + },
2343 + {
2344 + "value": 80,
2345 + "color": "red"
2346 + }
2347 + ]
2348 + },
2349 + "color": {
2350 + "mode": "palette-classic"
2351 + },
2352 + "custom": {
2353 + "axisBorderShow": false,
2354 + "axisCenteredZero": false,
2355 + "axisColorMode": "text",
2356 + "axisLabel": "",
2357 + "axisPlacement": "auto",
2358 + "barAlignment": 0,
2359 + "barWidthFactor": 0.6,
2360 + "drawStyle": "line",
2361 + "fillOpacity": 10,
2362 + "gradientMode": "none",
2363 + "hideFrom": {
2364 + "legend": false,
2365 + "tooltip": false,
2366 + "viz": false
2367 + },
2368 + "insertNulls": false,
2369 + "lineInterpolation": "smooth",
2370 + "lineWidth": 1,
2371 + "pointSize": 5,
2372 + "scaleDistribution": {
2373 + "type": "linear"
2374 + },
2375 + "showPoints": "auto",
2376 + "showValues": false,
2377 + "spanNulls": false,
2378 + "stacking": {
2379 + "group": "A",
2380 + "mode": "none"
2381 + },
2382 + "thresholdsStyle": {
2383 + "mode": "off"
2384 + }
2385 + }
2386 + },
2387 + "overrides": []
2388 + }
2389 + }
2390 + }
2391 + }
2392 + },
2393 + "panel-2": {
2394 + "kind": "Panel",
2395 + "spec": {
2396 + "id": 2,
2397 + "title": "DSDB: изменения по операциям",
2398 + "description": "Число изменений объектов каталога (samba_dsdb), разбивка по типу операции.",
2399 + "links": [],
2400 + "data": {
2401 + "kind": "QueryGroup",
2402 + "spec": {
2403 + "queries": [
2404 + {
2405 + "kind": "PanelQuery",
2406 + "spec": {
2407 + "query": {
2408 + "kind": "DataQuery",
2409 + "group": "influxdb",
2410 + "version": "v0",
2411 + "spec": {
2412 + "groupBy": [],
2413 + "measurement": "samba_dsdb",
2414 + "orderByTime": "ASC",
2415 + "policy": "default",
2416 + "query": "SELECT count(\"status_code\") FROM \"samba_dsdb\" WHERE $timeFilter GROUP BY time($interval), \"operation\"::tag fill(null)",
2417 + "rawQuery": true,
2418 + "resultFormat": "time_series",
2419 + "select": [],
2420 + "tags": []
2421 + },
2422 + "labels": {
2423 + "grafana.app/export-label": "influxdb-1"
2424 + }
2425 + },
2426 + "refId": "A",
2427 + "hidden": false
2428 + }
2429 + }
2430 + ],
2431 + "transformations": [],
2432 + "queryOptions": {}
2433 + }
2434 + },
2435 + "vizConfig": {
2436 + "kind": "VizConfig",
2437 + "group": "timeseries",
2438 + "version": "13.0.1+security-01",
2439 + "spec": {
2440 + "options": {
2441 + "annotations": {
2442 + "clustering": -1,
2443 + "multiLane": false
2444 + },
2445 + "legend": {
2446 + "calcs": [],
2447 + "displayMode": "list",
2448 + "placement": "bottom",
2449 + "showLegend": true
2450 + },
2451 + "tooltip": {
2452 + "hideZeros": false,
2453 + "mode": "multi",
2454 + "sort": "desc"
2455 + }
2456 + },
2457 + "fieldConfig": {
2458 + "defaults": {
2459 + "thresholds": {
2460 + "mode": "absolute",
2461 + "steps": [
2462 + {
2463 + "value": 0,
2464 + "color": "green"
2465 + },
2466 + {
2467 + "value": 80,
2468 + "color": "red"
2469 + }
2470 + ]
2471 + },
2472 + "color": {
2473 + "mode": "palette-classic"
2474 + },
2475 + "custom": {
2476 + "axisBorderShow": false,
2477 + "axisCenteredZero": false,
2478 + "axisColorMode": "text",
2479 + "axisLabel": "",
2480 + "axisPlacement": "auto",
2481 + "barAlignment": 0,
2482 + "barWidthFactor": 0.6,
2483 + "drawStyle": "bars",
2484 + "fillOpacity": 50,
2485 + "gradientMode": "none",
2486 + "hideFrom": {
2487 + "legend": false,
2488 + "tooltip": false,
2489 + "viz": false
2490 + },
2491 + "insertNulls": false,
2492 + "lineInterpolation": "linear",
2493 + "lineWidth": 1,
2494 + "pointSize": 5,
2495 + "scaleDistribution": {
2496 + "type": "linear"
2497 + },
2498 + "showPoints": "auto",
2499 + "showValues": false,
2500 + "spanNulls": false,
2501 + "stacking": {
2502 + "group": "A",
2503 + "mode": "normal"
2504 + },
2505 + "thresholdsStyle": {
2506 + "mode": "off"
2507 + }
2508 + }
2509 + },
2510 + "overrides": []
2511 + }
2512 + }
2513 + }
2514 + }
2515 + },
2516 + "panel-20": {
2517 + "kind": "Panel",
2518 + "spec": {
2519 + "id": 20,
2520 + "title": "ldb ops",
2521 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
2522 + "links": [],
2523 + "data": {
2524 + "kind": "QueryGroup",
2525 + "spec": {
2526 + "queries": [
2527 + {
2528 + "kind": "PanelQuery",
2529 + "spec": {
2530 + "query": {
2531 + "kind": "DataQuery",
2532 + "group": "influxdb",
2533 + "version": "v0",
2534 + "spec": {
2535 + "groupBy": [
2536 + {
2537 + "params": [
2538 + "$interval"
2539 + ],
2540 + "type": "time"
2541 + },
2542 + {
2543 + "params": [
2544 + "null"
2545 + ],
2546 + "type": "fill"
2547 + }
2548 + ],
2549 + "measurement": "samba_file_access",
2550 + "orderByTime": "ASC",
2551 + "policy": "default",
2552 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2553 + "rawQuery": false,
2554 + "resultFormat": "time_series",
2555 + "select": [
2556 + [
2557 + {
2558 + "params": [
2559 + "path"
2560 + ],
2561 + "type": "field"
2562 + },
2563 + {
2564 + "params": [],
2565 + "type": "count"
2566 + }
2567 + ]
2568 + ],
2569 + "tags": []
2570 + },
2571 + "labels": {
2572 + "grafana.app/export-label": "influxdb-1"
2573 + }
2574 + },
2575 + "refId": "A",
2576 + "hidden": false
2577 + }
2578 + }
2579 + ],
2580 + "transformations": [],
2581 + "queryOptions": {}
2582 + }
2583 + },
2584 + "vizConfig": {
2585 + "kind": "VizConfig",
2586 + "group": "timeseries",
2587 + "version": "13.0.1+security-01",
2588 + "spec": {
2589 + "options": {
2590 + "annotations": {
2591 + "clustering": -1,
2592 + "multiLane": false
2593 + },
2594 + "legend": {
2595 + "calcs": [],
2596 + "displayMode": "list",
2597 + "placement": "bottom",
2598 + "showLegend": true
2599 + },
2600 + "tooltip": {
2601 + "hideZeros": false,
2602 + "mode": "single",
2603 + "sort": "none"
2604 + }
2605 + },
2606 + "fieldConfig": {
2607 + "defaults": {
2608 + "thresholds": {
2609 + "mode": "absolute",
2610 + "steps": [
2611 + {
2612 + "value": 0,
2613 + "color": "green"
2614 + },
2615 + {
2616 + "value": 80,
2617 + "color": "red"
2618 + }
2619 + ]
2620 + },
2621 + "color": {
2622 + "mode": "palette-classic"
2623 + },
2624 + "custom": {
2625 + "axisBorderShow": false,
2626 + "axisCenteredZero": false,
2627 + "axisColorMode": "text",
2628 + "axisLabel": "",
2629 + "axisPlacement": "auto",
2630 + "barAlignment": 0,
2631 + "barWidthFactor": 0.6,
2632 + "drawStyle": "line",
2633 + "fillOpacity": 10,
2634 + "gradientMode": "none",
2635 + "hideFrom": {
2636 + "legend": false,
2637 + "tooltip": false,
2638 + "viz": false
2639 + },
2640 + "insertNulls": false,
2641 + "lineInterpolation": "smooth",
2642 + "lineWidth": 1,
2643 + "pointSize": 5,
2644 + "scaleDistribution": {
2645 + "type": "linear"
2646 + },
2647 + "showPoints": "auto",
2648 + "showValues": false,
2649 + "spanNulls": false,
2650 + "stacking": {
2651 + "group": "A",
2652 + "mode": "none"
2653 + },
2654 + "thresholdsStyle": {
2655 + "mode": "off"
2656 + }
2657 + }
2658 + },
2659 + "overrides": []
2660 + }
2661 + }
2662 + }
2663 + }
2664 + },
2665 + "panel-21": {
2666 + "kind": "Panel",
2667 + "spec": {
2668 + "id": 21,
2669 + "title": "ldb ops summ",
2670 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\n\nRO=Read Only (Открытие файла строго для чтения)\n\nR=Read (Чтение данных из файла)\n\nW=Write (Запись измененных данных в кэш памяти)\n\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
2671 + "links": [],
2672 + "data": {
2673 + "kind": "QueryGroup",
2674 + "spec": {
2675 + "queries": [
2676 + {
2677 + "kind": "PanelQuery",
2678 + "spec": {
2679 + "query": {
2680 + "kind": "DataQuery",
2681 + "group": "influxdb",
2682 + "version": "v0",
2683 + "spec": {
2684 + "groupBy": [
2685 + {
2686 + "params": [
2687 + "$interval"
2688 + ],
2689 + "type": "time"
2690 + },
2691 + {
2692 + "params": [
2693 + "null"
2694 + ],
2695 + "type": "fill"
2696 + }
2697 + ],
2698 + "measurement": "samba_file_access",
2699 + "orderByTime": "ASC",
2700 + "policy": "default",
2701 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2702 + "rawQuery": false,
2703 + "resultFormat": "time_series",
2704 + "select": [
2705 + [
2706 + {
2707 + "params": [
2708 + "path"
2709 + ],
2710 + "type": "field"
2711 + },
2712 + {
2713 + "params": [],
2714 + "type": "count"
2715 + },
2716 + {
2717 + "params": [],
2718 + "type": "cumulative_sum"
2719 + }
2720 + ]
2721 + ],
2722 + "tags": []
2723 + },
2724 + "labels": {
2725 + "grafana.app/export-label": "influxdb-1"
2726 + }
2727 + },
2728 + "refId": "A",
2729 + "hidden": false
2730 + }
2731 + }
2732 + ],
2733 + "transformations": [],
2734 + "queryOptions": {}
2735 + }
2736 + },
2737 + "vizConfig": {
2738 + "kind": "VizConfig",
2739 + "group": "stat",
2740 + "version": "13.0.1+security-01",
2741 + "spec": {
2742 + "options": {
2743 + "colorMode": "value",
2744 + "graphMode": "area",
2745 + "justifyMode": "auto",
2746 + "orientation": "auto",
2747 + "percentChangeColorMode": "standard",
2748 + "reduceOptions": {
2749 + "calcs": [
2750 + "lastNotNull"
2751 + ],
2752 + "fields": "",
2753 + "values": false
2754 + },
2755 + "showPercentChange": false,
2756 + "textMode": "auto",
2757 + "wideLayout": true
2758 + },
2759 + "fieldConfig": {
2760 + "defaults": {
2761 + "thresholds": {
2762 + "mode": "absolute",
2763 + "steps": [
2764 + {
2765 + "value": 0,
2766 + "color": "green"
2767 + },
2768 + {
2769 + "value": 80,
2770 + "color": "red"
2771 + }
2772 + ]
2773 + },
2774 + "color": {
2775 + "mode": "palette-classic"
2776 + }
2777 + },
2778 + "overrides": []
2779 + }
2780 + }
2781 + }
2782 + }
2783 + },
2784 + "panel-22": {
2785 + "kind": "Panel",
2786 + "spec": {
2787 + "id": 22,
2788 + "title": "Iostat kb/s",
2789 + "description": "",
2790 + "links": [],
2791 + "data": {
2792 + "kind": "QueryGroup",
2793 + "spec": {
2794 + "queries": [
2795 + {
2796 + "kind": "PanelQuery",
2797 + "spec": {
2798 + "query": {
2799 + "kind": "DataQuery",
2800 + "group": "influxdb",
2801 + "version": "v0",
2802 + "spec": {
2803 + "alias": "$tag_device d kb/s",
2804 + "groupBy": [
2805 + {
2806 + "params": [
2807 + "$interval"
2808 + ],
2809 + "type": "time"
2810 + },
2811 + {
2812 + "params": [
2813 + "device::tag"
2814 + ],
2815 + "type": "tag"
2816 + },
2817 + {
2818 + "params": [
2819 + "null"
2820 + ],
2821 + "type": "fill"
2822 + }
2823 + ],
2824 + "measurement": "host_iostat",
2825 + "orderByTime": "ASC",
2826 + "policy": "default",
2827 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2828 + "rawQuery": false,
2829 + "resultFormat": "time_series",
2830 + "select": [
2831 + [
2832 + {
2833 + "params": [
2834 + "dkb_s"
2835 + ],
2836 + "type": "field"
2837 + },
2838 + {
2839 + "params": [],
2840 + "type": "mean"
2841 + }
2842 + ]
2843 + ],
2844 + "tags": []
2845 + },
2846 + "labels": {
2847 + "grafana.app/export-label": "influxdb-1"
2848 + }
2849 + },
2850 + "refId": "A",
2851 + "hidden": false
2852 + }
2853 + },
2854 + {
2855 + "kind": "PanelQuery",
2856 + "spec": {
2857 + "query": {
2858 + "kind": "DataQuery",
2859 + "group": "influxdb",
2860 + "version": "v0",
2861 + "spec": {
2862 + "alias": "$tag_device r kb/s",
2863 + "groupBy": [
2864 + {
2865 + "params": [
2866 + "$interval"
2867 + ],
2868 + "type": "time"
2869 + },
2870 + {
2871 + "params": [
2872 + "device::tag"
2873 + ],
2874 + "type": "tag"
2875 + },
2876 + {
2877 + "params": [
2878 + "null"
2879 + ],
2880 + "type": "fill"
2881 + }
2882 + ],
2883 + "measurement": "host_iostat",
2884 + "orderByTime": "ASC",
2885 + "policy": "default",
2886 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2887 + "rawQuery": false,
2888 + "resultFormat": "time_series",
2889 + "select": [
2890 + [
2891 + {
2892 + "params": [
2893 + "rkb_s"
2894 + ],
2895 + "type": "field"
2896 + },
2897 + {
2898 + "params": [],
2899 + "type": "mean"
2900 + }
2901 + ]
2902 + ],
2903 + "tags": []
2904 + },
2905 + "labels": {
2906 + "grafana.app/export-label": "influxdb-1"
2907 + }
2908 + },
2909 + "refId": "B",
2910 + "hidden": false
2911 + }
2912 + },
2913 + {
2914 + "kind": "PanelQuery",
2915 + "spec": {
2916 + "query": {
2917 + "kind": "DataQuery",
2918 + "group": "influxdb",
2919 + "version": "v0",
2920 + "spec": {
2921 + "alias": "$tag_device w kb/s",
2922 + "groupBy": [
2923 + {
2924 + "params": [
2925 + "$interval"
2926 + ],
2927 + "type": "time"
2928 + },
2929 + {
2930 + "params": [
2931 + "device::tag"
2932 + ],
2933 + "type": "tag"
2934 + },
2935 + {
2936 + "params": [
2937 + "null"
2938 + ],
2939 + "type": "fill"
2940 + }
2941 + ],
2942 + "measurement": "host_iostat",
2943 + "orderByTime": "ASC",
2944 + "policy": "default",
2945 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
2946 + "rawQuery": false,
2947 + "resultFormat": "time_series",
2948 + "select": [
2949 + [
2950 + {
2951 + "params": [
2952 + "wkb_s"
2953 + ],
2954 + "type": "field"
2955 + },
2956 + {
2957 + "params": [],
2958 + "type": "mean"
2959 + }
2960 + ]
2961 + ],
2962 + "tags": []
2963 + },
2964 + "labels": {
2965 + "grafana.app/export-label": "influxdb-1"
2966 + }
2967 + },
2968 + "refId": "C",
2969 + "hidden": false
2970 + }
2971 + }
2972 + ],
2973 + "transformations": [],
2974 + "queryOptions": {}
2975 + }
2976 + },
2977 + "vizConfig": {
2978 + "kind": "VizConfig",
2979 + "group": "timeseries",
2980 + "version": "13.0.1+security-01",
2981 + "spec": {
2982 + "options": {
2983 + "annotations": {
2984 + "clustering": -1,
2985 + "multiLane": false
2986 + },
2987 + "legend": {
2988 + "calcs": [],
2989 + "displayMode": "list",
2990 + "placement": "bottom",
2991 + "showLegend": true
2992 + },
2993 + "tooltip": {
2994 + "hideZeros": false,
2995 + "mode": "single",
2996 + "sort": "none"
2997 + }
2998 + },
2999 + "fieldConfig": {
3000 + "defaults": {
3001 + "thresholds": {
3002 + "mode": "absolute",
3003 + "steps": [
3004 + {
3005 + "value": 0,
3006 + "color": "green"
3007 + },
3008 + {
3009 + "value": 80,
3010 + "color": "red"
3011 + }
3012 + ]
3013 + },
3014 + "color": {
3015 + "mode": "palette-classic"
3016 + },
3017 + "custom": {
3018 + "axisBorderShow": false,
3019 + "axisCenteredZero": false,
3020 + "axisColorMode": "text",
3021 + "axisLabel": "",
3022 + "axisPlacement": "auto",
3023 + "barAlignment": 0,
3024 + "barWidthFactor": 0.6,
3025 + "drawStyle": "line",
3026 + "fillOpacity": 0,
3027 + "gradientMode": "none",
3028 + "hideFrom": {
3029 + "legend": false,
3030 + "tooltip": false,
3031 + "viz": false
3032 + },
3033 + "insertNulls": false,
3034 + "lineInterpolation": "linear",
3035 + "lineWidth": 1,
3036 + "pointSize": 5,
3037 + "scaleDistribution": {
3038 + "type": "linear"
3039 + },
3040 + "showPoints": "auto",
3041 + "showValues": false,
3042 + "spanNulls": false,
3043 + "stacking": {
3044 + "group": "A",
3045 + "mode": "none"
3046 + },
3047 + "thresholdsStyle": {
3048 + "mode": "off"
3049 + }
3050 + }
3051 + },
3052 + "overrides": []
3053 + }
3054 + }
3055 + }
3056 + }
3057 + },
3058 + "panel-23": {
3059 + "kind": "Panel",
3060 + "spec": {
3061 + "id": 23,
3062 + "title": "Iostat util",
3063 + "description": "",
3064 + "links": [],
3065 + "data": {
3066 + "kind": "QueryGroup",
3067 + "spec": {
3068 + "queries": [
3069 + {
3070 + "kind": "PanelQuery",
3071 + "spec": {
3072 + "query": {
3073 + "kind": "DataQuery",
3074 + "group": "influxdb",
3075 + "version": "v0",
3076 + "spec": {
3077 + "alias": "$tag_device util",
3078 + "groupBy": [
3079 + {
3080 + "params": [
3081 + "$interval"
3082 + ],
3083 + "type": "time"
3084 + },
3085 + {
3086 + "params": [
3087 + "device::tag"
3088 + ],
3089 + "type": "tag"
3090 + },
3091 + {
3092 + "params": [
3093 + "null"
3094 + ],
3095 + "type": "fill"
3096 + }
3097 + ],
3098 + "measurement": "host_iostat",
3099 + "orderByTime": "ASC",
3100 + "policy": "default",
3101 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3102 + "rawQuery": false,
3103 + "resultFormat": "time_series",
3104 + "select": [
3105 + [
3106 + {
3107 + "params": [
3108 + "util"
1891 3109 ],
1892 3110 "type": "field"
1893 3111 },
1894 3112 {
1895 3113 "params": [],
1896 - "type": "count"
3114 + "type": "mean"
1897 3115 }
1898 3116 ]
1899 3117 ],
@@ -1993,12 +3211,12 @@
1993 3211 }
1994 3212 }
1995 3213 },
1996 - "panel-2": {
3214 + "panel-24": {
1997 3215 "kind": "Panel",
1998 3216 "spec": {
1999 - "id": 2,
2000 - "title": "DSDB: изменения по операциям",
2001 - "description": "Число изменений объектов каталога (samba_dsdb), разбивка по типу операции.",
3217 + "id": 24,
3218 + "title": "Iostat s",
3219 + "description": "",
2002 3220 "links": [],
2003 3221 "data": {
2004 3222 "kind": "QueryGroup",
@@ -2012,14 +3230,47 @@
2012 3230 "group": "influxdb",
2013 3231 "version": "v0",
2014 3232 "spec": {
2015 - "groupBy": [],
2016 - "measurement": "samba_dsdb",
3233 + "alias": "$tag_device f/s",
3234 + "groupBy": [
3235 + {
3236 + "params": [
3237 + "$interval"
3238 + ],
3239 + "type": "time"
3240 + },
3241 + {
3242 + "params": [
3243 + "device::tag"
3244 + ],
3245 + "type": "tag"
3246 + },
3247 + {
3248 + "params": [
3249 + "null"
3250 + ],
3251 + "type": "fill"
3252 + }
3253 + ],
3254 + "measurement": "host_iostat",
2017 3255 "orderByTime": "ASC",
2018 3256 "policy": "default",
2019 - "query": "SELECT count(\"status_code\") FROM \"samba_dsdb\" WHERE $timeFilter GROUP BY time($interval), \"operation\"::tag fill(null)",
2020 - "rawQuery": true,
3257 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3258 + "rawQuery": false,
2021 3259 "resultFormat": "time_series",
2022 - "select": [],
3260 + "select": [
3261 + [
3262 + {
3263 + "params": [
3264 + "f_s"
3265 + ],
3266 + "type": "field"
3267 + },
3268 + {
3269 + "params": [],
3270 + "type": "mean"
3271 + }
3272 + ]
3273 + ],
2023 3274 "tags": []
2024 3275 },
2025 3276 "labels": {
@@ -2029,6 +3280,124 @@
2029 3280 "refId": "A",
2030 3281 "hidden": false
2031 3282 }
3283 + },
3284 + {
3285 + "kind": "PanelQuery",
3286 + "spec": {
3287 + "query": {
3288 + "kind": "DataQuery",
3289 + "group": "influxdb",
3290 + "version": "v0",
3291 + "spec": {
3292 + "alias": "$tag_device r/s",
3293 + "groupBy": [
3294 + {
3295 + "params": [
3296 + "$interval"
3297 + ],
3298 + "type": "time"
3299 + },
3300 + {
3301 + "params": [
3302 + "device::tag"
3303 + ],
3304 + "type": "tag"
3305 + },
3306 + {
3307 + "params": [
3308 + "null"
3309 + ],
3310 + "type": "fill"
3311 + }
3312 + ],
3313 + "measurement": "host_iostat",
3314 + "orderByTime": "ASC",
3315 + "policy": "default",
3316 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3317 + "rawQuery": false,
3318 + "resultFormat": "time_series",
3319 + "select": [
3320 + [
3321 + {
3322 + "params": [
3323 + "r_s"
3324 + ],
3325 + "type": "field"
3326 + },
3327 + {
3328 + "params": [],
3329 + "type": "mean"
3330 + }
3331 + ]
3332 + ],
3333 + "tags": []
3334 + },
3335 + "labels": {
3336 + "grafana.app/export-label": "influxdb-1"
3337 + }
3338 + },
3339 + "refId": "B",
3340 + "hidden": false
3341 + }
3342 + },
3343 + {
3344 + "kind": "PanelQuery",
3345 + "spec": {
3346 + "query": {
3347 + "kind": "DataQuery",
3348 + "group": "influxdb",
3349 + "version": "v0",
3350 + "spec": {
3351 + "alias": "$tag_device w/s",
3352 + "groupBy": [
3353 + {
3354 + "params": [
3355 + "$interval"
3356 + ],
3357 + "type": "time"
3358 + },
3359 + {
3360 + "params": [
3361 + "device::tag"
3362 + ],
3363 + "type": "tag"
3364 + },
3365 + {
3366 + "params": [
3367 + "null"
3368 + ],
3369 + "type": "fill"
3370 + }
3371 + ],
3372 + "measurement": "host_iostat",
3373 + "orderByTime": "ASC",
3374 + "policy": "default",
3375 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
3376 + "rawQuery": false,
3377 + "resultFormat": "time_series",
3378 + "select": [
3379 + [
3380 + {
3381 + "params": [
3382 + "w_s"
3383 + ],
3384 + "type": "field"
3385 + },
3386 + {
3387 + "params": [],
3388 + "type": "mean"
3389 + }
3390 + ]
3391 + ],
3392 + "tags": []
3393 + },
3394 + "labels": {
3395 + "grafana.app/export-label": "influxdb-1"
3396 + }
3397 + },
3398 + "refId": "C",
3399 + "hidden": false
3400 + }
2032 3401 }
2033 3402 ],
2034 3403 "transformations": [],
@@ -2053,8 +3422,8 @@
2053 3422 },
2054 3423 "tooltip": {
2055 3424 "hideZeros": false,
2056 - "mode": "multi",
2057 - "sort": "desc"
3425 + "mode": "single",
3426 + "sort": "none"
2058 3427 }
2059 3428 },
2060 3429 "fieldConfig": {
@@ -2083,8 +3452,8 @@
2083 3452 "axisPlacement": "auto",
2084 3453 "barAlignment": 0,
2085 3454 "barWidthFactor": 0.6,
2086 - "drawStyle": "bars",
2087 - "fillOpacity": 50,
3455 + "drawStyle": "line",
3456 + "fillOpacity": 0,
2088 3457 "gradientMode": "none",
2089 3458 "hideFrom": {
2090 3459 "legend": false,
@@ -2103,7 +3472,7 @@
2103 3472 "spanNulls": false,
2104 3473 "stacking": {
2105 3474 "group": "A",
2106 - "mode": "normal"
3475 + "mode": "none"
2107 3476 },
2108 3477 "thresholdsStyle": {
2109 3478 "mode": "off"
@@ -3245,8 +4614,8 @@
3245 4614 "spec": {
3246 4615 "x": 0,
3247 4616 "y": 10,
3248 - "width": 12,
3249 - "height": 11,
4617 + "width": 24,
4618 + "height": 10,
3250 4619 "element": {
3251 4620 "kind": "ElementReference",
3252 4621 "name": "panel-12"
@@ -3256,13 +4625,26 @@
3256 4625 {
3257 4626 "kind": "GridLayoutItem",
3258 4627 "spec": {
3259 - "x": 12,
3260 - "y": 10,
3261 - "width": 12,
4628 + "x": 0,
4629 + "y": 20,
4630 + "width": 8,
3262 4631 "height": 11,
3263 4632 "element": {
3264 4633 "kind": "ElementReference",
3265 - "name": "panel-13"
4634 + "name": "panel-21"
4635 + }
4636 + }
4637 + },
4638 + {
4639 + "kind": "GridLayoutItem",
4640 + "spec": {
4641 + "x": 8,
4642 + "y": 20,
4643 + "width": 16,
4644 + "height": 11,
4645 + "element": {
4646 + "kind": "ElementReference",
4647 + "name": "panel-20"
3266 4648 }
3267 4649 }
3268 4650 },
@@ -3270,8 +4652,8 @@
3270 4652 "kind": "GridLayoutItem",
3271 4653 "spec": {
3272 4654 "x": 0,
3273 - "y": 21,
3274 - "width": 24,
4655 + "y": 31,
4656 + "width": 11,
3275 4657 "height": 11,
3276 4658 "element": {
3277 4659 "kind": "ElementReference",
@@ -3282,26 +4664,65 @@
3282 4664 {
3283 4665 "kind": "GridLayoutItem",
3284 4666 "spec": {
3285 - "x": 0,
3286 - "y": 32,
3287 - "width": 24,
4667 + "x": 11,
4668 + "y": 31,
4669 + "width": 13,
3288 4670 "height": 11,
4671 + "element": {
4672 + "kind": "ElementReference",
4673 + "name": "panel-13"
4674 + }
4675 + }
4676 + },
4677 + {
4678 + "kind": "GridLayoutItem",
4679 + "spec": {
4680 + "x": 0,
4681 + "y": 42,
4682 + "width": 11,
4683 + "height": 10,
3289 4684 "element": {
3290 4685 "kind": "ElementReference",
3291 4686 "name": "panel-17"
3292 4687 }
3293 4688 }
3294 4689 },
4690 + {
4691 + "kind": "GridLayoutItem",
4692 + "spec": {
4693 + "x": 11,
4694 + "y": 42,
4695 + "width": 13,
4696 + "height": 10,
4697 + "element": {
4698 + "kind": "ElementReference",
4699 + "name": "panel-22"
4700 + }
4701 + }
4702 + },
3295 4703 {
3296 4704 "kind": "GridLayoutItem",
3297 4705 "spec": {
3298 4706 "x": 0,
3299 - "y": 43,
3300 - "width": 24,
4707 + "y": 52,
4708 + "width": 16,
3301 4709 "height": 10,
3302 4710 "element": {
3303 4711 "kind": "ElementReference",
3304 - "name": "panel-14"
4712 + "name": "panel-24"
4713 + }
4714 + }
4715 + },
4716 + {
4717 + "kind": "GridLayoutItem",
4718 + "spec": {
4719 + "x": 16,
4720 + "y": 52,
4721 + "width": 8,
4722 + "height": 10,
4723 + "element": {
4724 + "kind": "ElementReference",
4725 + "name": "panel-23"
3305 4726 }
3306 4727 }
3307 4728 },
@@ -3309,20 +4730,59 @@
3309 4730 "kind": "GridLayoutItem",
3310 4731 "spec": {
3311 4732 "x": 0,
3312 - "y": 53,
4733 + "y": 62,
3313 4734 "width": 24,
3314 4735 "height": 10,
4736 + "element": {
4737 + "kind": "ElementReference",
4738 + "name": "panel-14"
4739 + }
4740 + }
4741 + },
4742 + {
4743 + "kind": "GridLayoutItem",
4744 + "spec": {
4745 + "x": 0,
4746 + "y": 72,
4747 + "width": 8,
4748 + "height": 8,
3315 4749 "element": {
3316 4750 "kind": "ElementReference",
3317 4751 "name": "panel-15"
3318 4752 }
3319 4753 }
3320 4754 },
4755 + {
4756 + "kind": "GridLayoutItem",
4757 + "spec": {
4758 + "x": 8,
4759 + "y": 72,
4760 + "width": 8,
4761 + "height": 8,
4762 + "element": {
4763 + "kind": "ElementReference",
4764 + "name": "panel-18"
4765 + }
4766 + }
4767 + },
4768 + {
4769 + "kind": "GridLayoutItem",
4770 + "spec": {
4771 + "x": 16,
4772 + "y": 72,
4773 + "width": 8,
4774 + "height": 8,
4775 + "element": {
4776 + "kind": "ElementReference",
4777 + "name": "panel-19"
4778 + }
4779 + }
4780 + },
3321 4781 {
3322 4782 "kind": "GridLayoutItem",
3323 4783 "spec": {
3324 4784 "x": 0,
3325 - "y": 63,
4785 + "y": 80,
3326 4786 "width": 12,
3327 4787 "height": 7,
3328 4788 "element": {
@@ -3335,7 +4795,7 @@
3335 4795 "kind": "GridLayoutItem",
3336 4796 "spec": {
3337 4797 "x": 12,
3338 - "y": 63,
4798 + "y": 80,
3339 4799 "width": 12,
3340 4800 "height": 7,
3341 4801 "element": {
@@ -3348,7 +4808,7 @@
3348 4808 "kind": "GridLayoutItem",
3349 4809 "spec": {
3350 4810 "x": 0,
3351 - "y": 70,
4811 + "y": 87,
3352 4812 "width": 12,
3353 4813 "height": 8,
3354 4814 "element": {
@@ -3361,7 +4821,7 @@
3361 4821 "kind": "GridLayoutItem",
3362 4822 "spec": {
3363 4823 "x": 12,
3364 - "y": 70,
4824 + "y": 87,
3365 4825 "width": 12,
3366 4826 "height": 8,
3367 4827 "element": {
@@ -3374,7 +4834,7 @@
3374 4834 "kind": "GridLayoutItem",
3375 4835 "spec": {
3376 4836 "x": 0,
3377 - "y": 78,
4837 + "y": 95,
3378 4838 "width": 12,
3379 4839 "height": 8,
3380 4840 "element": {
@@ -3387,7 +4847,7 @@
3387 4847 "kind": "GridLayoutItem",
3388 4848 "spec": {
3389 4849 "x": 12,
3390 - "y": 78,
4850 + "y": 95,
3391 4851 "width": 12,
3392 4852 "height": 8,
3393 4853 "element": {
@@ -3400,7 +4860,7 @@
3400 4860 "kind": "GridLayoutItem",
3401 4861 "spec": {
3402 4862 "x": 0,
3403 - "y": 86,
4863 + "y": 103,
3404 4864 "width": 12,
3405 4865 "height": 8,
3406 4866 "element": {
@@ -3413,7 +4873,7 @@
3413 4873 "kind": "GridLayoutItem",
3414 4874 "spec": {
3415 4875 "x": 0,
3416 - "y": 94,
4876 + "y": 111,
3417 4877 "width": 6,
3418 4878 "height": 8,
3419 4879 "element": {
@@ -3426,7 +4886,7 @@
3426 4886 "kind": "GridLayoutItem",
3427 4887 "spec": {
3428 4888 "x": 6,
3429 - "y": 94,
4889 + "y": 111,
3430 4890 "width": 18,
3431 4891 "height": 8,
3432 4892 "element": {

guest revised this gist 3 weeks ago. Go to revision

1 file changed, 400 insertions, 14 deletions

grafana.json

@@ -3,7 +3,7 @@
3 3 "kind": "Dashboard",
4 4 "metadata": {
5 5 "name": "ad-samba-audit2",
6 - "generation": 29,
6 + "generation": 35,
7 7 "creationTimestamp": "2026-07-03T12:41:09Z",
8 8 "labels": {},
9 9 "annotations": {}
@@ -838,13 +838,13 @@
838 838 [
839 839 {
840 840 "params": [
841 - "pid"
841 + "path"
842 842 ],
843 843 "type": "field"
844 844 },
845 845 {
846 846 "params": [],
847 - "type": "sum"
847 + "type": "count"
848 848 }
849 849 ]
850 850 ],
@@ -1353,7 +1353,32 @@
1353 1353 }
1354 1354 }
1355 1355 },
1356 - "overrides": []
1356 + "overrides": [
1357 + {
1358 + "__systemRef": "hideSeriesFrom",
1359 + "matcher": {
1360 + "id": "byNames",
1361 + "options": {
1362 + "mode": "exclude",
1363 + "names": [
1364 + "bo"
1365 + ],
1366 + "prefix": "All except:",
1367 + "readOnly": true
1368 + }
1369 + },
1370 + "properties": [
1371 + {
1372 + "id": "custom.hideFrom",
1373 + "value": {
1374 + "legend": false,
1375 + "tooltip": true,
1376 + "viz": true
1377 + }
1378 + }
1379 + ]
1380 + }
1381 + ]
1357 1382 }
1358 1383 }
1359 1384 }
@@ -1627,6 +1652,341 @@
1627 1652 }
1628 1653 }
1629 1654 },
1655 + "overrides": [
1656 + {
1657 + "__systemRef": "hideSeriesFrom",
1658 + "matcher": {
1659 + "id": "byNames",
1660 + "options": {
1661 + "mode": "exclude",
1662 + "names": [
1663 + "MEM"
1664 + ],
1665 + "prefix": "All except:",
1666 + "readOnly": true
1667 + }
1668 + },
1669 + "properties": [
1670 + {
1671 + "id": "custom.hideFrom",
1672 + "value": {
1673 + "legend": false,
1674 + "tooltip": true,
1675 + "viz": true
1676 + }
1677 + }
1678 + ]
1679 + }
1680 + ]
1681 + }
1682 + }
1683 + }
1684 + }
1685 + },
1686 + "panel-16": {
1687 + "kind": "Panel",
1688 + "spec": {
1689 + "id": 16,
1690 + "title": "ldb ops2",
1691 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\nRO=Read Only (Открытие файла строго для чтения)\nR=Read (Чтение данных из файла)\nW=Write (Запись измененных данных в кэш памяти)\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
1692 + "links": [],
1693 + "data": {
1694 + "kind": "QueryGroup",
1695 + "spec": {
1696 + "queries": [
1697 + {
1698 + "kind": "PanelQuery",
1699 + "spec": {
1700 + "query": {
1701 + "kind": "DataQuery",
1702 + "group": "influxdb",
1703 + "version": "v0",
1704 + "spec": {
1705 + "groupBy": [
1706 + {
1707 + "params": [
1708 + "$interval"
1709 + ],
1710 + "type": "time"
1711 + },
1712 + {
1713 + "params": [
1714 + "action::tag"
1715 + ],
1716 + "type": "tag"
1717 + },
1718 + {
1719 + "params": [
1720 + "null"
1721 + ],
1722 + "type": "fill"
1723 + }
1724 + ],
1725 + "measurement": "samba_file_access",
1726 + "orderByTime": "ASC",
1727 + "policy": "default",
1728 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1729 + "rawQuery": false,
1730 + "resultFormat": "time_series",
1731 + "select": [
1732 + [
1733 + {
1734 + "params": [
1735 + "path"
1736 + ],
1737 + "type": "field"
1738 + },
1739 + {
1740 + "params": [],
1741 + "type": "count"
1742 + }
1743 + ]
1744 + ],
1745 + "tags": []
1746 + },
1747 + "labels": {
1748 + "grafana.app/export-label": "influxdb-1"
1749 + }
1750 + },
1751 + "refId": "A",
1752 + "hidden": false
1753 + }
1754 + }
1755 + ],
1756 + "transformations": [],
1757 + "queryOptions": {}
1758 + }
1759 + },
1760 + "vizConfig": {
1761 + "kind": "VizConfig",
1762 + "group": "timeseries",
1763 + "version": "13.0.1+security-01",
1764 + "spec": {
1765 + "options": {
1766 + "annotations": {
1767 + "clustering": -1,
1768 + "multiLane": false
1769 + },
1770 + "legend": {
1771 + "calcs": [],
1772 + "displayMode": "list",
1773 + "placement": "bottom",
1774 + "showLegend": true
1775 + },
1776 + "tooltip": {
1777 + "hideZeros": false,
1778 + "mode": "single",
1779 + "sort": "none"
1780 + }
1781 + },
1782 + "fieldConfig": {
1783 + "defaults": {
1784 + "thresholds": {
1785 + "mode": "absolute",
1786 + "steps": [
1787 + {
1788 + "value": 0,
1789 + "color": "green"
1790 + },
1791 + {
1792 + "value": 80,
1793 + "color": "red"
1794 + }
1795 + ]
1796 + },
1797 + "color": {
1798 + "mode": "palette-classic"
1799 + },
1800 + "custom": {
1801 + "axisBorderShow": false,
1802 + "axisCenteredZero": false,
1803 + "axisColorMode": "text",
1804 + "axisLabel": "",
1805 + "axisPlacement": "auto",
1806 + "barAlignment": 0,
1807 + "barWidthFactor": 0.6,
1808 + "drawStyle": "line",
1809 + "fillOpacity": 0,
1810 + "gradientMode": "none",
1811 + "hideFrom": {
1812 + "legend": false,
1813 + "tooltip": false,
1814 + "viz": false
1815 + },
1816 + "insertNulls": false,
1817 + "lineInterpolation": "linear",
1818 + "lineWidth": 1,
1819 + "pointSize": 5,
1820 + "scaleDistribution": {
1821 + "type": "linear"
1822 + },
1823 + "showPoints": "auto",
1824 + "showValues": false,
1825 + "spanNulls": false,
1826 + "stacking": {
1827 + "group": "A",
1828 + "mode": "none"
1829 + },
1830 + "thresholdsStyle": {
1831 + "mode": "off"
1832 + }
1833 + }
1834 + },
1835 + "overrides": []
1836 + }
1837 + }
1838 + }
1839 + }
1840 + },
1841 + "panel-17": {
1842 + "kind": "Panel",
1843 + "spec": {
1844 + "id": 17,
1845 + "title": "Iostat",
1846 + "description": "* Режим чистого чтения [ R ]: Метрика ldb_search_events растет (пользователи входят \n в сеть), а syscall_fsync_events держится около нуля. База в RAM работает идеально.\n* Режим записи [ W ] / [ CW ]: Метрика syscall_fsync_events начинает расти синхронно \n с действиями пользователей. Это означает, что изменения фиксируются на диск. \n Если график упирается в производительность ваших дисков, время ответа Samba \n будет увеличиваться (растут задержки аутентификации).\n\nO=Open (Открытие файла для записи/изменения)\nRO=Read Only (Открытие файла строго для чтения)\nR=Read (Чтение данных из файла)\nW=Write (Запись измененных данных в кэш памяти)\nCW=Commit/Close Write (Фиксация транзакции и принудительный сброс на диск)",
1847 + "links": [],
1848 + "data": {
1849 + "kind": "QueryGroup",
1850 + "spec": {
1851 + "queries": [
1852 + {
1853 + "kind": "PanelQuery",
1854 + "spec": {
1855 + "query": {
1856 + "kind": "DataQuery",
1857 + "group": "influxdb",
1858 + "version": "v0",
1859 + "spec": {
1860 + "groupBy": [
1861 + {
1862 + "params": [
1863 + "$interval"
1864 + ],
1865 + "type": "time"
1866 + },
1867 + {
1868 + "params": [
1869 + "action::tag"
1870 + ],
1871 + "type": "tag"
1872 + },
1873 + {
1874 + "params": [
1875 + "null"
1876 + ],
1877 + "type": "fill"
1878 + }
1879 + ],
1880 + "measurement": "host_iostat",
1881 + "orderByTime": "ASC",
1882 + "policy": "default",
1883 + "query": "SELECT count(\"client_account\") FROM \"samba_auth\" WHERE (\"status\"::tag = 'NT_STATUS_OK' AND \"account\"::tag =~ /^MACHINE/) AND $timeFilter GROUP BY time($interval), \"domain\"::tag fill(null)",
1884 + "rawQuery": false,
1885 + "resultFormat": "time_series",
1886 + "select": [
1887 + [
1888 + {
1889 + "params": [
1890 + "path"
1891 + ],
1892 + "type": "field"
1893 + },
1894 + {
1895 + "params": [],
1896 + "type": "count"
1897 + }
1898 + ]
1899 + ],
1900 + "tags": []
1901 + },
1902 + "labels": {
1903 + "grafana.app/export-label": "influxdb-1"
1904 + }
1905 + },
1906 + "refId": "A",
1907 + "hidden": false
1908 + }
1909 + }
1910 + ],
1911 + "transformations": [],
1912 + "queryOptions": {}
1913 + }
1914 + },
1915 + "vizConfig": {
1916 + "kind": "VizConfig",
1917 + "group": "timeseries",
1918 + "version": "13.0.1+security-01",
1919 + "spec": {
1920 + "options": {
1921 + "annotations": {
1922 + "clustering": -1,
1923 + "multiLane": false
1924 + },
1925 + "legend": {
1926 + "calcs": [],
1927 + "displayMode": "list",
1928 + "placement": "bottom",
1929 + "showLegend": true
1930 + },
1931 + "tooltip": {
1932 + "hideZeros": false,
1933 + "mode": "single",
1934 + "sort": "none"
1935 + }
1936 + },
1937 + "fieldConfig": {
1938 + "defaults": {
1939 + "thresholds": {
1940 + "mode": "absolute",
1941 + "steps": [
1942 + {
1943 + "value": 0,
1944 + "color": "green"
1945 + },
1946 + {
1947 + "value": 80,
1948 + "color": "red"
1949 + }
1950 + ]
1951 + },
1952 + "color": {
1953 + "mode": "palette-classic"
1954 + },
1955 + "custom": {
1956 + "axisBorderShow": false,
1957 + "axisCenteredZero": false,
1958 + "axisColorMode": "text",
1959 + "axisLabel": "",
1960 + "axisPlacement": "auto",
1961 + "barAlignment": 0,
1962 + "barWidthFactor": 0.6,
1963 + "drawStyle": "line",
1964 + "fillOpacity": 0,
1965 + "gradientMode": "none",
1966 + "hideFrom": {
1967 + "legend": false,
1968 + "tooltip": false,
1969 + "viz": false
1970 + },
1971 + "insertNulls": false,
1972 + "lineInterpolation": "linear",
1973 + "lineWidth": 1,
1974 + "pointSize": 5,
1975 + "scaleDistribution": {
1976 + "type": "linear"
1977 + },
1978 + "showPoints": "auto",
1979 + "showValues": false,
1980 + "spanNulls": false,
1981 + "stacking": {
1982 + "group": "A",
1983 + "mode": "none"
1984 + },
1985 + "thresholdsStyle": {
1986 + "mode": "off"
1987 + }
1988 + }
1989 + },
1630 1990 "overrides": []
1631 1991 }
1632 1992 }
@@ -2912,6 +3272,32 @@
2912 3272 "x": 0,
2913 3273 "y": 21,
2914 3274 "width": 24,
3275 + "height": 11,
3276 + "element": {
3277 + "kind": "ElementReference",
3278 + "name": "panel-16"
3279 + }
3280 + }
3281 + },
3282 + {
3283 + "kind": "GridLayoutItem",
3284 + "spec": {
3285 + "x": 0,
3286 + "y": 32,
3287 + "width": 24,
3288 + "height": 11,
3289 + "element": {
3290 + "kind": "ElementReference",
3291 + "name": "panel-17"
3292 + }
3293 + }
3294 + },
3295 + {
3296 + "kind": "GridLayoutItem",
3297 + "spec": {
3298 + "x": 0,
3299 + "y": 43,
3300 + "width": 24,
2915 3301 "height": 10,
2916 3302 "element": {
2917 3303 "kind": "ElementReference",
@@ -2923,7 +3309,7 @@
2923 3309 "kind": "GridLayoutItem",
2924 3310 "spec": {
2925 3311 "x": 0,
2926 - "y": 31,
3312 + "y": 53,
2927 3313 "width": 24,
2928 3314 "height": 10,
2929 3315 "element": {
@@ -2936,7 +3322,7 @@
2936 3322 "kind": "GridLayoutItem",
2937 3323 "spec": {
2938 3324 "x": 0,
2939 - "y": 41,
3325 + "y": 63,
2940 3326 "width": 12,
2941 3327 "height": 7,
2942 3328 "element": {
@@ -2949,7 +3335,7 @@
2949 3335 "kind": "GridLayoutItem",
2950 3336 "spec": {
2951 3337 "x": 12,
2952 - "y": 41,
3338 + "y": 63,
2953 3339 "width": 12,
2954 3340 "height": 7,
2955 3341 "element": {
@@ -2962,7 +3348,7 @@
2962 3348 "kind": "GridLayoutItem",
2963 3349 "spec": {
2964 3350 "x": 0,
2965 - "y": 48,
3351 + "y": 70,
2966 3352 "width": 12,
2967 3353 "height": 8,
2968 3354 "element": {
@@ -2975,7 +3361,7 @@
2975 3361 "kind": "GridLayoutItem",
2976 3362 "spec": {
2977 3363 "x": 12,
2978 - "y": 48,
3364 + "y": 70,
2979 3365 "width": 12,
2980 3366 "height": 8,
2981 3367 "element": {
@@ -2988,7 +3374,7 @@
2988 3374 "kind": "GridLayoutItem",
2989 3375 "spec": {
2990 3376 "x": 0,
2991 - "y": 56,
3377 + "y": 78,
2992 3378 "width": 12,
2993 3379 "height": 8,
2994 3380 "element": {
@@ -3001,7 +3387,7 @@
3001 3387 "kind": "GridLayoutItem",
3002 3388 "spec": {
3003 3389 "x": 12,
3004 - "y": 56,
3390 + "y": 78,
3005 3391 "width": 12,
3006 3392 "height": 8,
3007 3393 "element": {
@@ -3014,7 +3400,7 @@
3014 3400 "kind": "GridLayoutItem",
3015 3401 "spec": {
3016 3402 "x": 0,
3017 - "y": 64,
3403 + "y": 86,
3018 3404 "width": 12,
3019 3405 "height": 8,
3020 3406 "element": {
@@ -3027,7 +3413,7 @@
3027 3413 "kind": "GridLayoutItem",
3028 3414 "spec": {
3029 3415 "x": 0,
3030 - "y": 72,
3416 + "y": 94,
3031 3417 "width": 6,
3032 3418 "height": 8,
3033 3419 "element": {
@@ -3040,7 +3426,7 @@
3040 3426 "kind": "GridLayoutItem",
3041 3427 "spec": {
3042 3428 "x": 6,
3043 - "y": 72,
3429 + "y": 94,
3044 3430 "width": 18,
3045 3431 "height": 8,
3046 3432 "element": {
Newer Older