Use destination index in dashboard

Author: navnit-elastic

packages/ti_domaintools/img/ti_domaintools_overview-dashboard.png

@@ -39,18 +39,40 @@
  "meta": {
  "alias": null,
  "disabled": false,
- "field": "_index",
+ "field": "data_stream.dataset",
  "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
- "key": "_index",
+ "key": "data_stream.dataset",
  "negate": false,
  "params": {
- "query": "logs-ti_domaintools.nod_feed-*"
+ "query": "ti_domaintools.nod_feed"
  },
  "type": "phrase"
  },
  "query": {
  "match_phrase": {
- "_index": "logs-ti_domaintools.nod_feed-*"
+ "data_stream.dataset": "ti_domaintools.nod_feed"
+ }
+ }
+ },
+ {
+ "$state": {
+ "store": "appState"
+ },
+ "meta": {
+ "alias": null,
+ "disabled": false,
+ "field": "labels.is_ioc_transform_source",
+ "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index",
+ "key": "labels.is_ioc_transform_source",
+ "negate": false,
+ "params": {
+ "query": "false"
+ },
+ "type": "phrase"
+ },
+ "query": {
+ "match_phrase": {
+ "labels.is_ioc_transform_source": "false"
  }
  }
  }
@@ -315,21 +337,17 @@
  },
  {
  "embeddableConfig": {
- "columns": [
- "@timestamp",
- "domaintools.domain"
- ],
  "enhancements": {}
  },
  "gridData": {
  "h": 14,
- "i": "c184eef0-465b-4ecd-8259-227044f9d39b",
+ "i": "f9f47276-8ce0-4c5c-84d0-984cbaff85f4",
  "w": 19,
  "x": 29,
  "y": 6
  },
- "panelIndex": "c184eef0-465b-4ecd-8259-227044f9d39b",
- "panelRefName": "panel_c184eef0-465b-4ecd-8259-227044f9d39b",
+ "panelIndex": "f9f47276-8ce0-4c5c-84d0-984cbaff85f4",
+ "panelRefName": "panel_f9f47276-8ce0-4c5c-84d0-984cbaff85f4",
  "type": "search"
  }
  ],
@@ -338,16 +356,19 @@
  "version": 2
  },
  "coreMigrationVersion": "8.8.0",
- "created_at": "2025-06-02T10:35:18.493Z",
- "created_by": "u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0",
+ "created_at": "2025-06-18T07:05:45.070Z",
  "id": "ti_domaintools-e403767d-161a-4fa5-9c10-a8dac12a3f67",
- "managed": false,
  "references": [
  {
  "id": "logs-*",
  "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
  "type": "index-pattern"
  },
+ {
+ "id": "logs-*",
+ "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index",
+ "type": "index-pattern"
+ },
  {
  "id": "logs-*",
  "name": "2c5bc5c6-cdac-48ca-a10e-c2d9a028315c:indexpattern-datasource-layer-5874cfad-c1d1-4d09-99f0-c6cb94fb7dee",
@@ -359,8 +380,8 @@
  "type": "index-pattern"
  },
  {
- "id": "ti_domaintools-eb599614-25b6-48b2-9225-1e0789619305",
- "name": "c184eef0-465b-4ecd-8259-227044f9d39b:panel_c184eef0-465b-4ecd-8259-227044f9d39b",
+ "id": "ti_domaintools-c258b26f-c167-4075-87e3-79a8a130ab24",
+ "name": "f9f47276-8ce0-4c5c-84d0-984cbaff85f4:panel_f9f47276-8ce0-4c5c-84d0-984cbaff85f4",
  "type": "search"
  },
  {

packages/ti_domaintools/kibana/dashboard/ti_domaintools-e403767d-161a-4fa5-9c10-a8dac12a3f67.json

@@ -0,0 +1,104 @@
+{
+ "attributes": {
+ "columns": [
+ "domaintools.domain"
+ ],
+ "description": "",
+ "grid": {
+ "columns": {
+ "@timestamp": {
+ "width": 212
+ }
+ }
+ },
+ "hideChart": false,
+ "isTextBasedQuery": false,
+ "kibanaSavedObjectMeta": {
+ "searchSourceJSON": {
+ "filter": [
+ {
+ "$state": {
+ "store": "appState"
+ },
+ "meta": {
+ "alias": null,
+ "disabled": false,
+ "field": "data_stream.dataset",
+ "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
+ "key": "data_stream.dataset",
+ "negate": false,
+ "params": {
+ "query": "ti_domaintools.nod_feed"
+ },
+ "type": "phrase"
+ },
+ "query": {
+ "match_phrase": {
+ "data_stream.dataset": "ti_domaintools.nod_feed"
+ }
+ }
+ },
+ {
+ "$state": {
+ "store": "appState"
+ },
+ "meta": {
+ "alias": null,
+ "disabled": false,
+ "field": "labels.is_ioc_transform_source",
+ "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index",
+ "key": "labels.is_ioc_transform_source",
+ "negate": false,
+ "params": {
+ "query": "false"
+ },
+ "type": "phrase"
+ },
+ "query": {
+ "match_phrase": {
+ "labels.is_ioc_transform_source": "false"
+ }
+ }
+ }
+ ],
+ "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.index",
+ "query": {
+ "language": "kuery",
+ "query": ""
+ }
+ }
+ },
+ "sort": [
+ [
+ "@timestamp",
+ "desc"
+ ]
+ ],
+ "timeRestore": false,
+ "title": "Recently Observed Domains [Logs DomainTools Real Time Unified Feeds]"
+ },
+ "coreMigrationVersion": "8.8.0",
+ "created_at": "2025-06-18T07:08:25.643Z",
+ "created_by": "u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0",
+ "id": "ti_domaintools-c258b26f-c167-4075-87e3-79a8a130ab24",
+ "references": [
+ {
+ "id": "logs-*",
+ "name": "kibanaSavedObjectMeta.searchSourceJSON.index",
+ "type": "index-pattern"
+ },
+ {
+ "id": "logs-*",
+ "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
+ "type": "index-pattern"
+ },
+ {
+ "id": "logs-*",
+ "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index",
+ "type": "index-pattern"
+ }
+ ],
+ "type": "search",
+ "typeMigrationVersion": "10.4.0",
+ "updated_by": "u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0"
+}