From 72313a600dd844607ff1d1bbce05e2178f221a11 Mon Sep 17 00:00:00 2001 From: Marco Ochse Date: Tue, 29 May 2018 12:05:07 +0000 Subject: [PATCH] include tanner patterns, tweaking --- docker/elk/logstash/dist/logstash.conf | 21 +- etc/objects/elkbase.tgz | Bin 110586 -> 146043 bytes etc/objects/index_patterns.json | 8 + etc/objects/kibana-objects.tgz | Bin 30420 -> 30670 bytes etc/objects/kibana.esdump.json | 440 ++++++++++++------------- 5 files changed, 243 insertions(+), 226 deletions(-) create mode 100644 etc/objects/index_patterns.json diff --git a/docker/elk/logstash/dist/logstash.conf b/docker/elk/logstash/dist/logstash.conf index 05940f57..6496521a 100644 --- a/docker/elk/logstash/dist/logstash.conf +++ b/docker/elk/logstash/dist/logstash.conf @@ -395,6 +395,15 @@ filter { date { match => [ "timestamp", "ISO8601" ] } + mutate { + rename => { + "[peer][ip]" => "src_ip" + "[peer][port]" => "src_port" + } + add_field => { + "dest_port" => "80" + } + } } # Vnclowpot @@ -449,7 +458,7 @@ if "_grokparsefailure" in [tags] { drop {} } } # Add T-Pot hostname and external IP - if [type] == "Ciscoasa" or [type] == "ConPot" or [type] == "Cowrie" or [type] == "Dionaea" or [type] == "ElasticPot" or [type] == "eMobility" or [type] == "Glastopf" or [type] == "Honeytrap" or [type] == "Heralding" or [type] == "Mailoney" or [type] == "Rdpy" or [type] == "Suricata" or [type] == "Vnclowpot" { + if [type] == "Ciscoasa" or [type] == "ConPot" or [type] == "Cowrie" or [type] == "Dionaea" or [type] == "ElasticPot" or [type] == "eMobility" or [type] == "Glastopf" or [type] == "Honeytrap" or [type] == "Heralding" or [type] == "Mailoney" or [type] == "Rdpy" or [type] == "Suricata" or [type] == "Tanner" or [type] == "Vnclowpot" { mutate { add_field => { "t-pot_ip_ext" => "${MY_EXTIP}" @@ -475,11 +484,11 @@ output { } } # Debug output - #if [type] == "XYZ" { - # stdout { - # codec => rubydebug - # } - #} + if [type] == "Tanner" { + stdout { + codec => rubydebug + } + } # Debug output #stdout { # codec => rubydebug diff --git a/etc/objects/elkbase.tgz b/etc/objects/elkbase.tgz index 1abdd3efdd2607f63faa626c17b3a5907d114907..6bc4efcc8e40f2784cea5c7f565dd2e6a4975bc7 100644 GIT binary patch literal 146043 zcmV)uK$gEBiwFR?J`Gy{1MHm-a2wT~#~lYsNFY-v2OOnLYC-}el2`w2T~b3rLTC&P z#6W8nA%8C&b!)$YgN-}}A)`&K3v>7?pFr|fKKx=dN8 z(5Yy$BJr(Wt#94=Lt>`yY!Vy{bYIYAXIEs;>};#d1a7gY;CzN+!J^N+wFN>UAruTo zW3fn^5DW<6Xxpqvh4-n-Y-SO2)~q(m(5+89Z>-}@YH~IH7rAB@9d|OQ!2dBph;si2 zLxDic|Mjqm_}~5Q3k19T>{F$292^aY59a@%5Db_2KO72#+GYv$5a2WJ|DIRX;|_Hl z$^V$*{KQY2e(1hy`~ylq(a64Q2C2yuU7OwhlbcQ5wiGQXYIa&=DPqd(pEtQ*U91~a zyOvSQIn4Im!IKXi@)O(AMLJ{ zZXpop-sYXb@6%6BQBMqi{S4u@(nB7|8TqRkraq|1R2DUorb~1G#dY2>+g9WY%O~ku zy)$zEtj9*>rBR+Z!`~|i!ci{Bjy>#vR?XhzYovrTD3a$z|J{?o3FjeIC;efw{PG7_2c_5`qo3cHw~Qn=UvZk-2chb@4U46 zZ{A+lvsV4hRa-y2eC>kXFaB)F0^NFR_OD~-Z@%u09oIc{=e&!zEn{!C@16Nd$Ni_> z^OKW>3-90g!s|Ca^tF?=Tyt}3`>+3Y`zKF-^|h`)hc4T+vmpzh3}}or;-bPu<>h0zyFo3;y?C^?I+B;V)acYy}sk?A7A~< zz9rAiojJ3|e)95p+k1O9zwyq>_`^Fku0Q*PM;8ZAUa{zjj`=UFVf6C5X01Ky(ltX@ zC4^t}eR0?PcOIC2tu0!vq(e)c)Gbj;ovhhKl!t>U{^FX)>4 z_o?69xp~W;-Cy|cU47qr_!W-(Y{Kx99DbA6~Dn zd?EYDLpQy0U{CM5o{pbx`@R2(ColP@<90o9!!7G)K00T?w2vP9%Zbyzv1I2x*T2** zrJkSrUf+L^`(KV;x%<+dYujGEa?OIJdyYK$8Mfn?_h*Q+^*1;C-(ho&%-rjzp0;uE z+z$>c{_Sb{U56iM{gu7vD?eBM>+as|`;OZ9`0;nJci;Hm!`j*o9GKd+_Zp%qgi*F{ z|MiBcq=}goEo!FON3*Bgx|hd+$g-Lw5>?eDH^SJytAvj(l!P@8AE_sayBt^MgC2`&TtCH)>hEt*Y{0sH_E0Mg2c0L|XN~dRUeIw@jij zRZos9A&lSup-7Nd{DfeLCxMp#>tPf1e}2Ok5W4&p-zamBG3x(<5DDeuKNJZBx&Na= zL}=Cj>tRm)e_Gy&{O@-Db1YpO&0Jz;6Dw_!S{_=yXz8lVT9RorYRe|UY8d}9zcgT! zyN8?qhYz0r^U}T~{v*+FtQG(DFem<}dVXuq?V49`c;G;ZdAr-6%^gn^wjC17{;;hc z%q^>()h_-6ff~erEF6uw@gHf$e_d>h_}9mX|72nOCvW`4?s_n{taetz_>WAy{-1CE zMTJ)RUmt7L|3BMS!}t$Z75}`>9}*(@_zy=yUi&}VYX8^8DvAFo9oyTd9q*2m`3z!N z)YRhqTUD{Ih>ct_EB9rHVE!x`w4MPl)TK_SrP6C%D~cV8e7 z560r5s9)&rzLcL={Jl88o?@xa1xIeh&$5&>U8+!3K98iGgJ(E9_~Ep{49AaHd@e09Mot2^eeb}`-k4wkz|(rwM+y9B}0G z9E*Fb6vjygjgh7t4wH0~7UOth&=uq4cTP|rrrV}eLR7f30Z1MPh{uRZP0LRtYjPv3 zLX8Tk`~x(b(ap&Wx{Bi8W0QDpnAFWInr3+}P}K(Mc(Ttxoi%f*FcnLd%2j1{S~DP% z4q^c@$}0$pl?9_xk{Yq>(!#Lu8N@IcW_lmS8Xvry!GA; zsUXkVJgI=CNF)$!8i5ONn?PeHyOnemTG$*ToSL?kg6dc5*X69(pS36x8Fg+A3WnxL zNlzP#SK`R!@!+WhoNF{ec2R)nj!7802^6B`=#Ukh-0s*3h{t*GbkheE%KWnoQd*mC ztZD^Vu$nQ-nCLuR2PoVy8>)H=Q18MB6RKLkNewooIh`6fayc}J3QhL#Wfd}sh$W>= znI$Sf9mhE!NS#JkU>nyrCo2r7GVRd7xlH3lAI#{CLt~oWpD3 zSwlcWkuDIN^B`TPr-=eIrOD&LQz@f4Lk(i?z96YQPsMd{P644ptI%QA=WLUVo=n&{ zuTdU$s^1+pNXro%?-g^QdC{XAp7IT(n8SprR)U|0rk2BmsaBdYMv~*24q9i;M#wOg zGpR(CK?t-E+vY zgL7&jWo`ph!`ud%f=Q|?hMzD|H)4PjA< zrC2taLirbU6;ttJqM_&8gbf1Il7M;{I&{CT5w$BogVqkQa4JB< z)Xo`#U8ies!sWTpR7>%*sLA|9lBfaHEm+LuqZ$v_JPa}*wtsyp(ULYv0)@vx0I_vM zrIU!1qCTewz(iUSrYs(;hQlj}017y=x(Td$&MF0n$~j!9s>w(ras^PRdZl!vXUq$! zP!%(2f||L;G?ZvLFjU=aBWdz2pQ14;*(UXwbS?i5(zxrGsIb~HYWjFx4>9u_VZ&2T zNv2>PHBRw1ZPw5&KUQx=5f+>Whv9UYB2B6-0fW`e>HWl7ZE6%6taiLeKzi#+F&C_A zCdmM5#;NcW8%NDNSU;rzYvi11T!m%b-r|!df>X+}j9iDC2-pE!h7MUlz^>mibeIa- zR!TROb!A4+8?Rp>8>D(z>v{|$L25Pb!lAx;L6;EDFXtr{7TyD$<@s<`OjDkjAT>x! z$Z(Z&yD<@kbHQ+RbNbmtv_8NxbdU;Sy_CyE!h0V{5f-EyO)4uU)S5R%Sdf~PTUe>V zN#8cnQavYvbl#wX)ODL9f>dfKkpNSQ6Co-ES#<@jwR-hJtQi4?Sdg08rUE7xC&E+; zv|0~bqgSM~0rgmw3pBbvrGY>|**o6oxT1+lf=CodqZ|>QQictbFS$5y8aYMr*o*bo zZ6w#@fm4YsF-_fs$sn0HsF;>b)MBCru7or|ht5=!K(i%tKxiq6Rh^iuuZH_P@s>O3k8!7xom=M)sylUx`FJLS6k3z%K z&LnA|a?s^C)!c!>gz6RWVyMlKC9Jxx+;Iu=UZD8O{H!yS) zXbjzch*wIcqtqV(FUK4c4tZVv}e&Izww* zchM-sTyg1lmKG6HbO_k(rKs@k&jVvUO?6Prv>XvrgdtUZ$3ktIB*0Q65(qYnyalxQ z3d21Ycu+)mElrx%Es9LB4nn=aJNit%>q-$~fnngfE5I8gRdZhOgr}K9g{K%Zbd5o&*(H$fc!k1G@{x37zjZG@vHNS3}>d$tM3l3_6!;UKhCd&FTZB6)ncgJV;Fjwe)a> z;LVj*oLQ8jZ6i$p8YeKc&e(|owoO%_DWJnhaDH>Z(nL|kgo*T0jbbiH)lA8- zM5KAfg;a=&iD1j*jWEHfWlAF6i(3k*5EUE8^tHOZ0nOtUHqp!QcG6{2FAZjpplI&Y$pX`d7I(}ZqUI~#y;s?@cxPuOlkr`w7Av3E&AXOrGBx`Nqki2? z=72hLM5347*D6+;fwW+mSTI!2+it0AX2o1lU0o8Tnm?lqCntY#EFU!ScmEvJVpU03_{ zAvgP4X&cn+<2(F>8ACn94VZ<5X{Ut92)Jo$3!QHbua`59vOYJxwn|~$Pxlg(xuBIs zmU97rqakFC`AxIx6gHVTk8^!@kwTICRI9osVH3ZVq9l=W3u#qhUL}GRq1r#sn}2ArRy?xwn)wS{@e!jw2iAqz9Kf1Dty zq78tc&_V7uG1u@!02-eDF@bs^V=BLqmqGAti&r%}iAL1yI?9u5TJ4c54$h+40}w*x zo(nWd20bU62xFbHhS9aYs-YWScWNf|+%q;4A)auZps)@%k+fQ;dYp&LFEk<5YMU9A zZ+kRTLL4awfn?2fl0atipYmFjrobJ31so!+jO%xOV!3tgYtleCh0{54s7BhnkO?Y3 zzj`8qO;WADTqCy$YO`M7zclFd`i~4SPC#0IDVbVCQ9X6}pA}cKN|!Ndl5T%q&8nKU ziu&Mq*f#K=w!BSgJCHN)@2U6Y4xIj@= zYwn15c!xUXci4vWz=tdni|-8zfi9mA@ddm40)coi7LP>z(Lnf8eqQbi@%0`3wxY`C z+3AjWAQ}zE=JVQ0g4n8cj#EqH7g6;jua>iv?{xk(=i=V@a$MFk{OGy5CX;M_=$XY0 z-LO?+_9|(`ArPD+-uYg|Jf6Gy3Sx2JYR)PC%LGAKQ*`kTezvL>=rgTUpC9J+*|Gm5 z!u2_(j6Sbbs83g15d7U;mFeSvHcpqrOLh5&ye?<`>6~Nv=a#95I8p@NI=9d8t{x{s zv_BLI2)=NL27Q45?eg^}y1IQN76}D{k#H!Ih)w0WPUt}8-^&3UmHV7}f1c=w?`)n^ zqmV?hLbOc?Mxx=U;YOI&UwM8 z&?^7yV@~`}%R8~n%LI<4YonP<%xq$%O;XE4%NH$Om03$NjYe(RBv=j0|4wUC8=Y3ASxA?QT{1;z-@|8&kZdpyOhUI?^;y+*h zx8lEEHb(nDIY#@R7RJ9kWyY#{Ft@CBR>Sy@)FA$O4Itvhf20-v^{_GGU#TSi`@Z|h z`SoCKS?#Qb@!ws8_J7!m|ERO875{axR{Q_6Z8dEF2Wk-ix$(cKz)x?*e;uq9|DSEE zY5#u>+W#>j&}#qJ(Z;C%rz)xcKYqRTem$65Ry(U{{eR-|ACASm`9INUEB@D zlKDUCi?_d659XHD&T1I{UA2h+eE(mhRsPq-#)yBllK9{B%(SxpZyB!Dbo{@H_J1H0 zjyR3|{QSRg#GC&UZMFaFVimRjr}^5a`DMaV{W>w_cY1HgMhJL7_<@In1fGyU zC`1AzBoZDX1hPR9I3bD11rwY=AQz-04^emlC5UsWQ*}1tc zT3a>Rke$p%>lGXpK%Z&D_n=T`c>lWN_gu@jVEc{}_$Wmr3K+&YA{}?k+@V}xzB#eR zVCa8v^Xe6N$MrkgD+AB5FF@8O!Av{whqk)C;^4p|6$d1tc(*$Id25^Gq1;D5QH)d= z6s4Mdtp_<7QNhfhLKrm#zm20Rn72n+FLxb(Y7L#+IEV{3#ThrYS8&Y7_6p9R2}WID z+bF-~Iu7C>(BbpsmmwH{v3+#{(33dFB@XDy>8F<2PmSqk(=tr6X_oG%Hg7-kAnTcs z4F@5u5mU$Fac%`rsB)Qa;l%^}$OP${`x(LWVC5Kep0VS8-Xu zYrqd&575U}ZaQ6SY;9V*z`lyBO1%UE3n@Vo)Vt|Uy&i}my*dTney9Vi@nDLRs=$5> zr#&zx`BmsG+bd`&Ah$ZhP%PcR_y;>f_+M~tINXj>C&whg$^^yWM%Kf_iLgBCCs=vr z$=4qPmCDcj$^B_#KY6KY#|L}NZG;lANVL0e*!>F1~4H*vnb1BAy@&d|x;wvvY zknjV~8j*)K1NeGEQ~U%bSmrZ4OAVcn)NG8jW!smrR*tC(FKxjghg@+J4*=y9blr7_ z0ZtAY-rIw42Clb%?iOaM>v2H#deq|hYib-n9ey_&-Y7M<8<41KoKSnm-HSg0e~f#i zQLSOUF>!q-pp&8N27ycZ>i4W+m@tj&w&f9~;@|5B`{Zt%?I0v4`GY=8`-kRQsOre; zX~Sjsc6K^N??f5Ghpva;@)Q7o0Knnmh$P!#9O){xiZ<9Td5G0XkAUX@e}j(Lbv(bR ze48GI;Hj!3op%WBgE8TKM7!1fJ6qWMmI6 z#NE+laeiS=<@ht_gK(ASjG@dA%lFOxEDl>Iq)X)JSQRm)O$Qd9J_8<7Tb&(FaWDvd zFc^W5Ug;3u&leBI(`?rw*sN*bGN3Q9Z5pXSF>=Nos98I-s)CBZ-U?7!8@tnm7j2*N zMzZHy@rSt{n=^V$=7^u{>cDfSla!8zHxnKkPo`l~)!1x#hA?O>p|Gh!5T)HuQ~bAu z2Vb}~8M;n@nH&C#%nAo9eriymOZ<)kyx=2aj3ijQWFzaNr5jeahpibS!Fn7eIYZ=81-AH69*P={8Nn>}cD6vvd zw(}oGtVSLnQyu;`aX@r6n$`+_Z`O_II%n}JM1aIik=@L<26z&k(f-2{O+mWdmvZi82^qN|BljU3;1#)G_06ywG=U zhwQ*3@@y>K6`b#~m+TN~J-;6@1Z_KDIO@jsSX%8hCZiW>Fa@bFe2MC)SUN;kklJFV zYNX?oSjpjegnG^Dwuh1u`twvm@BPNpZ@~6X2ok!;ULBIqe>b0m*4u_!Rn>wLdL5@< zhRaZ8P1$lMkWUKBXYtXcbY4p5laS6SnZ%cpI{LAc)ajD?AE~7N$s2$Ff0fF^n}Vb+ zvfqy+^^YE#OHvzcvsrB#jk30MX-O?Unj)#g(uLWwdIG$Skkk>65*fK+d4XdMuep1E zawd=)AP+b_{~X%kzl@|~+HIte8!Kdb?r=I9(_<6`CvS{fZO0>7rD+>4tjLGA+yHMz zBt90P%NLdNp@EquE+U zoD;q!-Wbf36$c_^rp=mbIkSz2c0i!r+iK+tRIQkAJ^KAh<;>%PS}Ah!jnvAYziZ9~ zK&?^LHNBWxIk$QCN_maKJ+)LOOJ!0R`4K1+CTsXokHjB7w^?Q+b(u!8<9dTrY#f+J zIHp&YR>5hs3cg6Kg73b%+pbg|JtJ5JMI0rORq%;-&uJBCjcP-!6|@S1!0O#pP+j`M zCPDN_nmynQL1)A?rI-Y;c`JHgbH}oQtq>0kh4?G^%vd=71>mD9+o;2$PR`js+yPdw zK7J+LRtL`L=|Hy%TO zKv9I^<3j@089^33I}wBv_O^#)CpAMcO`_S#d;%4kxoqu2YM=AKWfzSC{v3NxF!ISQ zTqhM46RTQ0_!egH;~Q{c4|E5u-htS}ufkjXDnNUwPOsW?&+ckx!{gJlcWxh?y>kox zw|`KDUHs+nt`6oeA9%Y?4|D?8f6f|s0K8|k-?1hWyd(G=krnh(C`FzNy)6^KM$VWH zZ7tbk-J(ruvds#h-PN7OjPvZ|`S(1f)?4pWp0$)65A>hg-sXz?xDzn;0|+&MoyPTj zdhTSOa2mYxdE`&OiQD14diJdKywY>W&^`-{x|Nr2LV| z9of8bmvcroUvOrCq|2eBSmZ!EcE|E}I>e{+2+lfCAw9+)B4RT*_#4n9b3)f?9wE`2 z7qI~Z?DPBU?r>;%skcpi@B!eWnogeUh<(LS+3#q@ZPKMJ_$6u!j&40|Rx0oKEx{Hn z54#^3XIRHoI%|oLrsQ#uOV?&$>AIfZja(XAZG;}1lu5b|XH@}pL7t7^4X z#~!NT11al{waf0nPaB>n@di1afWKc~>G+tUD>qj0K?b@MGjRA4)Od)97$*wnE)q0? zV`7R#HuKRnaTE@mo_Pa1vqF{GdOW9Q1#pgTB&z`h%$K>-}ebJ{S6kCffHbtOq)wTGLdc zVKnu+(Ksl@gUZ!wO5ET=lQT%Uya!Eg;qnDII2I7!5^gu9y$QVJb{!m8nQZw0ddQvh zg@zY_XANzn&V?4le1T_8gqD{qXNVewhHLgjy!i6CH+1(V1aAJETtISzFVo5TWas*u za58^VOm1KpeO*V}Ma`x~Shm&GA(6o)d+3RX(Du4D&$?YO@OVv?w1G80aX!(As z5!DMgsxtWv@*cyKjbb_@mm)5BGxj4=Y4|hmKokY@si9Q>vsG@r(^GSnl+(RCArP)~St- z2cKHzv0=`bfS+jw_Z5W%&jEQ^eNnXU_AVIV40UPQ?C^CFy19-}Y=LRku)Iw4#?*(P$*HVBTw*Z@?oNT$zAu@8lvNKni;8V<93A5rR5Q*0yb#DY|$e$VJfVYlV0R6lOr z`pVZUmB&6N>c;|kJ&}I=iznte`c;i~O|64iiW{8w+Bxs>93~$6lsE0XFFq%1&3{m+-F@f7$8~fs_X+VL`~tELh>zlE zSQwZ*DV0U!V>=tpJE~paA#z09)pE3(L7Ca4UEtYw#xSHE%?SgPlAUdy5y@oH<>C2p z9-fy!g-s;?J7gD%#z+fY&0)jkG3e}L(62@DIiLFOE;P(v<4O*w2IzvmjW@0OIh$60 z`b3G61LhX0H(<1NqgprA%#s7qUQ>3>fp|OWh>H$ry?(3K($VV6)-zUL;bM3(MF$RF zKfuwW-ybOsM>0F1p%$qH&qKC$TjLEFduOR0V4sq z$v_4@s|j#cvSy=E0`dYY2*i*Z0%Ri%vf8S*fQBJAOF&*=1%ViHQ-It|f!wScU9GQU zMN&o@%~e5QR?&m-gf(pfswxAz(KB0StBXOmN`OwD;4TPtwyNS#t6IHj_0{sI7pSZl z)UmeGlc+h#p<1@uYvvy1r=nhgG$8vkc%jlc5IAHEISFNtZ63)o1=BL80596H!4uQl76QPpet+vKs?T_Qv( z^%QwVcvQ@4H2Q!$XAxTuSIYutVlPwtBc-IqYEB`K?AidcYJ9MD5N1_6h>L#ULJS2f zEo9Y4NY*Au_Af4(P_B204O+3xLVmZo+7Ciyh#aCY#TVj|2Z&B7MM=a$AR@=5m4}Gy ze2Dc+7%5z=xJPO|j+}}gvkG&hRlG?ln3G$;g)8onT3Sbv0v2<517uZ8phw&JF&-y% z$c@Z^*@xVvd`s?<`WbUqn>bx(?t=g9Thy5N>7|>0RH;1hO~IHjE!FOsTJBN-852Kw zcpjg$n%UM{Rl_LilSaKQlr3w}8@f}wkO?6?#S7|yy~;Uhgi47Mo-Wh@V_IDbWo7$Rl&j@OoRv#~t(PaAi%oYX>Z?4^Ij&+ zZZ7A2zGnYdI`1dXe)P{$=Y5fF{zJ@r9og=xKDTBsHSaT@Ue5cwOW!Z&{fv44Hl6p6 zUaPIc_NT;{*8(T0Xx_g*$Gq3tn%*|+RkP75s_$Jd@Rbdxpnj)!^Yc0^ft9|uPa7Ap zZy6WCqIZiM%#^94T36AnOo^-X&G)-OTEGbw;1aIOWr4(E;u};&TkoJVky_sG9I6q4yQA`N^@K` zV<%Eh{6}uC*p=|`-nO}Ba*9W0>{-bvEYZ!fh-YQeiP8_iWX-|ua|U{~Og`=Zpu_$-_njZBR33RvG#U#;&ZE))s(<_+GN5t<|z8?9MUI@(EuF3lgB zbtJ({vje&qBWQNiQc}V4ym;uar5uB{faxt-&Dd7pq32qWe0Sywq7oJpT4FJgl3Hd) z*YCXut66qkB1=$#&*rAt7IK=V4AH$}gbCXCKdCl;{NwAlp*DU~(8fh_iXd(LUuCs1 z-oil&xm9g6ibfA-7u!zXhUW@xGixcP#x}=EabfM8y4pfT?Yu1RB^Fgsn;()*_ao z6fskPxVFkx9mc!ue5v8PqS7#5Ul>~BMCA*`rI$k||Io>GET1gYJddvrTZ>t!z)bg8 z)5U>N;vY+`>9x(bIGE)13%JSZ^;ggOtb&GG9)Rh##d}T(9P4 z3_-ts*s%kg@vrPUJnHn3qFS!j@7~pViBq%XAIVU`HB>l8JLr#YJNN;U#U=wzng(Qd~cf_M;*Y;+^X*s>4{p^=e7N4>>A2bnrjaudqd=SZ}< z5(1KvPNI-Mx%I2<_!21`ghsj{8~asxb}$hd&m(_IGinhg8OP4^B$MG0CK;&}+>&U! z9s`nY@T43%?BOpFoiHBxsI)gm+i}!!P7*GssBnf^X;8^#(8+1fp=dq9;pXH<4ZvwP ztm3V;k!{K|dOR-KMvzP*YDYi#>f%NtBb zQH~usMluzjbc4#G41bZ7hT$)=QIM^#BoE~>t3F9YF=-BU!-}R(K+2iQHi{82IR_FY z+;qlhsoul+!z3dfhfY=sPH`<=giw=@fDAbK>8Hy~KV5G6Nh$moY;sc19$6`p@1(U^ z(zPu7`$Vt|t-uMUvQdc3Y8;`0ZJmir*MuhoY&?*VUK7_xb#P=<@(eUNWdwX2a+;L1 zW1vY*I~kP|15Hlap(EJa?pQj)QCzZ7Z3o1ueotQR?m!CdPu!p?7w>bhq#MBq9296W z9nmI$NlQ1ROXZ4P7NAK>yD)dMbcDmWq@|i??MX;8h)O<+6^JF)j*n9E#S$Y-g_Py7 zp;E#|Lk4gujI&8Zp{LF30gJ@0R#v!8i`dB+C8o+|Gd($+RXk$JG;Z)n-wIx z>XhyBy=L6)Ub}nl+#QVo@g9M~8xKSRB*+`^6!8Fg3KDPp0px{1NXQa?2=NA0WxMUZ zZTGd^?%U_GyV4{xZM*98SLHfiojP?2Qh-|(I*<&)N`ovR!OH--0t;j_#>@+1P&+7B zV1eYUYMbt!yS_Z(7*q>#L?9dQVF1Z>n;`Kn!s-;24Td0&y%`lI$2&Tdr1c!DLO$pI|Le zui^s88aTRu@{~l27}E4*2?-ik6ACK1pM(RBqco*4AeJCGrzh~7(y&HJh(lyFW9dNy z;|U-yVFYN-5`mkpM2oq|ECq<76c99?W^^)k0BuW2@jztBrC|tZ)vmw;IRbF;R4mwGNTuxI`_-c{1hHT=kmBTnT0Yf z01jOjpn>BK(mMJK-ao|q)e*if^p?=VXBga$w_1qcxs2H)nlsqOe~IzBunEch$MkIM$Lu{g?VBTl)|vv> zX#nZ8h#V0_rY7?RETT9dh&&|$py?vtbx4@{OIEotY7;4vjbs2~v~0RiP{?Htj)Qgup`1)xc3iU(ZF z0XiN!nTRBUECjUvzk~#?-2|`+4Z^V>L&_DriVGxbu{+~h7+NRGP(fsD3@rOcfe9R2 zu{(yBkGhNsB4Z8KF0brhhZGM)mLRQ3Cdui@4Fi!9OfHm#jP_97;u4N0HN#xJZ zXv{#9c@ZQ;J`)ymbdY;y6+*yF!tR+hAi?oDr*V~M*vmJLT|J()bkKWkN{I(vtMU6L zVC?R~`3+E6&oe;aTJ1cUGf1;yi3b`>b7dCI0nS%ealvE_QoLo32r5%!_6X3BRYnDt zvHYZZSd0bmQb5lsqzsS(4LF9l;^f+Da$&&Qm+YK}$;jtauvqT)1=Mz{z`!*lhZiKt zg2f)7`BxbgM8>Akoci;NaTELO`y7$O{3r%83lxx&DWEeNGC&YJ6S&z|2^2)WzUZz(xbHyoc%egQV3ug>>S=HvI|J@QVV$DcZ(UUK@k)&2Frsq#4hqrH^ot=&5G>np9I%i=RoUp0OMs75@9kbbDo~C$r8NV3c4x{M7 zV)lIcGIt(7mSg0TC$g@PI&8Iu()A}#_#Iv{za~J%j=nS|umjc%YBFQYJK@TojizjV zTP9ANoz9*Ye`$@V2vP(BXk%_Ss2Eo=&;S8RL&hIZf|DtoFJdNr4Beo4kvn1&7M}zn zy&4}z=844T1k>9O19o=%9_4@Q^etSAul9sR!EDqKYTmSL>ap0N2^&T6Ne1Y4hG?7) z_kDdU*8yoM0~Ro-X=_WX8=sFeQ{AnLvgzn7co58(7f^}t>~_ErKawBy#m@NLJeY^< z&e4py0Syn2z;qFJcisk9X}V)J7>&k2qZnb6a*CZkhj}7 zn|MM1v$mumzuZfl!oW;Gu~w<;qzYWk8@>h90XC>uD6(;K_AJs z!FWYO!@BD040`|C={iBrc93j?cxz2i)^OYO)hp6*DO_IAR;=|q7*)?bu2V-W3?U#| zGbahiL4HHV=xYIYdAbEev>x1ckG31F`&ZI{;FNIn zpk`Cwzxz;l{fh<0EvV&1d2CLDFlCqjv$e>&n55&Hxc#}z>WsC69&Cc`3I8+5|NHph zf3yG6f8Y40?80Zi_andk!C>&Czj@=};~q^;oruQX;oWF@Kbk+~MebjJ^08cRzIAwO zdHL4x)?y}hHF#q>=NGVwEJf86tR7?aP)COdjj(Edf!|j=bI8jP;)~y(md>w={P|+Z zS_l}qX3bx9dHv>#rTS)c%EIJVj^2EOU;pA`vEI!Imbqgx#?yzCmxMk`lvnvTQ=G~s zpMFiKLVhdeKg5yvHi_tO!TW41em3%doM-neSJ@v1$%2N#`?Aw;W{1n_wYBQ+%Bf+% z66H9WDM($fo-C_3%hi)|^`u$#X7$@E$9Z(_O2t}#6(e=6=KJMyUsmeXd#tyvxt;Tj z`SVRJZ!D4M+qV2V^{c2TwOJJ`~ERk2jpQxIaNLLFi%%(1b99N*DRQh}z&@2)i7s1`;D zQ3=Lx4o2S%H3s%QW(zdBl~ZF_hC*yiT?3h>VR{v4j0Rm~;|D2Xk|Jp~a@+7&?6->_ z9G|kuGScdaFj&EnI4irj>pq8>+GSp7`j@h?PL@F${ACxDX^wfi2t%QjgE*ZZW}JCrwn zArfgW5AhSxP}#glbP2h?nGbFAC}w#m+pPzI!`1o`sicQdkMtr@_f7mzAgU z7s9Z(vvB>(kU4SlQiA=^MG5xLxdi*J{yX7d@buA&1UouU!stXuu&?}hM+t`PS_zhx zUN6DY>n$Z%`cMN2Rt(TvOR)9okB(k#r2@@b2<=tLDg(__Nns!QR3#ab`{_}@wYJiz zreRApnpIvY3rb3)M_G{7xJee2^oY7`&Fk-)jyuY0_v>Ye+9QCn2FwtAKHFEJ9Mcmw zj22Y}7xmZNCGxS2kV#cx{XI9e{x&ik#dkE9IgV)|ge$<{20dYi)?eM7QC%^B*dFOb z$Jo{lY-^Tg4td=p71=sLc+CWs?Py=nK3rz?JGoi?<8OccZw7-OJH6o9IOEfEVOIb2 zr#hNdtZ(pah|)KCHpKPTo(=I(6Pvax*M_YBa@Phf#&)~M;bryxn;BJHjP_ew)z$g7 z#PW99A(i_<{gj)aU9zz@+AFWq_@u(^LkfK%N8D;EwAOYn!*QP`iSX23jzixmj!LaT znoKa;oBXWG%^n|8a`_mwl{cJf>uZ%?t~ZEP0|0jbu-*YTNiAa6RIPQWx}wi<6PSo^ zuR=^0?$tg&Iu|kDMy{%uo{Lk3V`0Nmn5Sx%Z(tL%3L3Q1r?>SWRDf}OVl!39E!ERg zFb*|*MbkBGBIJ2Uvns&oJ7LDhmSeew0K>HAU~1+aTTXf~H7u1#4;{ymyP<5wFqv-I z6lv6=6=2M5!E7f)FNi&l`E(J^??z!1XFsVom77RaW!>?K^J#U6RBfp1pOLyrN=8EZ zDaLrGQo&+uS+=SYE?YHBhKf2urp|?ZjesS)@K}*uxU9%WT6+tv{V%!J{?hOL^xqB! z2T$KP7!_LE^9%>2USVcs^Frn$h0lh36}i63Y^lWm?AfkL+^SXLZ%?@zIh$=-W?bIV zQje>QXpTYTYh~jvRW+=rCNW(fYo23N&Ao>WJn!wbi02Ug5&II1))-8asdsxUjB2K6 z+ICoK7DTu7#Mw61Y^t@yvLl1-B8+UOC6>Zo_vs{cJ&HA?x5ToWl~Y4^sD`bUA5z^? zYM0Jin&l$f;&@O?Fpbt#+q*MW)nvA2wggkC?v7tluR5j=>x`?^h&8e?G6=#J)-d8T zeMKLswrS`_jT*TI%V$?88zyw_o{p)s`H%aP0^iN0K=^kbyge9v>>D=@K2b=47kN39 zQDNnA%}ds6Rr%ZjhJ_1O(AEq(UX)dm%n-Ay@w7kO6*rt;ow_ItJAMLCZ8D4#x~ zi`MIH?CmNUhx&$S?_^rOe^YOl)gzAj4%y5XT3UGO(|YGvDm`!I7@Td5bjAB`4F4&K z+j=|L-uaZ*-C(7U0CGT$zx0TptRror5!ICL4ZE>>1MNoCy1wP9Op{<}b1*$d18VDS zbNLzts_{JaG*DHCUZO_ff8AgEIHuENd5GX@)r}Ntdy8N)LKyLQ^CLA|^R+ZY6x(My zBP#WnX;z?Vv?WSfvOLSSSz9oL z{Mdfwxnyps%Lf&$EtnpiYh|Y+)>NID5)7;P5Sm9qZ|Uiyp5eKU-WE)wNa*%%B!}9b zfm?r0MvrJp4W%N(b~MS2ftz#FkBhDTv2}$~S5WB#P;F#rq|ScVp%Lr)<3I z9wLNEEVwZiSYZ>rTF;9fX?>(=Hm>zZe`Gv?8P5-LDc3J%u=51N|_8Z2n6yIQ<6aExQgGhlszr2!OLM}BJEAQTEnYg7#E=+F5D3+1Q zw$UYT%RV;DT!V1VVQn@Pb%Zn>VG~(|mYw_NMI_w2WRcQE+a zWW`bNs#w~d$8;w2&euNGRqxbq7+F?OuX&cYwA4Mz=k}(33Ivyrd%MZkw#LDgr);YP z(>$=Y&k!!N3d*jtrBqgWxd182f%+cVehHv}urZcX-A(P>0Gp~K{OrWccEQ-xa}+*T z)?JK<;aYCTpwZua07p*fh{WH8cAgA&(~%OR}!a!8M1=cQpwW7x7xPcoCO z&Df?$F{66~QJ=V`xjD{c^;5MQqXFR2*-3sHq&35)=>;~d>qGfR)jlK1<`?-bwtC?f z4God0rnm5m;tk14G1?GgeaL@I?-5tUO_qA$CY2YYqU%}8$%*TgMGxfo&&HFHR^Hy76gJ8HQU{vmQfOmIey zs%Hciw;z)-1$D zpHu85fR}@i1yeub+Ug{58|@guTjNkGfJi^v-H3nbS$gIsUWe_mm~~KIjgq0%_<5MLj0Ds`_X|`pUauAYdFt{``!_&C*Skw^nT5iR*`x zhWWR8jDoJ}I+c?pT-tY4TWR}{-lAzPoh;$f*SqrGxC4Z$M%Xl2!g@{RU4n?Ms>;QA z5z0}1R&+fOqXvk+9Sh9Bn&avs3zL^klpMye;@TEbO&1wl%vPY;I=xR#7AC_tWELjf z&XSv0{0BwzHN!9*m0DKCPB7f#!go2&n_;5jG;Yjk4yMVbu?FDNv%OJ$Iw7Qr&d~w#; zOKOK*#MR?nL@8=9PZw_X^ zf&7(0gw}|t8nINv!nT1;iwrMO3tdbwx?n1~of4N50w? z%x*TwdsMS*2e$>Y8`lui9Mkn%H&c%;qjI0ok*jB^14wf)yE!V1V<80j5{%Xy%x>a9 zOhOFJFxrCYbLT{<(^#hFFts(BKDSbo(C8ZGGxM|y8_m&JJvLOyJMKD|5~{XEQ{z)= zj%GW@NtMfks3T3Y43ik9jV)6*F5L)mE%xVM{~h)JnX8De|B>@2gTXUTR#XIW7_tpV zRSe6`v$@-zt`ObvRL^n^>SLiI{;>1vY<)t>Up`hgdJN>{mO|pb>ML&^wVoF3=)924 z%b;Xi1ncL=tmRJJY>l@@u+<7i$^W}@fJK)TjP1SAjZX6DuywK1dP?098{3LWTl0NP zIT)57u|ctAD7LTifxw}LhAI-um5yWrBj znX-EGwfi^UVzb3OFPuLlzrd7g`GlmY_8B=~EWiBO@({VAcTvxKU3QFuRQ}U(6ovC( zR{RzuFGkbFy!avQP4}ZDSgvBkqIqNm$tjK5ufOm}c0JiLqS%v@BI z$80uwz|O_QE`6R4u(^`qzsY|8j+{Kp%krns{U3W*A1p~#-G|-4zEzN~5D)B+-!7vpanY4eTUU5+U57Z;f^knzhx|Od!X-ro?)mmr=!lBhA9);5vY|#5$KxE zsd`1N28276AjgQ(%S4o3zG&;6P?VkziBb~h4~f!;whS*yqDU7dms7rY?YoQRBJ_WY zJVz0u$nky=>Y+&$nj~$|Su*PGROqf+hnI{_uVFL~SckjBggQsyYj0G#JCP#03LFAW z-|>{X-ucOcR?ld9ex`@Ecdxf9_S9ZqL!e{45(vkxL&LFlm0^M=9=5peAe!@81=C!w z+yZEFX`nF2_R1l!(x_&T&Qin^z-h2&S7N~(o&8Rt0o*XpRaU(_Mp6G65%o8}{P!|E zetg(!Cg{713z@Tsx+GFX-R%c{rO~QF^K%PGBJh;6nAqoB?7M5d_DTb-N<3PjU*3Cg zsfbrQ&Z*$*6;ZBMb*`-Fs*@=|ZfserqJMNrtQp)G^}&A;eely?{6wQrSSW|}K>`i| z(g)9+m_Z-N2~f1n&nsSTbmFjcf23dTR|9;${>QC%@a#q(7yfA7>KwVM(E>i9?j6CG zu)n`$PsFzY0I+!U&)az$2#DvRd!*4V^Zq*`XW2L8h2Kq3Bj_8)0~|4PZv$(Mib3wl z{lzA{Z}i;gcoT^MnZEYVkjLp*=`1BB5xR73f$In-!+k{ zLq>BQgrEIdd$;@GD2;;;TyFKCoJPG8{7d2YVd4{pc_ZCh*P;JX>{yolLf5RSeV}D^ z){w>>@T#2OkA71`>-Aq0KlnwFm(&G_;krcT-FrjV8Zc8scZ~E61Pk_Mny#|5=RH2$ zHw{PoUk9tT@JFe3jKg@kUk-YQ0cb5*4g53i8;19|*yvQ6pzi>NZawNA2Ru&t>!Ali z@tC&Nv|o0Ao|o)DuWM9$t2fv&#Qv)xkwJTy`<||8HEvx8eHXhM`2-U?T6PRwdY zQ<{IIpI7{_E)@>Atk>58WXc>e>{~I`dzR-O_jr#9tME;$4`E-P}qEa$o?kDgCqOLOow+;Z|iL{6H=eDb4_a*|}hn#^*dDpWaf*S$(4 zC!UEInk2rN>6u>x=U{NM;)yuuXN7drE0G0q=it%76FNBcBPL>41&lZY?uBMI(7#xO zh8k8*+;yhLEGPd<WtNNY`gh63Uz^s+F1`RZRuU$q%z6 zgfw~p_}W&bX&v?(h6EWQ+G#8$l=qZSIMk9o9Ym%<@@!D6SR@&tBHlvV?j4g|Xs7d$ z`@7Ii|MxE1AKY`?`|0sfa`34A2mS~CFOkxy=~YwL3@oao9V@8uWlwJIyCc z=^`X)?MBDhh32Nws;@Vln_g?QcB3mfvWP0{*NoddyA;U-;s-sieeaD{-O;|QjVd5= zI(dH4n1Ir{GhuQ<9hffjbu&3|@t)1M{0wfN8CDGmI`1IW@RbaV0!g4F4wpgWcGONn zw{ZtEj?HkQQU?}<;}yGc_)3n1W+ob#qwAzkHzw)7R&3ap}C3V*^fMKfUt=G zgoVfds0z3Dhv9RAX5R=PypRPxi*)#m9c32{CyCV!I3pfNhuSJ7R|zTEs|;MvrbkL# z(u*%UjORu1PvWX;quoRNew}q0uYWiC?me$}8i%K|`?oakO+&jKquN;S9zZJQ z2B(F$8>bDrWf9I%2*`Ura7cH=y@eDGM3gTR_^44Xif=ODlV~1ADe3_edMX?3S#9Sx zYVJmXs>lm=*Wg514NhF2JC!g75vd;{c}{T(Vo-hifLKmnZBU(MpI{83PXcPhiKpOi zaKw4hw;%NvNewjl{yVe3b>fVrujOqKSG}i5EKZlNu=(c*Ry+F8_3g;`sG#$_iWjYs zs}<)4dBrT(OsN7)Q`LB0$Q&P4=!wPUBi*J|PZl2yjb-uCamGjO*UjRiEI!KOqbxo; zwfJaX4b4q_)PCe~$48GP0O1;A`4zbRu84*O@eA`JfbeXV_^3vYk9w9HPubcd=FCLI z1J>Ir)}}5i;=X~ksmmie z&2^i)S?owR+QdCxopj7*bqg`8-*{y|G_ecYqB?0+6<)=heU1{j`l}3)D>;Vu3ieuN z134JUf>%+)S^SFe`&j&n#jjZWYKG%ibI9*=ZQZz$!U91Go&P*bgAVvRLP$XZf~Kie zh!jNC>HnpxDBC4hMc$~16;;K2q^C1D;Brh&F0P2^b&PiLN?`QXjCNdsjCX86PkD9@ zQ6pndxGSwgK69E}A7E_J-M7AG;vc}l9lUS3KR>Sr&8Bs@*t3cUfFnVmw}=KEFj}}o zm|WNXHL@39pwWW2W{>v58|WQZP$66$&aA5UCxTWzfFlMN`3O^<#4ZmYu%u}`;sIx} zEMuvgQHN{zn&V)sX*S)mhzC#KDBQDhm@_$D(Sf_TV!6np`cx#)b@M_&mP`0QPPz!+ zD?A8?2*Du|UxL1sJw(7mMBfmpBnWbe7iD{hh=)kQAsqY_j<<(Mc!(Sr!mE5q73~o+ z9-;U~h$SB0isIaff=8&n5kg7lOOj#_Q1JlGJ3v%Rl3Eg-$JOuv-8+C6O1x4M1$%(b zIj^igf>)IiR}!_097n3#b`~Ud;N4%gRl`N2 z-PxEs_c?_-o7U5IADTJYGvH*;2-un%&wNtF`EMXdqx=WwtV5)6MpW&cp#Xp~<5kiu z%M{fzFm=J?&6+8zB0?GuX9?l+JQZo|yJFA2_aqD72ZyrI{WwGS_-(VuJ&WA4$o(9G zio8VbT`e>>@BlyYxUs<-UDn*++_$Sx*m5Ksg#aQd6^7V==bXY6P2$C}UIQ`^Iim_x z9EG?i!-B4IOyiziaN7XGuIHNIY`+>~yg3$`$WLT~@#Lm%OLNVWi?B@d88{f7>2)l| zxQ*}e#Q47c74b2+{gbfqRfUQvm?#BM5go@|t!QPrCTd1iHfySkGv>dUrQNKWdNtPs zjd3Vv`PCciVV%1k);U>wub)r#HBL(TLDS^@CJ>A}fyn%e$2@uvZoerc^ITPzRE|S3 zZ&oR3zb|Ac^pXYoikra{-ckdkNcb%^0uY9ElFjNj&v5V9HxY^WlhUof0k?k?mIzJY zc^>tS1mkR#4{XiEyVMY$_W#@Em3VM`i(sLgUN=POTB-iA368So+6r!Q(H5 zr5%Wpsfe*Fx7@uogS3luY40z=vU7RIzI2PW_|9OGo^z~gcb7D}th8^U8E=BT_itT zq&>;$EY!|I?K2;0p8yBY8;ED2c2<%;<=Tg_aq%Y*fjF7i<_FJv;hS*#(l9|zRSdC$ zI%x}rL&Y~MCMXN0qRX10S2RsSw)s0*Vsa9_bxgk+EoJW|`iY4mb*%MLB9YBi>!pcR zvYbN1=Y5Yp@F;|~Yhh?xtr!MMV`;LkP!@msNET=-(>WwIX%u(pv!Va;6ZDEJ|##wO(EAC*$ z9UBQ?%vf=UPZP~efycxg^q(hq;f{;8U05g__vsK`&{Rp#Oq_etX`HjikI#S?RQl>8 zK^9p8xX_-F6`CjOnGdvwuId_y7T^o-GQWL1e)|Bp03EE#El%^U>EZ=uJ}1iYG$PFB z3cBQA6Y3SujYR@IjhLu^f9ZQ&csxu3RYg&e6eV_j;JdQW!W23!8n5=7lo1vl?3Z^& z24iF}Mh2S>8Enc+H~#|BcH7Rp>Bd4~;gexNu2nT%2eC^xKa!#Mo2=0Rd2k&^ldN=p zWW%rGoOpHdL}EkS-@xtmBica$XNx-LcTs1yjx$@wd0@ac?7q?0Gj?;aY(3-IS@7LR;WW&)<^nXXj zh8ygbY%n(5l*>QPa8vdVJoXWIe0NBwOhd0Kf)f2uN9%2_Ppk@JX0 zP6}N&QtV*L=K0M;lid3FBS#8_g`FWyqU(aB8xmG^62(0Ka~ATCPS+%TE1M{r7d3q2 zrt>C6{>i}oabGy&{xI$jrE29Y_xWxD>-0ZLA#9GJi8RhV{QjMuYK>0RvnF+g_uO! znH)KZN=!Kq`4*xE?%eZh?R!bB)$@7m#C*W*@mIFRP!L#$ii!1oo)p{hEMj*Hzjfr(@c2(dcGsvX z)ru)&_)Qv47@}O}s+uMWMn&W#48K2?f$gZow7hiV`bim&(I>DRK+bajjP*Dttj8&5 zF3u)e?|wy4;PH1wl_8mci|2Shn7KJWKB8R9+9MIiPLwZ?Jfvo8UFBzJFG{_Sfa-RyXCt9s4QRXu|nB_gk znD=yEH_LjmtS8HQZlo~GjAcDNdT4HPo)cPC>#YPN-2S4b&-1G<#$L`M^0{I!ldnE**(nm) zIq~MZJ_P~xSz%rP4{AD(5`xu=;K+`kXk}34Bq&6JDgX}2&ZAiXwn9$`E?S2nB1wj? zLt`1d9wWTA-!?vP;9PoTc{M%Tf`6e`q{tjw-`VDEBFV^elkpWK@PJ0O-jq zZg(CLj}Je7ehqF5Vb`-J>Hsb7s&Q4BDt(bB2NI`r zJSk@}w{vt7lq|Nw@zF(i{M9f#;UJio#8|HTy&1UfDo0btu@*XXTx&_l%_l2u^z_8PbSl7#?* zUFeB-HCp@IMg<2mFX6WH&h7))D8gNW?CiO`xsIfdC)@k5HiY82%Qk?{We$@k=t~~C ztM!gOe^-0GcK4DUJ4~Ys#jU;FUjNx>qQC3bp&fAQ)EnI$(AFMmR6uvfHOp5lAGF%m z4*2?(;ZD%maoyf!`!8D!v`Nh^ysk4pZJn@P+|D_635-D52{Ub-L(_&PP)Z*$2!zNUj{-FebcJ+om!+UmpY)*a6X%J!Syb< z0$3IJa~-SUxskSKs4zVc=C`G9Du04G-m~O*r(g(Bd~}*m?3)a6{yEkX!%`78 z+Ox8NgI{grBj7*@sSb#v+8;Y{>5{D*_O}79IKsiL6ct8O_Es+-Xzj73k2m1<{;;=d zR3uH3V*9kdkRcbPa`aqOM90-csVM4sEE5&+v$K$inz93QArUF*m$zLBx4*t=;oL~h z(4H2YiXOhuYsY1fAc5XK+#vzsOD3uDjT|3{`LGJ#yjA#i0K`$<-e^mF@f=8A-s{-M z+XIxclwb4c(Hzm7E+P_r&r>hFrBK+a3}OM=xT5Uh3MAD(IC*%f)_8i7*^$!N5JpI@ zlK`NcIJeAyW&UegpDuBZnfb8Hhur`^Yz~sBXPyR~fnD=rL%;pw-x*6xt%Tj!lr zqs(JO>EPL}=LG1jt_-Trp4mFi5)p}=UwY<^aQizEDGOW~7fe~)m7y`Isw67gOp&sP z7|&7`IZs(M(B~Sh8D6y3){IuQh%jL>-`R^vl$(}`aNoJ}WW7+>`upJ&zs}Y8n!Was zKuPicc?LqJ#?uLzxT!GXVlpl!<6^Ra3k$e}KPt;(u{_pB4=e@N5Xcb?bIOh0w-b!^ z%!yxn5*~kY)4~~%F^RoK8&ky=GWcC$qI^iA!obkjfWO7c0$EugD+|m;S>R+MNjr!l zD{ub8Hr$rO&L-+a4J5o`g+W=d;+q-btr|~X>5D8vk&;eMJ8gVXSjHwVO)~;Jp)T$m z5u5`*dhThsy|8KF>_`N#1OcN3eI_I$k7bb&F%h?vTrM62kdg6{!1_xjl?3Fj&0ji# zC$jMVM=m`PMKB}y);Mw+)phmTS!6<@+YKkh;9fRGS|WT7latZONsjxlP9nrF5P|v3 zu_xUJkKZvUrM+``pGQ<4%HTz63BAaKOQ}W;XSutPI^~5_XRuC6 zBx>l68-BbSRYGoBxFFJQUu)k$c?tgAS4V%B#d61ze6baFE?k5cPGP&F&SL)F=&ZLh zALq(sOGH*qz5o2L7YYj>j$p>)`-ox2e?9{#WaVPslC|AsQ*1dL~6Sq0& zURw&}O<6)SmkG`JX3Dc}wv*t*PXdj|1dY6Y&fRNp`(HLKY>PxAOGdYgra}3jQLi+u zb=;`&qZwGhni5Bi$1s9iw@9uVk32%B1mg*wz23=$w7{}!dpru+g1_3bvprpBZqz!~ z+AdJ<0DG|G67t@2N)*$-RzSKdD4N^*(#(OK|(22Ic+iUoG!h8c`{d zrY4FW_IV%4V~62$SXyIbX^rtD2qKzuWKIpZ(;&AAf=K`njR^S5pZ%3D!{bkf0SIpx zx+)<6q5}#5c|HpO(deZ}ebta-8x+bQMSG zOHB%`=q_40?dGrAT_FQ86G9z~Y76=O3~eEGjt*A{Pc=nf$U&$0RT*mx$#OERn2r_G zvD_2OJ%55`vr_{z3Onh@6^(;yh8n>7Fc2D0Dpq;UzuGWh1~Q)}Vl4 zs+{5shN&2)ntM!@M}+bJ?0pHi995ZUcPBS#0wJ==CfI~M-tJUa^?D@)vOy$)OYTKL z658tS>b^y~t2$NPxk;EP!k{3EATCeE6^G}j-^_CxMxXNZjXoIP;^=%Lqk{N}xQ&ia zc`oP-@0_YS)wOq3S9jfW?>+T>N#9yd)n9-8`}zO>EI*SkXo%j_eL~60#whImN@Q>S z?veXfgY*Ak54%^HER|~vT$1&{5KB^*Dermz{_6OSf$dGm%s901-@XX;zn4g!=h%l~4<~nkQEjY#ep872 z#d6ly`U2>w0U9#chFDxIlD&vq_M)VHvC-x)B09h}eKCsu2A3lCzUq??J_YuF=T;?k z9WbDvxHnZveJBir4_w|^nTA5o4NxUz8)9W}QY8fs1+S69YY ziJ^y?*Ine&CR~AI1Z~301;&^B@z*BYaxIytArm!Zq6Wu_nrH;sP_0iP-| zk4ljcDHgg_^`+l^B0o|e3Vx%*dyNtOTlGl+&E#qDt-gbbleM!235oB2^c#o3{tJm@ z+IiB}7H{cGiT8(*5_x~i2-spMKE%Ypu|DO*Xt>)ZLmYV3fukLyk%vfd5owN+#UjI& zshntuOJpJC+J;2Y`&#i`u#H6`nQ<0H+c>$)tDby%8oaY{VT$jDXm4E}&?OHE z8pHEb%JYLrDfhujm_@E{Vf-3Yg9SyyhOesdh89NYXyy2XgJY4n2wSS1yGDqJV znnUs#it&zqA+is&&XM~d!ZoAg8f+Ijiil~hKuoi~c;F+k*y^6Gl!<9zI(3lpltpi6$69P z`;P|5$9Bu2wq`I}-@2bz9qgU0`S`YEY;REFyv4QV9&p|Q=?P*c)x_e zUamfAl*dOW2Q8a0sKUUWpRc@(Po3gfM`6n6cdU(BB!$F7rL@D*!zZyj#1=?qdpNxt zRkynY*yef1>RzusO$Oy{UPSESOVYF=yIS!J1gnyQyd49(UUD%XID_y2|Q?egA= zcQ?zoAVPwft{$U^?YazX*K&=?*Xv~}T__ieT5)PEn@yMM@TZ((8Z0$N*4l|!>-v4y zeHH9~-WDQ3$q-6Jahg{qHh-}yOgg!*+)_0N2%cx-ogtdfqWpUS?*l)Sw;PQyKeH zXStRDCjyS{JL=AXI!<-$4DO*H-GYVoY#Bsp4)PZ7Or}>M=6(HJPkaFE-)MJ8*<2A; zxew~C@%vEo1KtsxezS}~iqUHr(TvMLGcIu3hN}>B9lYhvDX{-%w=_YI1fWo5S2^#g z1h*P0|7n6@(|?9c6I|*=SW7Pz2(u)hXq4+N#Q*E~bGFA~t6yVRt_3<*t>vk7v0m2% zRF&iCbgf)ssA4T!;2JEH0)JQ=BHBxPE7zGGAPKh1rY>)B5>S;|5Y$(+ci>pF956>d zNXVCjd>1_AYbHq@Y#EmNaCO(f?^a#9lDIE64NF)kgffVwNwboL3F#u8FmCO-8)?_p z5AOa7*#EJu4fpmID|h)CY^`uDj87Qy5AGY-W?#(wD|2v0M^M|pxQo|?CS z+gI#XW*lnCS|>f}q5Rx6WI@*zC@hmN+REgd?WG=NBOqEM%=YX?!EBazx-@0 zw)z&k+^gjoE(f!MnIg&{Ve8d2UC!rgbe1X9N;N3=?g~?mLwj3yN{%#Ok&Z)&v+t6e zLF1iF^GPyCOXg@Xn4{IH(QjFf+w5%c`PWH%-~-6LPMU3WHAOfmUO^^r{Y~CFHWncB zwGoxzK=m+gFJlkVw#R*=UIOR8ok+gSb;4GQn%o`6pD21KJ{jg*eR&m**Aw4@_!h*s zz|pseZi0FS2{!4CKYmv%mJ}1ooU33PutMKGVWy}H-gQw10XEzseg1CX!<8WG^pPpc z;ifFfI(=jYbL2Cai`#P|>-6E`N=0XK%p#NHiN{{}0@y#pwxSQ3I+|7NU*K0m>*9Zg zX}eYQZeD=qmGuYun1j}@H8Vab$8?tlfm+jb5q>c#$c$({^E$*GYv0)X12D+5_KZ;~ z%NCe2l`hdmt=k9Ns5a7UF;~tus%*YqQVOrWu`Wzp-@E+MZcT4tr9jsA7Sx)2F&0=2 z8^#_Gy0_Uc5){0f`4Taz}> zJuO!A>x^W&!NY5@IZKSiS-MW(5A?W{Dmzm$P~S>hw^Ux-!O} zfj!K!P6NkU<}sGZx=y7@YmcWcrEdirIxJYa6OU%JD+~--+}!f zx;C{|Z=2pZZ73?eCk*qK{4J57%USoT(vcLFspXTdG#Rq#ne}P#iKiY(0xVUh z268eP-x0!O%nn$_!N3SUtVTx$@@Y8?Hk3#|lBoKTIGD_#`;ZvS^JU(PyuAd>EX6Adx)R z)xtL~<^AQMm+}TopYvb4;&U}`w;@Ewk4(o8C0L?g&^yv)$j7ms_tltMCeisJHzTq1 zx)*->`B*I3N+cOKKV(3~$=x9;PO^FL()GS?FciQ&wNARTu{VI=6}>zx_z*K`S*53fIdv8KWk+sUWx6hfR}VK$AZT40G-C`+Nd zz!3UTMgBD%4)r6!Y@+G4$hvxG@l_Xs^KVNe*SlF)<{0yr!o--f-U(QJ6UlFg*<}QY zFk?Q8Jnjhdc;n*BDZ(6?NMeylI{qJi^CPfd_Hg)|GDCkDA~Q70_)T;Plo;wYZ19XX z$qQZdd7+UpPgPGG+11z)iygDY#ytI|i%!v!pPw*1^U$<6^Yps`2Z)xq4i=V)XB5Q3gN&AaTMDxC0!HZz;N}?rZ(XsSrnnn~dS%?5a0N-SZM06HmzvvpW zqF(ibXC95kk~bxi8_ibK)mQAi`i4RIEq@Nt!igT>i6{UJncFgOEXivjrWMI+A=U=5 zHuhqa*FyTJj^D&k_4=62i#jqduA;v7EpYyS+uA@}0n>TKP6I7QaYu;7D6%E*VqNqs ze@js~Ty2?T@wE^Ilpkav3bGJIBr<#1E<~Y=kueK24hgi2_WbePz+YwpLI1$Imri6*(w4@!Us7#FpGBqCl*nN3*DZf*l zLbICVbZ-d9iOzYK7^-1ZUtW{-(qUXCvUVSFnWCLk3n&wptQ!?cP^gIn+uOFh`W@i> z-HGHmE#hBng)!;SQIC8bXK1Ua`*?K*jD?#b>c$hhG%6l23t>QfJqEo>7 z>GG=ip!AS38r!3M%7CLqD}C8f>a@4ScP`N4Uy7->SnzxV@-8O($?= z%euCS^m28s&ty` zu}ZoCRXURn(Q>TjQirVE;X4(H3)4+@v|J-Z&`9kT#5K44*RR1y<~I|`Gu`Ukv}ooV z!=!-}{Pr^O714CMoJ2KAR1>$TCW&B1T7S473AHgV6`F>wC%iR9T%Q=H~$fKP>(2B2y0M(^76rO#d*4p);YfRRlBj5nB0Iz6Ko zz;y~BlF7(65s7n|wV;*EN-8JhBTRQeqO0xdSF|=Km7sIW3e8?i0~DyI9q=g{ z&BD3ZHhai$sE{+6-Olf*!p#d!c-2y1afxe-z-;J&Z-EJKM-oUpfEau4CBL2o`xhsY z=Q%O9lREr%n0defVFi^-1L;DyAw&@_14S4Kvq*?pcD?hJ;O`aBCXyF8nvae#_j^OA z!JOaL34ucH9-~OaokZNRi?~N+?aGMH>8Dpc{h zZ8F(EMyQw5WPfCHfL$b#?)h-zM#p62J}4tdM$VPI7XUIy7C*_zPM2Gx5J^TR$;c!b z8H;4($b?!C3AI<=G4TPg|6^M?UQg*9xkFX?#%_*?IEs@MP zG53|Tv(w51Vfu1l2X@obJZE6@=R!;-+V?R+#^C&kL-_Q&vtu(_iaMClOILW)vsPD+z+wlYn zNV*Rv+%!6F(i?m%F#km6Q65G-^!$_eKjXMIZ6B0TuT7gP`;D0en%4FjMtEg(yn^l2 zc4W+R1ToK@v6Y_!`&ZglRnz@N#g@BLl)Fl@m)Vm0SqL7=Q(1pu8O0t$0C<~n2Ew!v zjfqkX^yW&FR^n9%)9tqO07EA;r@erQ(tLR$IyoM7r*kVuIMAd8yy*JjIK<4{KdFP5 z!@WlQR>VsW&OZJRV1K1;zGj+gq_3GV@XhB#@r`#n6?j7|T&D{WKI)c}LmIOyNf};q2o;T62)z z%i7KHXEfl>NUukX^dhtF&tU&jmu1)$E`qPolha$px;0?%gD|X=^$r*q3^f&i6a-)h zGtX@_(M_Y%O|pVxOteuXHr{QBgZA!x_M2coZL6!CIV`utrem=B$xwXb?HQ?$4Hl_( z9W$6mhLy-pytTA>1lusRMyO+Em^UDX*?h^97sq1B{fQ*wHo-GsDcie3EM=R|`km_; zZY^71 zFa9J%+_>}(mK(p6wV=WU@q$&)zRvRq* za2XkWxC(Fb<%X{e+qo^0qBaZoqpfb+)|Vle*0)6^#QqWqvA=k5%_ZRc9f{=29j9r` z-GDwDN^E&&bZV0=ep>-KT|T66@)SYt!ixx}z}!vx047ht^D3TtEL3${9 z;wlX&xR@`NvUDCwy0P_Jj4F!tCOwK({rzi!`?%Vr3!9Vg_?b|?qn|Zg0yvJ&1Blm1 zyvAkaH7bJEOah(`f_~3IFW?AT0N-#}_msGT#1$m2;4*gwBdNQ(3zl1r>9&E*8 z$z~!+d#9PZ6}8if!NkZQMg}o5h><~z3}R#~ zGb1CCH067ciLvINzp@#a7>rv}E2oL(r$gBl-bu=4(;&DpL8h9C1+knh2$Hi)EQkfM zAUcvFc8S@rl+A{>AhY4|558*x>_3r6Uf^gpz%Jp+x-+wEv(^%Ob!a!-7GjyuJmaew zCVFlPJ$JC-U>jncoHZOZ5tAr%HENUihH@Gnn$hHeNtnPB*K?|RvYe5`_BO65aY)Fu z*+V%~@f&ki_(G{RU13@k@ z(087K5OhToK(f<7!}C=f@In(_g;nP2knKBr8bK_prk!s^oc+=3&Vnl&zATYE*O9ZQ zRXK0SxA?~}J#Lu+YZs_Isy#G76}5GQnW;$+=r9c8q3V|`f82}sWA9n-=fVC{ZVt24 z`q+1cQG7Yd4~GO=Alr3}RrQf}1DNF{EyoqIqhav3AqKzvHE+HQwtY_|H@W2Z%*uix7F1UUb-MDjF8C94&F{(G2A-<&VY(_h)A^;(M_ zbu0RGE8Db|UivTNbScubS9rQrlKQJd^(gu@)n@uHqjW9Lv=wri3N9yI>Ng#VLZPS_ zPem#z`W$)D=lBXaBQYlKM}q9Mv@FJAtG}B_UhM2G08_$gitPDAloQEU zsJEG7=rYw{i&VN$X6bY`%N5hr8e2=(8ICJ7$~C$Gm_TR0&`_qro?fBrcXi}o#a_%X z1;u621{k|D%-@0-?FWaV|&@0(O&HtMoZE#{dlozF4(Mo}TBIiQJJP#ay|YB^c*+5ugFDiZiW zkAs>M(zW%^iVUO#^dgKWRqmPEySE?ofPbg1*^|;wbf^aWQSDaX6&yaoRp$9t9Tx3s zaH!gp6`DOY6bg2Fz=~D$tT*vIfQVPrqB6Gbs3m#43WgqA3D8n=9r@Od(f18jgUqFFHP2eFvh|NAEuQ zR6whLl}Mhb(dt%l9@v07ss3mfQq55=q-wZ1q12^7spa@D`-_$c;Wh+ezxMW)(G6oKh#6fyh7dfaM zgsU@PM$|sdO26ddLJ5)iMh{3RNyq=@MJbt7^H_;2LR$;mV~lRV>$vN@(Y?q11BD#k|~8?<@t& za>Pp5fifVXLeNDZ1^iw_C2#)Vjt>AT`9valvPLDQR0(B8kKqIw?Mx2VOpHZL5=5lg z!;s?)AW&Yk9eOvlDArQeUZ;NRYU>lc8O{!}9QQjH7x7}16G zFNPD=WoLr7JYaECJ(1Z?d^8@S{Qx4`A60MvzS*%i%*BUr>|Nqe=867AOsr!GJF3_T z7<63ZyfT1LKZpqRj`w|N((JOC7B(8*Wy@2}q-tF^X%Q3a(xH}clGSKzj7P412$Adl zn?CmgK&~H2Bu~)DwcmUl(&`U~qg5BD&D7YP5bB~QRONe)k4is`sC3iL#4MoF$-d*( zDA%jy5=*5^d9I*MVsedan#t1*DqCw%T$zLP`^}-ErEc{5YN6H==Q~Tnj2(Z-RL53S zanp|=dU@z(7FdqSr))jctBpdVKv9rv$|V$JF92jUa)m;nO0lJqLNf^OS`|RGC;?c zYi)o_X1-S6V5``$lo~jbt5exPztqFN_SU2^vH$4gpcR#auW}W1K`ry^EY?-Ed=^f7 zmiL$nSKR8ZobVQXH-(`Vks7l48jd#=b%@;OA`sT zu|gkSH9U(&T}Dw9o3cXX&r0 z3+4V>A+}E$`CdP5_<%<>7$;rfp##IC%WOw@48q$9AaoEOMzSe2sFk&0j9JiIzN_T| zB-m00p>Md-D*hdA=BNo$CRJd#T2l%s*zCgyk)|M0eGOqftLO@qIMBJH2I|_kS6Fx< zEU2GM6T~SfiIqc01ox$dengeZI)Cc2In@`=3iH6%^Ayn^MI!pLcYp8i!TCLjjzKI)Pd-PkB#?QRhb+#;-+Y7A+i!e%8I_+O=_e#{CkHmmf~5~;%X><_ z!_$W^2Nx(!idte*|0A8v(wQ#!!{Hee*b2EE{AG$XW&EY6Y_7=U^06!f41Ss}=4mEI z(FLlQjisn45CHr9KQH zF;{Kbal`xpc0LySKYy1<(n{z*-C?^x`Uq2g!vD~|_~!@v6C(&Oq5P$}m;z%tnn7~rhJFAyjWh^lDQb+~{d*F>$Cj1G>_ zYgaWpE(kb!f2~l2q)nKbAu=9Z0FYETF!^F?IV@Z2j#nrJ#E}sy+}K|$AU4iSVuUjU z7p7QK%C51)nF1A_7;9S5HKaHl89)+u5HEma4%k#^ZU`T!_@)4x){axs4@K-cV0hBI z4xUX;EZ`UIbSfQ5)Vj>!@huTZ*nP!bcMdNRuL6V{o@#8X#bM-esqkQjB~cL6l^8M# zwb#TJMkuobhcW)t=Htq`7Z@T?hYn{9j@NGsfjsLZ3l?}2_w$^bNp;xn98Op>fQ2p2 zWKNbVy&g_#)D9c2*yAxW)A}&siY<&u4O>cs6Kdm*;swN+4ia{_;^c0H?_h)}6(B6} zWH-+i&grcSKx|>-fOTzqyU87$HVf|;ig=$ z)GZuV<{gKjMaLaP$%+`^>7Zi*B?j1P@GXuP8e#_iftOCUfrc&anrufl1638p7RL$; z3RRnJYMH}$eNF`~Y`{;(8&F0BRd!Ct-1I!L~S)@Ig_vbMh^dZ8lJd=rNc)=0XxJYxNyVT z9Jq>;LFQ^biA%$!HaHoldDnrUVvAdulhVM}!%_J4VZ#o4a8bdI*v;S- zA25N1FV4g|hf`jy1u$&!2IGzD>I2we4uOU(?z9G=*db1V3tOy7>^z1z15n|IF|2H1 z9Bp9O;aCmaR4@!AIzWdr1~CjFIzWdf27BE(QPNtn_CD z9XI58_MOKHi){`t2u`kp1u}dwr-XQLM4SQ`zIcN%hzf4;5eMk7#9)gPn${*p3ztx& zfP`N+G!s}@enyF_^AcCXjRO!^SmF$pp7ms`NWUlHM)d$9+&&&(Yj?0ptW^NATa60{ z5JvVFe$iT9sPGNe+Bknfail?n9j2h|hfxa>6&~EMq^*613z8IYu)~qq3sXEftst|&m{LK)4OeYWmaz)v;}&MaGq~24F`B^w zz~F|T4%@C&F`9H&;lUA0xUFf>hY3e)wZ(d`g^{%E!-ONYU^8e~E{0i;CL3t@;SM)< z0#`=@uZ0S5T%VxB9&U*&R-~i=gejgX9RPrK1I#ei2Ms&iaX?$+)Y4Z22unQS)Gxk+ zQ$W3gUql_RrI&DAYN;cMO^Iz|gd`Op4Dp21QiND8Lnv`=vCCEPN@z9!g&)3@`YxPs zr2vEQr9Y`%koT+nNt@s?TX^0?DFIJ2LkgZX=g)!I;~8%v z#+6cG_6tTRgW%wXBbgIqQQEl;A2cC|@Wd2Of(=20AEwj^NxX1{V8RYtQmuktJ*W{X z95IH|6pacGj#$EJf<~6-GPM>Di|mw;Z3R1<#tlO3zHA>(S!{IYS&73MnN}ci#3wM# z4#F8td@0ijLX0tqH)Xm2i5)(>Y;Av6!m1Fe4-FnVrXZY z;lhogROt9lg*$}N+@ujIY%zvbVZjSyJbo=6x@=R%2vYzW>@dW)IUw8H7MHJ%GO?ou zrzK|^02Q31WHDm&?aY8-_Zb0rye#)Psg98~XoLz!j0s|wZFH@1?1iL#08y1|h!Ten zNWh%u*%n?zrNV?GNugM%#L2xjX8~;im(EsT6L`!%qrhYN4SUsFu<9jb018KZVHbrk z0EHdCx)_z40${Mi&mr5?)&e^Awv?O&{aT0d>wAe+G75%?CU|8@;Fu(VUw0Q=`?}zj z`GrYZ*S__W>l-}Rs_zh`Hrw6JcGgd=2XLZ!?5SJTc5o14sigqbVI{ULtEa%RS+3n_ zDgM=z+VfAI+PHCkem>J>TcQkneXiBwo19SNGBvTiQQ|tiuG0OwQscl$X=6(i_xC!R z)tA|H>#a%_>d~Xhvs!GGGe5y_{^(I~MP2SL5PX@txS+kh`W{?LyM;N7TICW}K(Z|k443()z;=5Qr9Dpk_>d&Z37L6*Ki}c%JgY!BzmW$JA5xgw zN{knD`EHBbG}GZ~JlmR@QBGgb6gOQV27(;$XR9I^*EL^E(AW6xVnjOfuZN@M_MxsQ zwyNSGMSRWlI-E2M4rExlb7(WGFw7=a7S3nbKHySM*aS!E1z$dNy_SD4Bx03c1?jOs zl$O@5tlo#WBnty$M54iN^$iX5!rM-Z33OGNhk`h?O<=U)!q93&cAN?>xKSvqjaC>r z`yPvl5c`S{BeZHk5-f$hyHCG3z(v6lETOIA``yKG(t7lkG)CYUvnKF?s_*k+Nl++_ zDGb8KWc53)!H2&!tH%Co2RTzcaR}6cTh+NP%ePeQg5AJImbD6Xk%aw$nKd-5L)e3U zU^@!_#n84c_M*0_`-#W36B}+m?wTDjvbk+_w##nhTKhLDe+VLAuZtzYnL#4 z$#lUV4$q*#R>{aNv_ z_WN=3Z>(wL|EIP*bJ5rVCfi82QSrYU@54>u|3V=CXL5PM|50oM^uO$^|DE~&uFssh zDGHd$Ho9$u`kxws|DP)s3yS}rC;C5~KZ=d;|MK2O z$p6I=@V^%SBm5uLM)-euZ$t9Gx{Ucof6o}?|AP(je-TIu!2fhEPsLLC@xHpcEpz@4 z_x+Xs)46O$_QK5|`JXN3E#E)K6thJBN3lWqKcRd^uoH*>rY>GH@xmKB65nQ}!{^?u zB%3QsFJ0$M4R2vvFo(FSuG{g#8^DD%>hj$;iVEBX}@(iNW*FT9QF6~@4?%* z)txi`tX=sqxKhv#p7{~=cjXf+Gj(2jRti1)3iQl8d}c?Kwe$Z?{XLmAov({E^>{v| zjTcPkyS(<${JrXL`fSU2ZO*IuN$oYZTi#h4U;Dr6Z{n{Z(AvSqd(rC|_2Pd&^P!)| zqT539Kb?{JfzKGo{}l5787i00LH?&{;{QjoLH<7pk?aiDY;!_)r_d1LIScPAys|o` z#t7nZ;|}=uRD4ZBlqYuaLhsPAx3CA<%t215i_(eLNNlaerM8MvN0byZ@i^_YQXq6p zHdD$_m25t{PCeX4XV%d93^<&wX6fTw3WVs)L@`5Wva3Zo14|kv*mk{;J6Rbm^#s_5 z9$mOrzd5|iDp~AFHEyEO>dA9!M7>7ogdBKIhDy_Px(S{l@wH?0X7+2ddAgV{XXz|m zEM!-#Qb~R_{HZl$?U#$c97%lPCUPBwIlJUxWHz*I-Ehuc4h){hHTmzf;a?`D9H4-tsnQ zwfy>vH6TxMR?ClGs{X#tYHFzG~$4(fkK)&Gj;tNqGD>;EIq zOuRq(k8apP@_%8}{(qjKRsB!$ei_#({C{Wtt%m{xgRdU@j`r)~tH;mQ&hIgV z0^%sS^f5yyAW>9*lUofo$(keDl@B}H49BLl!D(k#eeG`bcj9tqSN}v!>Bp~hws}r^ zLVNxpLwMt4&B%|Z4S|wVZq=@wHA;jJzwoC|#-iIs!2j}~XL$2JaIBc3mH%@T@&6;) zApf6i<^OGf7T`%6^TVr8KvaJmMiE~#@tXiEsX3eq3tv!C-OHMfPq?1p1>8Yoke#V(EJL~M18=p3@sj&h+ z?KE|K0X&Ttx|%lL&AGsvh;LqXz<8VX=bpUA1L$edQ9c@ghNt7kJLcbh%46`3r$qtRJoyktd% zuLJz*EgBMMO>>em2%%K7lp4xU5~0xTGP&1i@Q315Y;{HE4pamYz#7+Yel{AVcldX@ zdy#Uz4&6SUTwBqmK`Y>cw-aM|3VaF0EL{O`*Z&SlwAk^=@jP`UZ1FXbh_6KVUg`6r z_yu9m#~TddnqCL4R#&gE-Bp0A$MJ#J)kLAeH#5~9->P5TYp=%|At!0j*0~1TYXLV6 z=-_i>D@M;(XF5CxwX8W0YZRS=AP0n_o|~$R^XHEPNoP4e3Zdx&tkHCa2D`G}i9FR2 zJG~Yw?c&>f_rh`DYQ6jO5W+6P8e!+67f?U6+9Y#IQS{)Iued1$l zZgCo+oF zSDdx>MfJ;16*6=t7mp`yj;&Zbku4PHqPnwgRa+G5>|tP7t+;s;+~2M2t7lJ2w!|iI zZR9!S{H3uKr>;Rq(i_xkCgPNGarai3B_W-*-bi zac>fwL2rtFC*p~(!{gd3Yd@NWoH7#21NoVI4emmb(iy?az+cl3At*MtgCVXw%5Y4t zy+m8t@b`ulPPd51tQ$N6EX&wSY-hA>wdLkX?e}uSHEYlxn{Tt<09}Zly~S|uqESI< zy*Vmj-R2icbRoLYcEh=qe!fQk_6~PgKdSdc<@o64tF+&%4A*$RC%O$}6QhC>eM59}#BmkB zP@)UbvtMgCcfqKkL^nrJ8tZ&Kp+py=XV0M%5H_O#{qA?Z`Y~lT%B*b_=OZ>)-LBX% zGYjF3uUPRk^weYKgDXGnbnrQcgA)%s9dx?qDyJ(~{mS9s>i0SweAMA!@?NKdUsnzm zcd-ZWiGL{mx%k)PKZrjczgrV`@w1J1Jnu)pzsnS5(iM@LVP#N4Nbdm+NvV1|YtW`G zP5;$2wY=N-+|PF}`(N<6FLRs@EkFvP?pPA=*_THV{%^gB^vxE>r4hW**(15ho6TI6hWnHpM@<6iB zvb!N0LJqn*jYhzO!RkfQZ(TZ(uq(g;XB@cPfpbL^1>L0{j``}wqa zHgo*uc;@{6elyP;B$7W9C4L%soo2jG;Zkx_My1|4FwTJB%chvK#Dw0LMp}h zE70K~GJAb}Yb#8e3JfiS>u6#1@2jxXX5X{45S{G;qiBb^10}|J&xm(+B-%G$u`$@Q zKc@Ws53K+Ff%E_84j&Oe|3h2jDwrhyLiqTPvLXf)iI z4i>A|>}G;vLT{Jr4g-T*OP7He%6#^007gK#6!_$0($fK61||*jivA{mZvo@^iy+P; z1Fk$^>JJ^>YDAnb2FqYINlh2XxFJ$QYM=}FWYi_0?}s_?UtlzG9*y`cfNuktm(lt3 z<)FwL$pH9va1$Dd3^#K4&*(aMJ~WL(8|8z+eKpZ3++}bUz!#$|!z$3O%%e1Nm*97i z0rUg762dt(q&8}$aP#X39e~xO&|ZS0@Hx=KuL1a6IIm)6pjvR)hy6^4Z_s&&!vMI7 z2ArE$8`R;6LLqn&*(L~FCcsw+kVg6if}_HLnI{oRYeP#UKng~TF6Qtm5UiK)DYfcx z0WYOT)&hJC%@sBRYcY=xz`Bx9=o5rrfYT~Mq3y7(D-`mE!ctT!g0s-=0GGnHN1{<* z&2;&GheqSKs66Cru9tj%I!o#E)&*ieg)#g9u;IyY^|bl`y~%VE#8>lm_y(wJY4DHm z*7+j$13ZJD#=Pm!YAI6Z8!@cX2UqDI0@x1;2hxqIk?Q>%-i~H-n*p8x+sSP$?8aK1~NY>#GBnRjdz)!KqTY5#VccTEKE(WN%z> zWrMF)tT`_9cIkNfnIqvy1qtWIk&qt(PNE)Q_%qO<-h4hD95+t#Xena}QKxa20DKo1 z&us&EBVd3*s;$C5Vg10bg(*oOW3><`swV*pI|eur?45g~hRgp#)+dnl7vacrt3M zu9upgh0VuxQF<#_LxV5qr)%zN8|gB^$QuYR(v8O_h5jVL2>%tf8MXj!BE&y|^ElRb zTOU=g5AaIiBDzlz;XHWs=n+k_^59Mm)D=yDAo3vZ^%E%WKS{PXB&FL3Fw|5_ z!P=p)LkiJWUH=gRcqkT;59vuOD&*%%@=Z@;V5gontHthb%$NV;gGj5K`7FQQyw9L9Hp4tyBi(p6UP3)VLJYF%8+ z{2}D;CfthTa08fsQ;n~tE>L!ty*ez_|CwtyZUm&@7ffbX`xKjT13x39hC$%MY66#D zzQbK3$z9gvU*4~oUoKSpgVCXIes!G`dBD&C+QxqY-)TlWo* zZ%D6QRwo4m%|wVUPqX8&DP|xbunV>ccY-lw(BUe?wWet%_PPb&oAim4UxiQyFZWb0 zd0Du5BnD+bg%0;it;3!pqH_)uf`z^iJ2XBKS+v+X*7J z4Ua}cYcpM5nAt(fj&`?jB+v?EFX*xI`PXTjrO`t91wuxG~$&E@6OTZL_$jwPs5VbC)XHmBEt^Pt3-eNAir zELwPbVP^{wMn!_kuV&zw5R_BX3A#r0YyA3L{3WWdXbeXRnu*|7-59Qa26k4=6raj4 zUCBW0n9w_{9Rn(^Q8@e_z;?o{To^M`^u_Nvkr6gOF7|b)=(-LJ;vNP>L||CA27qC) zsZ(cDv2Z*tfd$pXRs!cpURH|Fz)Nr$baMorhQiJ+)>OlRuotzYd*$qttcn$IHq}bt z+>ml#%`kz8Vi)1%TtP-7EAG~HVogJcVoRU~ji)fWg~M}nli+OtHR}w|Ln55j;WvaB zVIpHu+w`DUoa(C~;^91$3%R})hq5g0<=a3C}g+U%9L zoADO&RSuEy@wOWyKMjYapBQn0P`57PohgQ+jlTNd!x;)96Iu1Ax=Ayp2V&#uYa=ZH zU9O|jW{?v(B6(bjTB}K65`G4m9MU?V-nSIvD^OULTiU9{;B<*=nn;bH_xw9_3j}b0rz4uomCy zZSd8MzvgYBiSpz^CKM3?!HQ$}uFO^{%KZ+u;pelOD;lJC9c|z#0iWWSJar*zeO3wu zv*??N>VfU|Fd><)_6g<>!c&ZmLqa|lL7Phqx?`@8K$vF3NU`KbP(Q=n^#S`@;!jVm%|lg%wt-B z@Jj`?*2^JRpc0lKy`M@$eXYMmVB-5q{H?yZi-4(jD#7*l z^i4cz-1~@RyarU)iP7uRV?1l^bE+Gnjn|+SsujaIo``s2Bp#g`23Mi#h*(=pT4BIf zf6yMYhgn1E@I<7h3Va!gcmuwO6eJY@Up7#7b5(kb+i3u-8_xqLO7K1*hE|wlLiv>p zf==n-s+8@odzDNYmH` z95@W`y@8}B5PnX^Fd_(Et*ZbV1iTaRBw>~U0ndPG&#I%qkgv9tBYhoN4Lbln58cb} z2KJc`8cYP(ZZk~B<4`~NEWq>Ny=a=zP$uB*Tvxj?aIZugx!)5wKzDR0!z__E&%&EH zqwom8b#O6fL3j^RB)_%+jgjjN=t-VpScz^LU=5=6#z-I-k(L_qKq$&xd@lYg-;9bO z!CBHNU6G)^1soQ@2Ua}HIh$JzT;6NZEZWi=8~nN^M}!1=3$+aqXCWKr&9xgN4fJlZ zK)v(?jPV4no+LQ77Ie`85NXZQd#KsS5Ux`S*My?pXaKcxOwgI*^@_nzH(RrrQd-BGS}olP?^&0xq`P3-FbMqY>6bigq2k8E*m* zUkVpl{tfZ_Tnl#vl)bc#i~7RRg)UPytR$GwX~m^^lcvc-D>6tZO`AqXe%pwYMY_XH z1djD}H?nb--hiKg)6i|yvF)|U5|!B zyv@>1I6}2I5POV|QCWQwn(y|Ci%JaZ+;|5s3YCy>nrJ0#tMJwCHpC`IeYFw7Z(5WI zw15LQnF24<%j~9#@~GlH)ItTjy|C>eLKPzsBFp)|84v^eATO73eNc+}rbep@@K;Fe zB$g?GsZ#i)Rrq58z8#3wk)WuzHMJ`@RFcivSL0d(% zc^(%ds+%BCy|iV7aE^e}&C|S5(hF({EAAhgI{^RIS&OzpyvH)LqB#UcwBcWt&T=)j z4{CQehPIuHvjxV3{>`;g;b{PjRfOx^gw0iz&BEuE&7ouE$2={(EMDTrgckg`&;gz2 z;${4ZD;Zp!%vJzPfiWgvl~QC%!LGbGc9nsllRPu?zzLWtI`xYK*h!%`0J{=^G$7yj zI){x&J3y{)HJ}qus~Ad|R|22hm0JMrBGOe6?2j1hYI`|I+C3fI)%m6e${`cZ&w;Hs zG>QIbU1`EF^FuU=if2s#zl*|DH2W zxg64U|0dw;po_Z}9s`k3AmFcU6#W5q72!m1CA*2x2=Hi_58i=bB*5=M4?+KNI}@)? z^&m;+>LXx_bu&;H>b;=lIFu(BBl1jMIN;sI;YQ>+&ikdB@<2l%Oyn{m)RRUKjm$#t zPZ5JeDi1VOT;U_8l^h+xKS9Q)77ly)<&r#n{tYPP3%OU4Zk;^Fr&S#1o!-xl_!%zW zx(K0Cf=J*tu9A+&I#4%+s|>@#&E9QhT*bKn(m$7YmGEb9hH{bcLxSa~?l?@nI@qk2 zHICUoE*0=HSP`9WLo> zG-xcndz1$SwbGYpQ1y%n@Y#e*N5{Z)CToYy9&o)5ETrGj@hxC@jeLW$4dW1Uk#Tb*SPh&rS2*z5c>gfT|^6j+Pw2K*=}0rPd}XGCN%6r!&o+HJ&( zK@on@_;d6Ss3x`Y010*v0yp#YHMjD^2`{wFw&1%#3H}K;NoUj(QKJN0!&32cINa$U z=)lWK4DSk;SljHvs~A57Zs*G!_(9N#UdbeB?j!>KYT_ftSA$E<1Z!gYA`?NOnC_$v zuOtqa@Rtx7o#Og>^788u{?z;vaHGLqE&%-+jJFam>+#RgS6S|wnV)9qe0lgzr<=bK zF4u10yw+Mx%*V3wxrZ#m=We_d6yxjju0gLDXqLQI4;TgU>uJQnX1|i%6$z6*N!>L3 zQ1@Bw#bCQ%^G~;^f*RbX^Dv$K7o5(+RjF$t-gVELe&$;(mH_jAw_5yntHuA#trlrX z-$2V5x5@ueHZP>UDE>_};QBvZ3+c%zmlvJ5e~dE9>*Y{jq&yfJB^%HI~Yp6v#` zB|SIj)qA?%IqMC2OA?li?Sb#ZH{j>cS^Eimo|!-7FWrrnqTS4L)o0A*7{7;*PBHV( z-{f-NfIIjvnC(jIe10XuI8Ss}W4shP9Djn2QNKk8xH-b3-2HGNw+McU{7=D6+*yU=5Q34Mq!Mt zWe!I!c91~*TxRQEpy_$IPKyUxtu!X4IvftW$z*XlX&`KIIvgfDc3|pGC>E>JZ2dRO z!!jk+=CcZG+ko!kPp}9K)=P;)P4mr=ru)2Wo?~U#g>K`yvrCVMmQ~@S9dAdx?ai<8{C5@wQ!}IeR(J>eHT)gi17Cq}!jIwC@D{Wd-G`n)&!fMf zH_*S(m*{40HFq!f8223aGWSpJNy`J)kGL$Y=~>V@;r;Fp3hA?esok9uCUmk# zrhZV^S@>b$7loe}s`d{QZy)eP>5lvSQ1c;EJ}m6iVj{2TUOu6)TecG?=2;j|%6qpn zZ(M<*TwM5c=Vcql4NRoD#|?hRIq5B<&Ase96~0hOPduqg<`gZS3Hf2^xmdGz^Qj&t zXc5V|Rx_k#O?~7d>72l;Sx#~#{*|nEsxh+y?Pg{11%1?_wDHK0^xuQf*FRN$XWnCe z#r&rEW3z3EWu0ZKWt(NU<$&d|rQ7nAWwCXQb&GWke%!jty5D-pdenN#y2!T5W_!$L z+iyE$J8C;+TZC8P&G=Eg6Ys+Z@e%wvUSMBg-(~idP9C93W zoN_F3u5xa6+IKtgTh3$7Z=6fg)}?Jt+m^OF?LgY$wC=R8(iW$$N#BzGc>1pN{pp9& zkEWkWUzD*bV{^u%89OufWgN^nlJR-Qg3J|}n=&8H+>!aG%)e)TkojrmysYI}cV#`8 z^>o%BvR==6FY9DhXZEt}4cQN5Z_j=)`?c(MvQK1p_hM+nxJW?&5xH`fcg=c)wl!_V+u~ z?`XeM{TAh|%G;c$_WZ+YkN)=CKDzif$&eJsqV=DhABU2UTMm9EL(~4bhkgJS{VV_b zLQ=O4pEVlo%p2Wivz1KQ&6Qkqk*(xQuBv3pdYG5DgWJblbO74gPN7G+5~5!872F25 z!WX$MXkXsJyd!y^=Pl^JqW`A;5BJ~E|4;q@-v5LCpZ1@ZzdZl0{0H+7@`rOi;@`-5 zJ^#J@llh&lWv&gbn@iS|+*h)#WKYSfC2yCUD0#rO-SwjDHP<_?6Rr;TQuliI{q85- zFSuWIzvVvW{>HteU|qr1f^7x63l0<qo<##z4cI*3(E&RL>>F@!z!v8==aB)Q4_HvRqHt5;!-YEv|5W&Qf@9e$JAszQo({O!FX*j75RKTV zn_^p^w^g=U01rbbX)1}QeB~YvB9&{)Ul+>y;%MkJe`KSI*Si? z7ONCST&n%566jU#TgK4e;$))izteC}C+|5zo=xSODmIl+LrM82`KeHJ*_G++DWTR9 z0!2zV;hK2^4VQ-I-DkKoHt)Vg#B{guLMNr!SG;MQpeUa$x-3Qi0b zKG04h`zTdu~Qx@KjYAFALpAA*7?{v zq;&Z!cg@UzSM;k(6`ZM`zD2(!@#7}viv+nTVo+dTT{#jM`g!`%RqtoJEJ9{Qr=K{D ze&uU@)FglGrJI&)aU=DE{8CmgpVjH7e4U@gWb$hf+UVC@`d=&2wFLIWui^BAx=H?U zOF!1w;>L2e#27)2`~&hprgO~1F^c@CW&;$ce%a*n+1_dS$9C`1ebzc=kSUrKsVY(_ zvem>+T|l7nA;G9FqYqj&6HOVGZEX2GEtIqrJN4sKXcAjC&&ZiQNz|u7CW|49Y>-!d z*b^<(n-W@G5I`4W&=_)iC$oC0l~A3Rr|Ub?+0tODXkYAu(d^!cG@zL|$Sa<3ihEiw z{sp###LiR}C=j7_jYJ<3{d(oYzmYX{y3V6Ap#l>hGpWY(1bYstbOS6Wl`LF7d9_wq ziN6%0ja6Sp4{y2bEC=FLLF@X$Cv;Y}R3$1ef(h_+MS+1TtUlG_rnuxYBrYd$`GqUr5mW zzMW{Sd3`z4XyFV;kJUX~xG@MLI(b2+Ro1-nDkxh-S*RjYb@Eapo2;pTWKyiOEUA&c zM_qQIlN*Rh))+uU=&F^dx@zS@x?zj;Y%5Xa-cOqVm()}YkYh+-B#)p`Aybim@=J(S zwbr?D0szQPJo{-dpczc8rN|&*VP{wv5?YxIC(JzfAr3|b_B~avEHyDJI_pBztbE|c z31(I(G_xVnd#u`88H$};W4PW-{?%3~%%quxl2$0m zq@)E_n332D7#1q0&!t{mb0AWzqN!4*94Y^D_$y)-hzlSkE|)!b{^a}kI9|qoa_LpD z-(*&32IdX1@{~(n0HZe=c?uvFh9XMSF(<6uGppN0NwK9Rm{q@4nHMViL^G0XT6_uo zGOZWhX<)QkQ89!AGv!#7?V-)KWY(IQY*k}%^kBd!6f%Xh4q;GtjM`O$>Qa!faa7J+ z>dw)@-|0h*%hjh(c|%Lz?@|`E*Y*7_)rWQ*VV^#gh49pK>6v&^W6bI4Szbb4-%Gj` z7d5P|Fw8jDknP=I!i;8P=a&mC)z+l6>l@|GC~?*=oN3KmKKXz(xkQcM zzbZ!mMrUQ4blG-k(yEQjMpxlDG?P|pj6!#zIW&{%h8acKC_oA?E5)uA6r;;qcmw{7 zBwMN4_HAhdq%SNCs=MqQ~iewylCAjKoXXbhMYMqYsH^L%~>R#Gfhi209BM%EKiSmDX(qKSk5=`_@*j*dQ=|R!zDq)yF z>6NL3;W%X=k(D~IP}>cm`x|^LkibS6lp=4x^#_<)xkc8(%)wgbU?UcJ<1GuBnQT=f zx3Pf-8*`|>60E)WVxypBYhpr`J-dOl1heYibI<_4qs@49{q6qo*@&)N+_I2+T?y6sny=mOKn9!?ve#ZiBLwHfmQ5 zT2L9^RH0a7k26J|Ibn+{7n?fOO#W5-nD4{<<3hj_Y5xQKzSrNx1IFB>4d^9FHZ}d( z3YG0L_ox<4^r`GYQ3K{`F7%L&k|dkzCtacXgVDmcQFYB!NVHiMC74zBJcY(uLLgk4 zY)$p0Y+Y9)rES9$5NqqA+3JRL+H{K(Em{;Bk)Vj^FHN?pzT7IA0uz;mho%y=qEQ{# zcJ`7ao0fT%O2%hJ31+Q1k~lLH3d5%Kz5J9uXrwbIJNfi@k1Fihxw5qmMGCGs(V|7q z`cqiUS9GmtlKWX{@7?Zl$oI)JzY{f6pUC7BPIc`3oq&0kpb9SNo$ftu71)+!D^s3Vi5L6ddaY>t(wnv~;zW>XkMdZI-W#bhEC0B}H$zlfc2qt=5NDPohg zxb(z!x!Yt-JE>l_Dm&d3x1O8bDcDq=xmPvzA!inZZJa;D=o2>32S%NJ5H)4P&n_ry z2BW`6n6oTrDvy_)nO9}@c*I%xR+BUEbfMHk1^lN?iRMfD=$PPJd0lQ#lInZ>_nehW zd}=3mWvg>@Kj!b3x0>|I-fp9ICXYbRPY7F?s>ub+Ci=0WC(P5yWo1t-G@UGR*knyZ z3`GzT{Q^60!OB!kIuK_C4C-MEcGVD{IwA!1(1nJKBwKvyh*0HI7^JiWa~!dvA$BGM zK{M5)g;h>wV6sSpSwl4TrN^4|`A4sO^2tg)qd{pDu0H6R#1MB^k8e=Dc=~oyL({j) zM?Ca=Yj5<#w<_+vy|oXgxY+Lt%eXACVXHN1a!!bb1HJ}U76L7ZV$vJ_Z7SUj3 zs!F?&cA6jFZxWtPEi%G}U(Z!~)Bi%B>iK&Nfo%!as#gUx6b(a_I=Xtn%RUubyzJCb zo3eY<#O5zJ->v85C!KXk+Cr*b9YiTdJXz@Zmo6$ysxOa9(lENR2SpPl*c4$Ee1NX2 zP^Gz4J^6{Zzel)VOx~^opFnUIVgo`x`6J0wiIUst>t9H+z5*}aq38UYD!IVw3KKi8 zBYs9BH86ps2SpnbC!gn7+WYa2*>SReM6PC`2RguI^5cQ#*1^HqoZX zi~jU@v#^WuIcov8YS0=C;|94&Ji)G>M#zgHi^$Gh%ab*2o=MaWTC<4+Im1$T9DGKX zFp@Y^#7giPn7r2pR&n6flnI72nQz#0n$LL2;m!$}|zWUk-R&=dIiLTI_Q|WA+ zK<9TYRM8{>b;j48I`zv|oLJb36SaNRYe&bi`KV-TiZ42-U~}ooRxL$@Ozl|FH7-Th zmoYGPXeNyVHTY_3B37nq@hIY-P9BihlE)=ngG6MDxcwZhuJ|+ONfRe;NKdYhAMkaL z{BC$lZ=hMuPRzGOUPYCca3&t<4ZIXdm$bavBzi7heIQ@awOod_7uwY`+T5x^>kE`n zCq^S~)u6>k2@TQ4d__;9N5tBEMUP8Tf&KkVVOo{B;lx2B7uk`9q6T{4Q#MsJ30ylo zJwNf-Cki>Kc5T`*eh^f!IMI^iLp~LXBtx;VQ=tO?pS>#qkD^H1Roy)^-E;JG_e|!V zWX@y~l92m=a3vw+03ksz$YE}XoN^fhVmL(z5t1w-A~&driV+b}5s_sPQBhb$WEGWl z(O(gdRaQ~|uX|>~QDb znH~B%tFR8C_WYz*TXp`?Cg!*90T}fkx6OAwD?*o!CygO$2f9((MvXh}L!`ZF(E$Ndq?#Q#{rUC-bheYzbGcQ2vb_j zvtIVR+w*`((Go&?DFTyiABeOqqyZt`a7_LnMR%jEO@_(CXT`XV&FUEPKMx%n8Txee zQP(5B>(CC=`SIv$YX{O8o}H`>iSZnS zZrMRpo55f5Gf`zWm;BuOZKB*v(~b_sQp5*sWS7c-^oQ=GXAhHp9YGU6!k4h9MM!$J zkSDYghYBSFu3JZ4j%B-z$L8XfH<6H$38V+5r!i{zQX0 z{D0Z-7*h@6R?ulxpu}}V!d^IVk`6Ig`()>{f8|u2j%X(SBI;ZUhvgX|2SQGSTnM=l z@*w0zC<>uSgn(d1OFLl?phF17Arvn?%MKGGQMwCAMkocLRD{wHN|&~e41{_i)El8J zNd+sE-A8)3Ax~10+8?1DxaN`~(R^vwC_t!CQV%*r(w8|5Ay~qSrKNeOqzH2aLL;S> zyF^k|ISQeh5gIK$Pd^5sv633fGK6Xnszj(lx*36yP%SBboPf}+2-Qk&KAeQmWQ3+7 zGz}qOc+(MrbpvM9Z7>B9x*eg}2+c=mAwqW`1f5im5D>cs2+cugE<$(0a*NOsgjOJQ z4?>HO_{Pn72sI(J5}~CCEk|e>LX8M5hV28P7KBzI)C_k&2(3ZreuVyj&}vc1721T* zW`uyDY(QuoLJuLd5ut4etwm@nLJuJHAVTXA0{ZYULXRM{1EEI|+KJF(2tAI_6A0}> z=t+dy5PAxs-3UF6&>n=IL1-^R&m#03LN6e+525D~+K$l^fE$+5c(tB znjv%;p(6;r0@N0vR}ne}`v*d=BlHGBZz6OOp|=n^fzWY;-bU!p2)%>QDTLld=rls_ zA#?^Iv-E!=8$x!3tT6WwGD!b9(u;2b7PoN$As!*4v{S34KcD#jm&8bnLoR9aq@+JZ z$bvU0;?_*UhKDNNJa?kk-vHkL{sFjr?nG}AKmllg8o&W~fDWJ!z04u-=fW9b%z9@vY7s53uEC!SSppJ!O0)YAzLcI#-0u}%k0oDT60pR)+ zJ`8viup96!;J~>PMbiKq0Gj~Y0MKtmkgjM40MZu0^(=yR6g>%m>skco7Ci%iel2hVwrzz2}nR+*Pm!E zXP->IJcPb*c}DT=muEk4>hjzViOUB!ZMpo(<@uM-zcu~xr){rZ{_N?|m%q4>fBE9f zCw|gwz3`JO_u@}c|Ff!6t@`4aL3Ls2T-D#(cBmEcbJU7?;c7)&y_(L@sp*d*)QokX zI_k$g>eyT4>e%B&-LcRLaVm-|R7~&}{1;3dgY5&M|HQ`l?=tcRKS3eVUpe~fvDaRI z6naFMjp)H{bsKyYDak z>7Cb~s&bk2f;P7ah|hHZHzrLShn7(X{l8%wD~-`trys325&7;SR9d}Dvc|~Pab}`J+w1PApELK)d3QC;U$Ah|;w5)4y=U3-#uZKXu3XjJ()x$h_pP~q?E~u`T)$!C zrp;TnZoA5j3h|2HCAUcze7W}OOapbxG{j950n@lFz)rw&*K-!f5qosqpLGpZ1804% z3%ws=9-#VMmx|8Hj$buA1KSV@80z@o!1iW>ZO{t) zU@S1Cc;H6~z>boD8>IjdL!W-hRpc|cwuZ82iCF?D9mQyCtHEFYzO}GFtC&zz)^Mr zLwOwd$u3|gZNN=-12fqJy|@=x$v&VZ&jT;n4}9bRu#tnnMGgTIISf?f2(XaTz$wn$ z^^15bjzr?X08cOjHF*_?$!kDM-T)%OgqE$&2~=Nx>t$Vxbo!u&hTbv0%L81ZY2kncYe#8(>hM-txx!W9k--vRvI z1?=7f+&&V>y$^VO4C>*};+?nueDci`ZybN?wPQzKdHvO+hYtVo<%2IB_|uE~p4u?Oy7w>G$rZQu6L!;kEEbmwD_w>`1z$tQL{_4J-S z&+L6R*r|lSt)B9Pw2I{9#Dut%@Jlargx`%Uh@)+7f^u6U^eip?9U%4bZdm|8x)>OhBYq=)(cWqx3G?TlIFlLG&Y zsSIscP$Rk|v-@SCYK8xQ>_yvy*AOmY+f%!r7O&vG=bnFI|BDA+I{5OTKOX+mk?wY5 z|0VwKa{ZrLu0_MLsN?H!R9K@@$T>OYGzvn4)iP2`D;P?lAUGI>v_d1kjas9?8cIbH zq*i=2H35dy5EKCdl2niiisUHKOH!gyV3H$MG7Y7nWim`KC?18wW=yJAucU5JzY$d9+z2}m>8E)B|4cY$u;E(8*`>k88&rh z+~BF>XDqmVdTq7j+m#FRw7j}p3Y;A{seH!F+R9+E1B1ly)M+*TP=4UgHd1Ku%<1LR zB;U##1{K^;DtV_3O9-SLK5KeyC2$xiwCau-lctWBychN5u#hEWW+cRAlvkws>zYwh zT@#m_T%DPbnUJ1YnO=2KUzt=gAZ+@Z<42txBozaOg6Tw3K zze12#3`KP$0y3FgE+^rT3@OLb1R-FNBQYf%{?C;IQ^XY`hl3)6pDR|Uk7y|rG)>Fk zkc^D(Oi7?%@zb##1Vzz=*%%QvkS4;6;bF!x#uhvu7b%2*c?1s?Jf=gKY=*surC8j* zH_dyLSgzz_=wu~!dZK$cm9&6qy#<^!oai#sZYAx;5E49j*k|DdC5@eC3lGld7+Mfr zryzzc*g4Z|aSNiyY;l1cPO{M+%#Tb{(rGr!OPDp-A}Lx%*(gt@gJKDSHiXNw1zt5t z;N=6ug;bqZV8#f7!AWT-mmwK!lU_|bg(QQAvhzftK~O7naF-mG%nMSqhT@nhf<;cn zx8grxUQRE^cTTi6;0C-3TUX=zu^=qRFM=(|f}OAq3j=}y)2+g-!qZro3;v5@Dq+r* zghIX$YFMk$ZUn;`jW%P@j9-e`d+|_yZd|p{jAIC$E-TKojW~;!5NvNgyWeVj3!l=@ z!V*oyg9Q5^-iV7I!h3L^;wNw$u6z~`yNwrauH22)f5%4SOHgfre;Lnu6<5y65!PNOnaYur_-9>E$T z2nzX#T&?5)+_?&QQLbC`ja10*!x8C%;DW#iNHI*G23J>b_4*zw*5k*ZzmDTUAK`DY zX$cXthPVf+G5HxNebQ#ErqfuDF^TPEG!_^MMoSSap&^{SLm)UN%t`bo7#-mvW&kt} zxg$f*zCM+o5I2wpk_LPuoZ3}wg@^X(ZR zP64Q)JeJ54h$KBxN(eiM30cn*MMKsT<0j8ri3e|jy3czBXBpWH1M4ypVZ8CK7(SaH z(67JG$WL-ij^XY6gP5O|7LzvGRhpmwBp&xNp7v+F0H46Z-*7Ab2i}e~d$FhYO;Z-* zb@(ZK6dNyL<96aG)<^?j6E^O`iwHrul?^vmvxCJ^kggBo9iG_OQi|n^_2WE3&nOem z#%i*o1iML}&Tqtdu^J`IYl)tH+wd7Y_W~aK6mB439&ROC;Bv0V^%Iukm4re)>DiSH z%NDt4&Plu!rXKTbLqp>#+c~~;0yvC&$b3WSY$!c&>_po$6 z?;_siJz3n>xsR;yimMxO4!J zPC<1a))E2_*F`X~DqheM>I^{x177Oz{uImUUE=V7E9Ei-=71q|4m^j$rhbptV__dr zSic6dEts{?wAP}q##k&2?XcX$Yg78tN}ZtWOGjF1g;wcy#Pg8@Xl1N}XK1ZCgJ&#S zbEL;dYn8$cuy$xumBJw14L4Yn5aUZvw+R+ODU6J#^Ocr(dTJYPB%1Iu#GqI3e*8!L zB_8z!-h}g?!ufY@hVVQ1Uc4DkTtPg6*#+1Lql}(dcsDMbGOOq`u1Q*hcfbJOjl~iE z01WpF_yDeN#I+mnoE7*d&4hjp!hzXl6;EK|8`YAr7O<$d-wwPTLV2}K0{JYj*$EX4j6!1f#(I(UP;7r zT!(d6AUU2B6KON_`WLZYzXhPri;5aGDyjuXJ%FP~aTr59FYtQqj$S|bcf7RrZBKAd zzcngMpH6au7Ru7{X}tCUoOuD4!r8(zu&OS?FX8i;^w-9iG|=z!QqWwEa#F+La8fHU zSbqR(7x5vE3b}sV3Oq^R0vF^Sd>{5ELk3PB1w<%xw%~vehYDrcGG36mWh3Bl%kITs z-3OM`Fs)Fe*Xh%BIvp7}mF#fpxG&#(|NF6DzWV<6FMK&?8Ncwaru|7PH<<^1)heTp z7BBzUcd%sTw&=o=*2PTU#Fmev3wzdy!PPQ)e{t(#`jxL67c+0IY~0{GGOTgyKk`ao zC5Ky49o&qHogwuf5xh)9dzTVjF4M^R+D5z#rw+Pp)N^=H5ueVRBkS@f)_T(y;DSeS zdSTv>{IGE(r_<}D>?l&!BvySzpz3QA=58?_E?Kq3w?Apo3UguN+-g%{NwZh1`iiK- zNpq{C2Yx99TUHp4Cbh0G_bqN+(W``S`Kvkq&DIURqa}j8bInDGRC9rDuc)GP&4ruu zycxF}^!mYY>f<;pBRw^;cDyXN>>qhO8@GA#isx1{uB6tAOGgu0w|SvD+oD}V8>=oI zEm{776pVHCY^{!VCC%Lu?V7pO9d$IR*&PkFgL8+k`*f7(i!KOOMA=>})1@Ns<22cg z{$jmSu`$77Bc)3DOOhHFEdgqGbvbR zlvHL?uuLiFP7=#Z63a~Tm)YWPYGg>6s{&=R?Imcsl(_`Mj&~1E$(vTX59jF@VILVf z?oz~%IHl(l!gL*G;KH(bM}|WP^8jBoR0^qKP99jGQLhJf80LY1|6Cx30A7~#0k+82 zi{tCT!1&r1RU}T0)(6F@;W;0e8m*he@wN3+|I~;q`YR&_?;iMd|-M8k!2#W_f{DbsS=B@XB6kqP9zOvu>*|NF5p$7MQ|ep;I{hZfufm7wft$P}lwb zxzO^lI2Seq=K^#*SQ~BYVV?Ocb9) znw-iQUmB@1ki8fNYt)p@&2b7HZ#HAjX;WI1eZ9PHpgGn;vNDEYWSmX37(D|az2s=J z^bnz97_}(lNLsuVia1P!XC|r zu^PKZW6ai2GKZW{NQWFati9c*Ai^Y{BH#;#SfZEY56U&|saOI*nG9kSh^7^ihe6;G zrIPFSBbtd-h<@I~sDTtytt7tJg z20}W?QD^C-bD+mS#`Pp11jLcniVj0)84!rJ=pkq(89WR_i{(HB$NX34+JAMf{a5GO zufHt)SJkaa+SWR%Nb9}sTDkUa`VB8=zYfI^os6xEejk7 z-Mz#9OMd{d*Ym>pFMs)^^ZW5HT=<>(&JL+QS9aES)D%KMcMDW6vUcHLr~ zbczL4ic!B;rIc1Y9H4=uRW?grTs+vt#$#ol3UO1>!`ZM~^^q2HY!dk;NhwTd6A9gJ4blCZ@@4}X{iww<%#|;||&l`>!P8mKi z>{A4kfPHINU|eZjZ`^6zXFOtj+j!3SwXwm}WLjt1VcKgtY&vP`qWr5{)13mapZ$T~ zr{^L>x7T%K(Cs{jiOya$`IUDaCps$cnitUB^}eLL>k{c#+_jAO+0NlcG`B{_ML5!z1hCe{x(`4?2%K-*d4@ABmc_#9+$V-t+qFSRiN9~IG=aoQpqxebu_;WbBfcm}4pMolxs2INrsh*NN zkjk$Ssrw_SASsxzU1w8Jn^Q=F4!WBTw(Aaglm>7Ws4T8YE3600x~7W^nN74!ro z{#bd4Tw^pE)zU{}q`^(o@zH_{~A-WlV?GJlg#Yjp;uG5IQkrXL? z{3cKW>GzV9KSTyCN=}h7nOr9KpQ#{aB#D2$GgLQaV6Jo3ZN)Ld<2c~cOoG^BO^ZTBK4x=5yN7tuC?x1cj}s5CO+-v?}95Q z{+j8~>_EdwF+#ffl#IgdS3@j4v~3;7A0~eNYG0*w-PP2eBO!gjE49ksJi_nwcc(wv zA0dNogbK?f2`MKiu}b8X6&M_f^=VfmUTAW zt>xXDo-$cHCG{ZgfpM&V5Kx4iB7#Sp-yyF^LXWG6J08Dzyk1!zeszQdO-$e#UF#xt zW5RAU;P9S(`t>R7m(sIegd+=}Ci?ZO?$@theD8i)Sy}y@;mfcn>=WULaFqG_RnIQ# zSM94%6P#^!ShcTAP53l~mhGb5N&tZ9Tu0xWnG}xlU_#c;-!#PFp(b8qz(#s2k+3q zVRQITuyQs*q1L(hK)U&Q1Go-#wBBU4m@S+ILN>L92dPqR5(E>)S=yzdE7!bisowlR zxtyDjNlrW5T2`>~=`>BEeBsJ;b!{GBm8nczG)#)xRIr#U%_JKRuattTO2w$PwFXP= z_LhNV=QL@2@uHDzc4K+2h3$VPaVyxzYquVf7gY7gJ)tk(?mul=^`g~m_TX~E+93f+ zYq`I$NPT&pu=AT^L$=Nps^W$$99+EQ=Iqu}DThuMw!W5_);wg%&3^e;c|v)fr8c#+ z@ToTw(^ko&S5w7lYd=*EFFT>DRf+aPhaMSxLRW6MIeL$!wx6nY@v!pkEh84KDTcD4 zQeG3Er>cd@_CF43c<;)`bc4S+B-K4a*p@ta$f6Q|ohIx##oxF_Uc6*&?bcJp+gqfH z@YyYAQVxOSWVux2wwU25hfWRh7a3u$O@T5_yqlLbVu{$qZP1x%t!3LwrA#i@ZeKfg zacS{kYwa&zI(K?ext+QAx038>twTYoD@C3y|v`!G2bpT(a&nKR?GKvxdlt+?#(k(h#7sw@$5~L6< z9Z-ao*7*|$a&E$+EyY3pp1?VjCq0-*=XVqy8RTFv!hM(m9EFGSwC4}-C#OABx;)){ zqs8J5SLV3G%@#{oW{%sD<8b7Fsm^h@b0Wl$XmTPvIYl{6h%p!CREJd?hvZb7hlEv| z!RHj?iyRJ+^)iA?j1{G#D~7_##cvszsKvX4!_4@vDv&JSy~;gpUsb9$#A>JQ{%kLs`1u1Yn+~VbB)s; zUTgw;evNZjDGS28ycX{~`{WwuRIkGh$ztbu!M4{pt#To)p{E3VtE-}$kQHc_hvxI>ve?NHMR(c#$nGXhKP)e!J2G{ zkc}MR%_#;^F{E^YU@5L~`(nIacZdl$&UG%q`cNZ0f>*=w2mBCj#Lgx>wiVpvxZb@S zZ^6!o@mB2Ih9Aby;Y}c4ib1>yj)(9wl6yZyZ32kt#P9~lXdUi9t-sDXt^d@uxHfTe zZK8N+r_?4+t4++RO#+cOWAc26%Fu#8LyTRFwNr+ciMID{>?#>rHhl0xoRKm4R_)}4 zkkIB`h{qOZ?7$1*NT1>zS_T5Jz%!~OLln-(vub;LNAJSJ#nA8txEa?qWB)NnwCd^_ z!8QfND*;WoZkDO834BrdCLBB(@d9W-&z`Wch(pe3H5v_;gyfz{Jz19H;8wwA=j}Gm zURIV?mXuPKmXwxKmXeZ`1OQufoX&`VX~6S(%L%0&&@137)ao%)$Eeh5#njvB8Kaf< z88he^>ckoJIB;i-W=7MaXN*pU7ziq9nn|P;j3SX%su@P1U^GhgD0PgwGEFFk@&9WUJMv?J5|HS{hPCo~&4`vBVaC<(6--K&W!y3Wz)VamF%r@`zG6MvS5;y1{BSnHnlh zrrDKRxOKBYuwwRI^8}-@zJf!h`g)_Atrt+eP+gx`UteL;noJc!1$dBPs&`hHO!Y!N zCkS=DkYH@8vG+FKT8?mJff|~619IFMHZ8<2%0`-RkG+mGFyLRn>;M}Gw zt|~5VY;0&`m~?$x!{@M7vsc6EbWW$UytK5uG;=iOs@Zw)YgVvx2rqI zH5O2{flE4N7t;b~KsqgcxL-nCK?QZyrcIr2RCI`+8hj0zqxd0w z2F}y?0SvO&4fwKC0FU5ZHAkQ^S3ijF#nt!W2l2Deu&>A0VnE*o=L7iD6y5|ucfm#I zi2n|V=qyCHV#Tr*^jJx5Q-$g>M@fmZBy%(r+P(HXuicyD^?Db;-R8~7f%^h)uGd?* zATNJGVP0W=Zq9<7d~beUUVeUV9sq!Oc5hwwVX*{*_Ta=(TU!Xf!rH=`n%bJ$+FC1| z@B^Q<2mtZd6ifIT8YW-lWZ4HmDe=M?B)11Jq>X4K;PDa!>o|$Y-1p=7PWdb#x4SZ4 zKs-r)_krsPz&}aPPXVKJ<=S!`wp@!9#MPDbZnav8(`K<$u5`LqRyr$PHrBM#>aw_; zPM6E(1OU)kZqb{KW0)Rkjw3@9(_?ZA3 zrFZB%jmBo98QNDAegv9L%_cL&m?;1Vq?J02&Z*G|q96$C>7C4x0Vi;%y7kpH>+7oP zYBb_{u|}w=uCA%kR09B5T_uQ$PMm z)h4(%(q&o1t=DQBH`Uf}YOHOn*8^v)*Vfn8*4OK60RXJ6(VC5UR7QZ0HOiJUaLyqf zV=eV%ENG^n%jLoqBb6grdKBB<*w#3&ac-kw@b+DG=%Bs0 zc;C{ZT(M-|zGAm+pIy7pzM^Pfcpo53a!N{;7TK2;?dvPi+DrCTEh{W3*=OIEYqwwB zs(gSNQzp+(Q#Z}F_k%R+=G(h2tc+AVaSkdy)p<{@-Q@U(#RhKDZz0JZ$1t1dc50t zJum^sLr~!z_k(!wS$sF(p)f-Sr1zEd#z3a;77eGty%Id%{ge(%i-j-9>1D|_YvJE#Wmfu(^$M#Mq#}suI553~n7o&~q|OFm z4*>tO>A`U`edGb$QD(K?f$4)c(-7)(0-@x!Qd*n-jN~Ja+y~^h0AnrGGk#C*(q*|z zYnJ6MD_K^scv%5CleutTR?tZ>iwQ2dtY8TVXinyabEC=J=5TIvZgk1w9hJE5ZK458t*B$x2C$rXRSRG&9(YYc$8T2l*=)Imin3#82oUafRDNnLvX`E_{=%;IvaNEUa(_F zRjy`7bdRQrVU|e^VoL4z(Ir@9imEb06`b>k$6QZ+6J`iDXkWEXv#N2OW}RW3W(5E^ z*W}sPX;uT8pjH#)n!I(Il_bcW2Z0rN_9_D1c@^YFJge8_t*8Q`DnRAYa6nR6LFp^< ztOQk&7g?vNF&Rvi27`{wHoKJG^{ zZ4>iEJ3u@6OwoK2(^%n0TtItFLO>Awc8g{yo_rGhfM~r&Tj&s-qK2tZb6z8e1i}Jihnr)6XmovA1$M&rk9({mWWPt&gp_jDaxl z%{g3}vvT2jGSM(a(ur`_b|N zYSdj8x#mUuanKuY!DOY=aqK#Yx84NsM!dK3M(8J8AA`=p^)UVz{ygZE$DtDe^!;!? z3VjNJw?okVa1lD+g$fE*R|W4Oj{j4e@Vv`eW(4$Dnr5f{1XSTIz*9q!e+-4 z``!A)4PWlK$8vDFInv%s9=PXqO7cwG!qra*b$2hGuR0po{-ej*UKuyI?q0&&T5cC2 zr}o#0)s`0?YkLF07w5mYp%St~WVaDuRKih`3}FRD+SJ+twnQV^xQ&He zZZT&s=7h7xhKBn3!qdC*;a+%jS3VJW>j77|GymwR)5eOry5rU{OS!TBxb?WTE>w2h zT9IRd+b;8QYlrQ)jfB=a>+7v!=87@!?X0(&b1Q&4FlMf|0<1W0h2H6yd0CFBqV7K1 zF^j7%$FvN3t$J(aakCJxTI-kGXM4!F?5MdeRBv4tf?H*I#h9g{A~a&IGv_W_HfDyv z^5fR94W6oZ+3KxF&G*8+;y&Y1612R|dZuDoCA{uFTSWj!tjp@_t1ByvuBvKdb;VKh zeL!4qz0bDnF8b_I^AR(UxtHy=o-FkEm@3QKxz3WgmpDsYMGnUt$(YuXbU0c80AdcH zAiUGzm`g%zoh`}qPa9o~FUw--AG=QPYFTZSs!|@d6jP?9-(qpj%+Tf@n zw^nkKbV(bz)stJ}?%j>fO3Mxxv8Ys@0EwZpveE+g3b<~NycFJmy+rw3zI^F&daNL~ z%1rlDp%t}dqDU8KtfP0(J&03Ot83R)x!2WJ)w)Gto#0lxtE${?u?hgds!H|Kc*l;h z^p5s)`Z`>YJ_>B)80fX>;ezxLES;kgxDM}Om_SbUAsUSgW6VCZ=IleCmvtDe*@t<` zKulQ~%M0x`o@H79u>1lW2bc8w0+ziL%}D_d5hO3ud;zm?@hr>p9Mkp?=4b%*k`Y*d zEXOnhu2^|r2VC`)mrm-!dA_Das1lmtn$y_Q$haBuGx<$!cV(%mv;wZ;;m4_{Q*_=D&L!{&n`(aD=VCT zD%bCp6Mx{m?#b^z+b6r{+?rcqr4;{pe&x>|-tK#QB8pS5SDgB8z5iSHbgx=^8t!Xp z(ATdx_*&wrFV^S&`QabKK>o;B~Q$+ z`>)?zYCFI6$wx1>YgcLR+V|9{it#TJWXbuZXF8XjTe7Tu<>UXYUFe)&A6oL$(}Zm0 zzn#05`NqGWskxe2we?vs@zkGHmFiPAM4)_k|+Qd_@Kl0yV$FJ^R_Pe(ePrc>(6?sAXLqDo0IZy9j zQEh$db@=ezzC9J~n;;=g58Siw)7DBSeSYqFD430BMR@C?vz;4HoZoncK4zugbm~q1 z)LWFk+4ZZtmoslmFIxcLdS*E|7LrK5EjEkBiadvCH563abF_seqC+e$s;OzH$sFbU zvzQApekN$r?9|kU?d#TgHyPq<;_>)pW_x^nd>we!uK`bdZ9MKR0%X0}-e?BsEdrNU z@~mkz#~aP{MFtw!Xx=~}-0F+;^_2uuZ;n3*Y~VCL1^xLETy+#*dJ^DaywiOcl*FnB z@IAQdUQm~w0eSrhS^0aInpp0~Pf>Udg6_mbpSp+oZzrZ+mTiHPWvkf$3qQEYcjB;? zNuGdmHa1qeOqpSwrOQ)QsjBT&15MIt8=$aR@e|CN6uCC68)%AMx@O&)6ge-yY@kCs z`LI$WgU(Q3s7w*f878A@8g6msew3GzQ?aOV-ZRyLM+mt&uw`Hkav!riH z%krX@CKsSvmijdSnt-Iq(bCcsT3%#cYq69T6ql415G^JMj-onugIh}=$V(PMXHYd$7aCSXEV9l{qR#8gm=hlitPVJ&kRRHe2cw_!_vjU2_1Z z8XHdIhLkOJ%{8f1<23;Gq*A??*@kNBYF5_OxgW)K)zF>Qoxn9ckK(J~>bq(m?x}H~ z!0w)&tFG$lsksWkuAZL6M)jqU?S(%W(icVNS>|3c_E~S~mU};Y;<>kX818HO!)F`b z{kP`_e^~sj|5)|IOAJL{d*F@NzH|JuuMhu({q9X$zII>k!And}x9!(%xHRzDHxB>i zzQg+N&yD|Az5S`rMeoV^sSv2_82A44$bFS<*Z<+yd5?F0ZvVogO(!h;9J`8V+wD8; zKE93KJM19|@Qdu~HojF)oYJqgh;J474s}c4i@#7CBPPe9)0Y@qimq7o#q9K7k~a!o3sDN?UfG{Rd>8G|G>F|>W&v*I=I|sE-J8@?Luym%}g8xwjzCj ztrC1PLRFYsusCYJ%#eg*(4I_gpe}H>+S>>1D_ZRx_V)H<`w|2A+u>@pFVU|9S5l}C zhaWywTNrux;qYAd!}X01*PnVg{>a0pA~li4C&9gcv9~_*aLdWXk%#LauC1?sWL;x@ z==n$MB8}_nYwH&`e5}P6S@Zmh>mCZtUA%7Y+{F#G^{48q>*wAW@~&HVa@|9<56^Sd z)<+_3iy!*j;`-+wTKCZU&b#W@H7t%iU*A$6S-dV1@qmO`*XSwq)IWru$BP#~k1u@| zFD4eM2QZL$*WHFAVV3l#&*S@KtKgI)CnpjqjAV}D$Rg0CiB8?v=x@v%B~E9hGjsUV zlaCy$H5AGZWsc&IX7XVtcHBZZicHWBjiJV1BU>XJ)|Qt$9EZ0#99L_%5u>;h{8wD9 zz3y6VL22oD$rX0BW4vU%q_j47yre)h!fjx@Bsxxl9C;4M6$MuimskK)?kgN{FBmVe z7ZmJk7mWp_=SuhGmx{*r0(*g@aNI3ATF;fLpy#YD^_ajhF?g#NB z_;a8M5*ZKB_rm!wbQT2O3PJb6Md*nCZiq;$)$8-&D6kY1URg;&E>cr~$V`@vth_a+>QghIg}(7+AuH8pj0LBJGVa|@0%sdvP* zBZHl$!DaX6xeiBNtIj+1N20E_^G-vj=|{2VQyoR8Miw1dy`bon<2$Fjm(j5L^FKJ{ z_`zusRwk}s#UI;OnCAhgJs4|=i$AFv?0mfb{P!(~?>O%?TR-poiuvGs)|Z$6;7mD$ zwcD%a7FEsF`#P#Rs@kg>bmdWt$ph8S*XV7Os_8RAWNmWKo@CO!2f)r`GQOd9vUy0oE2bSEJYpJN_Gn(m z;U?FrH=O$OO|G^#oZS8<*Zd;~e{;k%+6l-bw$VigMwXoqyWTyizU-~fx>`?Ead%i8 z@17K{*md&?-AlV3`R|)o=r=i5ezoexSj*aimK-6eFQtdO2cevvY6`3jB=Vxbk`meW1e(M*twYy6H}KJ zW}e|}ZJgIwSm1J1yD~?S(9{%-79NDF@L)rO#}fsA;Q_bDb9#4`*?ao5r>Ww!`?UM2 z(~C~;_Evhm*4^%7r}ucRR=4+bWVhGqg;3B~PP#oOt3B>2x7S*8I+A1c9``hPtxa&% zRJnJ%-Ay|@*4@XePB-TQiMQJ3wI26c-N%o6tnM0!#2o>w)$6URaht1a>&$h~Ou!H4 zaeN$F1q9b0z<1!5xk5`zb93Rfa1~zb@%Vhr;4eH>>+_x65YEDvBBn87&2Ex2&|3uK%`aG@_NM@cVtf!o6@6?j<^(5B!B!ox{Pf z2daJHm2eea>2g(8HiEx!_i0SV=e^#-tKcfUsKAU}&}qtOD9>V%fMArR7Hq$ufe z)f|nQ5GBMC5(r57Go)`NIM+m+B*BtPV_&jKZ`jtr{Wm@E=FK1n%$bNu3(qf-xc%*{at>)*9#Zi3CP$( zs1Rp|BOin%yX|@$Bsz#YGhep8n(@~+7>!*cU0SWdXsjN&(zs)b-nCRqLJXrD7ZqwcqkZ-L>ytD13$q42m)DfDe(p)v50MLi=(8a(@`?F#L-;h zAm`j9TqTbBCcrcU&QWp%mpEETP}kh#7+kS2Te7RA`3P?A0^HbGS69mzfbCsfm#=~c z)zQsAPA~j=o}sAqfKguUwLFx&D)8do)-AyzB(#2Se(Pk={ywU&HQ zRgw?L9zq1EXcOB=0_anDkYnW+|3ph|agC6%snyR)LwURi$YJ@+iR131vF_-5=YuUc{= z2qO)iRVy18EL`ATxNzZoxDs%+FPuMrK5=#|T-cNdMG{S+rbx&9#QexYPzxfF4x$|Z z4EYw4xg}=NY&HpD{_K#p0xdqR`jUh^aMo7$@W@MtPBldy2Fi0a zMUUN+II4!nxBm2ywyx;JJ<0j!)bfM-Dx#17j7BpIft2+6>*}gEIbT|RM=6c;l;!>x zAO9KmNN6rPTd6-@SK)r|rw1SL^zV+@#X=DdZ+3M~-TPY_7o@+UA z=Du|Xi|Do&8f~ImzU8Sc8f_L*a$3ZSB6=5VvS=;jW)&TI#vFAnJe89-&%S1ZW=&*+ zW`kjaW)%Q9NA21Tnzeu?sI>$+0*KWlXrUeg7uvOpv;-Q#wU~I;tsT*>S_DLkwCz?K z4F@EJaBDBpwi|5(wNN{EgGR5XBlvoqUavSq#G`XjpNu8bpva-oXf@i5GeSI?O6rrb zKuKr(TCFy#Joy)#O~hlZroM?;!K_9jRZk%j35N^E;VK*_vjw252^a3KYG^pQvm&SQ ztFh6#v+C%{-Hq0~s>YL{osHH;2(759I$qUqyt1LHqN>qa zeKM49Z9LWxX|zV*s;;QoSydGoZOGestm0&}07x1uZH?Arjn=AT#~Q3v)euQl2(Z@1 z#+vG?oJx01PEFM@41PGt#FnENf@}BV+i+9ME%=&sx8QAXZP+%n?wWP$wrzt8?!D{Q ztqIn1@)~BNA+wy>*g`yp8tR)E@>#N+A=54Us+hj2;VP!TiK$`&{Y~Vw4uB6F%>c;6 zO8_K@Uc_x3U{N>K6h~7op<88g2cwRe6PNo8#w>odjdb`fHyWHXy$ z(xVzqd06tQ$x~#g0gp)9vMmpsi-|`Sp}q+tpS(zrWf_*qxMly<<=11OrpE0q9EGcJ zv;<@_H~0(FW!2S3x0e>Uj~=b|6(21-S~hyL_2_nYiQ8@6UUukc+HEZ=b076=cU#>M zT3S|iq^$agqq?lL%x!fZ^^{oM*H!!6Rv%o>(z5MkWxm1cqV3m}9`%<3iQ8dwTd#9l z%dWew+FIs>NXk5bwYuFdXIX)x+*RNzyAFdNPBP>55QgB2-N$fU!`}G|=5JZBpu*vF zRM2zTHgK0$ILaIZ=aliwR#iC4sjGa|vTdc?%GNB~R=%cmTRFJOfo9n%r=x5QJhi6u z3KB}N1eOAAX)p1Yu5m1^aF84n?1G@qo4WX}s4BX}x7`bLRtC zJVk#ev3MUA%adX`TV39}NpucUPeLqTBUZ4LuDIyhL&6*fvFN;-xLkWh;&Gh@#2(QF zlrcgHkAN3`jssY9NP#4LJEbOg0QB0YggN$zWy7KxUH>{=XLsVa2w6)gkXC1Y9ZA&xD|AZ6dUlZZ=G&W%+ zLgP1+NV}!rwx#&j5Z9cKGn%c)@gPu2f5yvx?}bbhRr2LngG#mmB)5`Y>L)1qPk2ig zB9{XpXPK4sd1TiKeIZ?KJF$+L$t+~PB(sn?2oA&4mCSX#s%~N>GhJE)btgw&WdzPP z;>l^GzKP{Wr6qNBo{8z^)r{I?+IZ?EY%mEozt{eyGr59eW!uX~Ia9UcC(E^wy6^mC z6L*9YULRqu)pA9qdwK}+yHBcK;S3Rz8_Dzz8%@sR<_PDy*>MSfuBqCw{e}JXxx{P5 zHdEwBtp^x~u=0tXS01tynOg5%Qmm?O`?^pz-s(KM^u)L@(q8w6gGKF&H}AXA;cSom z;g0N3)9MYytB=+>nd&p^NAFQb9M_8I`g-q6kDbjeb{>tCQSX9@N0x1Wv-*jbR1W8n z&X>L{v~>=DMoUmnj@z6^I;7~FG`h376VU~)+j#HS1;_REFTEu^wca#*#JzpoRes#% zIB2^`yXnn?ML!z1yO`>yepa!c#9rh)!XM9@+wj9xh93(r?K|`A{q1FI1|Pm|_+YGc z@#e3W3BO!)u>Aq2S##F(lf|EGt6P5MxASTqU))jg`In=XkKMhz^;Fdy2)*MIT+_Ny z@ynKuUwmQ|vgEvbgn_r#J#|=cTvzeLOOtZt_t&qpbPD7HE`d-N$+pe)zH#`%>b93$ z54K`q z*sA_#&ksNKb@$p%m;3zfH))sN4Y6llvytSpW4!vQBLw5@tbTpmMDV>8G+zbhkp)k@ zRG)KDRpeZ}c`LktMpRDTA=1Ktvgr89*^X1~6Q6j7#9q<6*pwa@ww@5~ee3QMM~fWe zMW@<@vhz@6)n$CeCEBG~Np!TG=huC?;^x)X+duu*(OWypimS`sl=E`im4`Sy_o=QojZxJS5TMc&+cPE~a3CP(>U z`hvGz@cLUi$^9m+oEcTx;U^hLP_>dW;mk`yJHgZe<}@Q?<`V~b@YF#PAr#i{&UeuK zS1AQhR3FwZC8(E0r-U((7dSb1z*P3C=pZQ=e(Ecx5h!m`MirK+aY@;5M#`Zl$=z}7 zIJAAPd7}APFpB43?njXQ7c3H+WdTHiL1m}V$aXFMZp36 zWU1VzwkN?|?sSw;Tq(tuxZ0OEL0l){_9g8}TQYZ9d(ytlmb8P*0W|GPN*%e&oN(D_ zD8Uj)e6|?z+m_|DIvs_@0++8Uv8(a~wbp3kS-VIsRh|}ph1`Bo#p(p3U~_2mWn3W# z7^`5lm1rlzI1|~3l{b?gC&wYjQ^@703RQWc8mKZ)a{GYHAeaTK-Kna3Z?$XPYdIq? z2M#S-w&>{6HH$h9{3B++nctsNN0yk|HZ2UovM}dA;#|<{xmoF1vk}oi1{P0Zhq>Oz`;e!Evs^z z3#enQ61%=^wRP9yH`V)2t{ShnVSK@&lQ-4L@xFZcEqVo1c1BwfS*Ey4v|x zj z%Z@V(NVX(jTe|#wu5ZB&(!(SL9m1RDvhdMGYmb!u^w6S{aTodYf2lBUsJnmd)+2Gp z$!6E`^R_q5Dw1W(&(jo%9f2cC4kTO;4XyN9^Z>md(E8!i+;;)a+6m)$3kc8Yj7}s`&A0cvZfW|8_~2g&Q#9(l(xzRJ8B@=&O6gYSc1jx$Umu|CnU_V9V1AZTq+-K?q{p{iUE zM03W$WgJdA^pd9)Eh5(}@;O3DDd4S~UdVxJS*+F;@_MMrEZoSdfr+#H1l}dNc96xS zixv(YWI%LGGxB+YNNN?~Wa#eT}h-s*3ii zswx*;w_~^!l~=i3;2X!F(N}G}9S_2F>EOu53fDMxZLHcjIJj|R#UOwyHf~(MxJtc# zt2kWt)?>^Ai!47{^BD76VXUV0CZ^@h6ICxfvYPvj?W>4@oSN3#fW*4>D%`+ban`YH z|LPYs1hk%AWc|_FN0@$14_f19ZrLYOmb|c#KK^enD37z%!r#!6{rbf?59^m={VoC* zV>9(HmyuO&TKDLx8m_`-?s#aQ2tMf!A3jx8rAFTbLK zaaUvxzNRWzuPmo{9)LYBKfgGC;wUe#npo%NU)Z>yac<+B#@fajD6`r|vf_H@bNCp! zfx2}P?*#wO8wg@2T*v5Shn+jeQkI%VcVqV7Q3Vf=%)P+hQFRQ_zXH6#-%&A+GN$}O zfB%Pz%O=f$nM3EI(p_4n22JKUWz{^HW=J;p z5hL_Et+6av?lr<@R#+M#0UcgUo4S0hFZl*m+MaH!}G)jCF#fg;TtQTpmO zj)8=eEEedt@G2nS>3@t#8_Sc-6jrGzjjD`%HZATpJ%Z9_IPlVUlL^lAbPS}LM%cob zmqCV1)Q^R{LDQ+u#sHCye5`zt0@XnhE#THLmN~pkHt|5KHkTpMEYQ;U5mVek^F#Vx z<$y$x&mz}M!Ar@%vB}|%3%-9|=DiTXL@G$FT*klO<88dPmC?bw+Ia08@j@SZ;cU22 zSSEq&{Zhvu$KMC`jczvy7M{E-=s0UShn&I7itpN;+1s^K;tN^VI6LyiQhJ zqJ`TWHEFnWSY8XYzzAR4!pVFkn-g)=%_%Rw5Y3#ayfEu%5olXgWm+#Mw_CWk@N!;e zHi4o|gh18%r%8LkG|@1A60hW_AF#?Fb7$=*Wo1j>nY#O2&H+}+W>OtyBDh%GS@t4` ztZdFPR?IoXn&G|H9C#+@I@UNT4K`++mA`S~BFFotbP@r?ttgl2mz5N8SVlS%#G4Cl1G&N)6gp0li(&&0*b`>nCc zzIqI6Wpt%K$!bB2W+Le%hjQ*>XZmCJnQ$|G?$m}o({sEqZaP>lbeIm73GHUiBeYZ3 zhrdmI!9^WrjL+azti%gRH=X$gaQ&5G*$)@QFq8julVK)fCfYGM{vvtgrph;{RaS-* znX;(fs>XCHKW*LI0!G6F0mG90=LDvBzSXQDfBy-&OYn0R@tEN-YxXgHm=Rd3S1q!b z<e;ILQVmc3IFx0u%8GHzRh&v<8g(qh!Lz0^ zMw_(-B)n)|QH1zKKWi3%t>+j;meuC)^{iGc=J2c@UYjRsNw(;D5%?~z&LNALz$;4q zAg^Q;p&^uR_FozO5oSnV9@87^MXMN8=NrpKqx%rH=BTx$EMLKkITbmDg|%9i?0aKn zwOW4LZP;wQMr+mQnDdNUE3f6FW+ifMy0D6D;0aPz-X^j95`JD;Ezg&li+Qv066L81 z<)OVnK1WN_2q}by(;O?-YEy-cW!K@V@*K6EwhThB=OorbPsgguuZeC~)AnN2@_Bp} zB#Vf2EYR|5I7RqewGn6`WxN$Wlebop#IUTsJjuU-S>CL!y4;*6$wQg^FdD6*J5Q~K zWQmYCB@QjbNJx3LUWp}cv_hz84D+S6`>~bZTb`$9Mb`YU43SmYB`;!8&Fk~(A$N0( z@Ei!4kk@8&o0=^awQAN|!F~<1*1XG&`YK+u^7E%<_AeQJN_iZ@=KHW3N>K|%Z7$>Y z<8XehJHD*`a{A6Pca&tC*4$W@|17TEq=rw_s>|l{>MBS^UcTN;QZRPmWF2Su%hW3_ zo0kI~k>n_RF}wRuSky~-M1=g#a2P(`niq_cng^9ssd{8bqz_*AzJ#OYw_vD&<$UKg zqIF61+xS`Bt1dS~!Pb_-x3YQU1;t9$hNvL&oE%afMiR`kg{-K*Xu|#294FV#ON@m} z6pw}>ngpB6)KQ0u$q^`TV2N7*M=q73h)YMhc#g5bsiGW&{C|`5yu?om;G!beN0M}! z?93BdttdTXh5Xh+iK*qscsA=fNHhmUZ3S7Mtz=k{kv>6btUNF{o_q`0?~@T(qJOB! ze|}T747jPJX)#(sc?7&>S(o5Nc%%?CEgHtasVsxt+Nyg*^ zmb5$S5x8;!)N~RmDFiiCMLLSj@u1j(n8}loInt~|lKGUBRzaeZvO1zs3S35wQn5xA zE9>^0v}vx6ZfCz3_B&mBsP?1HR=iLvx*e27c2Cl z0h0HA6>R*2RxtM9sq@vRI$dXeTwz(~JhdcoYE?z(jSBL= zr=9iZu7^7#?WoJixu{5h%3OrW;+jlM$(8yd5y6MEXYn}RkE0WPuO7PIyYK;K9{i?c zi_(FC4Enx37&Losng z;Vg;ntSVMMsY08V-K`fE2DKz}4&mFdL8ulWJ&-&t;ZJ;-nszzrtSsjx-UXp*rT6ER z4hkZdH%y06p7c{{DO62=`mAW^tKkjhM0Ozjm9HY-DJubzNHa+qp&x9WToC0@T|H+O z2px`VS)tu=gIw>fH63&c2R*a~9xgM%%_X#3Or%B&1b0KZiBxb?yZPXJyHr!n@C3wC zhA{hmyk7j-~RoxyANV?@dpM9y)Bnajws(3Hw-Vhya- z!xYhfTI1;dvRQx`*ccPzqU=FoAU?(Jf@F>w`l39MNHDCPWF`?36w!s% zl9n!sEqW@QgD9aFK|nJaNsF+OhQx|Fg&-8_+5Ex@d7Hc+q>p?yoTJWntNHN7eUgTm z>6`wJ?D&84=(KEC1geV`=%&707RN5??HB!$5mv_-C)6=g&o8Ez{J=M6-Pv{YNUqy- zHo0k?;)SD!x@D80ydOO?)o78`Ax`v+a%Tum$~s2&W6k^PlL2;$Lis@&GVKm&+n|3i zz?dZY2|8n`H&@BlKo!eT$&68~gS7uC`JC+yMnaNr_{aJjE8pN#cZxQ9FSE7#?pW9ro02oysCw(!YbK&#SV! zbR&_+q^#f=D;4^AwT=jMl5j?Q@eh!Jq;l=l7SGmI>v?;-SyxW0jGj>{59#2j%bBTA z<-)j`y3WWV8{E3(P{-kR)3}+F0vJ-o&aN9fORC=4B&~7h)}00K`gO^(w?f6E2S>9* zkpQ4NJxQvQ8PsN8txahdbDo_ki%}1?Jyf!jj1L#x-exQWc1j`8p)PrJiB=*N3#^z{ zk321vnK|ghr1}M39q4VuLn{#+v`9WQ<1%p794RGgPvO{XgUUagE3ii@zjx&RQ=LzJ zuk)$Xsmj}yJq?cU4S*wXdZ6;n0oPm0Lf`Lv>ekNtPeV}3bvk?8aq2i^)}`nuvnymX z+itT$ovfsijpK2qm0=AWG)vAx@|dk;Nm&ST6DM~l0@Bu0EctsD8ls|M21?22fhChK?XF9JHXpPnn(xKdNX6@oWi0qPHHD*G_$F!NFO_B zI#DL9mkQv9HqPg)=v-H|CSdLG&kwjZ_&fZ5|NPNFA{6gV%=gca`@EsbZhyQoZuKuL zcgFqYA%D5AyC<|d)Dx=o_xPQ}3c#KR&GjuN{*S01W-hzeIQu~Ifpxt->mR%{^}rR6 zJh=YWO}DJSbko^e9$0tFIkLe;mNJ_8E0al%$z8_`+N&HQX;aYTLlFf46tGb<)WOHYy&*`kHtaNtMkxn(O`)b+T!cg2qn^4cxLZ%%g7EUsP(fCyK%nEm^ zCEj@o-^Z+-R?!&dvIMl7CTI_2k2kBp(3(ai8IBedkym(X7Mjxgxk%r~&(!tF_MpZO z!c8GA9YgHh3mfMQAb{LPhTuIunCL zO^m~Kz=WtZ*beoDP=uIiIie<}bBJBftIeX`Ol)?dD2XB9&VepiYlfCLVO=QX-K^0~ zY9PaXc%hD?xttN}RO}SFPO{^XZ=rTP=^c{6Q^*Xo$`wT;7XX(TXTOk9kBToBHtMmm z;!pGDC_B~2_xCGx@>mYfzi*fO(HLMDF2v0RM$-h<7g~`WDtH0o0gs)nrs4q+=Am1W zjAdG2QE~y(lHjBwW-}rqtCHI$e)i+(-F)Kg-g`aC|>T zmmApGM$V=nT+s5T^X_S#)cZy}pYt?6yJ?qwOTDKl_nRS;YA6$Pa zs5R?1t-A%38+x$QwdomEYnduLjI=?jQ|EmUo;v-z)g)$K&15=jc*!A_j?8}`JVSc{ z!Z{=voMD8F6wWb{sw?v$+Bc9+K_x5KlY5aYKEzJ+CBTQK=usd9u!=!s%5dx7!F~>6 zHhZXc=Fj37ZpIIz-$dK_lrPIXM!Bkn=(5TuGQFj~+;1V$R9%mp7K z4RaPzeyp2ukW;vbF;0?i(;CKw75uE5y~8AN+k2!21GjRMq9XvL`p#qp|14<+aID|7 zp49(M>&~rDDGL5{4gU$M;s3LxXL19Y&;b5X&4{qOf4m<5iD%yVWa#^Y3*Q-B_=985 z{B)$VeDIR;lh6Eg`>Q|L{%ql~&lGKcwrDW)&S2;V+n;&o*wa7Ans2Av6&IWFv01*^ zPHsv}TvjYJ+(~^zkN-Ur$`_@H5i-nAUbNkY)N}`Jd6JxFVzLA^jwz=jViTg8PT{Ar zG+oHikx>J5?Ni#re*6fYn4H1TrbM~HjM5hOkqBGU8tHW`pPz4Mp2fA#O_kmEF`U4J zxN)M+&OYR}NyRENOfpsYEPftO7NVtrIC-kThZu^}PR#A1qj3`U{YK*mTgv9&*>fFO zPSHH3WT$L*Bcsu*l$GkKIjJwtm=5@9Ac50)?usCoF+@>)m?QZ@rioK3(gCn0$xclLNFB>NWt)~H3bGmy13n6?->uZ@ zck6Vk-?GX#Q?9p`Rle1EKehT*-a6gt$7H#fjE~9k&33R;Vw!CA16;P%FGNKD+o^;f z+xL>`uwr~R>!_hk>N5n%&}^obHL1^NlPuLQlK{xHn6S_z+pLN7%1hOl40b+G2Rn`K zzeAYF8V?7)KBckF-aNAhB;AB`Q!%u7EojQ0<3&)EA!v&vk1Zh21egc|8THRr_vQNYe@j-oz?i_~%Ki6DA0TpvfzFeu zhU!D@novnJw0dc1m7J}LWa>X(XtZo2cOGb?r-+;HoVzhuMnfwx?5hl<*RYs>!z1eOaH@k?RKHZdvn6R)MnUG{PSH05GCp7dmzrKI zV~`gkvb0%Gj6+Cc52_hXDHay)YU(o5laZfQL!WFU^J&lEd+}%ZD=x}v{n4~d_8(ut zx%vL42buzbrT6)7^*1-&-w}QEiqnra`I|bM{AaE|ea0WS)qme<|9$tJe$+qzG!UQm zH~9l_&iBu6ibnmXiKZb>x7EliWRH@3b$y0?hFQunZyw76#eYoSBR+q;UPDTS^Pkkhq4Ay(S$#8wl6Y$l0 z!v1i)#}`O+hY~K2Hx%s-1c9hKhClQJGeX+RT6Xykdd#}_4E7wwjaB0V8beV`{03Wd5ou}CBd zME*c`$baE1@cIHVuNPhyfJX>Xq(0j1Pt^DLL&-=Y&=ZVz`+z7EiS>9XQFK|O zzAg|;1SO&ve0qIPBH0rT#roh#M2%2(bt7$d!5f4OL*fEn()|c3HL?4-f+xA(v*lxuZwy^5L0&`p6u=p zN4#D_)D!f^dPq#+(5x}Vf&qUl_C9Hfg(4n*52-5fCh6-!kgcI`G8l=*yn$FG=JLgR zqMj&}T_BwB%P~bg!TO$Xpu0OBj&~<~376j!j`bv<*dxAJRIV!V?qt2MI}{B@V$pac z5^?zh(YV(eCzTEoHcO@R2NKCdckIFi97y^ik#GWD=MT%Ti-t*#1rvVA8h<<-?r{a7 z?LhPwejT(Zzu((K>v&+cIu1m!P?EGePa-&5lM4Ds(jzpco>^lG_`Lpr)TBbQ5`{xC zf4rM!W^%U73`T>VXi{o-o=n+=>itpR79npq91150Q3Bkwj(cXSPtb0o390PD3d88> z?x~N315s~JcPyBIS`dtR6Y-$$g2m!||CO~JTUMY3REHL#1*j2u&?QKRtVoais2-_M z9%?~$#G|>W00od2nNcf>peEFgf+&nSkq^y7bC7B6<5pM52Q@iLxLh!jnCk~Mo>^mp4g(7K!p#Yq zPAo=V2X!elTV{rne)0`KfK%ygC#NN>`l1P_hCi&v(SN)p!$jg7?Nbt~m}DKA); zPL2%529ncWFfBlOLB1TkJ~@(34Gof4$T8Mj{3ZqKw?t7h3ZW%v8EQivXc4lY#b`d# zA{$zY)}b|MIl`zAtwL9zO(>3Hs2goXJ*W?jp`9p&Mo>RWpj~JH?MC}C8bUkJ0gSf! zzA0KdAW^YoEUWPB3TkTUIh25oB$19|qx5@d#!Y#0YWbE=37DyXwF(WCW~t(yt<*B% za?Q-Vd1|qlm4LM)u|cS{Bcr+u2HH;MMYEJ%&Vv3Jd~1Ai+bqn&PR*q3u&LQlIX!Hq zoG@gOL1yG-c~^}kfpYqrrq$L-!st8W3_Mya4{#zs={*l0FK zDxJXfCr6;Rr+T5R#zvG^=V!vFRp3m>vgV^T2<@7op3$AL zk(s)oi7cANJJ;+^_Yd`E_vLf&Ab265E&D8jn z_fBJfGJaZJtDcn!O*wXL`4~ozWAqqCw_@}xMjyxM0gUd)=n;&*fYEIjJ%!O{F!~fm zcVhHOj2_15NsL~==sAqOkI`o_dJ&`hF!}*TPhj*kMxVy$^B8>zqfcP;IgFmc=!+P= zgwdBVdIh8N7`=+o%Xq^t@?0^{Wa7b|3(KCM>nGyf)QS{TG{2paj(xC?Y^Kq?CS1;M@X6`)NqjAd+GzA zRfoOaM8X@008t1&hMG{Kk=ed3?g2G8;JFM@GXoc~_l{8JYDAr!QE{J=#2xu+ZfYfL`T8XxxOVRf*x*Tmpm!Tx;LaWhc)QgT` zWJJSgA4WxpMT6*CjM69v9meP&MmJ-03r06#bPl6?F*=RWI7UY>%0<_pGZ@{C5r^)< z%TAc>@u9(-0MO&$y zKxO3hk_j9YW3wJpQa0!5821XU@c6b+x? z>SSD&=1kDlGCHHKW+Q187?vq(vXNAeBUq=5l@uI;DUmTmwaJbwBWq_TS{7CbO38*8 zr6w2eNTtVO{i!RdLf!Pbx8kB0+of9=WIzbjq7vjlPUJ=| zRD~*0H7Z4As2tUx3RH|l^c9T0j?wEFeHEkEF#0A&-^NITzJbwqFnSB4H!=DaMsHx0 zkKV@UYZ!eOvjY3KuZjq!14Dy}*lq?RcFP>%Uq<~jRJ(*DdC8H+ zASg{km)#aP(mFI4DW`GETn6EZAG^eLF-=NJ3y(cC8S|-=;&?swu+UF&By!c34jQLf z?P<6Ske5@Ein|ygo=V4uV(FL)m^IW>0Hh6wnf9(uNG(8A_cMLbkzPt(N?~C!M{`78h%^j#_a8Wbnwg z(Z1wBlJAN2r<2CMR3bSX8%*|(rbhddY0X$VIS?Cxj7tj;DMupJ{5Sp!e6YpFFdL4t zhy{TFt{xV292Ue3xWaHn;fk?dPn-o6gavs9t{&DGi^7#;{ow#yA-JM!!0T7bqcChR zl3;^TfYA_K5xBb9U?R>2lYmS5;0nMMRLcW0YI)2>Ef1@x<&hJ$JUF73$3Iw*P2uvx z6@V)QR}!uswmalwLD^cbQ;`y7E?C}KCzc_H*-3cfBir9Hm{fOWKYoONLTAV=K@9vD z&Vd;CIh7x{-K5qqE>d5ZD)~-=4D<;XsX6{ zS3~YB{L0CXFNX(P&$HMgC^I?)W!8qE%*@bb%dmnn6+@TZM+?f_3qhG*At-Yw1ZAEC z_A*`%y7w4klX%1oj24l>5Dx; z7-D>3#us6HQ9+q(q03e&1Z8%Gpv<5UlvxtG?D2O&nHGWljNco!+~&!@dpHD>I35sGJe2>8GnTFM|IgFtgWWD>8*y5{1|7l*0gsfD(EKA=C88H zRgTrQgkwU6Rm*i9G8Rh?G99awwh05N6rD-T_C9XM!@pfFlMA zL77Rw5rv%Gk{p?$!;!gY2xu#><23BX+{0zjIGNJe7Kj7XG zw>$2}Tn=SEnCyYTGmwqgk*HB}tX66Sq%l+yr<0&q7WzekB63j68?2yMmj%Uw%n`Ly zP)x-f(OEfSH4zlUu%H-!IWo(MBbF>dG4%?HIhX0)Ehtu7L9xsViuF}cEUdb06PTcw zR0YLsDk!E=K{0=-;&d>Ciw`A|Y<#F+7MRs>Y1~GPD`qmaS^zYvlumG z<=HpqNDk#q=pC z=1py4Vn|fcAOyv%DJZ5(K`~DXilI-JZPpSL%buWE?{wJ~bwM%LWvM2n-CfRMy*mDnO1?Y3fw#tmv-?dRS%lnl=VuClrz%aQC2lb ziGT>HGf-~Ju#|_;wn2)fmdKoHmaRZ4&|D&4WCg{LC@984UA6&Cm#u*7vIhxt*;W!k zF(L|zp-||N2OHJ0a+Xojgx--9yyV9xxUfSVVq)82|h*U%P^^7 zzMsrz(DWyPeI$m4lY{&K8OdY^V#A;x4TGKpYLpsWR}Kvgs0QdTWR&Kfmgc28lbd8S zAFD=-LGEXG#%g*P*op{DL240FN4ofR)e$q5D+ptOJZ3rIABc+P)l|`QA)d?Oa%_23 zNDUZ}|8iD2jzIp4Iu2-w+NaSGPP5>PtfYQ2Luq!{)1#p}7PVXn!}9bHb~u&f$>ff- zdRQ7f6o%!QA(F}`jL1`#*pZ=~Vpk8rT-WN^N6$3M@g|T*2|t&zhbRK8Y(nklBF!G5?QX4 z)NMCax>psAGA!KS2dqWZF)Xkb)=-KBLCEzuDXUuLxB=*SUS&s8ETphl9xucu<_lu^ z(b>!n|96cI&i50;FbaM{e4sF6Y`9ocLvTNb#0DZbc|olZ8=?^qM!miu_JTqN%0`{v z$NGYx5D5NoT_9ZN58wa>!P8e4_0|PKV$fgb4S4H99x({IN!VK#_G`f9^LXpL9xrwJ zf^}YhP!kN+K`#X~9_l2QCxAnmaDy)p0;MAyWI=%}iZp;e>5q6q5nmLTXT)FUZveF; z5&!~oq#*>dZ!j7FuI~v1ya7|BA?ovnfWJh1AQ$_hrf7o?L~USJevcRE{D27hgFaA) zLcS<;oMAvj0v_mcLHm#RNhF2|28u6`!x+nLo>bc{brW&m^_eSfx2MO=4tSTgJDt#-~{a=>IwOR45-bXT(74AzKUAZ zR9=umh%)WtynX>P7<>WF8|1tp&Kov)!=XA)oj<~PBZ4>L@vy#wtZgDE!5NBz)(tT` z{qVv-&|aQ-j{@AF4n zRg8+}qd?oSiVC+(R{l-PX`G$I7;X55_;jHlsMQWyWd(s@pth>jq|1U_lguDe?n(8! z%I=jiyi%#%RaDcHnu6qJ7{{DHGnzm{Sgvgx2o4@l{8$j^I3mzh zNR1@pgbQYMOVc|eZg8x>9}laBW5Czb>_~4nmsWT!VW=%~R$+`LI427Lc0h^0N)!g( zsG@j-UBwve0Lj^6Xav8O`pcG_);wBNLUW^5F(t7q6$GRj4BS%%c?q0QCDqTON9 zB#Jj2MT?8(0K!ZWzCW^zKgPzoM^rKTSvD%AH^g@&yHbgUZOPrFud+zUOdkY6I@zk( z&^J2J4|z7ocBcmUI55jJ3lHN22f|ofO(e3e)UZ~D4I{CgB6X9lN0S&#H;mBU#xUU| zG)!VBFEJEvNDd^4HL`cKZzLHTO*afCM^y7E|9QvRxk}cLLenMlB zagyjy(Ye!6gi?^usbQVu7#stUb;OkIA!PE?klFoRBgtN<4>X2?nbEYQdWV?4E-Jj) z$gP3gx`+_bMYTTrOi1#emIg?oig8M~bq0E#;L;{~rw=95q_mk-3`9nC3cA;^L{g+p zwqdw$*f$I7*Fr(svi$i_>;i6pV&zsiA);4h57NE}k`nL{>OUD2caVTG$9kLZi^& zhf8J;BC!_D7EGeW+sz|Mkm;%T*d?(_c4TZ2r&ZDron8X+_=X`poQ$Vp{Y?^9l^%)1 zTMQCVc#=l;lDs5N@*Z_M4cVO@l_g+}1SpS4j|~G0gUp5YHN2}GN?dB(L=%%30I36$ z?fU{%o>>rdMXB*;b#YAccHK|PXjx~Pw=s(aFf@pxzYHVDI5f1XNNhq^jI@*;;H>(_ z$!_ZC;&TB$(?v7yEEBs*|~Ek;s1%`C`h-okx^6{db{LEcPyPGOjSY+CzFZZ zu~Z^SVm4A#x*uvieJY>$M`Qg%=@b-re}4*^ay&^w*xku=wZc*5Ol6?}8t~8zCf zNzyOR{;q*Uu&XbY?wkEx3Wf46*Q}K3z8HwLl(_C0!KoGFQ0BbN%hQ@#^A(7+s5%wvT7(Tt48>f0ARNh_rBJDgr4oBGQ-?hY|vmNtGmd z8Ds%Wc}9`JSm=hdq$`pGc#y+V2{9v$nJ45jnL-L9uQ6v_nP>qsx(jkmO&kzllwl_N zA==N;d#1?^?HnWp*hPhwjE|Z%d75hdq_nHYMrcPe(Z%x@TPV=Qf4gRKmWm&~EW&^0 z^~3_u&^?sc-37H-q&{duNpr@P$u^4V85tTdXIx5{kzxjt=`^rw$i2KN{!C6$JSZT^ z6!7PqNxrEx!~MIvMu&1H`7#WQVx`{En&no)brNo@`wD0qwrr0=Vai65PghgK=#Wu{ z3L!TbkEeCymMOkLDBILPl7)UlJ2vrgVn#GKPYCHsTO^oN!XNb#Xl2EVkek#Jlw+@n=Ajbdv zX_!n=WQqF(@0*J78>c7)c~cbxrCIFKC@u$KlH zz%x7qHK?CHnLF95L~fu81l1iBsx0peR8*Up?9EOnsX|u{4JNHwZY6xW@Q>f8su0d_ zqVa;||3T`@obxJUEFMn|k9L8~GeoS0c~ktEwlCwA2|#&M{F!zggZ^k}M7F`^O!8$K z8(}KCY|fG~ubUJ{rixJ=OCCp}jV*r~CX?SZL^7~jv)mb3oZ?23J;@QvgfsJnQ?$9f zsoI^=IwXlAV+J=(?U99%q-1_EDUQse68}CwWa_**_q$F7{4 zK>@fxjrse2UGM4n*g#kJZauwccqI5hR|Cn=oN;A`4Gbm5`jh62E5joI0}3-y4Z28H zCGArYnGTw2ntFQAaBO+V!YIQm@uCj|k-mwyP(ciYQQ(6_*tSnaD3qYGYbN+O3v!5- zXthdp8yf9Ws;f22Jt0I;pyShE?*{M=^_4^ShFDaRgP-;`NzDNASAAzmHZ+0`?W z+-{WNM8n_N)t4Gg8)cYjG~gc?9WzKE8w={HK>``3kc=frkCYgSQ%ggdOUC*KbmW$4 z&&gPNXi!h@nJz^t5YqH56V552qz|!7I5P=JZin}b8YGbEKqar-b>&R*WjK$FB?5&t z%bm#(c}UhM!wkP5uh(U#Av~?*FHVgFweh?DS<6aRCqH;0ulug3j*p~S zpJY^2%Z9`}U{KP`8;R|7$#%8US@0QNKM}4B%qt|$*@Kj)$y=cc0e1RZXToQ{RSuu& zt+NDW@^CaZBGq!93Q_t=svti)l8g=T)Gn)%)IGywRgmAE9!(DD>0QBXAhrF&*-d6R z-)0o&5n!IDgK{(Y(2e24{ocgrp)Bv}yG6#scp0CHjD~g5fd^ezIzBX#G;~RmF*H<& zW@F!}E}<5J?%kuwG>BbL1*ZBH^{0Dis6QDS)WwGehU4iX2`HhJGxUa`3-plHSz(#^ z9+8=l88IR|kSG9C{R;o3>LZ&tQqCs-TB@Oo37pClpa$X~EzLI#qdZ@f386E3>Lzy1JfG zqA(8(#0C@ThS*5&*Z`T%)iN_Wllzl`Wk+Ntr1HcH{1=8UD3EIVR5+!SBqWE5n?qaB^oSSTjd?wR)xLGSbw6QXJEVrn4Lux}bBQ`s^hbY4~6WN)UjWzZwB zoz>Z%NxHN>TMWr4)sCs1i!{1sO~B14f2M)Z3D~V*R~oqYN{hJU|)0dn%p^ zbHwzbBe#rrM@DURbm&%L4gEvCDWcd&8gcGq?-VL!N?q<`Z|1##CVry~GaWPdrH;g$ zaeWZW1vgvB=G%3j^n9pZ@FI-mE5EGL48-E`bOF6*vO>0Is|JP=xdRgoKp?ccV;hvUP*6MpkV!cEb>ms7!j5BzZrMHt7;c7D;(2_Hge0eI` ztG1=OA?Z`s=}wse%nXf?`Q9QCLAnUz5r#qGB957s@sg>+){*4)u@n%|FX*Dney2_! zo|vMoRJn=i#2c-2i&}D;;3896l~adwIufP>Hv@M8{4DY72sN2^$XX~BvX+}D1;JVM z)*Le3bIYf6ugtSq^*WoCoMw~F%Fusbluo@a-%i5xI`UUSdYvfb+d0-|&9@V3j{Oc) zR8$J|;W>+0FALtMfejPkth3hrAz6saY;QBUP`3P$e{sy>gq#>kYU-=fvNV{olpfluBM-l36IPpR^r@GMj4BbbS>zVe2zkbF-O2reb6} zg2iUJp-ipK^1_1xM9%`vmo1NW6c&)P{1d$EV)oB)UCd?}+N@nLv{~C<=(6{{FizR< zLO*Gz3;m=mE)0|Rw$My$Y9T1QS?DKiW1-F3zruAf8&|k4X2%M{0hs4^O3fo^oUsx)dgsCR1-!F*=!r?T(Gmb!hT* zrL1N&v54$q7m#V=pf8irc3`q(Lhnp#t8|GJ;bh%obUyTqJUV;%Q)s?CXWWP|-Lt@g z$joxmR&*3&h7(g9p%7`9A9Wte`S^nQ^U12zGZ1Pt-UWBF$!xM%Kmfpk@Flo^1}>fM z2bk>5V1@%CtS4b6Bjg~~h=LGDxaB@JvrZ|CUnqUEx-S_UC2Nba`w4l$(hR(0^2#Mp zV?djSXQr%Pl9nuGSPogcB(GG$gOk<>Wi1R!j*!JcbhhU#D}+SFL1vN*a;DZoHfq78 zMr1~L37t(Y(ybwkG=nk45DKygkns9dPv!mVCHFyyC@@Sb$=ljm=rgoWkbG6&4R@9) zDN(B^iAb2Z(P$ub5|c}^a$QYaeDD@5U7?e0%75)+}ER5LN_Gqaj$VkOf*V(rqj zWlKD9q^I|j)#R%UGHWiOIcA}l1&C}N#n8$|7KMdw%YU`=5d9{DVGQBtz)5OYNeRo4 zT4u3mAz;CR8%PHSeV-sKChNN;i72J7>9M4z($M)WC5Z$zK6?ndLw zEW81yvhqgjn^<}yxuvx?THnOt8_6xNzVWkukB1Gw1x$(!!4-y!EEkD-JQuT`K@z7p zXdnGqOB*<mNZOV(7>jLcV`wgEY8TOGiwf$4mV)jR7~ONy{;NCqMP~~QQ{{B z$Cf~aY()&cXFF#2>12YbKernK-EJbU@I1M%T}x0Jg5vq`H&`Sj64J-&5(y%X48%sZ zB}YW?3=Q>%mJ8CA|XcJ!X z3?|E=vr2}ngH+MRVb3=iffHlk&P*M!j%8=7&TZyQ+qXA2Z(qAOSGW^->cd7g=1%ouQn;Xm}Z5qqnqlDKKlZ*<`iUt(x~&P6J;By$I=#1Q!*k*XkZt;NzFtP zP)TOjg4r$Sg%_}q=gw>r=Os~9>Q=QwgHmb0+l8Uw-6KS);7A86DE+NU>TY@3+iE5{ zTm2YxIRj+I^ayC18tS9#2$&to))Lf=n-Muplwpxp)FPLnJ5!!|mXAYAg~mf&e?QjsO?pjjuWLTya; zL)A|vMhDXUvE9iLZIV=Fd36f7dsI+sQ*kJN3eviy)XzvQFgdzAxr^jpn(vDxh>i`N zKW*!5-_TACTyfgW(>8EIR;J?V7}3l7L4NE{8vqG!B8_BZXlEM4ubrbq5G*J>6eKU; zm1NLaGcYtX+D91&J1{yteQa1QOCDtA5l@8=emDgcj2i~d#BK-V_Av;ad2pCX_g%zb zu8J^a$i*4PRN2wwFo-UY(d3pE$GQ`ALUfuL8&J!F4^QQu*y8nM*X3)Wtd9}#q?xQ% zR}oHK2$fieglOd^2uvCn|F{6c-+XsXqfBq z7q|ZQ0lfVXF!kFZ_yGGm{3rYhJC|&`v$f|8W|-z?jfNA92H*>YB_`v-&Y$3G9%Fjb zZhAaNW$^v@dSDcf;euj#S%V}ox!qS>q0x~3falh)Z|Ef51OFu|Hho4G*#%+yj(f4u zz;SN3)fV^yCcDSg!PVf^Oe~(oUf$c_ZvgSCAqZL!k+K*sxI(Nq6lJ^->?2|p=YxaX z{ERQi`1QnAbkRk2UD9%}t{zYr zpiXPLfOQVAvHvltfLB$L)i<=^rJ=@=DOJft1Hl1PZIE=cSU++14(-r&4~;_CVUqx9 zWVw=)_C>nxF{quRT=#A^e#9UUUh7OuT|Q7m=C5~UbRdH)IhM#!Y0Lt#-sF-SnP38G zuw+(v=4NS)23c#gWJFGTw*FX`7>VtqO}0BZx-*#^q_e5hQHIe&{ujs_mzZejGy_*O zA-C0mnoCIE#xOf*<=zpo22I2 zW!N_ z+bl4zIQ?zkyz{&ytJbZ0i@6!!gsCQYHZ&LvEiGnKFvx&Ny1DD>tJNw&4NbbOAwcw$ z^1$}1&f#EiKlEYO;fFBc09S^-$!CJuC5GbCdM51vX^skgYEX(Rl}%sctSAl2nrDOcnJoMj~S(njA`+%|5^USeIgmB!UCJC&mYZf29ws(4**uXkrJ1HyS7KW;z(qZyhX;GJ z%x;3xIK+%5tytoW!;>eB>nAP1oWV{s$5A8qa*SHvF+uOPMi!M z0Jl*AN2(l|J`vY8VgD-`nLHb}Ze+#@xF*F+=opzY#a2V*7Sjk>PXHB47y%KV%+M!G z96=vo)7RQHbd7;Yu@z1l`PYpm`v;Sw8X``mg;D5BE##Ias*Z{F;SgyJaikjv4``6P zap=tK#4wam$myWf#5@8GU7KxD6rwaYI%FChlDbY6bZ{1`qx6go#&ac00tjx<>u0PA zbSU2hw?Se|nm$gykrNmOq#qD$FqM521KSR0!*lXma!5rn7)Th@sOA9a5E({;T2S4p zXYdY&T6-4)jfqOVe-zuBpTRe)Ola@hm;e4=Eb4i#pg;?9PAjqB8Vp+zehOYNhL|yg zckJLma$mLP4F0PA28-KWRCJ!!6sfv>3J(pD9+KlUnwGYWNAXYaXYm*C35M1%jb`CO zx7%zYCWMa(rdgMrgmF`5 zO^-rqpliSJ%K!ZaZfUVv%odgrMM1q7VWQ@9T+8B?w(UEAj0LsXv<=}9{b_V&6A6@# zLShFkML)#sSAUCt2q)J6E&Fd0{C}Ig`}xKE{eu&;zxge(JbUZ!FwbK~+P9oc1#m$W|4B$MY9sQCBC5jdn}49G!XE6Y#_a!6 zAMv;u_TK*j9hU@=eamYw`@8=lVak@}3e2;xpZp^(D>F@uPEXX1Vh#I~|HWtV0F>_3 z`3*{~%jeir2bgM?iJ91iJ8Qpf`{$XWyG}8J?@xT-58BW#Es;Ovbw6K}c+T1LeD&b* zhGPYHs7xgNyNfXU^Z#K?CX5&2g*j&S`ad(!Jwu(HC=%^SzJ({utSm!EuZ=z4lj*>wQI+`jTzn@uIQQm5KnM!+1RtsTC{OYwuM3 zig}Fj%H<^dp2@%IU6nfY7Mpxd)AyQX;Q9Qav!&aQRgQhT@#gFCQ!AgL75Yl)U*xZh zXaA@CHE;ZSfc!grzVvVJVNb_Ud_CoY%aWrpqUm4Yzv084E)Rt2I61PY1e7CO!gPa{yAARn#?QqO?y5=D8G`Kn-$2Rzsbjxr+!FqT!w1q7)Ic- zD7nErCSyGc;zu$fJ2&3Vd}r&ll#+1tKDnV$;*tF_A@kqUX=ct1g-}W4pRxjrxGBgQ zUxpu- z;U{GHqzpeT!>`Ej8!~)DhToIn_htA48NMUKcV+mV4F6k#i{yM;WRanqFN=y~DCftb z1{pTW&?Cbp88*vM&YwlCGVGP1oF9vZWGH|4qU&UMgA8w!;c*#0B*Q0U_?!%1mEn0A z{*Mg*Cc#c5LxT)+Whj47XN?Ty^6m7?aIOp&$Z)X?*T`_K3@?-6W*H`BD1UFK{GFZK zWq7p=_sQ_64CU|cJT1dBGCU{4n`HQy44;?bmu2{M8Orsc^K}`1SB7%E=#=Y4=dWb= zXBqxgf{Pg$%I#^fTrUuli^ooD3|vVx&1GBONMXDP%iH!G9Os|M+vTx`QRG49M_b~utJ7%{a@22!*&_Y zmtlttzADMPuPtXW3jFMfTBrvF{$Wt!jb{`v3`0{>h6ManP#d+sl3e1HDk&-DcU zrTuN%{{FH|_zi{WRg_QuWyfu_ANb2vKc@BbFE8D5AB8{v3+11GdG}4qU;pyUCusis zDXjXplK|t|Uw<{1!rvUeio!oULCQU@ zQ#b69;MFA(eBw$9g@{#xKPjb9Ec`5mReye(!n!V%1YchwOzG6{lwR;ha!2Q4Wdx@< zbQ9E5p1)v^?~-J>l;6z-vjTZ`CIRS&+!WFg{{2#^m!Eh@_RBBj zzJIZ)R0x$+{va!`GLx4I_Cw~SN{&X6p477cKQ1TqOKV&N96mWl$ z{aOj|>WfTehERStpIvA11tngYk~u$13_l{tQNELxvymzz&&VX|ZaMThGn(?9^UqCw zqg=CvVmX>s5)=osXfE`f8A3Ug;!sv#jgra?_CuD2oSEVt*)M;mc;I4FsSqluJeU<| z;-(;H)X1jB_*9mMC>GW1)Q}JPtx6JKko~e=C%%+LbHQ&_2$hJwm=&1IO+j9ab|L;c z%R|!bWT%FF$ZzH4XcS#X<_%(YN-p@V3L&0COAh9OtxWOMOb(kALm@W>Ib&{3`EE^i zjFd3j5OLL4P5s0WVQudpif>yxl1#287Whsw4-bObSxgW?PnU;0#x7g~QZiCu4*&M6 zEb{qLlW|Zrq)MqqRWa3-0Q&)ssnX!;JQfT7by3aFI&wZ1;@E#R?#RVoxs&}{)zo-? zL*!C41^eE;Gh%--6ZUtv&V>EX8Dsdvn=@kncP8wA%^1Uf{ca}gA3r%0_J3zeFLU73 zbZl|M@xkindz{ZDik|Pz`%}d7%aHaD0sc=ufjM?L+MU&r0~dA85QaW{^$y(W(R z>$lis{$JVm9%K{w53=9;6&uS}3y#U@=ihp8hOgq^nknP?w_lnG`^}ju75|G@XTrYw z=uFu6&dr4V{nImH|1drstJS=*oj=;csP-SwOn*dm=e5%xDQNumSmm+prDuoopC7Qi z)~9(c$-Wg*tKPjSAKCMf>g{uEx>WV*jci}B>NDrqc(LkZZ?duC@HJ=g$MB2z+xXY` z0CNlTDdrXC`^4!Wk>CB&nbS4ThR}!MBd;+QQ+ZNsLap6Im>K%jWW^3-(t=3O6 z+3}VSxeH0WIf_+tImCED`zOIEa!jqv?5Lcf7#~5yQ~F}&@)-!&Z^KQL+}!aQ2vj6c zX0NIjvk9`8s3O=3%`?Oxej08D$*mcXA0R!rRp}G%fSWA1YaYuc$bN-QCiu||F=$Eu zl_R?q9fNRrlR^NR8OoF0m(N6S9o+1)`=*%)$hYUq?l)#4_%qxJB)3i$Mo}gCbeTZs zg_|tJ>E_K4gDwTP64||5CYaQ36Nf{_ADW5a3bLm5IDWc`7p`F;nbe z&#ZJx^jOf7odpMCBfIG=N#-MY3sT0ZhzvL(UeGdN?{<}R{OE;b48 zS9tHAM9tVRnIM|zia}qD_>ZE1t&>LV8l-*j5&Ms?skxJ11im$7W{L1oyeoh5yT(%V zRg2fGST6owcwN>!T@A{%#1u}ZOUHI36Km*t;?9KjpSmLEOes96Vd_4bI>`klzfGEe zxrXG{3c8605ilC0h1hE-;~*ug|0qgUC%r{#7KV@F4Ho$gS(U~(snTd=0FT_|aDiGC^u}l5Tfc#Nf=^{`uICXCloP#~O-1iZZfJ+CN2N4<#SPiwdW{Xdp@H zm&XQ@rT^6Zgl%%lrJa@>A4MJ&&G07K3KSbI`$&2QX<}eQ_gD&wVr;Ai9*8Edv zVYZ3#(pT4goR}z!m1L};`!mxB(hFnhQDuA(PqS7sR;1(c;%EPO&429q-q#1*uQ%;0 zGawXuY1H5UrME6!^80$tgT6&oKe+YFTectKE;ID!-)tDh2tD~7E;|KmuJGR^1?EYE z105F_82AiXL61242fb<}AT81%Ju=dLt1QThY$yliqC8|r1*i}ep*mEL8c-whATRPE zKMJ5A3ZXEHpeSlW&8P*dHKE72;n z8m&QV(K@sqZ9p5*CUhyf3~ff2qb;ZlZACHEjp8VQlBfsuqCS*DSDEG=zrH zb~J+0XcUd19cU-og?6JW(H?Xa+KaA6*Pwl9KN?2|&_Q$vU5lxD!$mMgY&!=O92L zcNd97`=9#7l6ni@}Ao5$;Jt8H(qo!1s^Yn$hB zdjj*oJtqJpZQgkSPg`wUO>J#kxV^Tqy{*R69bykR4xvR5h-$_38lnDNRjro67WBz~6|3Arje&z%HQy)?SEl5Nf zl#jlGUPE6+UqfF<-$1XUH_)5tE%Y|}Ci)ioHu?_wuJoNu_QBHo2aV!`(wlu|dueHD z4*k`Y5+{6Ot9uez^3@-MIa z_74rX@oyP}ZIj=h^hCU2x-2$2%d*(~Zy5JD$s`76ld}o^vCvuPoR}{FIG@KGsrLlx zeUY_ZUz0b`C!}q7RtzVb&`Pow#NJOJL}GzpFcN$hl`vaKh{O0K5=;G0B2`}CNpwvt>`TUjJx@x(PeSl*nEiu&AT~Uo z?rsAgcbVVc5cUQ9{%9!V4F|%Zx_WQ4AruJ*Js7Rsz zGsOXL6(QZjOlx-}97rPcG1mAnlTTix#}31j$m9>P_;sc@_$1;kV@;voAU4fhlL&{q zySrmAU^z)G#UTjq!2%?=C+YEZ2P2u}`f`FjxHL?@Cfb9ydt(t#ci8tNDh<8J*_FqE zoXcn6@orx%81TpP89?Vtp+&1MhvFYvui~Pr-&!EU$s+r;WRX35Io&A>KCds8NUkI` zWbFegbe!i3(Alwcav5ELpM&P_g&2O!|0i}fdFz~611YP}@AI594pKm+a%PWHd{s3J zuO`dL|G?f2E_r|TJJ5b`)3&$~bLGgf*|}7;W;6N6teZHL=6;JZ|2)vv-wz3HQMu|i zKZsZ}I8|J$cjrA-BivW82AgJ6*ysv`n&7 z-BuNdMxJ=Azm7qr*s*(9L-Os9$Qc`{Vl*3(FFm@u0f8WdPl#x@fc1!*gFv1^KSCa8 zbekBYQ2{%4ZFc4(@6y!Z{~+#5h+j+IN4DOoQFm{4mM4?R{m^EK!K!W7J3=ejJ81wh z?+W&nZz0pj^9=qx9!=9-E>}K*Q4HrKelD`xuzCx|CWcWn%y!g9cCNc0z0fZ0TSsTF z9>nZsY)XAYeJS1is{vc;qPSy2DlxiL;~N-CxKOvWThm>Lc?83Etw6j5t(s5vzs$oR zHI~(FZea0k2pz+?3JD?xMzS74Y8YIk(f*Y(YZ4HTeOKx zLS4Za{~aXG^$ha!=rlH82D!6`(bZzS5<{24{udSl7<~#Gx3HnI!I(h>xw16bGx`Yz zox@Qmq#bM<*(vNRI5$1Y8l4R0ui>6Z(_JwgWb2)eVKf)37IS=*MOKzS#sY^W8|u7= znIPgdx!ZFmCj_*YJR$^Oz4!wt=f=$}C za~{&2fu_M?0rFa-Gu{Q#`b!2^SKojN$C3J8v?fh9H}znl0ITjp=GIr3HnPJ+3&I;X z(~b&mJ5zaQR7F^!*5%_WV0$79iD) z7=2u2N$*DXy}v_Di`Mu%q-OkrIeiUM{~Ky2+uyy6G`~b>s{nF09%ns+!((R|^~VL@ zW@pVkjOtzv?-iI+$mjvBIU|uy7=p5Cw*%z%2M=E{(&>WTcVHaVRa9Bvk zskiETm`U{<(5WQ{?Z$uU)3U|p>rG7hTH1|`PzrlbvP}&889(D)Ea=V(T^ z2XQ5dyH_@_7aj|gr|V{ddZE_h<{rH~2+F&fmJOC3HO$`9tFnbWv#n=hXUAv6GzLJC zKof+^fzd7UqU3PP8k)dA0o^E}3Xm`5nbMp0we!2iti*Zdv%Fgy?`DSc6$V#iunoKi zg$OzNj8c4EeX$SFW@}h zvW@3m+1?XPFCtR`2y3KTZrvh4Ud4=fGEBTW)#h#*sA?g|Gr&G=G?-?Bucz(A0aKX$ zBpor*>StT`dP{-3A)Ias1Ih<|{E-yfu#kp?J9r~d--3pY84_)h)*-VXwo1C&Z9)zZ zPLPD3u@uyGw@oJ=l-Y2aROD``(cwpSqJ9L|0Mdc}WVd;+Wwn#;QDRrYDJm ze^5&X^Uk|XD?MgyqDXgXrZu7JaI`WSiju9<{ zBi#U(A$$_c%MEE5x_OQ3xuK!!7|A)qi(i$`qd_v%2v26k;~Izl8w5g!NK|XI#V#-({Vb6S_w`O zsMYoo&6Z4+b+a832>|^<2Gp2E=E>d$&-->S``aTtk7n>Dr;98%JHm?)oQ?|`JWty3 zXbry4G~d7oqeK4Ku8s!FxAM5U+0$P~FiobP%Y!G=FH3ASSvNXtRu4P6K%_F__kAuq zuQIyyyQjswe#%Tws|y0zij@J!(p2xcwp>)FTE=N8R+cvBij3~rMu%*7hkGe|3vWF6 zP%i2dwy+)7Gcnm2^o(-w5-rP0i?fs``RI}f$wuq56Y0*%4TSxaQCSFg7dpFd@R0Q& zeNk5E4xC2NQ{bEs94Xw9S?qQ{l}_HvOk3cGg5^u@vdS%@JY7^?2XwuJUn+)OAo{r- zvbCO)!yw5$?8|w_Q*T$tqEivf6BxQ$JJi(ft$cU2`|2!Ue#Hg>z#77iK^%-jkSW zG{&pzPE74Q1;Nn(XXc}y0UZgRB|U|_$b+1h1>-DI$}kH0?>~hP&B%7~_qPb2oQ(Bw#^jcaQrdc7`S)IEL9A1T~15K(CmG92FxFoC=RZdvXFcJf;ueTW??(&9Snz~^LkQ!+voT& zc(FVJlZQQURxZbN)QvZ=wUUno_=C_~%ok2Jejfg9r*A zj~t0Dl3D_fGv0OhP{+S#MDR(>7i4xV24_GMls$;HY6Mp0!8@9?J4m0ly+&UTuw8Xi z=KHE=Q>fY>t_=Fa?=zJ0YRPzaQ@^`9&(*)YLPoc%!d0bUOSiW@8Wy%x(20P^1y}*? zFa})X89;wmK{DHAwzjrlJf1kKmpl1Lv@^@qH4Jn!`dTK10n$OZs@&vHn%3h5b@J|to5FBPOzg+7qp0%02v2>}(@TjiFKneKm9$P+~9*N&n1*i-Fmc*GsgEHJk%U@?fcAesh#u2$Bt2`B zFg8DtQy0=v9%8=uoJ#sAiiw+jmOYyEb-K36%nk&pUg35h{RugwdjVbt@?Cj=z4ih@ z+QM8E7TH-Vz}Y>;K6)(?gsTy{0fZ$bunkZ@h$mRn^M#LO*QZ#Lk>)0@mdAXe^+lPHHC#Z^ZN%ah&;{k<*FLb1@U?X$ej@UP zATA;3I)9G)GM{h*klTo~7SV-N$%r=vm90SMQ-Z%TJ3QwC%q+7l`Nb>zF#@U(EMWv8 zhSsn~L%L&(KK5s(E4zX)_{DW)B1W1WlkR*-)P6%C&AWOxMBxp{bn zM&I#l6~43KPl5KN<X-^G;u(+y6Sj31ofWm*JjcXPX+gf}A~a0%O{V zFMZ}d4sK|p`O|uX`m33M&AC0R5C3$}wg(rk{eJ7{3D1wY?w38IQ2Ag|dZ_+yy3}P| zNcPEb5!m}b%5nZ`Usbi=Um2?k9qTFg?~~&uz^?F+9A`{8^ZZ4M8z$1F()B&n^F65w zD$fGOM;LK&z;*i@`5nfwY#mq4roi`RfBAnDTFwXC>{+nKo)Y&Mp)}G34JGdYZjpw* z&-)9vFr>bNR2BoAH+VL%4Fp?_-hWAz&;+)InP^UR12fdRF`R5JtQ{JacNXlWNhyab zdxnOSlGhd_rJA&7(AuHtbaPNm*1x4KC}(xJIuNXk1h*hTZ2)otqFd1Qavf40LHIJX zW@t*}Ld5u9?KqrP@h|kVkZ7qe5~gY!JY1aPLnXc7^7_Dx7;9*NT6U}>moikl1Fanz zBbg7cB!@_*WUncB`|xR)R($pTF`Z*TI1hOwPptyys8hu8Ey2vX!)1L@ff1fQrfyjKydq%rsgFJ7Bh*!oDH=M zmdDqK!Xm~Abg1K~d@Iy(OkN{;;)~uR@U>`b$pM@H1#l-i-r#{9@|Y-o2Q!T(<0BxR z9DWprcv3@22Sr3zr!t{4Kn9>vk;6&QU}a3`e|LsaIUS@ML7y=SP#6YMoQ|DB=H_CI(s=&?Bbjl4Ze%WJ+yFxWxfcwWh^_5bEL|zPm$jAQC|lXgubLF6J?{EMx4S;o z$vcJ$+Irqcc!i2GHS_{boBXIi>)6uCLgICVo-0s#o-nvj@A?X{KW-D)4?IVZpAc=q z0Zg9|$8H*GXBw;`K+$ExO35*ia_x$A0Cq>P1)Kg#zAX|vJ@&FoJ%e$C=C$YP? zI_jSScE0Ejk`Eq07LQ8zNH5eIQHq=8x_C>tVvl5fSohwOzDLSMPwH#^p=zJMGVFI! z+GUc22kApY^6>b0_XiSJHcl|5yT7G!kheL(CE)Jw`pohJW)5rd0dtZHK>S@vX&m!G z3c>mzec8*)tbL2R+uqUyFE2CSKBNp!WsZEd>Tp+?P(81t_Vx7ke_~3nHV{@VS7BG` z=em#EO09n#(YO0Ub`Lvv0O9V ziWqHO$k=puUq?5B(NGic`7QuaNT`MGm0OT_KXNSSgw+imLuKBE9QL`RfRCkwXC*ib zI+Mcd8_3Kt+)kv;HO92;z<4hRQJs$A&B7UlP+b2n)7ZhQ=+3?5qiEkyI(jZUF~?@qHKt>Qz9qk(tg%l->uU z)U$w|iUc8n@&c=od<|+%irtsmT|MWbLh*2f+3&ax-?l$4aX7jr8NuLTHM1+JM25A(fGK#_nPXadDA8z*y%<$!QiehU*Pp#RLg^|ipf54g5={-xU88*y!8_+I+bkR z7i(oyI$(!8ow_fcj_x3v8$5yL)|f9AbUFhq!HRaX+3AFkfKLM9{&YvfZYQ}x%x-uv z1NlIz%uQbN$lBV1QA!; z*mgmgp?hGVucavwjh%o!5nn4}Puf#)(}l@MEo3$&1GUrBo0CD*_PifWfpBFc7K_IG z{%F7#jRu3Ea(`82GJ>jy9J%#I0QGjwR(%Sx_F`CwaWBT{HpOa0PxdK|?AvDUCZF64M4Ra+qwHv-)X0Z?st5lUl^ z{U6_+wSE1P`l5_rEMJ+KQ$| z*+pR|C0Z3~3bfXV-e`2AkczAZ(!+bjG#|4f{RIBO2c^PRDDnGqa95-`91F*q79(#o zwispF{R@F^gR%5BNmjSPLVutt8gJe1aYeU54o*IY>m}HU;Zg$aNQlc>{%T>SKi=YR zK9$gME(vWzraPsf55lu0WgFYCfIOJpp?h66_Anm$sNY0JK;ae4K8hWcWgEEs<+=L) zSEORX9~BAbt6PSJgy-9c-LYj@G`PGNj-^62xchqAEny=V3}>3i7`5IA1zU@IQ<32D zg%lU($*1MXg(hYlHWa0o&on{32}%X=6ce0mqI$8NKAgw+?JtU6m-QK487Us=sh+IS z#U|4xU$i<9sto#GNH?WTo?^mgYdse)CJeeKcK5p{Z?(ZTGkqw}N^3zuv#~f9*Kygx z4&segxX^=NNiS;fnhvJ*kg&WgRYmpEI@~#tXX7Yx~ zx+)#T*@`y{Re-O9w9dA4X3Z{eqOU#D7bPO|pgCALB3*eMgfZ#NBqL^1UdCxF|FGf9 zbmg_Q0>AHMv+!t|Z{@(i@fx|?jxN;Ym%#LZ-QhVa&3tB>^e;e@!TKQxlQZc1keA(a zSenE0fSsM4Xd3+qOrn+sE=fFw2>(X%Zl^hoQ=HzHozinUE=8toP8fyAbxst^z|W7c zZpN0s1DrHM9B1VX*gY73iBT;g^;q{mZ1FND?2yPu2u=nm-$~LyZ(C}vH$toqk$q)3 zhFK$p&J461)X#W?R{hORW`MHSP8?us7aW=OFJSR&JE|37BSy~&FcXvy?C4|!k04ik zV$rce9I1yF;g~FW9ppU_pFx!UInx+Wbt_Vq2*P3ZwGEzR2w+zc4*|poou9uH?$XeS zF7z{kUv=~ZhjP-{E;S$70v@3GNQP|{S&b)WNE4lP%x@%?jzklImLVc7t3XA7?#22t zXBI>&{6?hF-P~s`(WktMhhmLuhhmM#Bfa5%c^5i3*th}fD^I{Y*w|g{obz1;^|?f_ zGa!ZN6%NhS{BF^;@o?PV(j4App*u`can|oYRcLqT(>uH(I(FnHU${CLs|3TQ<>8{Fz|^7(XHg! z)xi+^QBCnNy2k!2S{Z`V7&Ha)>?f zZ+gDm&u-cA#By!ktjErm-H!$s^REt9@#LoS<+Rm&u#mgHZG-F-DnYxIc)HqFIF-+= z;xk0ZV=%}e{-cy^T($x5tz7_m)+|&jGN+EGU-FmXvh1okn8|X&rqwsVt>A0Nbz?iExj5Em$Y# zt)aEb^=m&`^Gg67JP{<3^c91t`6M3J+G!B0I&k|GEkeJwY4Oa%D0mjp# z`y{5Bu*b4bMQ~3T8kT!7Yaa=WwTGe65PulytmE>|7GT8P-_@3|!RF*3DE9PZh_NHe zgCDK?G2(vdX9y^^aOzQ4vyL`0)KZEfe^HA6}r1FZq@b+>gn@$R&wN_aqbnS;oDyrT6`bp9K>izIXF45yru38%21 zcThgoJZMQ~W1S4pf(qJux5MW7TtMRz-`^p9rHSkA-$PeQ()$V43}t7%1Jn7=$Q9yA zK$R=lBiq25E4bdx6$&@`s>95ESNU=UC;kr3;c}9ZDDaQ~el81~jo@@d^94dh@Wjs4h!bJ(jCjC6J5Iq7eO|CS1@A|iPjNjOtY%xnAF2$5qE5kSL^4MyIcfkj zNzi-iWNwKbkPH>7LS*~kYw48(G^jIV;d%)^khiBaD6Vi$eO^}G;O^|+DebbZY)A>R zQ&OVoa51VzV(t;XmWPxmyE0sfI$x?cqQj%W70*y6pTa)Lkd?;Ez6sOk1SMLjR5+SG zmpO*)LFNj@AMfe72=S48lT|JgT>~^%S(sm5f=1QNE=IQCvpj_)mlmURBgPsNm%74J zRXg<|tWWnN+M+TiS7XKxn3Pf2)pHcdW$xj2_1UFKJluM_>Z-b36}@lKOGMYB?5aen z{n5&Z-+zhd92AC>nqet$e`6mW1wcU}-ljSi&j6GGiV4%dSparghFD;hNth@?CYZmn zz#>aLncH@OMP6tbKY^LCWNOX1v;c+8b4VeoTb-S(5C6ULBWVLrekdZhC(0P)* z^Eb1XD z!2~3o3StnW6ESSJ!Kt|3$Ul2eDQ)ol3yDVo%0+MyhAN=9D)Yt7p!`#(r^=orlJjC^ znIQd5(YwAE=xX^Q`n4?^K5}F?t`v)Uny1?74>oG69Zv$i@g;SL&$3*$jSS_1%|ke$ z=~I3tL)h%xeFGn#w;wVQ>;a;$JkG#os;19*kl=ox58Gbymk;)2*VxlTI z0`Rt-zL17L3~}Ne@U#C_`h6j+5I@i-)6m&NaTlATmPcCN5y+r=h!_ z4GmYOg9Xq$per0CtNeb4Yv2?I?n)8(F-}iQ@By%lafY*Qw!VVswHc0D_G7|tqJ=@` z?_;qyjYO;W5wg4M#Ti_Od_}cO%)Jl<`3P;5whtE`cPsFBNjOqbY^v5P(4C4`7@^Wn zRl9fxFiwM>gv_p2RB54%-^(E7SS^v|m9jVslrK~|O#_Qf(PMVS;!|W-rZ3?04GL1W zhVEBTzij;)%oiy1NJSLyG)T;!puD6}#(^?>7Af>)6~RA%W+5O8ky@sT8HnV8oQ@!z z1$$I_ivp<43SrIqtfqa>J_KoJVLC}g5;CC&0e#798PFJHZ^KzIIg_u7ISBr)q7pEl zhg>Z#lNqiD?Hvt$q_BM@T`SP*0nwL1pk3gCt#e`hf-L)n*NKE6nj$Z#6MCV^OWpj9u}F<5`+m4l&P z5|-o~YbgBFGRy@ky$&JzY4&?V3PsGuSh#H6k?#6@p`2IGFq^NsS+0v!Mj{cFE|m2< z>-J@|ER>B4n2W{tNOvlsrPHKrF;83)@0#P+hq74?7wqn0o2_RuY~Gi~^0rHEPlL(C z9J4(!Jd0&oo?eNa^hyHQCrMscQd*%lcXdFJYPllwrwO(ZpRe5al&&vt&Y#3XccC;P zSGIL7$wR-Gm|1F-biB@b&c3vj=l3V9T#%0%bohzvf`f8YWCYJz8NLqmF6qhUIeF5v z^e~>1G84J`x-+$5sVE(2Un!r46(xONDoTNG^lsSPGc?lvH&ifxfnVC6fbuZgR7i9e z&=E>kN{77oOvbRtF>1 zzCdM_FAOw?zLA-Oe^w<^7Rtxs-()abksXwqWotfQ=1k18u*r&QGUO{|aha9Ak^!cr zX6Va@Z<&b#>j*3TF%!h|xnaWFKw-b*V;N`db){1w0AAa7#qq^U;$7< z=ToE?xq1+-LjtO1W}+CWX-K{;gJMe25rB`#5`X8BGP=NuD5A%6Q*unY9L|Q@0UAZ< z&w81`44zz`tZ$)tFd5M6n3hlvy%5sqEIRnSJgShc%C^uYS%c>n1P71JylSY?PW5q_ zw!^Z{I90eoQEPynlqI3V^tC?beteZN{|&sdK)xa4m7xKC6(gDZ8MNz@`YL?W<4dZ& z>bxv;Z*DDfLY{3d@sBjA5YShGxJQJ|n4Lahbq*YBb@w!XTaLOag=G>>%f^S52(M^8 z@kMOyFN)7E5z^r4udlr{tT#)?h?aU)FNqiElybTc&Q zjpvx)I9aH*(KDf1n1m=}At)ELJY;K>G0j2EbQ7Q>dzw4DNAk4(B~8l<;fo@2e;%#I zHgp`|FMP^qEMx$6qcnVMu2z6ZXD&(uIu>UMCxPiDJ zw+ra8QXzZ15M9UveCu-;bx3rEID(`LrUwO*4zyfA%mQic68;7IyA#V|qPQ2+b70Aw z9!4;`({tD-FZZ=A>Zr~#S!7zSwBhZ@*>efdU3k5C659;P2{c{Hc@y@e}cRKtIK+(A#;l8k;*iIzA6>uI!5Uw==s} z8FsiE7n?)$6m=Q>8(8Ua=%U*8M8~2Z97+SCvxLR;SR~ahX$d#3&Zb9_DfLFV&7P?Z zo?+KC*%V}`7{{oI;+!;@zF~M0<9nHv;9WI`zM6k1w+=(p)kx#$?eB^*l5ET+cEVoK z2!W@nx02Z?iIyci5V^)6n2cn{;8z%;{K+-fo6fau1PoT)4QX9Hi{oK`pz&Tn>>S?C z(B)ysRUSt^`A(oMX!Gh6r8owiL9Pcn9j$8Y>s{Q~R!64L^KtGgO`R?MjZOW%i5_O! zA0n>ucgSJ%5*S6FLj&x6OS&e^CS*C@4D3{|mZnPNTtb7W-*N@eT6Ee~`=$Zcp>^Vw zK*yug(OnAtQ0S8vsc?ltqiA3TZ(4plUJe_9deBMcZVrruSNN;VTTM12gBV z8V!qIidLZH?{qKk*yVIICS;{fWNT}&qw_-Wv5WR#8e6@+^i_3$zi<{_)ts@b(?`y(p0X>9vEjRx?Qz)wOVfCiEWwthw{TU(X;{v246=wUV` z(V)`vNvCuv&}y`PA#)vxwq>okN~X-tV`p+Np4{2h-p}0cwPb)TQsbfZoy@%T_Vt9= zHyQhKLt`Ho7RK9G;1^_j&qctt>=~}cYt%I)ir_M!W6*lKLs;$Y?Hq|#c{`f#&+pe0 zn}8XF)wL~+y=|FA%3K9HOz2OMxOMv3h@;9Aeerbqp>ljpUt7x-w5pENwO_N*)dHZUvafH!1L8H%Xw0;~kSy1X zUvVnE($O!4khdiqK&KqRr_L|JbWz$O(U0JAi;4ZR^CaVpzJN|0!@T?sTT@eKXL}<4 zL^fTmHi%V-{*im)Rjq7qF{aqvcJHWu`2wKF;Z6O6O^uXOoMJnFINdFT-I>yqi7$^E< ze3m475j|2^gey>EGXtuPH<(wN*j9XwT|j0QdfPf`^qS_*mcOYh$XKKrd*tMWTpjFh ztVOQCDsj0`hh$?vZE^)`(dqo3GwC0~ILnd$(>@g3Cb?mLo`Y}V;k{GgduKkv7 zm-$eZE@e_X;rL`a;Cf&uP8bFBQs5quUIym1L*|n$&g+;<8iPvkEW~csrIzt(o{q;T zS07%L+#dtSFHUd;6iCX7IN3XimjcP&yf~HIRvE`=Ezk?d1e7bVjUaIU8x_=xcsk@N zF@$EYpV9V$Fa>2J_K^kLv_{b>oA@c@#;gmk5sa@trO`;fi=j2h`0`U~y5q}3Xbry! zpw&4&mrJxpV|cDcJ8H&a_HJhXXoYNd`HRspY%@@{{q`b;$t&Z{&55qw#zY4@gQuEl zv(l4Vd#A5XiG7PrD>4?3M}o0}*1ycGI47Hi$gM~#P%Tm}2ewq!8Kx!7aED=E*TG#9 zoGDTtI!Q3>!1~A8*Kvo{%Mo7N6pAZA}yD;0N^#TDQ78Vd!~LN@GOGWx$isz zubS0!Sa)}4e-R!j@>5tKEuIgOW#*s)*&k>bV>FToF ztoEd%fLaT^CVwTaLdngth8c)eV0`GB89deXQFDKQ!DVCV3@`)TJYn{~#O26v4XbLH zllrFkMAwp|3;MlFIv>?n!36?+E$P{J;(Fd$yug zwSB#+Gg)e{*K13_>#t^ivlZ>_+ssh=6HMiww!(#iEz?^&sfsg(zlxQ zL*>vTwLR=8gmJK-kWS8A0b!&XJ8?DJa!V9BQEz~>J!uERv}91_U?`S5%s^TG2LqKj z0FN;s(C36R_M@>~;-SEzAIukmx2I<_Ocfpkwtx(ib}kUUUJ7~_UyJBAGy!R-#^6oq z-rmI?wE8*&Jo4cX9cN?uZ#;=zpnQ|@3sukMJF=5%HRt+Kd1Sq|ZUYM)L>q+$G?j1fSsEpH&FU27{Y~p%l=}R!KK5IXl2rNuB}WcYUl7>6`4t0&RX(|JP%RpsvFHds%0=J(@LMBmC^-N;va+r6fKZU<)J z)uXR!0!cY$?G09rMw?ZlI0`f2u}O+8DPH(8u$2lon*ZR5YQ?<+@} zI5K5tv-4BjuNud@uCcqB`x{R`N?>AunYE3L+<h*1n9M z4DBXr%rpn`T)cxXAzWnbWJ>tg$to}b&ly@zq0=5`)juk0#w&EV5U%1kHGYeAsz zpjFb%u&JlBwRd^EJ24HNVZH%qJzCqzWu-*-rTBFAIz*2^rU-ney^R~vv>Fs(3v!)>&Kud#X!wZo0>g%EL#xZX6Zd(khb~TH;4@AAoL6i^t7i1~ z^d{12e-h&lH1<|7B(TN2CW$`R)2(Kmj;JnSx4GEIHm7+tvynB8i52$&L~z$d$z z*&jn|^*%AcesRaqkySOl@kLK620597SFKEy2IN=K2J=j_m{ol1#)~jG`TTc&zGc6r!fSwN%ghv@fN}8<;LFO0! zjE>IUcx!K>JAmpqpRogd5-nWE9&Jjrc6P4?@hL>lgEoIpN1GLiXLDj+jjAv=akFq{ z4SRSRUc0)-xH7%v=p=0HueF`Y)+2WaCneqWDsON9(Rc;>*NxVA+B^GYdXv!8*vpLL zqGGga^oqu|yOjytRTSEy zL?_}tTc2_HS9!bJM@!2&nqW^mdO)Nxse1-TFbtw$h0^26G9UZP*s=rqvTG>qAVZFj z{$v`U-QqtMIEHM%1II4sn${XZKhhR)Y;q>h`%oLlCby%m zU1>bK>%b<_$-0na+Iq5<;|Fa5TNHiwDaj5Od!4qGPMA3-v81d0YR7J0^?oszE2RwD zclPiYS$liiB8DOpoaK1Cd5qV9h>gugGZk-pXXgohT{S&x()?prt{fp23=G_gjxkzZ zu#@SAO#{3%q@}0#7C67lNXF>wUY|~nLM}1~?Sh`JM51L8JE@7vjzq6_2Gmz}E$*se z>~1v5hffg1*fmEU=I-jYGoZK6>3DEw(&vQHO3U?-viLW^%H5EZq?ozx;G%k>MW@db z_imZ}u9nW`%EXcc?{UHqBwMze(i_vv^VG z*uy(z*@+*3HSB=f84g@@oJ=2qt7;fI>_gWGuV^$b7M`6^quUlyl;8|jTF*y}hzzsXHUXr6QW;+4IN6Y+*osh3a|y$3FHb^d`% zYFql6PY|GBQRi>Cq-N=K^l0zc#f`;n@v+MjO=FOAMmxi!tFZ^>N^mN#iKS;kusOk{ zgT~f0+J#+gq14oI!}p$>P8HqEj>2+lQ%?_LwM{n)Kg#T0FI$D)ct^aw|HMS);@&0g zH7$=KdJl5KML^ECGw;_64_XWk$^*w9`n+&7y&lTwOTrvHMpb@P>Ag@4Cu91n+9Zxq z>4R_y))jg;jD(XVd^pfclo9w3gr8LD8Bkoq7T&Y!9DFC#uuJea_Ri}tOpy4&A1(!% zTQr|!rq{qoI*~L;s!X@BkC~15)ALZ!-cn>^7_XTATbyE9rHijodMBJGRM_YpunzA` zXOwmw1H>1xSF8|f;0P1l1S{lXjTzV#(q1bwx5addFomI77*|f8*NR{+razh{!hD4@ zE%{wwJ{%qzR+v-fUU{$1Cp^amZ;h9z20FePlYUlLcvoX)Nazi+is3%VMdk#2z1Jf#4gW!$ji?YytEM(A`i(ze7@>slVbx$j;q+J!C|_W;1M%bD12#)1uBn?n{cDhPe+i~bP?fY2{!D9a zZ3;v~t-gw=uepUM&P6KXO~FV-qA3<=@;9|Mg(E>3x%?|g6pjRPB3kN;2K;`1{A_Tw zp3RQFnFlj!7ghyYTN1I2Fd`hyL4&9&T2&E@1>((B{z#-M(vpJ!1`%NZst`-`9HJ#t zpCgixEA5gF)edXmE~z;=0A;+i2eDVwv!hG;OrtSbvhvLg<9WqqIK&>mv{;|jAz^|8$DeiBY`~3lXj|Ypbu1ldX#$A?EW5xsj|+q9;J@( z`eR3_65FBlC{@O8ev^yC{6?30M0iLM8zuONr~kk*#GJGy9i{Rs|8Ie;hML*4C$DFF zpb_vi0j`nIGJqzTPxHP4XqS{j)&rTR(Zz}bZW1wD-JK${wgea_JcGUM1<)+W$9BnE z8vRp}*zdyw0AoO8|Nd(1gENffI>7Av7c!O`6#BF%@ulAly7hO&9#rKf1rCd!)WOb+XhcytZ3W>1FZ=Zy;PI8&|7LHm+8gY+S7yB^v<2BZzoC zp(99+G*X7e61j_zHGoA*SL*ady1CG*?M3tU=yOHa-}j(Bxiwr z?i8)2qP{JI%6jl-fuEJLdD+Jp%XYD`f+rd4x{|-S5WYX#fvP{Ayi@pa^KS zC`suU6iG|RC)YC|!THQ&iJk@$oQBxV;dGpW_24H!dV$s`71rMv*RYxNpdZLdJXDWP zK$eXJ(hyyNbSMFB1)}2>njYLpviyv1NEm)Wa4f&1I=qOrwLr(Jsvg{p>FSBD(VYPa(EIE{(<{!ly`=N~v8*q4u_^R-c?W3?wz`5Y5E z+dI4c_Juxoh1>62ukj@O?nOx*L_BNViu@GpJDYwg)2!@)fg6CNs ziCN+xiu*!=3ST4`X>JXKTAHfd6iFv%s)fwXNN9%uABgaUKtB+5STB&LgqbZ(LBG$G z=?u>j*;&xxa0x#t&=Vw?o&~PjL_8FE3wbM|XF(R@wU{~YHvyTD4jv{9*}$0=jz;f|x18in?a@rrEM%8A+e8TR+&J5$y2 zS!>d^%OhODT!%~=fIcG2qyXqcaxP&m(&ey;TVx0lI*kyzT10#N}I(D+TEZT77$x-drr<`>pMSpE|hHpPOWpzm`zz!s&;Lf7lM{9GaXR!R|} zmkVjq+z|_#Tca&(J(_BKi8$YoD-g~>>gC)&pi6<43YqW>FOn-t#+Nkk&lk?!x)G!?-*6S@p2U@KjwRa4zjD6B0qKW8^D z$lDmGtO`~|{89f1S=ZINaue~-FZjSxSTG$jO zrGr9KJQ%LzZF2KYcNW7%8Ri6#>MP}K=LJ@qT zS|YHATz5vJEzuaWmK9O{f;PjdJ|dx;__Mx+&GBaD8|!4_-MV2HH;TpvV%zpTC1+tv zAmj@t<|~1waN;G|A`u$G0PFc1La+xhrq&d1scLC%I*+i2GT{pT8Crt`R)k6sush>9 zSk>WeU`TXkQ#{sEwZcwsM*LV9g$gq}&7O$+{8h20P%d&*Rp!!Lkd0g0jcn=N2s9UE zFgtDe4Z}o0p9dUMZVjMbg(i?FkJsvb3?_uKGiWb1qpSQG)lYzHKvYK2ugdEj{`a!! z3OS5D3O&nS=kZ59iu_nPez{!wy?hJ<2p8n&k?e4jkL~MF41sIGkLAbEQ|zNM9H-bH zJ)9SB@E#VsET`H>ctgIOvLq}3x>GhT)lNBAh%ks{pAX%HEEhz!I-4w%p)bscdo9qQ zV4TDPL6mQNy%HMU62l<1G_do!{y zdx%~kX2a`dyk21UD&a|iTq;Yxb{awS8tu7&J(wN&}H z(86%yWXT)ze-W_C=5%V4qYImZE&gC|u8lo)o|QQgT^gxygRjdEn3eR-aAhbI3n=Ll zrSjmyWJOf5m2vnpznrl1)SK6yJ=_1v4;1OcDE#!pr%XRO>lWKS2A}iaGWgKJeXSW` z-u*u?co%2zr^BBAiou8e6N4Z7Uo-gc0Ua}p!C#SN@T(vLeCWwI$IJIr-RDq06iT-Ucc`Q zz;|-iP*Jyt9r)>>rG+m<)Q)OkJ-k1hO0=AV;7^1V1oa4QKyc0w$Ygh7n4W`l%XxSP zW8M`i7NG<13g);PIUcnz7@CV{zu^c~Gr1~R6~t)FYEJ9fW?K!loXxi(c%OR@ z83bt;=$1A_ekXS}^;aYXjDA^Ab^k)bS=U0wjF^`_A2HTdfY(4xTcYPgB)R-2l9<#_ z{!9z|o8wgpZipFb{SU1F0;KyfVwMb!Lez}HI~hcd#{*5A6ve6-GKGUk{+WdRvO#0h z?!atUyOSLMNJ;SjCyxK5q_>rcj>J4^4;U0b@_%IbvkzqWMFzvKHyHjLutym;ngi7a zuP;83*E3uj3i}x>j|PL0D!+krqY(yus{+G`{l}6%07+usEgwYeJ!p^p|48iPf;7&c z^=Is(^^xJU{=UD``p4z}1Fio-KA6^*Am<~>%SIn3-o_~FR_EgiL)?!mhDm!`F-+R? zieb`TQn*Q@&kIx3AB;X_E%+gQ$hOx<2{7VR#f>TS^Nqt z>k)IwRL4bhhN?2oN7xcy1+g7$B}RNrF}ARRk3OHZnN85j*9LXlbH3987S~Oy+S2U`qiC#>dxV%f$#nh+fQmQ8-c+4>o@y2Lka# zHev+rAZKI{v^LJC3>(2PUmnSXDJsb$OG61pjv_7D$R6WVEXKA#g+JU9^v7F+&5=ke zf6sXSt*Dmg8bJ<%7cf638^KDum63M8Ll*Ou0|;8bvNTE1e4DJV9zf3uWz?d;A}hUL z8RzwfE(b?(D11581;XKS0oaSmmLPX1{3v9^9tGrrCg$(_5nmy=W9*+YKcjVPLgj%# zxZEH76nM}uA3#P~(J62)d)&uf?ekB80)O-f7!?Q{0ZsmhzdRBg!Rv62VaF7ROo5(Y zxu1P*)j2~C2K|$vJ5V0;mxmZ-WDErgA(P$f2}a68k@DcLP!O!z2&Ez4Bv|JUl>4j7 zgMmr>h4a|EL*Yqqsy|Xy?kf*QnH3waso$!Dra-ikZNX5OQO=Oh#~gR4ydqdx74wI_ zQxPh{IkA@!eNQW=6ST)O922xhXZLltHOG77SyyL|*G725{_&cDfa;Q9wN^6_P>t5g zvClY-LW_t`5^bI@Re+KB6KFyP44XJbvj)2H#rq0QwI;CSD}&gOpvHA zO_!ZIEx}&)kOZYpdYe;E_a{tjg;l~z#e6mDnmv1R#f0{@GJNgqRFu48?k&_+aR<_1 zBjBlo#@O4Z5oW+G*?Pc_@kW4eP2y+_*IKx9IZEYtu1nMDXpHEf8S8;9gi#TA4A5eL z8G_npIJ!R2>17DhS!q^15CO6d)Sm&q0<;<6XQ1oB2~UDKAG428^*}e5-kASF>?RLB z#g+m1fXD4BW~btIPYSXg_=x*R1lRDJJXu0dB&q_TrsgmgQCfa8@5W7uM4+OX0Wx2t z*GXenhFU(Vrz&nr7|t1cJLwG-}odg27lc6pWOlqo_GIpjc_lT#mW+dI`%s~Fk=3kaS7Dln|zkmxe@?2%wy#-2^5&d(i z4eW@J#ZI6I*K@Gj@Z1P<*9baU8A)1XGg1Z#qqo7RuPPddRRto^V0o|-6pbDw7qE4& z*j+OlJn^39E$KMTMcZ6;^g}0?wr-YpBz)m`yg9(WvnlM~i5Y3$$9g$)XS6r#lgH)S z8M9it`X7>cBWt=%&RyzjNia(mdLGE9Cd>0+{nSK93KJJL$9%2+)@-Y{Da;vZfZ&k= z=mL9=&@r-;%gs-UO)c?IG}iP9GFYqO#l$B?%YD3oF}+Waq>?iDSzwE_GZAWvG`HTw zyNw%r;cYG|5?Cu6r>4$W@;(Oc!m)~?nx=5@Pb?T5d5)ZXHCy;_y@5`@koodI+qmTH zT}#=UfWoH0O$pydc2W$=T-y{5F%KSk0t*}L=8#CM*s;u2xe2%!MCL5Zj6GC^GtmM>ayd^7 z#Dnn@1oqxcX^YBkM$ikCkuLv5IvO-H2p0-Pt0HVi#sbkuxQZ)ZoF)0A7wQ6gkx~Gc zl+eGGs4oA-${6}J-6w&KC~>VEU6QY4Dm#KryjcW;u~pILNVYgA#A6Ht2g6M*zLscn zRlGHjb(J%(*c(1J(vLLgTN;-9&$x@cw^ zY>;@jcSWpiw z=D`hgc^-!~>_cxbK8xMC3=A_el}jjHVRp*c+c!dC+}AG{Pq>U@Sj4q*3tMfM!v3Wh zk2F;=1CWE9O}nY_@Q-}0>;A=v8`R9y;nG`>E6!F@AlkGMys?%XlmV~sucKyLv@22- zXsxPhz8N`Vm)Q8vl4cUv$jt%V%%y??IgIOl>_okY0SaJNH-oB3+X zVGbqCR!|OdHL(xZ!|Q<`^WBJj+(=l4$rE^KqBRg;@4lHo#$J)MI>(azu4QS9KOT=o zLWZuN38M&q!9`%`RpT*tEc`$skwA0P6@ef-*MC@;#fvmYE5fb8XuKud)EWtwj|4re zbN>Uqyn-xsn&0DX=u_63ZL4@N6l?bT!Ir)XJNi+^wX9cC*V2lHAnH-(k*>fEIb+cExsG6e8NEKY+8YX8pIhq*2aW>smuY{h z2W!oN%2D*Y6t?)$wqUZVWw9794yr!&SZ1Zkw3(Z*gVk zSalr0omI4Ftf@X!8Hk1ETeK*oS1%unj!DBWX76uT@sEJpQ@*DPSt7HHgsEG`qD`4J z1QPnUE*>k4=xY1MBl#kAygSNQhn#omhiSGL8I--Ohz`B^o#&`9xP3EJ?YH=Wwg6C+4N+4Y9NKtvh+3! zDg!?L=HqdYrSK-CA4hBrr8PrMNN0=eX#MlDpe)kO^LC6W&}a@R=xci&3D-wpqpqD$ zW6V(bFk+j%Ba-Sn8jnZ9zF3qwuz1s9)w>v!O0-r4gNYcUx{+9Oq=li$^GjN;)_gDrKGgUv}Er zr$L1(gTc_jopz)l(C?lw_pp5}cKpc}JB7T(PGzdajt{WWV&_^wh5LHr?#kZRWoKn_ zeg&_+;=`N{(IR)YAxLDyFKBp&l4P6Q0HeOMVVCJYHz;A=&jF5s*|34PC*ktf0iAM( z`jhZQwglovmz{&U9l zZ{FAZ`V5R8LCUS*>Uj<2+6Ec`ZZcZze1m?F4%uSoc3f}tj(Gi$ZFB;EZKG2=)JEq% zNOrbfKY02KoZoup`zS47aqz7?OxZB4u(HH_{c+78z#7Lc!Mf zeG>hcj9Hijh947W_+zqL{0o?Tfv)^RqF2ctSNJN~v<}ql*zoM?aMMeDUavvY&}vf z?`1m@r?Z__P`4ria<%N3FbifGJ!@+uu|W_z0G|U(nZ4xu{W;)`PF|3Bc|Tj$U9xy8 zz>RXKr#XH;h_fKoLFQ>$Z*P(rF|e;ZUXg#6-QAsUDqO8PMXBQ*$oERZH((4@yUZA< z7V!B_0HFziq`DI;PE>e9Tm*jtd@mhm^sM?F>~k|1V*+1Cd`X+UslhYeXkX(%2ps`d z9od@v!2B+?quguvw_cfv`1G<3U^Jh#sPG}sQ3yykq9YOE?J>%b%U_0Mp=jUOG^)V} zti1^0(@47&TkZz;Zx7d7a*gL&3E{K z*=i9?{>@=_vMJ3w7}5aUrt%gVm*C+oGJk{?e-uo~TKF6q2?MhY3--*>6L?mPj zI*?R~hQ_G9rx;_@ijh?x_yi9dc=r>m8R`}m*MQO7O~4>uX8k|Nc-|{)0Q0stlaO=% zOjwrcC$yRYCrnqH<_i%_*O|P@L1VI6X%waPCU9W7RYrATc9@Gy=voXrHMEuY(xNAt zG~r}H9&5(mAv)G94{za-;PcMzGFznW(3VVeejLnZGd&I?REueb*$N}g@Eg#VOxlj& zzA8+VLpZAfnG$8plLpO?8PappG8hyNQU|gwwXP&eiLWYr?0t~YmZ`&OX4EgqPnnmx zlM-fB-{3a#Lfn(zlyNQ4Oa+T~QCh=xy9L8F7;PA8W~n@fX{oZBX38bPcoCKgC|88< zMQNl$UJ~fXl0%>KrZADu2KY)M-4gy^= z@CJ}5M$}Ib`bD5I`5x6J(-z4>ud%1PKfZ;OIfAr6N_E#0?eLBrUtp)%axt7q%HW2zd-hHSBLRSfJ zyTJPg)i^B!0&SCnLQtX+$3%B9bPw(3`8A2SZg~Mk*vqXS#p^xGE3G@85&EV zm{JqY=F9X*S)ozT(2GdiCRBE{;S6dK{3(QY3R_GfI57>Frl`LVdN{GrUkIk-2tC$7 zT1RX2g7h5Q!0{se6$gcn5xbe#l#Dh`)r4R1UsDx-#iP8Ds$a3TX(;OYD|X29v1N`~ zYLIz%;MYYs7t3QsSDzx(Tc3Wb=G@yQ50O|%WNaW(GEyx@PeK8OV)|Jq54m`Zud$nFm@rnD+mr? zCXL8>l5t1-G~e$2EWfbBjX>L-kMaRGr#hu08GHi`9oYhv1?$q*SW8nZ8o!y?t1ee} z;lE@Jc~shB8@(eLJ2ph0c#QA$zXJ((Z$0uU9qmLQei0)dI?!h*;l30-mF3PU$t_&AUD~m(_x`2 zvThT8U~Jhuac463A!-Ogt$)atmIBv5|BxA9`a{-4_Q8M1c3KI*ZU=SxyId-CA$G$* zu$z4#yZZ)RUe>%YnHS_xT;WQm?Al%FEcJ%`$5fc4pB(hqifrQ&6e+aQIkEM2s!%P=bxy|Ob6Jkw!;OBaxKzEU2Waw0=PI_&nuqWZ>+dy zSWDL9h+gG@65f&3T@|u;=q@m$vq&xP^=PZ?P0h&l6rhuxP@f||pR3-VYgv;kZb0P5 zTwd*6RA!<@u9=>`o+eB$5=v=_D@M;KYhIm_Dxw~f>+ewyy9j}F#U$jr-R=pu6~c~6 zFlEs%h+wS%)Ih{IMt9^{r{&Yd6_u_wkLQupP`z^qFCA$UsZ4r>e<7OXm>5r{KA)B2 ziMC`p^5T^q*MnIO{smbM)1qWr{ioUVJFHmBLHia{d(PlE+=+xEHLBVy)szB|I zH}LmBzn3eMoUGc(I9cGBRjY%}?u&l!${e%mvl)k=V=3LvSf!yP9s8?b`HlF$remRC z@L)Qo7|`^uJx_y4LRQ2HnJ-1i0w5TK>_$LEsh+31q~UaIh<~@~@T0iD+v)xes7`1d zYJIva)#TI$w)TQ#6V$^I>VY*z6I8~2=JNKXEvfdUlZ^JI8;7+oJpo`YLSq?^$N!;y z>9g?H_N9M9vVG|gksl5JZU53R?8ZEUVTfxQjOq@9QT=TnquPa&%}9qasZ4`Ojb=>h z12nuj=>&s0%|?5ihi*=K0E)U39|A><{_lH}whr|s9m^JB5n01C%>s!gUlFmlE(2>3 z@jh)YBFteI5p9>Yk3t*yk#hH3=#=U}z!q60lsoA9_9q-0)w;9PvbA zy$ZUgaB#gW?m!I0oCoHS=$tu2Q=RhR;{y@QmpHThXi`?&>x0a;CaB{$Xwop?;}Aww z`@aR{Q6ip(;1qF0l!D zQ2#9G?F<8yfWFeo8^In2_TF_O<1zo{+E4X#VG@@q5~4wz76WP*bf1heyOxTnW}YEr zH1j-9$XH3Fg-I&*2ZG;3W%&H*(HF8m>OjWEmq+30dfqpza|DbQLpNgnpi6e&-XoAJhsAqj8djZN_9V65Rw` z2#v(E4T>o!d}cL6HMd~&lwkP?@FN0x9HWnb{!IWz3hCEy1)MK?dlC;}L`zf#xe#ve zS<>0ryZC;L{w37%#F8c;9SEI=pa!EKv1vJiyD@bONYDr^5VGNK3c3jy#NaaoZzK3s zP+~%mk?N1I6cH%%G~zg{W)b)nfsUk`1@UhLa)8zg2%jwQQPt^)OceC~8vs@dnFC`v zVEkT|(9>8v67X9X#;DnSGt_zx)EbtX>iIO8Bv`}uX|-IC%>XFkk}?NlL554JGcxY>p}LqQg2msm8x|o%S_zq>NKugEK`NOsDe2G(C$R? zwK80Qg=0m&L+z4RxI&`m%6731^Cp=$gW4!d#Y9^yDr053LbjlY2w5^(Z9yAk%bP@x z{UR5(wxuhA3*_JBf`IRLSx6xGM0O-@k(o0EhfF(!OmT!@8(*iuT0)8ik)5||30#lZ z`Bu6Wnuc=J@dABCLcGUVB?7pPz&2SaQpIwkb>=AK@{cmK0s6WO+DiiOnRz>=1tO9v zWZpBgU&JK@&A{Ya5d>?hWu~D8s3*$2M7377@TQp`$mmX)Gyc=X;f$a5sbm62Pw6K1l}A`Oeg8n833q`s%?ft{epRnwto;>T&o6%%7`Tuxx8dE0{bWVC)(R){ zt}9k*qcT08;n$lrgvMifhAqhOM^b}h&wMYBeqwm|b*YWfii6^{@vL_*bTV3Tq0@BZ z{_yn$`obi6i&^xJJ)kbP371Q3$yPHYmnp&;w%$d0qZ84KsbJnq=()~JXu#&*ob)3y zjXpzW&NG->x*a|T{2ZZ|Iu}YmBkCj*7bYtsZp|q4B?e54OCDSqk+s_*n@YXWux!#^ zO~&O?^j{`3IQ`$~)T9hT#{$)|$q?PY$4*C>R#Tf+0{2^lEA42ksui2)Khz z3`F{qpnrg??WjzQJ56+FCbD#9@1lsD*GGa*Ain)6L+Q(u8dT$*zd9)smlIfSiV)(b48RL zi2rxlq))!7@MWI*=AN90^Twg0>>Oa5ew1+?pfphS%5=NQiI-~r$(_rV6bQ94eZ!Q2 zmbqv4Oz&IL#9lPphMbT-`wDH#F^P6Yiru}P?pbdX!vmTx(L3QzckL|3Q0{UGD*#o4 zvnL%;ZvL#cj%A5%=2w5W3M1iewm5jnJ!1#c_PT^DFyAbb-!hn$BF9+F_sQa6DyjiA z4bgkEk@-w3{bzvyTP^4f3)~I#wQL1;X7jmfe_HAa!{PAiEU01lGh>Rn!c5aF^H45x zDJAGTfXVr&jWa+=Eu}Z4gL#@Aijiy)>1fMV`U`;4Gy+{n=`j|o@DEpz+1M*EY9r)y zJd|s;2Ce0}X8Tjg&O+?rLdXpi?$0B$u|Kkcg+{iRkwq3}kFmdVL+nM#^fC4T`y+=v zkxCx(fGzBStSZmG%&{}T#{SBRc=n}@O#oY@05YQm`;x}K0~`A*Ggh!aWo$gy*qKPkDYFZuG99B#d}4Tp z?}8w+-3O=lW^IdQlzILBF^V?FNF0wTba9!OhcgqOE0ouXc#1 z2z0mn2HFGkTX~`{k_dh{cD7ND<)*Ho(=4?OZ`;xlthv3LY5S}M4M-t7!RLJt6KzwV~#{YfDG8Bm% z%#qDQ5~e#zqlQoPj3jw-8RyBN6i==K#o)UR^U1lr7?*i@2=2)#;_8?iKvKoHR*NvU^Wpn}+;me5ad#}mnJ07n0S)=%&t z`HP)7?N+I@ChV*F1Zy)m6u4Q+<0e+yh3Spb;3!*gD<n_zq03mkxU(SsThJMAKIMBrNh#murj+un zSnO`ql2pDOmV=b<8b-Ey6#K%Y?Cn$n;Y8IOVK+Kh_dZRd9j4Jsletmx4wG<(V(Bn> zw^^ST%3S_46iuu(rSkBfr-NuHiZvv(tTx$bh?#2(OtJt~ADB9An_t zNrrzvNrrzvGQz(iJvljqv~EQvh&S+A2ILj7d=uN$643In!+Ak^hI?mJ>FhH=bJ2#CYxq8@+M`A?T98!4tSKB z>hgt`Ec7(ZO5e5F5ko=~7|=bSaAuCSTl!1kOxE*sVM?K^`+K{Mt18dh zWMKw)`nxi1+7?VUT1PZ^R@&)vHUa;M85SmM5PjY@5lMw)y`4M=TssjTwP-H`{Z0-D z-(q;x^4xII&k$1ZI-9iHo*KQo#p>$WWw+9x^7p(3$l}sSmOY!EX&u4y8Rp8>>KOvf zQ8I_8Eci)!&l`4XD;A^y2feNc%&Y8_#|jR^^iMe`{syEm+BmKbhry z*o+m%BBF;;&LZIKe0&9Vxsjr4%o)Fqpo2k>G;OUwK{=CtDU}FL5w_aVw*tybqc>%l z6uV-zDR2bPr?QZ66@qFJy@}B_nf*N&)9%9J0=cP&_nuFrk94)Xz!*d&LBC`2yTp#@ zFrgvK+?hsuOY@LBlir?nJhjQ|(TNr4fh_cx;Abf84a5ixc`-|G+#n-H8&^q|s|Z~t zMQa#D?UN=xk<9I`GQvm8t%pi>KaCWXd8BC$uJzl>nKp#6#A z0f=d3hloGa+u2J;FHO~dZx_ffBdps6?|pjMRO*U`O{Q8NNEqW2svQ2Ne)qct-tPWi zMkw-oxt5}GX`;d<_9~NksU)mWz^Bn8EJVx{$qOztLFWMjd>2)gf;3=Z*8@!g9;2IS zSL>~)Kt@5CLV+mz3QTu`l$|c#0njYNzco14O7CEAU6G;O0oa9HQ(kog&IWp;8`FQf zW$6!~GYagMaDnMFQ2hDg7hulIL~oe1h++~j{ZeH##bsGi$WeJFn9DR6Sq$kV*07nr zUku7iW^q~(Inl12X15+&L=SgL^owG%b~LCXN+?4MN|y(+ox%$a;d4IkZT2t?{%H^L z6$zK5xmsoxnd#?wUbL!EUR5OctT53*(+bqClz{$f0rwHHIzq;v(F`6RmqtHvf^>^n ztryU12;EAQaYK5!A{JZZk~H!Zl1ob%aJO7sEHcZ~$|CjZba56^3otrEsA8`0RG>!_E51A}rEyOsdVg&u+z{0V zjt1cZ;%)FKvQ4|)gnvTNpHtA+c78;f8FiO?rbzVBsCJ-+UFkSj!@grQ?NmnB^4=P6 zMQI?QxxV|gsMK5KyL^mEf&e}_23L%szZTh<+c0UDB6fH1e!9umyxQmt5QtuAGI>9d zFEo|8d~pRGImC*Nm#ybi^mx%3e9HPxrY zK*XsK?_U!2TzJ=JKHgTurQ5b_VoS3DBX`3Mg}9nX}w4#cGh2)dFJO9QboOUn`Kp9W$* z0_{s!%rp`f(IBX4Lph7&6`&a?Z5U*on@U^kr`?>-$9v-!AoLYN7b0BFGZx8OZ1=wpf5}(edmua=b3nf02RvV~c%Xb9 zW}JuPl>aGX@f*y~mn0kfyI4;3Yx&j*4?XUX*e0*m(i>S-Xr0@ zl>BfLV1mpK14A2d5hmLK??rSw$afEe9jAfxG|&hVq^E{bC7%KFMUa9XYlifS4-LJd zLbkQNCJj#u0L1kPyR_SS=(K=TzST9dz3LkI5cyU<`M*vIz!oAUGXgS{Cz3^4J_9o> zgF*4HnBf{ZLn*1P3WSVo%(E4^4$yjOJ3A%=Lhv%E8hq|hPEtz%&|wJbkdmcPKigEh zkvN(Rr6z5|@U7&Sy;#Pr0vso!TW}rkIz38-XOQlnEO(_+lhTxfQj=VSrzV-DeW^*! z3WJ*$NH7Oxb$0a5ONL%eG6i*z5PDC^_J~Zgvuk9Ho0<-B5y37jgTm zwu(lEQbASd9|Rw*&|M&+Gm=S4s}y>hFpZug%ye{3$LdRjTp;LvkBZg{=qG>+3A)?R z@h=oy18c!>S&e)=vPJvtW--S zyG}A8`lSh>Jc1?y`A#8Um>8xtwuhSRj&e;HhUkpMRsxvdwPEqwy5HU))IQd0VxEzu+7 z(Myv}hr)#>a)ivb!(VC+HmgU-rCwjv5wd3B+-dTMZZ25uQ-;3)Z(C2H2^*{b5hPwM z=)KFWe5URPcwtiieZ+zotSZs3-mm?>g@n<(I`HEIh2P8VqA^u>p517=@mKBl6{@$r zs0G=+XGWwF!))-+>FoVl6As@m{oXDFdis{UN$E5?pHI;(mgO_7^g2eBX9_r}&Av*N z9%P;+B&X@pyR;nG>NE-ZsJhwPfXbqWZiD3fTr46q1*1k2dJ@rYlSm%}tWSR&V4jVZ z3D#ud!a(}4#07CNN@{KPp387bY`YQL-8W%FY>O~kdlx>0-u4x>ABYMsHyw-$KOpp3 zfl(2oQnl(?f#6K*SJd_HSG3IQk3K7C=mCl^&}*2xdQM0Rif%%m7Y5Iu)0q|Nxk0CE zsDoMs5M!7+g(qmS-n=8(X)MBJ&_wJE!H@|KicLS7o?BW|<&QZ9ZCxrD;=U`LI&;m8 zPidNbXXwR6b3RH(2OPW(&3E-bVHU-KkIPN*1`c zwC8$aO+T^K_m{%?tT)7+dYLQwldPRGR8Mu6YnBnBUzEtC?|;8@&&C^i|% zwLD^sOh&Tg9yyd#Z1FBlCRtYWxM2IJt5WTMvY!54W1sn@-GqCA2!#c0iCc2%_8h@H z3bcR8^lc4UHfS8+yrUt?`-Og^WwJ-_qW8HR^xkYI{kImwKOnjrhs=NaQ+*ykD=YN1 zY$)cHMF+Kc%zEWdT;`4VcUv_4GNIpD@;FVPPD1I|7^s6F3M3PzmCfiz*p=b*=mt{_T>zgu zXpFPEzSYw8#A1rDZu!oF0_{d04@N#<9;nO}K|`BefK%Ia zAD^qs4yg!sOR3qq2DwPMIfQ4RGcatz?(4A2Jk$~D;4ENcuElPF58j;?U%~q`@i-_i z!f?R%(AF`dE6&HUaq3p-&w%<_d|{mhg@LdgYR9+tb;m%^p>{f>RhOW-iHXekEduBA z$6{=V+^S70|DnzO(M3Gg|z9q%G{yxk0Yau#(i^D`5+Zb!&oi}Z^#vBoHcXs7rxC5@?jjWOY`*@h?uMAfD3c=qV?+>E@JCQcf zTOS2mZ!zqj|2q<{9-9A~=*R~$7Imd2=`I2kG=|{zxEbPI)^;iKF>uGYSq-B)oJXGt zKL`z;6n{?EV)F=J4cwIs*ciFeVFd(EjpkULsD8e$+_zwo5#*hlN}@gr z@g(ZeAT2`VHh^C-x*mLtSv>)3j9Da%TV0R#ajR;OI`M%S)K?FU&0W-e8feEs9j8-K z#IIZRw1i=Gr@(_abxxoX6prF-!M8WbfUAw-2A2dprow;*73QP#a)ds0qz7 z=uwg!eNJp`o5?V86i@c68;So@&h!B&p+VS>5*8XL!S^-63-R{Oq-SAY{xq}@)G{nglqa~W{S!fEEa7n@gE}M+Wl;AK zFzqHrG5=43lqJFWQhkVDyXJ9<_TYz>Ey@}M9BAQx7PL|3Zo-M6+q$&3HACUGs3b6CFMupSS{!HmGtTD8$x)p6jus>P4_&+8~ zUyw?cPT|BtL?$Cw&jN%Foi%MP6x99s(o>Cm=|D$(NhvnC<&$twzBKs_!%HR_$MC;N znMS8;f{`@6SC-K;Sey#@Z4Beo?7o?)r0HVI@TBQ4HQ$V`#43~Sejn{mnqH&st63Ohtt^<&kW;AqehFSiFr844RLlDWwqltbQ;}xbp^D2fxk5oT5`DlN z<&xGFR&5?5`ikO4($Q)%z1FQkEx6lGRE4!eH7d7Sm>v0;0VHJfpO{IJ%|vf7UzOuo zZX1+S7~2?6F$A&ykesB{8;CfGhP%M#?t-;Loc1IOH4}mQ0P|4M9IW?l)H$L36eW^` z_C*9Iio@9K)3Q)1!J+e*7@I93wv{v0@0I_M$23TRvBXT0BC~>77?#ImRXCY_PoxtF zM`tU{e#U4OO*&1*Pn+poM5f1*6sa}IjMPfUkY(KoW;J_yPqeV-@_8CH3SoE@z@xa@ zvviB_q?EmKi|*=qi6;y7=>P(4(lvZjDkP(Kll779W>QiU z_4{rnHpWS4Ojo3B5+=xUf{rdBYz^b(3NTonZ?>&`%}Hllo8TrQZB%KMb#O3^U7Si4 zy^f&<(`xp>7P>~6k7r2mq)ac$%rsx`gsDne^H?+e)I{mHG&>%t(udNJ<>)kyq3=#J zL=0PoqB~KsofKPeuATO&a%S_%>DqTdKh46BpC+7|W!{@kr>H>Bv?KaU8o)oPDNkpo zmzvf2F27mTYI)Pq@6t=U`!iJU7CnQn<#04Z%?vU~vKpvIbw;O73z@AlrYiv zsX*6cOowkJTA>aOP8Ppp=DT+f|JU(!cYQT-P@N$7(%D{WO8UG7#z(JSsK@@8!>%`9_;oN0EH$98ZBzyv$h z(@YYhlTTnVs8BsKX8AsYj>y#DXD2laQ|R*}vgsaz=}0rx6D5Uu<1|FSCZ*Jw8N+iN zbe=P0{Vn4N&P#vG@SY}*F_n6&{9{aJ=mPp%MiyJ-pnZqg-NChb+Y#BchP`)-71m5h zP9Sy%-MEH(x>n+(Qsx3~@9rd_oZ$J=nq+@4pRb_86?i#cbUiYow3IE8@OGk2<67wl z8J625S&%Fr>10sHzZWX6Tg@>W`arVxcyiKvzP8DK=x~FGj>tjRsxZ>1fZ_qs0*!lr z>ac;Ue6CI9=ll||C{NkYpEk-%q&DO*A5S;h5%cVFvz=aSm!&r}YIfKyd+erfL75^m zKW)CzL1)^5{*=}0ZEZWElr!+b4Emjnwbds4k_+ynrqWEvD-~9%^sv(KfqEvWhlmAl zROm?sqjIvAsbrm{lOfuyKa^ZcsVjJNrk$>=vg7kWzNt#P0MY&`_GKsG+X%H;534u& zw0~G0@Fn6l@leVCJH>kizQ3w$R&7~IVObNVACx zl@s=u<>#&H{Z`8}7E!Q}v#j)Pm(E@{lfGYmB4O;`L_)6o8)b55eQKa()`LIdGFLFW z%r3M8^eFUi875&Q(04JloQmo0u>uv`Kwt7^vWM=1&M>_tV|$YKwQ=6(3mxPAeBtN~ z-J?TSZGLY2w8^nwics-Eyf4*L?BLNvS#Rwx(1GkKrWE zE8#RRkfM1ZkPMo4E1;798wH%>{+9)u$0iFnSN#7$0cQ=iwS9ER0?zLbok{v9N;-`Z zhs-4P{gro&8{!@9uz;;A?&Qg1N&2R1_oG#Xm-&)8x00y-Os z6PPb|sN`Z7u3=6& zKxS-bA2KX6xZcPNz8K3>h%FdHbPCCBG+gs!Lb=p@9MA~K$uGYTl0x$!*)KHz%nWZz zTc)~T*Bhb|zF$;c!LFWDG4s>y0zF31p^>ngP+sXV0&0-$bMF*p8*RgnlU=VKCzrXx zalr!1z~Np7GkCV`V!=VHKtfMpv6Fdu8SzrjYMI7mM5oJ{@PK5#Plow|E8Zmk&A!Zx zX(Kz1dGaYP|DTv#o9cYdeC96oyZ-$h(6esU7t5uts)T08t0Cxa>hIKwxc`JB6vq6{ zR^W7nc4)v{siLLruT~OhIuVA7Ovf>_Ak#{MhS!*Gmec3|sSdHECQWbuL^6s@Ur|#< zreABYNtPbh40bdh&~vKpn?o|YUeZ$OoiBnxk?NF;l?zR&q|S$AZFp7bmnQs_$g4_g zmAi)}agGCVrod^Ep$7W3E&GVliryHOCn&q5L(!z(y+A(ag{6HaxK$wqh%+Ult`z-4 zv3G9Qj1<)?rB@CJLH`W!u!b2|dRC*qn1+{@&axO>>0#kut`tz*%pO>r^;etWO{27w zz40R?zlM-k#iwCD=Z5hm9*=)GnL@f=g^l26`(q05k=5^_eR-S>7&1VaWD#FZm6TRn zk}QezVd_QdW5aXR-r~9>`xbh+1;NqSayg_((W{I=&PgVF&R59ofOY`PL&%D)Yzcw?@Q=fo;&&mrK@@F=*t)vio!-gU-rcC#L?Hx`jlIRp~TUB(YEarJ`ihp z-smK8^FAS=Ley9OW~7Z~S(M8~bO)jL(KW7;g$k+VQR8d%m-qGE&pJz#@37$M}hFx1M9*`o#ZTxnrvHxD28N_xjzXgg0_9qMiI zs&r5QS+?^4^4a?X$WO>64W2O)7>zAHu^Z9jJFt2h-XAr-4?~`wY-|x$hBvl2!alsQ z#TLnEY|$qgG2?CpUcvMQhD7@vGaX$|VVY@vEGPJPGMF*ES?5r=7W#C(j1yX|Nv7F9|9AWa-3WUGjBW!k~O;A)B8s8D7H zSunktCY)|Z*QB8_1Tt;tC*Hh9+L{Kp0J)5y9JBnWB-hx*Z9o>KGt;Z#fARU4CfoG0 z!2Gye5$`#}j_w5dIMhL{rtOt@^4`6SoTmY;O4Ddpnr6;Rqwm@C;BO}OC=qNL1IM2- zBGiVY?Ff%fhxHi+eQhcgMrP1c9P$Eby08Vk( z8KmI>yA6&^Ylx45#`GFYUG=*&2H9c~EzP3jAhbFM$-fJVQ;_ZwI+GIEBXTJXXMiYU zxI(vHEzo;O2boLg`8h#Lk+Lw^;j>8b#u7z}==!WkDf33dMT+yPeG>U6CPjEmD00_T zf@v%1NXp^&S(}mq_}#Ydl>Gg>Zg&?sZ9S8R3E%xL`BgiOI??8R`t~yp^sJ8Tux3cw zzBt^(b$(!e-a06eMIQ6dHT99&N+nM{f7DfiQer)w$7>fkYVB3RJ|D}qKxNK z_YLMid%XX`e4*5$xB49THs^kodm5}AQn|;t#0qzFQsVwKmqCI33ilKH6>fBw4bJ2$ z=ktW#X+Ck?khVNJ4gOR|G%r5IO}FS2d)@x_&gMH2`Uc=8z1|R#uW?CZ9FGmxk;j-w zx0CD0uHZYFG2t9SXDK1`N%~Mww&HcWyd%^5q3tBSgzc)?iiz}ro!gdY89@nxi2jDe zy%M~h!HWamljtLv3GG`ay(4q*B|0H94H_i+cBV|G3oshvu`+auBn_;eVr0)CT87D$ ziJrGwHf7-_tSFj^4wL#)674l=K~KYum^C;k&=D33{XBE4{7x4B zm`K-X<}t$Bp**4*lUAb2FFBMNndVwGbFq`o6c9Z%D@r7VG4>EW&L-ds71^YEFS45$ zRgcDES6VcDl9g&|mJ#3nNwF46%JYb-YGPz-+cO39vixjyeLmi5L0XSVo8-Z_PGI@mU#o^&)xU!Ue8z71!uW#xcklg7v8_f_sa-W^cT8l zp#Pz%utRL|)cqxmzW{iG&HGhH+D>hVcP|WBz@A4Wod}kAN^5!xIPAFxDAN^9IH= zCl9M(+=%f*NVyqYJv&l0jJFuf^Q-^FJnu-!m9PEx%rn(=^`W{l|3fx01kVI$v|L_5iYn_1bB7{C6=mF%N&=~}h({K;LNw{_y>N1*tw|mcNg}u4?B4!GNi6?20&`%E zk^a}VXz}-i0lI9snveKNHVYaB2PFZ5Cd^Ld0Inaxa=+l^RmQ-eWDejlgn>B|IvN>Z z?oJr$Qnr(z;{-Zcm`44Ax84vTPC*%!i1$R-#?<;MxN!9NT1G;n*z8#fmL>G|*yY z>`;{>BgnkUaio%}a%3c#7AXr-jM$ZRj6fOA>pLI@6Y6@%=P2oGr8UzYhVOs4)a| zi~>W^{o@sPAlxG_WN%?0=x)u)K#*;Em9mg~fOzl8Cc^gqa<2*2nk7bzZ;)rP@9*nA z#dHYB^QQ9u1oFffkBI~KA&1K$D z=uW{VtOW6Cv!8j20icfvl#T`oZAa2S1aiKG@9cjFS-lKp_AH&Lb65GA*#dvpNCj=96W`3!5BXQREu?T-J$>}tWb8T0`&qeeS1eOy6$_!xxV*3rEPmYY!? z*RrIqb^0`M8qFeZlz4S1jtdHvS7oyWKU`5X$`YWMy3kj-U>M)x*a)!Ix+5Z;`K>tk? zdV?Tj_x`Noa=~<=;Oe>CW=4Nt_MS&O+dCJvbyPl}tCX2>`hadH4`AA44!H_mA%gsn z?z-=I^GNyxanOhLH1Y>%-{|Js2(8QYAayRdjZpTtG zO{a`-7}57xR2pSXg%|%pNz@Q))gFpg%e32cPpZ1~sT^2M$#GebsiLDzs6(MAn9Au1 z@i;HK3D}BLCJBQ(E9EN`>W?92P6*5?j?Hc;h!^1-V z(y2@y&k24n4rZoiHyHgtTK*GhKF=zuMUCvEePLPBb_x3$H>C0~*e*OJ>(2e@7?})C zv$dcVka6v89fFGIWWczryM~pvOwU9+?C`A&jhT37VJ#2upPN<7!~23qA1KKbhDxiC zF5)e>p-Ht@#7BtRZM>A_I>_(3l}}QG3B^*ciayVT(*c$-bZ*O7c~LQZ1fY1p4SM^! zB6v%+uRNo8e_b`4m+fXu4}__Fx~)60;&pZFFi9@cJiMs7u&sxEST$jAe+HM2eqq?! zD5zGG_0%5}{iU9o+~iDam{PdEl3FU|V$_SOQAs_bcz-1|6l8=FJ@xj|eTCG;CSFL5 zFx<{-5iNJacn;b=%1M<{&qTO@pdg?tvUoA|0uy4;=>(%%<(y=-%FY9;RkARg$3O(; z=?b6c3Tc2|_fW;`q(7Nty?kDoeTjp>(N>rVJd0#%o)F99vurk(&KD*j_2vw^#O;~R zwXI3{(!vq&C88501TW>$BUDP8-2jWR+^o~dWfmAaYDDAW!$lOu-k#=YZl+#)S{fk& zSFPGydBPdRP?w8l0hSBY8;cK=w`R-G&M3xT>Y}@_z7k`67zpuVdJ?l9%gd~Eti>*P zB|23PnU9orB&Xa)k~x1z%7a;<{pA^sqcrtR68E{w~NfMA_;U{e=7~px-NvX2?&8$^$NZvI4mx)G7Y9 zj;>ZmPii3IS$W6=^~ONN@rCfP_Thm85eF-UhYJwH8jlh2DSLf&fc-aJf~P==E56yY zC(l&iRxe!!hvf&CLG7GGd&fIo+dyxjJR2$Rc*HqK%tz=3Maz`bs}bX<+nfL!6!Q&5 z^m%6{s#HzEG?;*dS`*X+;GKN(bef~SCrx}9(0CDUlM4FUp0AYFc-`fmaZdWR*9^=d zJtR%s!AFa8zG#qGQ8-ki<)0ps%3M|1wxQk>iq-m=Zn=|4U5G~^=_AtM&LJXtKekuh zj~6C+=u7zj*WP=8M_HwP}y)zY00)Ug*z~+z1uvXdjkuwZR$-bGoA% z`_VPlsNPA9;u)!MavH<#TBAxKu+G??F^9+Y zY)9%w4tZaXL*83W$onPw;pmWeOC0jo5QnC7oG6(H>A_^IlpIMZiEO7{3{$DnOobn1@=KO zU9x-WHhgGWO*{gMNaq;c#-sTtYz3qksHUg&Ri61t*O3RhKprM zMsYvrvsm~?yX&2$3cimDz4Kg|mo+~Dc|IPbJ5q`T>HZB!_a^?&kkR%RpgG45(lzzY z%MwAl$`f)|ite^piteRmif-Vr6x|IHdLE^YD@10C>@YdeOmV$xhUqpQ5vE%N33uoL zB`$eNiu{@^B+si*w}1el0S!0u$a%gM<4NWdxE=6Qh`+Mo2>;L}dCoT_&rPZ+N9T6= zLvKQHf9PtAJS5hE5qE)>1L3FTI&7PpP&{`c^e!<4&&7l+1H_l3kqG^UEPnvlhM0#S z%3(lD(}SAm*{IRtZ5d{$K*AaN1;BSiO~yj?Jb>hZge^o!nm|OCMmiC;(3K!S>LB)h%kRm;~$G9@FV;GBP}8^Y1_o(@-2IL?A6V{|`BG(re@ zsKt_<=!3ww$=%x^I>{1_8?RB?<77!hIXY8<9wqPx=*>?ZIkRz;j9V4?WI5L9usR$Y z?LD;a85Mq@g9J0Oizrv>%sWYOQS6iH7J^0^A%N`abL?KYjAX-n_am=-DenV^o; z)R(Y)mxed$oy-Z`qQx|(cB?E)hiOdT0(l<{!&WZSUwVpBXL zvd!YX{6Rsql|M*zgk^Rgby^Al-GZb^m~ElL{l*%!37(P$?SuHVYcuPo%>S|@Djga2 zbD@2imgfyG(=5iQJCbfP(@{;1V4&I*%ME+op~_cjY!Eng{`wsj_{l<_wuSkpj}`b_ zrLWknk6MvUg-b2$Ts!5Em3_mU(sC(=QQ0mgcpa`ZZR2mW@s_ z2XFkq_!gv~8?E;JpbfDLqGz^El714gUH0!mUSi|;(xa`k!2-?dXW&NyRBEH`z3Us6 zIp`O47E$P;eT`-$J zw3WSTVQh)piTAsW(XU%AzqxJKn10+trXQE(Cu5FYDI#^hYPEt#GRXivokoJd1 zGx(8J`2=<2<-nfENTPqzQ>MM2$!Mmge?+BfO}$oOx2V86R2+-2Vf#E~aK0v|B-u~X z8RkdzrK!?m5`8ZnyqXBE$+pq~h`nKvQi^tE%a>Zwdm4Mu6UB(vCoPsF>lqe$4}v$+ zmn3{Ie@tPUtq8Vh7~7OmD}0P>Pgo=a3o-0|i;eB|M3=C4tsAkLiq@wVw=BFjn_ikN zKCHb~_LVg{nhjS6cznZEdRm%e;_03yehjDWk}_O*0lqY=I++7*-yC2!WEfHr=(1Ye z+^{~Mz2rmeO9e5%nivJy+KY^Kun!Fd)++3MG6`?WVUHQTSgIi+@aD{^FK`x5$f)EG ze|2B7pPn;B341pq!U`WIM3-MB^jlp7Y$-$) zpPFtVik!=&luH>)&Y@>(u$Z9!ZaCy}cC7T%$u1Eh@q^o_9NdTf=+>O!*}3c_3zAzA z#mQu;#@^{;llr7MhTNYEv)ts0KCZSvwg?s3j##=?#(j0Nl4?I&Sg%yX@=}J7#bDoU zWdVdl=vHou2;HI*((l3iw{AScj*dfmeo8zSWR+@tD3y&&@uK4k;aZFQw#|&)dJT!# zt!D6gi$2Y>Sf*Izp{XKl>w{$ECJ1#7B>T-jL^Kxdvzl4vz3ePsaj{fIfdzK>vJldG z1C#m5#ePXSlfTMU$s&$+=Q9Fy#R!eSjH)H_GKn3R6!8}Spi`5oJ|P^%oq|-H zv0lF|lJ6~%EJ<_`xO|I1FxKY+v#Tl{Y~iR^MqUY4Vq~F7ZEu*8RDdrPnMo6tJHh3L z%OhyF%?zRVEeED6(45yfALlAR`eR{!TN4v9)HMO&ABswj`i7W)=)B_GY1#XVV*a7q z{HA{>(o0#I?kf#$R|W~eDaF5o-={Np;)`OaaCzPIAxTnoKIjF1;bnu{tFVISHikrx$QQJ`)l)(#1`mb1S|vh;U?wmY(>WxuGJ z-k~$?!aF3r0eBCQ)|9h8GO!acgZqGNA?VX^a_dzxe-P<$Am=OWG#Mjg}`?Zzyc#C{av2-SqA{fm?GDfhqk{6@dg<0(lw4AsAkQ7Gt* zvN*j_0lG)*{7=yvH~znxM?CNtdBk`1AU3W(W*+hX9I=7-0qtZp@}D3# zm>B~io9J=kUGq4}8yKuCdz|Rfd|*3?M-Z6Efu&b4+d-nyc@p1Hwu?rV?IfCF4xEmM z8P^|6bh+U<{+OXq#dAb|xl?cvWXN#&?v{l<(JUj%)Vsvc(*Y9hC!rk*x>PdzH=ZMW zb6=?(t{v}^|CrzpYP;ncS4(ICgxZ>#s}cpkaz#YzN0gJa48>8h6j+ARYiw(CV?!@R zi_i9YS~)M?2ap#Zd+AaTuU;0*=wk6HvRp++xe#e-n%|*nuZR%z>=?Pxs;Z+D`70$} z9ZpstU&Ws)>~Rq4{`-m(4l0n2*wu#BC z8Qj5y75zSDKcJc1OsF&HVvEysqmNO0y3xD1nQtBNjLFT|9r8Xyc@m+sC<+o>j+lgO z?1`h#JNhI>*Bo-dgW#C8O!J9}G+4%+e9b(QuX)nREACFNW_5zAxeRmY!cqKRdT=$9 zyKyxyBcp9X%$B)VnW^I#kAL6cg#l_mK%rWSGj5Ue2QDfeD z-975VUB>9uM|#wM0eC9rQ7`J|QD07sj=!27^$~7$nS`z)>>`()-C=b~K80K6NHrF3Qkh+gra%K`&DK8nBD1WzLKr?pQGUK6Z6xSBOm5LxoBEpa zxC4(SY<;rQ9524hd!alfxwS@PkxVN0(%I7)V7&mb2RRV9hOi{fuB>(7UsFu)=Q<0U zn~@})&Y_PM@%9dCva-kReRPjIKM<;{cDS@#-7HsgYGFX1B54a@(=(z=@jM%Q%RQ1M zQyY6Dt2bZI_>XV1I(ob}zmCf2dMCW*q{Gt#A4pe;UcuM1+~VCFo$iqAhz!mYwOBdm z?UY$F5xdoi*iCN4cGy6dGT}TY8|9K=3u9M0Cb7Bv{cRw;=rb5Ti=b-_)+dv{jgDj} zw6Habo!xA-pt~~03--kSzNWmB8u-+~NG=C=j9A29z1c`(rJ!(F2a7EH6XaJ!qt$FZ zOJ(^6f*%-K%V0t(;s>)6Y?>jRrHfYA96Q@>5VYB5yCV&cl9*xG*#^VLzJ?O`63CNj z{8KH0g_3xZ8@b5= zl$eOBgW4?@Mx|=pAJ&j-OrU+UYkk+-oWAe#9fyU$+}}^xlE-Ft_rh<;Ka$wIq#{9V zUY7?4bHPI(-()s_&Wkad(Oi?+{4$e_v>WpWRhrD^EgrhIAiKTg>dK=qn>hd9W;Qoe zpq+if)3WEStU%AP?#yQY$}VQJrr@Z|CJjqZmej?F&AUoo?jkn%N|Rm$F=F$q+!(Rx zEx=!UGRFl9WxXIqY@!+Yg9NSlWDeY%XVRLPcDCO=uamf}D1)!Vrb&1y z!2K8n^?|%@+hcW5FF!wVqoEr_T$}ZTtyN2idO~aR@Cn=3 zJYng#CEEYyx)YjzNhu!Q&Gh#b?7*0S2=-(x{S{e=a~uf{l1k zy^rPwLgn{S3vGs%IRfd5v3yfV*l7sdNZl5T{235UNze&L?KfUQ4*uhQ69VL~( zEL3#C748%;EI|k~aM%n%vmH4}v?G73;3bNB28y>MH&H>zO`|%UPFNM?K)Q-XQ|rSO zGb(Dz%qYpkMCT*I2A^fkGAFrRw+rDLWvJG=TNyVi)K59~#uS@A#udu+SWM9f9O;VZR#q#*$T;2%=DuDLQ)0@* zlo-236-LHKs61K|I?*O-HWNQbQaX;)<6!OuYBX+Bpug154B<`~86Vbs!QdD`PwDut zAjI}+smFwvqN7cSxf+^c6Jk2ejEU(mPf`6&V28kdlmRiuoZXtY(S~gN%JmjFpwEcK zf7fb9j)vK4>2x%1R%4FF_-L5tWIV(o+>Fm6berrR`k00esA!!8kNt~-VNQ^RmvNL; zaf8v&sEv@W4eZ12q`N8NX<3SB`n%gIl=D02IOob+Fd9$ppeojD7qgN9XCfkG! zuhG)Os%KNs=el$8cq@EKP(KjvyhE4+Z#EAKv4Qv(mub*DU(H{928X8GfO%8}+8GCD zze?7rh~)`jHVorisnC5Mz>ayJ3K$!*3Tx#~)foMk&apGg6UZ#pX7u~a-Xn#~#evyM z;jNUJ&E}Q7jb~cJc(2Sr9X`E&Mz|tU4{CNzEvVnfM^3|gS?ajNU^$MgfuYh;P_5%d zN0rZFTO$}#Gn;8YuhbRYOagcsN#mt>Fw=VqyNUvwO|2HkDJIu+Ga)Gw+eY;`rf!u) zT52|Cx6?`NRAOVz7R<&F)?@}THJ@$CWA&`kH?+yj1dVulsg^aJL|n4VdqJ`*Z(yh_ z@(tFdvw)?$VuLqd#nOkEWxAr#cD7$hXS(ZY=`O-<4S!cq!8`r@o07 zQ!^WC(p=vCw<~#paOv%Q&FTP`uLB(XAM4|CnAXCVDZ5uewlfvBJ(aR|6kyLNsr;&Y zlIqj2uXuJEW)CZE6k(RkpR6~TpaC8=E5&9F}BiUn4ZeHG+N0XCPS-CI(8<@hn7^!bzW%zrWYl%OPqH0R{GQgSy`~1 z7{e>PugBQ-I2(3K`oOd=96LxZdym=TT)F&Qx+A-&4;$gd=D>%?2<%Q1XzvxLVLL8` zm0BqLlm;KA+n-Bgccz2UI4Kzsw|CmGbi4Lq8h$AoJpyb)x{YL~!H6WdG!=?^!$s+^ z*21n%x1|*Ql1|@(ATMmjrgpi8UUH+aQt4mPn2}~pM-ME|M!vMv zaX+TZMw+9gI>#8#+$OQaG4OtmNKpMaot>Qy?%I-c*_#fn08b*6o{HCF$Vd&uf>e71 z!ClwKI@bdanE?lF0B<6!U^X)yNpCu#xA0-J7t&RxeyOv{l!Dac_2j8c8`dDdmz&~v==%P5ryKn z)0I;|8=N5$Sby`_2V}5}Oi4SQ%6cY=V)!+W)nO2`Lox_dQhg<8Lo?Y#ehBtXkVKvb9IojfXg za@ZvrSPyta+bpV)S*>PgWAmJ{O=Z2bh$pX?CQa;v2KwMeAKhd1zB^c)jFn}T4xP>e zw{IS>X607LWi8AJL=Dl>5w;D`tU+32m0s4g7EkDHl@h*S<2!pUup2H zSnu10EZ9;Q>wUYutM_d~0sJvoK0BUcP^+>1U`00FY<7{Fk9C*WwsSI?5uwT=oh3p5Ljh!lEHZtAL zqE=vMhKePASYMpHf_{wIHvUoc-bUoll9eY*y^pTX%nL*+s&$Jr7uao?$>L3Ccadl% zzRJZmW=8)e%^<9fMyxvv6_qa4T#4SWQY6W&5 ziJheU6n+A;EkX-KcbcJg-oR#p4@#pZP8?_U1N#SayxwNUE6r5`A4_wUd~ex9#DK+M z#M{%%jHLyNgD>M=-|?X7FAAY=vC`G1cAZ3a%5U@t7aM1aeq}O0I^q&vi$b~uj4hH- zmRx0$1A~;YEMJKaGrdbum&Lu(Gy@)QI2PwYu_-i^3SSAruIUUSLqW$8k;1&&5=xn&2 z&YYxD`Voop$(x@{WMk<27SZlzC*BY2{9UfJ6PKWwW#X}y1N#m0hlp_q-`WxiWtQB= z7&+b(WQ6|84F84dIRB`o*0x_E#Xm^%9!Mr)=4vRJ==5B`vc~`S`UY#d@*K0B%(OjB zR#gClJ;{hvU_-wk_*50+gcFWSl??bLq|;4Q^6x!TXnb>&@w0b2-shcfhdw*0`#U1 zel5NIR1qu*VZ^M)>7HJhq;*`d-amGN{{*Y|A)UV$5uNB?1HaNYc7ktML#s&{EwjKo zMpi>>g9Fz&WDcQujmb_$V6kIXWR0fgH?=-ar0dN=mJbtj0K;_{wVUp|mk6_Im9PY} zkDVo+!aW!-w4(1MK{?E7s`Vd~y!#H|0`|Gn0So#1xDeQvl0`m*(H6k@GOGkY7a@Hj z<(pD8caR7PwObvcB)0IaEsB`S8u5f}gl?6wq`~tJ`$(tvkc+>N@?RyLE&=>5h9$sG zaC(HM%Ch<40Vg?)VhPxI=XunMSs_0viVKO3S4nDr+55L#Qow&@q3;0BC3q3A0kVa^ z%2lx1#b!u=PF7j9s>2EkUF(2F7G;l>1*~_n*ATD=I4()IGQYLidLqL&$*@N?{P$TF zw72?)Hr3W;5bt{#{MZeh$SjB-CFum8%g@SldF4SY>c-2=jI>OWv(UGUFUC$) zdYm8AgLq}0p9n`|m${6DAboou`cw|P&2?BZ+LxKi^EnAQ`t?3W;~#P$7n~he^p!2% zgc^NMUn4kJOKm=wd6*jgbzk_XuQbJ&9wRXFldavQ=qXBEimvk>TZ(?weYg~@?CE=q zG_?KTY}?j1Yi0|i99@O>^fguJ&vFh|p@;T`pL2u?E%jxYzV3l&Gcrx2aFgCsf_|>A zueGkt;~F<4FRnnJnJfEqg#vA{pckZnO@SVk2M?MUf@6-ODbTKb=|DUrZB^Eh@-vfU z1Vi$VDmz^ zC?;QZ(mR0WsnQv$m=HCRz%Wyu&f;aXg|ZAa8g=3uG5$efnd%}TXkH+bb7jjF3d#xE zu!bWtdRj*{O2Qesvv{m(qPwUP4 zXbPLBZdGP!_^*V03rhDnt$szR)7beDDre{{C1Og@BJ9YmRZxq{Tv~*!OqV}0dl>x_ z8fMNBBFuMzzGu2#NfRZuql5#8YGPyaZJ4!` z+l}hExKDBGTx?YBps>wGFZZyyHfLs0vXnJ?*b0YC9n2}&*melBeOY-NSHnK70{KE=>b%ONPh^`EokcxaDd;X$ENT#;Rr*N{@wNkD^}d-nEL`b3Gr>gKs~mF z_&k9Yv^qxA^M`!^)^$(HG=~Zd7ARwz**_RBS(cEn)n zc9E_;C=26iv$rsn81oSAw(r~l#^}Etx$pc4@qK4Sw|!?YGCD3Y_nohRKQZ-NILfNM z9F(tsH6SW~2_GB|j|ZCLE(P(nmMlwv-&ep`JVtdie5rI3JDX!-XLFiz46JKWV_3ID z{nxSXe#&9IDR+8YTC}qX-ZUL-))b9HRYemfm+l>WFA0$|i5JC4MVde!Xfcv1NO#A} z9XRfI8BP$XgUx zEhm-6OfN)@nO?$*X?j_skR`x^#5q?PW#JX9c)UUnpxjUY=OiM8#EL~&?LodFb*p3mJf5mxMfn! zVIXL>N=ox&2!t2!rWN#U!gkY$CucXE5i_ZzDa!jc@4fHaILv#S z3Wmh#YX!E?<}?R7zKW#xC?r`$G4&2*du-9@qo}{6ud=YGEV`6L*tK@y=EDaSI9VpY zQnW#5ZH%hJ?cg!+)r$O;6<6!%BP)7RX5VT^oQEk^!mO63?P##XHuFb}zK-@OY#%T3 zviGUdaoT&`H2ZDpy|#RB#U53s&G6OXqbKjTIn@xLXH|)V!#3R^g!*^XxKMw;%@xXZ zb{o?1j6^Lq*eCTEIk_}BHgfVhE8O7z8Xv*s?UjZKD(@1j0Q*_i_>hh#jqVdCzmdd{ z4&r2EtYS#V6hjQ@&~5TXGOMxL1o1Y)u1~YZShrfI7}N2Qfu~w~3iU4}K`H~`x z+ni2%Ibqep5mikk{E~H?@K6t3=gMtaIK~z@-)N!v-pUr!88uXR+Lr>GVslb2qL{07m# zYdc+RgAz-xxgf>L>-4YEgvju|huz7ykzOfiii%#t;7;TJ3$|mnDyE`ZH5)sSzLi~| zI@$4Rb+6Fz>O>Q`FLJZ~Dh@>X|9OFuP=D2e&I9(dqOpgp8ap2B=rU|SSz_gC%+U3w zhzo8pBHq5GsxEm718MITs0D0IA&30004-1@p<1ZPQW$iXDy>UrE`HD5qS^06BO0v= z@-zLe5F2DfXQB#)X==oqtEt4)L;5(oB|9%sB1XQqG-5asvCbAV)>*fziA-lh_0>0> z;TOurx{#yZ8&fvk2=kg`Y$(=Y^;;;tUpge_1CI}*$$@3Fs~4Cu#={<8S;U&3+b|~y z(ESDRY{5Z!Fd+lB6bu&n$4|X@?b1>-gO`@Ib=7LG31%o^bwIm0%*!t29lx(MxFsXM zt!WL&e-1;j47*Ciz=0)zK1nk5kQYnf{0ufFV>BywrL& zXd%)wNyW_#1IyXK62y{=5zFb7phC~{!BuJOrBa<8#P_hv6qS98?_{^xDLy46B-KOM zd*StRejpOOUUtO8lfTCzJX!w{vlYFQ*;&2yfxHsFxi@9M`g+0UZ1K~I-k-9D2(V|f zO*!SI?DNsh5<5kY^crxBOy7=7pD+>K6Zmruw$|{8;x-`Yara*B_l5xI*48 z=d(AnT|@W{eHZhO_F_ol|4a(_L*gWFf!8+%-1;ws9h9R*r?j@tDy|uWdl$Ek!AVu+ zrR*oIop>>ul<2W~7UgkZGx~wMeczs&yJdy%uPbuz`7zJg;$OBhcgxb;W%v)J?LVcW zw4T~ZjJS#oAL)cOeg0Kg6FDLzb>?C2LVpa|cm=X4fHO>FQxtO-UIQE}bSoAPX7&I# zhgk%LZE#jB=ujY=P^kgUal2p=xXO-d6*N78g=mWD2|P9K99#%ScyhPeqc3WXBc=0T zZrs!O;ITZ7PaS3~9L!hx=35cW0{8&pySWq4`0l&;=`feCfTEHZ&ntq5z|oe|%?y}k zng!>9nYZqU+x(^rg3Rb{6C4O+1ezN+8jgbx%wmJ%8Z*wZG3jW|#;MqJHhwJ~t+2Tb zz9mO1Z15DgrOQ|N#bLg}+f85L(`ZL$i~vVe2jb4cb*AdH=P1s?_W{1g=y}sw_+yu| z@X&vKWa8{&k4&6=_{hYok+bc~Bk~(%BK(A}hPw|cv0@=F?I(_gOOIkGT#kdkc`uS`v1`^-fKos`7_&qDgypj-yherhshBFMRJ0&{PP| zk_6OmO+bC{Nxook6v=G9kf29m<1hBol#UyuxMS^U!ht*K@ZO5(YDrp=!0*Mh3%_${w19%rLVZoOUkam0>r*n^ zCZXpErU=Fp{Ii&gT^obu*U4}Za@G!!ui@HiB&<7I6CJ7+L#g0A7Dhk<=%!uSV?6-VP>Bo(18U5rHAb(rnJy>KbSLG?@61l1ZrOEB9aPjZxe0Q{?|*IuPU z3v$YXXE$hoK8<8rw^Wqv{#?8>nh*YC5~UxvIXpfiJpseIdw8 z%dH4TX`;G(LRc?4WRw}Rf&NKD+ZDDzNr(IN^r{0mxpg!;oWN=|dtUW- zDlAvfjj$kw+(-8W*OOGE-(=mWyPtMp>n37!93&iD8)H<0>{PW%A|Ul{Wl45X^abU+ zw0MLu)W%adb?~*MFE;k2NO}1JFmlv0mO}3H{ zDC4Y=lP8=sPlW=k-J&j;)zH?;H;|$ar5kzi&cB_SUDY~QU6OqUUk936+ITg&4`pQ+ zHDSmA@~O_AP`!|eL%hg;6z!}Imdz+B2?hO;k~#x@Lo56<>MJV!)#arn96d!!O6$wB z@VHrgMQwal_YH156_Yn8Spo9pij*XwiP9ipKV;-MepV(Nh@V~+O%oe zCOTgwH}h|OW5@e0rzj1A&B1yfpsS#VDe-xNM(SuCZEh6ymFk(B$y~nnwev->pHgc| z+b)LZ#uIzip@C^1(H~Hjud?JO&Cyz@L#d7eY6V{ervkYjv0u>5`fEtiFz7NrPn%on zs!o!`emr$r_MkBqw?79$b+!I>DL80acAYY+xv8}+0Ny|ltmrsE=TLs`7R&|o4q7S{ zLk@+iGGQj)|J!P2P1Qp6E!DSKldA5N)`dfn@<>HVS)}|iYP}G{sX%VP>Lgd9-c6qt^V>}@8vRFW5+P;f5{+B|j5^af3iT+-U zn{|&f9gK4Fj%q=<7uU?It7@oSrm?l!TK1dl79+-!iV76eUzaY|=&1;&V|0_k7Hh;P zDs+(&7Mgm-;y-B8<zcvHUzi$DavC%$jIehWubpFa69#Wa-k(V5DB+a zqD=!fpGLRRzaVxQ&clafm$4Lw#|7&bVeh_0xHmh?Lg{3FBmVrnxresD% z<&2siZAsNX+UzS*0=G$*xP9KpXR_31qW>+8t;QSK=dw%hZKbcuN<#{@06XZi$seoQ ziWK=$rLX=kWix`+6%}=9zZiS%+5liP z`^v9`CWbgTsOT4|EDl#(ujv(_%;`(tv{Iv3M8W9A8mZ4wiUFOk!(I>i$fIALr{ZGv zcu|1C$;}8oXAf7zU>X*J%2`@|iD2e8v%+{NW^%p?mZ`Nka^8HBO zS1dx9KEk+v2=zf(4Yf{ih7^B1QpOF|tB|+$@5NTQ8T8kS(W(+i0XdW}l4aO#pdwd> zYDE)FX+qB@-vwb8$Fec%|M*<^b42zakv4OVU(V}{nsJnvf?{7}M@A7tVZ;W7fxQyc z(Yr-Zn+K&t1kIequdhG|ZozD0v7nL+KRp?W0zT`%?Qe+^uq&LC$s-C=iRk|EG{BM?kJ+e7L z?>(z;P_tShp?;+m#US$LHHr;%M7hn(XrwXZrdB z{0cY#cvrtucwN)n@NftvgS11P?&}bPkx%2VKH~JPm5B#nCY2s4vw1*@mg(sUqG2)7 zQ^EEw9VEDtaRG8Kz{LPBkxITh-UqxGN6RFT{qzA*s*;g%l5amjTg_i=6%vK=B0w6z zxRh~Kjdk7cM+gs+2K1FMn!;6 zNAjb@)(Fydh|CEqWzf5|=82M2-;4dEeW2__=z7TZ`PKqk4H$jaPwFqeb4V9RQW>bL zLAgwleEbgrPDS`vK-U!GUC1}HE~!8I6a>5WoTheA5hl4DDYr<_5A?T?B@5^!QYnAY z&q&INpgkn9lYnTwK^Y6mK1n$R$S3^Qq2MNjE(b#S`z@6!r699XoPlW;qT3J{Fz}3N zb0$kos27#i>mlFNGd=?O^E~DDI9q&Ftaq#WB9pd;szPDinMq%lQq&SBF?`O6e!MzI9hRW+-yQFS|X=H<3Qx20+U zqCv!$Dr3wfgq{I&xhjQYELQ@$%s@AG%`ly6I#7Km;XrMUjWAuDN*oP$Gk0f5R3oL9N z_DN_*-W7j?_~rYz9(cX`&z_%exD$TA9P1)f`#@de*#YyLIZgaH2m}KSb81a)Y|NaA z=bW;jYW~EL)!})e%JCKL3&$-S9J@i?f&fPxZFPckI{P2~jUd02mj%VwlJf9jUlSJy zm4wU6OUld3!(|W*M@qt_;0yjI-T)50t6O|NXlrh2`$xC?XTSgd=;gol`B#O@id!50 z>E93^a9JdB%+J3pSi(R5l3+==BvM+!mzXgBF8KTB|DU)Fe6uknX^gp^mIo)qCSs4C zQ{N}kisE2Zs5Hc4SI~SC3rm9& z+L~JGYDe(hyS84gwE1(Z=UZn9^@@W-^EPAWR}Y;uf9&juC%2E7uwcl7$s@*( zIB8~5=L4B*jkzF_P^eUCT{x$P|JCGK6RJaJ%^6oeak&4K@?pb9PCToA=A4m~hu`Tg?y<@d|) Zm)|eHUw*&*e)$KN{{zw|{{;Y$3jkSG9}@ro literal 110586 zcmV(?K-a$?iwFRqXXIJ{1MFQ3l-tyqb|yeV0%@Quu#|FChY}z&9!Zv;4CFC+l1VaT zh7iaM?zMEs79(4ZB+tYNPD3{YI6!!$A*I{$*aP%X!dVE*mZiXw(gHnjLN^Pgl$I{A zETIk0mNbtOviIs`$(C)|;~7FSI+;kmSNGok{`bHC|K0z;k~pA%Rw(qha`+-Ga!_t1 zTlqA{v*@ZL-M#vfRk6YDd4L|EB1^;BTxV`(tEaYuL`Nt{;(*!>%P{d^px!Tt>cP?C8uefF4}Zj;2U!lx6lbT$=}lR)C+U#wS)wu>2W(1xE@+`82x?Rg=B?uH$a|}ry?4SZP!$iXV2uV?q zE!rKZoj86ZT{PxvCX|EW!ro7V4{&=LLRhm+sU zOJ5gH+;Yz5O}oea{nZp^F#BO-E;h;j)!jk-Jaf-$eH0g7SDf1$z~pZ;kf*ZQ`aej)<5v%->?0zN!)RFlQ*wt@A~Y-@Vj@e z-hSCtEhlw9n`pal?UIu}xoA`DUprz=XH2`Q=hm~{*!G=+*F3*}&abCVnlwH8%$3u& zc1*wV%@4Ywk8WGLX5JZ3w9`{MXFct0ex+B2SKdvmJn4$wRqOi5|Lp$8j^+=3I^o2L z?U&E`@u@$azj5cDm$tvMrTvZPHt+b>(!{s!yJhpzM;D&_^KV{!<}0^?!*u9)Hu_-;eFSrY$`6Uy^^g>&A_{c7FXYJG!rb z^hd8xZMo*Gd!G+Hv~Ks4vmSkT=ZE54h zdB^wkGnfDSX*-_2`SvxFo;as%{N5-3e&+b^&e?wNO|Lew$(N^o*!_F(;A_FFcV035 zI?wA@_qNU5b>fugN7cET0$M$C&+fc`!DL?)cZO(r>fY%9hAV`kl{}DMb{vWFiT$7g4^g`j< zL+R%a^z)yK&ZHGQY=5fjona+*^l13eu=yV#eF{1|wNZKfA3&;sG3GzRkl6kQNs=C& z|08kW`9IzmM2|M{PlYRkgO^LWzOF1tF7z*)HFx>oN-*g0jD4_a{3$X75}S<97t=6@ zc+%1#Cgic4$i8>n8n2SeKyTEm-QsQbW;1wk&&7a(QfZP3w~$N=9qy*6C>e;-eqYGX zT!HS>3q(;3ydvN#Y}KPXkX*77pTX-Hl#3FQydry}WV4qQg={K~u2*b0!3 zbUr@i^C(qFM#d^D-*}8Q^PT$x@<_A*MS;#UXi6;$cbhY&19kmew*y0J6ffPBpqzr%mIh>64X?_!$sqk*ora(PS0Gsd!5t2m3-n7RhTLgXi!aV{4nk!6-%fBEd3q z*pP-JU=F((o|vc$&tjIST&21SW;M;MThRsyOr^X7Yt2ml<{ z0TVE7Ar>WdqZzUYNd2nN7@8cXi=v?LnZms+;&(!nax+&!gWGyv+szzaZlQGfMBUWe zHAT{>T@vxwp@ayD`;-(1Et#mbG^=IPB$?Mt7q4iO1yv0D6txAJ1p?F>F#9j?X*6wh zR%zAh#LG%fyBlYzvSt1#Fi-1+&bfr7_HIofqXX40TPQW_#1bKhl3L3Y2=PqBH47@U zJFV19n)$|sAu?Zbr!hR3n;1uH)!Bqra1>Ea0)r|+v!F5vA+nLYnrC!4h48pqC@o4U zAZTscS%QAG^AamSOEHrhNghdS0#T=y8~{QV;^9^EmKneBV5_sBgmk)ybO&KSyn4~A z%0)^O?cS<&6i)$LW#!~wr_L0AvZOZ_;ioj=$H6GIg$^Y6mIiE-A}%UOwG>YaC+3;G zl2>Md1PMtL75DQ6UBXq0T3#z;R;RKBv(b8gkCXPclaUl9ezllZfDntTGZ)(oUe)b} z)y+HEe;HfsF4aaa;7}4v#~}!i$W(<`pqr`)8EEMXG4VJXV&fdmd52{B?O5Dmt{qKr zv(=1aeNfpJe`wg^0p%sm{F5NoXeXRg zu$F`-Xl9N&j|g4onW?7vDpZ1#?WU9{Xh!3vyrmA)W)fDTX=dx9NSJ0_%Q9-HiFmp$ z;vIp2rGNnmh*C^2wEkMrg5GO<>TTABv4nm*gs?K96iE=em9%7=fWls~2v-TV$0ICqGK_OvL+BzDP-ntL|HU7QNS;j8w{0Q zOmtzS3|v#L34=UnezDwPMMFdpf+^K2weXIv#5)IVcjU9Ncm^T#z^N$Q*{slb#9(3L~_85$^>jCF6p7S57y`1T@)sK%2ie5bHpMMls{CrYn&ZmqIZWhzOrk|g`2F@38r?& z$&2gY1g_|(wE4sw-Nl%EiwEB3yDagJ7yHo5`m_tv9}P^srpZn4YM8u2R_{;Qcuf_r z&?knf|KqiXSjPwr73iZ`l2khwXn2H%qN7a2M+N91M`(uN5gauIHpS;0Lpg$sfenZc z!6Mk$Qjgej>cDl? zZ29PNv#S905Nz?67@=u|E&kN7#iz}CZJJ|*#;q-`FG52xQIhfnD5fD1njyOj%7+Ll zyRp6upK${N3{L*>8lC;Mx{!t*9VqMds}$U*5EH2!OmP_%u|y!sdPy7N^K{{1Eb+9} z?0;167v_f1X^|QXv>68K0kw)U;HXZz$^;oOknWjslwttGwgR%pID~uE<%C&I-bC zxbcP_)u`;Rvb&^8TzMn!xvST2IV^rV2Y2R>9CvC>u#B`Gc78kDKpHV3BMMsIZJ{!J zc^S_s_z5h!Ru`Yy>0za6)Dd{(Isz@^`KyqJEmh3!RJKqkL-nD-3M3Yu;?gD^mc9X? z(S~0YWg&WjHIGhe^O{e`kTH$v!-C)qB6gL6bId#Ryt~lw(d+vBn}KIO zZu+Pn;hA|Qcm{-M$OihV;+glpRwteb(7teuuFrUmP=oDKt}bZfRNSsYk+lQmQI45= z_(dj17SfC&m>LjFLHpN^V@!z~GLC69CK$ElH5g0veQd=ICL}SNsbC=!P((JI)fATc z0z;cY7nLNGW@Xuas8~eOl3Jj72~O0_rY!U6L`gAQdZFMVEm@;nd;TBq$wDMRO`~Bm zsZoQIX5~zYs|D$dLW!?5l=$3$5^w+Hd-r=h<6bO*67g_|3Al)&{$G7NnnF>U@`WNU zcQnmZ6u|Zqi$KN=awyzwSIi18z*q{D&R>+)ZQRtA1W1MmO|24|=F)YuJR8bD$x66W zJ(Zu)PC}rx3rO;y)TPZq$`^1}of--#C{RSq6(WWO>aq>}YKLiE5Xfc{%fg^RcVT*( zszeo8W42+lquDb)g(RdkqpJn=Wif~W>J-&?rXWIq3_Cy$b$6x&J4DO|V-6`PSUThtpTaf^Pte~{6S)FfPvkLv?@;*e_ zbp5WFI!wsq4)83DDWZHKNJtQ#lgh|aBbO|Jb0hr@f_1u`XEXu6pzP2Ra^f1adp}9aFp`k1@Sh#8Q~a zDnOr$?%m*|f^NYe2@xT^kmr#}4=K`O+@ zgk8S#Lh}alP$pW4ZZShpq#Nx~T542x9Im?K@N}Y#>X9mXWUrw|=1d*;h{tp6_R^i% zAWX(X+GDoC3VP&E6Y9|;G#Mq)I>POH>}GbgF0M(1*a{SR7Vr!xk?0JRIyELz#v7(O zfu!(2SSk+M0uLw$4IIzPGx6IAJMav*<%^R3u2JnRiwpF(AL6|hD4XLE5Y|7svY^YxSa0o!BbnGkrpP@I;qfc6e#h1h7$kTieHUGVDNzwB~F6? z;|HLs6947+I+eJe_JtXjj^V#-`psDs7nrh1@ zlHfUtk4Ap~rM~Y!kd&VcncsgQgF)^4524ZTKa9jt)At{mCN+)saX?PSMIdoeKNV&o zP}^4TuVBm{DZEwQEL_QulhHsVN(Frkr5f@=8QZIg6eug!cgWjSmYJUcX=FfkwX&iY zrRZVKf~Mhs)ZdM)3ACv6tc*9FB(%Va5trpT*omv_#zdG#IbWpb@aBZ2sBuw(Mt!yF zzRK^Bw|%&vf(~ph`|SzW9~mf7oW_TMCU450g(SkWL3>c6R;h^bT*l zAewyN!K)7r?<6^bk4Ap~rvcyp3ZQ@Z`(J_3==Z-y9Ui(oc|TPhh&%vsa88u z0ssB*YqjA&D$3AND&+GAsIvIaaL1HKfTqJ{wxvxw8dR6cC}Dy5K_JT9?LXVxYmIa8 zvOTAtagZ&D(NvGN%Z@jrH_ZjFiHq0B6m5gIx~sGe*CsCO@#9Qo# zHj>>u&e|Z7{Z&Y2%98B2k?iJ)l?IW_lp#4-MlgaV$&5xaOvNF`VZTiR-TZDXe7IdE8yo;+%EsiEcJ^W10%5hclBYKVOZ&pF&5gBPrYNyvm=a3Mvsv?8i)Ux zI`Kb6(-dWV|D6uf0S*6CqxgR$j+*fQm>EsuPheH}5>>S`M)&KROmwehRf6_3{z#QS zi4DIy-NDs!dyudBarjP~=2I&w6^Xk(As%>%qeFEIgZU+qbkXgZ4!niSRB?F0%^r+6Jf`c@z*?X^{oD@F$~TO|IU zy(@u_syg@oyG{}anGlu)Omh>YKqd)y_7GGu0j;=#L_rA+frJpvMivV4f*_k%6>y=? zswir)J{J&Mw`XxH?n|FqYt=scc<<*AZCxmJL8`pF&fIM#lgVU3?gzizJ7>FR`ObIF zch0w5EI>gFx2y!CL^!VMis6O8ligvz*=6CU^#)1JHOpAjaY8a1c5GEwVOGG@w2~ zdtkODhT~0*?s;tIn_(OrDDR=kX>Tm0_nx(NL6JdEJ!0hOyW;XMYUOlyz`TnN z0v&$a9?xJyW+bJ`x=Vv7Ri2_HU~%0In5!J@iz=5!MGS3~uW=DA$jxPpQ!vF&-=aV{P%i!QU1>#40`SP-yhJU z`#&3gaFD$D?@osNe<0xVi1R;S-~aaynAiW)#0zWnEYGVvkID~%&_DI-zw@#QO?_Nl z8bS>{$E}H{Xtv)zhA&S|3_?wc(^Y^Kz^t~EGo+$X5Dr3f6}(`2l~3cHY694 z$^R!P|HlUfW?z~AZf{VQ|8v{=-~9qT+W)8SNLT{v$pj>@+@c=1u&xL=GN>f5Y$s@O zcnm2r%Cy)nL~JK$wiC1y-EoR7bY%-&*+N&wMk<7)dqY;HJ5=Rj2F`;wES%ntLRY-E zjGt2Ck?k(qLRaw%BMm0BT!C1L-+yRs786?lRr!gjH@{(qxy33N_?jr#$OC*WvXf{0UKE{0cNC9%;r zuwhNs-4AFfrP4#hdG1iVNDvn4`QiL!n0NL32Uds+$wDvt#{%`BROrIv`dTD^{p;} z>;{(`6n=1Z6^r=9<#=OM*g>v-?Ut}k=Pj4}LAcA+HBjd|S0JE~*e>;Tfd)@393t!S zHYSD)Qv8UD9no>)2aXxh@j|x^7^Lh_UobgFC(f4D(%gLZc#Ev{@T^5MgRf_O4dr#y z!tJv;naKmRIf>R8H0OzbPipT4|E2B)vo=j|0gTz@SG@jTf1i-wMqw}LbCS|#jei>H+Y(Z^Wr?u`4oh{ISzUR8QY$2Q4AH>RCh*psZ0 zNa$S3nkYy_&`Ibk{sg6-u@4q{LpGzixINC!7kYJQWK-(+DYfb&$NAz*mu~=uZZ=Ws zcrN2bN_|guLX_H9=JuC(-TofQ@-AAb5Z;y1#d@QX>=nVi4Vqf+K2cBjVhaW3Qt)(YjiHoGpuQ7~9eqS(hWi-?|i^gX2dh4#OqIzY4`3p zkXUSos=w4d+o4I>Uu=i*6i8izt;C9KmLv%*N$h>C&9K-EOOF_q0bo^hR4Q60_ZzDc zi*p!Qo<^%)s=0G2irM$3Z*|kPF^6ST*1sQ1+p|M|if{8Un}RvZ7iCg>%pN zS9Sr6*=|@oisO>qu*9Uo{E|zcDRD}LMb?H3>RLNH)DQG@VTok6CBtmVuz`>aYiO-* zt2<$r6noYMKTf4PHx!}$Arw*9aE0g?VQ(lA1%`b62JH0Illt!)iWHEk=$ZEg^cL#sPG z8)`4K#)fNZ8dVM6>W12H*9r+2^PzL+`I^tJoLT3e8>lX>U3~Gp%V!@ws$DFC_aA<5 z;F@iN0twE42`l0x|2?4pD*xy43PCpg?+57B_*c8zN}89~cK3~L=zqZLcZdDI3TuEc z{$9UL|N93-`k#4@baWWx&ueLGY8UOkiZKUYeRRuJx!Lz^F8$|$rUj=Q5yKvZxJZ!5 z!U&ASD2zrnaxeyCaT0RzBjkZYJ_;}nCu2N*j0u>CNhpL1MJPrICPSF%@W3lD7JdW} zL@B1A3{!CmPQ_`MhH`{Zf$5lm({ToVf-^A_XW?v|gL82n&c`gw#s!#zN?eGGFcT;G+wlwhJ8s4=aSLw6 zZPZzFAa-L9p2jnH7Qe@SJdYRfB3{DFcm=QG zHN1g8;J@%T{)l(*XS|2^@xc|xfMds4nxd%`hNdWnVJPu0#n2Ac!BQ;EIK*F!m_m%C zg*V~1@DzUv;iM2i3crP1v;blPQV6EyG)iG&Iw6G=D5oTq@`QKsuaHyvC`FM{3R-;1 zMT&7!InpadF-kt+w~a9ag)tsas61HAyWHiWkguY&!sn|9xrziREONPuq~jQu+f~8) zTtQd4FBl4jDqKPmpNHpNg}f(J7z$1c21AoibGvxgG*_X^=XM8u?#ZEGMMaSJxkE0W z5E!iB3quu?T@}HQ%T*Y1g?QgIcZhd|e5Zz{xu*H}N&K`>Xo~PI6d#)8=0hRAuy9&P z_(-UHT6wA4?Jg-PE-s%o)l*(kUg~kXZHyTxjFFcENBFP9p#YmB?L&_iwBp@eIV;l}+>6$v)7&A~9WB2@k^t`aZ_GFLO z|G-#-5Hnnu*EAT3Hl!dGX&8c`NXIZ_z==#D{yDsfx8!z`B2c6jdRjzJ(~ry(peQeI zr1U>8JJXXX6p?|4uon;GH~1|c5wQL-JdP*upLi0#!#=!@ca{1QdWb)#zL8Qh_G>$|>h6%E>SG=j7)X+w53&7thTii3)iUqs=d1aWj)v&>e=+!fkK5xl@c({q z!1n*%FCg;&Srv^fi!ZBetE;ONWzr-8SRslso&cmp##*{IJY!C!kc=g0;)_=)2!mLb z(ag564QvNn!(J{t8--^l+b+D#Tvro#?o8JkGe&+Mps5ctmX9J{zM48V!C1~`l(?ZV zgdW;u75b08R-uPCT86%C75Y!hv|rt675eo%R-xZmmhjDkR-s2M(;j)=B9vUa&nk3- zMepSDe`zlKe96iCYkzdxqMXM|vyKIZ?)R~`cv8six1S{Js6lS}2UVJi_YASn?^p@kbXlw z&D{8u6F)fT<55*Y2Qdb9PW4e?`^gI8r!${h80K(1-clsxz4{uD1$3^oT_$yUuFp*ma*+ zg$g}n5qh1~Ftb}N>M$hjcgvWyOGx(CEol~69(&K6Wz6JfI>#Sfmba-T=b@(I`-p9Pne8Q|@x3l-N&$92bpRwy5I~|WIycngs z)%mD?=z_i>R5tVp^!ogNN$ra6zR}(NuP5yPDSZC#3)u31{Q@E($yL|&Iihp3+A~CX z^7b=o+B?*p0AacdAhR%3AV=9NU)c4_t0!Jxza8AuWl!b}1BTR$er2)0%jc`V;PlGd zwtVgW>4qyFJZ043_g|Rw_no{zH2(V!w3cEtl+phyov2 z8@>|0QhBZxGb!DtiWV|=WoVhl)|PfToV`m)=QR}CB!@fRk)Pz}y8N{*i{6VgSPx{zkoRZPl~qw zE204A<$ui@g2Y6SLn}6P{@g=OxN_};y_<@!Y@3+*&4j({xdZDb>|M=$z30eef z{J*zUG%8(+RzotTGbE~2?E~S4 zyS1S%6JM}exAyHzYuf5A4y|Z#;wwgRx~fym9DyaWDrOdzD~gqw$ZX6!WV=_ZPLT@U0siX ztFQNCmgpqC;n#3i6}VSnp{#m19Mmi@*Puewdb}MqvTET@)W~{{Wnc@5Kv!4MTx5E3 zkuetzzN4;fArTZ>HWzbb?L)Bhuu#@7ycMmo=amu$1=Wi;lg{dUu~tHy<8>1aV>? z65J>(iycPyq)~HH%&!I)swj(A^ zq#5UQ4>?0}6G2aYF^!}1o^}f;Dq6Yl^4?4Sj+7f{yo+>>W|ku(n`Q&e9Cs2un#-k! zO%;u_las-%Z2b;iuBzZhiWmjvR&t@N2{;d_}01s^k8MaCSMsbrrGj2xxvK&2jTHkj-5UVw;frdYZWk>~uQ4QK%Wg+)Xn9Fc;DR z;mZ%uOdcH15X5aL;JDk7u@xlo3e8Lv-!hrMh)Gkn!toK!aByq`nN5%vk@OLI8>iZC z{RAr%%dKD0l(0VDK{!64!H{Y15<~JqzbUnFDC0OAso&EX=YmQd2gmtv6fln2po$nL zSIjs@gE*PNLI_D&hFVR5B8WY}g$z-_khvtCPtZ>gaDrb@)jWgA>zvD6N}NQGThcIJ z$X~^X({mw1e@e3T%y4cgLkuA%R24KcnMxfX zXGu2l9$+vIo|eXzs~qleb#)K3qXf#BA6gN_sQC}1l#6y3F97~8b$D@RDm8;)10c5{ zbT%ni)21F2kF%bRKC0)kDsB!!tv z(x1U`DZ>lMa}J0s2l;TCKuuPBm%=V1@Q4F{a}e(^!wAB8(Rpc(?}aT6O>8CVDf%ZwGhl?BDI8|1oBl( zWYOaZuDxzw%7|IiP)s7zUIoJtX}ihvy;xWz8B6jGaSL7cH-fm3AipDtlL_K&k~qxb zS%Rn}&_oauF!Uzk|JnNw@TQJ#Z5UoNv%AXLD(*$Hj4PI{YD@GM0%@3%3Itqaa01xa zhCm1b(tGdaN$&+n?;#<*k&xbdZzLf-!Qaf5Tqt?YbIyO>|NXz~`g2{xvMkG6d(WP^ z%Ubu06`^Qb>4w3PXfN2fS(ACNMSP>RBk-%dz`PQ*G6A%`+$wxD~M&rX%rSK$SA8U}H>@A=(BxSh9js|%- zA+M`s8`O2Tq#U+m`l2=tRr%rVLvfX3Dy#?XFfBi@P?Pe+yscc%X9g`0SUAdo3muid z_yUI;w#v33kz6Kx&D2|+^l*xo6K(B4?$))$E8VA`*cWP2PwX2Ben|;dI`0bC^mZTP zTs^EU+1i{;G~KKPQuQ}$KPbsmTR0evN7_Q+mbOqTnaX>Kt#E3kfnoPMA&9t}o4yp9 z5eW^8^Sh>@HWn{)()pkjJI~o~QOkmk!#E&|ASq#!CC}fNP9PY7!AqftsrgC<5QoHCQp#Lb9L9FE)kho1@V%zjLFhNH+OFN(7tR z63JjwLp&Oe#ADHTTSE_Rw02;xaaW98@QI5Z1ImZ8w9rtWN67|VbGrH3x@cahCUI!= zw|n1VV*jyP0uCTO@Bv?T7A!wJHRrJQ1+6VjO)m1So9yXUZ#9%#4Cs~Qo3!xE*(<9} zuba}T`|Lh>p94-Nqw_wLz932EKwy^<{DfSs4ku>K{tEk%(A!9JXIE-YPtyhupQp$C z&~U0XxI_x^TT@XdaZ1%w2fn%x*vSZheY7$B2B=;PaK zsi);3Rr*2>w{or((&mv5$jN#2|l)ZFba zDcauBDCu>1U$3I2zT`HE*$xIgn!m%5>d(rngbrgc22nSP>G4$l+xB8hv^kL!o&5F5 zriRarUbP|E+|tw%Y>lQ;^=-+PNPSyt-gR=8QBoHRUqacC8Nr_^o=LfqfJS zYZQ&XLA~Z2xwJ8~pW%D=0J#+JbxP9y;0`Qu;wF3VE$+sXDNe^Bw2R8m+oi`S-N(S^ z?WJ|GNK|Ix0vwUP0AQE-HK>-KRW~>BAstF4_>$Gs9Di2rl@e{KwqP`xN+yz_hGa`a zYu=Mjc>?&XDvzDk+PQoS#dG+%eMa?4=ct%;`Jsy7SEN#4#oaZ!T#_Gm(p-%kPkecg zJBRpUhe=Fa(htc^>PUhUoi}@GZuF>kdQ=hwtJ`*MLE z@I}YFBx5%41MR&-eudyMv{wFA=}fjn)FqK9~O_KH-qm$0YTAr^FY6 ze2QN=G<2v$=D_ALC%J@wh_j?pU-&-LI+Wi@7T#TWGX|y6<)UjS zo~f78*+J)ix%3+sIVe5c#pheWhr9Poo&Dk=0a};$>FIh&T{QW#B55l5}dS8Z9H!c9+a=g0S_+6NW3zn51FZ3^iEdI|Gcq@UnI)?Rp&AHA4%koG`xjMT#!7r_+uDI#dYWS-fZ>lC7 zF51^6q)By7tVNSU_w$A_-w@@`6sU_x& ztB1nb6|Px(*2!Tay&*6()?A+1X_EweB@ilz75fjLr_4E($wdU2@@kC(s&JYKEr__)x3af}Q zrdG=zZX8eXn4qJsJGGb)y{rM20dQ9P1mVnL*dal-KhPCHS0e zzD1q%bt1n+Nj70GP;>b;04I6Ky-qx&cCy}BizPva{A0bgY4}uYpM#lHyGtT_R+5br zp0Ct%gVR&XS{5w%CG48>L;Xi{7IbtRx}<@Oe;$ zn@8o(`I2ULpHZjY)1V(OD=&dkUPFEXVh@{3?~g1VmJVyo<_lBMoLm`}3ZW!2KOc_n zi(+(!=5l^CE0DTNI^jXZlV7Bx7H}}i8BbRPu&|+=T%$<8YivOc zE*{})v?52mxj^lcZ{Kft+ha$@egd;RYHJ(uL|CD$LS8-6Mt%=Wiq z_8GP>Hd-FXPduQX8(@Lc@SREw0tRy z<)o^^s*WO*1*^srn?mGC9&FJXtsN=^eHe*e7)$PCcbOY!?aLqt$ z)wi&I&_2~SK$O4n6J$fAW?)n5FG=IfP)%s|C46?7dtHZ-VnMc?M0KZW3 z41`)bmiz{*Ycc^#TgjTfxTj&DbkOZ(kjn?QJ3Rr6gJGYel6~7WrI}77p@JGjhzDNmE#of@_!!w??pd~JATHORO(E1KHfJ-@bPFIrmLy%+V&d0*<6o(?8LLb_XC(z0yNdLzX3}*k_~C|uFwlH{qjnXrpPVap%oj|@3#LN_ zuTsDR5MZ!3j1h62g{ss9W{(MDML=hpGFGH>j#cprW%7o>X^AJps!aCfJxV^dGCIvl zqC7^`x{0z*=}5D&eOP62%>y70r|>98V2azEb*e%04DCAbb-zRkT`LP!_>G~i?(Z9N zJ7YbKU6$Ukp4B}quV1!~2!qnh>98fZ~Cy60cK+k;`Sg zMv3_Ojbic4C;2hkG1XLX&(q{try<5%kG zc?d{0Xs1g4wvI*iHN(=u^ld)iC&!$Aj)PPy=Ax$@Sqt(Yuz%`AJuyt6>eXEx3n!%J zb)~i_uueN_VbijS9gBLVZ`AztF~6gteG&iV@NZ6j8K&9D3_JX&z*gtj?#}kEdlWuY zKDG%q-I{7zv;QZ+=O$%B9M%l*+%_9%S@E=b;+~Ha}4E*uXQBc*>aV9@+Ng(QK zAm6|kA#2V7n4n^wIvJ^2hqpU0u%!E5iZ`=IaH=7#PwPBEu?@&|(&)VR@N%Wf7rBYK zXb;C>J%Bedi?Yik`A>jd z@1$8Sc*G-32T}{_IFPRfa-7ZV_{23v>@~7QGFRRWX8S5>wiO=#FA1M_s$=;7U1`>Tc}t!jr_^n&nkgxB3_%!-;$RK5n=Q_}t>aji9d| z6gdC2JJ8YkIjBrwuMqwzXAr8;2)~OD^{R&w`9T6EB^5B;(%%ziY*t`DC&1~HyiWM? z^)eyYVG=kR9E)K=_ri{jp7}2lvu8RLGT6+gZR{wp7cu>0eq!BfK8v)qFZjwM&2jJp zo|FyuXTf7+H2-4>ro&W?Tt+NB`6s})04qIOBNOu5Z-m{iOyO5>;c^1GXX1SG7DCo#|Y;K1?qmTXbHtvy($(t={^EgUX-I0I`J_>gGo7L ze;2uwK$nB85%Z#Uhzplx<-(o0L*~psOCeLBth?onEPPT$*O(hA{aX@H@ES%x*Z7$_ zI*S7fIuBK*j}>9wgHYps+2*ho-AwuAGx|Z}CCpsmu~6g9s4bPri450et@efQv@zPE zjtw?14}x6LwcM-udc9h;FYMKFqa3NM0`zHq90`PMCi3@etl0F<4caCfR%^Yz8|5!4 zIZI(DDb}~s=`V$3xEktOKIcvy_eO$ot@pCRXk3%N%f|*yuRGS<)2#GG-YW9aHQ@9A zr4l^A)Y%69cr<9FO2gq=I@Ib*R;*%0Vayj8smZai)Az~o`R;q7x~eXcXfbVU6U_0C zonE(3w$F`WpoXd8qk(L^G9ckQ0SErzFJ$Ag_)}leBkX~u?mr9BR$hP)27v$8T>uz_QVXwj!r8d$H(mr;4tI)*{g&D1qyd@9UdV720)WzuS`TQpitS=y}umIN< z4u`oiI}kuAf}aDpzCf2fjQ>>!%mBxmg~XPR-Nlk^U6G@rm~NBF*FN%fep_0ZEFS9a zK9Jzztlqzzo}u!w3{Q&Wp}Xh~_=b@WBY|0geHdO>tgh)x-+w0#?-~jz#y6u>J3NZd z)PVhlB7Be$TwlbAr;6`tv4VnkHShEhI{e*Gw^n~ytMb)1IK0@~;AZE88cZ0^Ye*6b zE^6@L&3x^Du#CXy1lA>T3~vHPfPF;*rzRx+8Vy?;#>1--@_L-C@t4jD&?q@wVIMY- zo>E&df&24!sZY?lrk=HlEK*zw{LVZ!K|TxMJ!QauzqcBLNn>4*!}W%ELn0iBf8@Ym zVt4i?!%h4ORBn<^+g%uN9i44!9lp=kI;!!cYMZna@HR&t2M3Drg(P2T;GK@%-lwH~ zD{v2oNj@`hFGm@E;&9+5M=rkT)YxH83_GdZTO_~6@B{wh-k&9#hF-lkO_= zDDMY!p)`RC2m%$%Sf!l#TMX)QAOV9EE2&p2s!!aU$vxi=is7ivBTCf&hFj0iCwYB7R^&}1=!)&g*ap9Ozv(QBd=D8!cl zQ9!Q0#Vh!R)n*f4_wkeiyIBA!B7D-z z|A|n{$q!TH8h2j>R-ac=Uptz}dlJApw5})Mf zaSCw+xcoLkY4~`~s9U@eJP&xTw1%x_c)k?#Rh}=&z0x4; zWue-<&t1Rqc_(_NCUfc{DHIe^trJu|({)nlkAbm95@3wztNXH+&r;b0 zZT+AqvOEiwn&hA$XYGB=@gkO67r1l zTXnuxe+knp&^8L>>5v9(g0BBT2ctGSRoCnPjM_?we_q$V60C*6xUD(8Pu#EC7_mp( zVeG}4!Q1}$ID*vti&EbKlxyTZlG`|xjI-Fg-q|I@kM3y?+APQL4T+5)j}G3Is|I>9 zJ5c4>IG_vhxhrlcFA)Lh&Lwmqr3r!xM|6*Y{v#U%=`1~W2}yi>j(L z*$VrW_-B6K!TsS+VA3jXMD zg6zZ_9LTJNGFA}t>R0yLCc%AZqX3cP4>384^y_sen0~#oE}Zo1hI|xA-)aI)9tBvV zyKxM-$?rsdq#sRwOfjMN_EwQwDIKCl(oN+8t**0unk(Br z%r!Tyj2vgmOC8RW9KHn~q5?k|IL1C1cW3$7n@6$8j`%C{kP8dQrwo5%c2rmcjZkDP zRuE!rT^dSSC08$au36F@9N*EJ3O2U?kn4Nj!K(3xTpLMOO1U!?Q&WVtlfzs%3QR0v zh}|Z^SzdxIHgLolf9lx|5gWFo+s<)y7Mn}{BIso?WQ7V`NS6iqdNIGF)y;fgxLH+Q zDB)9VEQ&OXQ9k>d%%(1r9g|FUfQtsRl&}-l%D9KgNq%jZ-3=oO+6Nv1Dq%KlJ3 zE3lj1m?=LhnX_;V(Hki86#(XCNx$XWZUyZbSzZfltBenr0Bbzb9@*j@o@9XEaRB-@ z%Y~cxD(i*YK|0k_HY?!HgGTD}zd``7l>p|t{7c%iWOZG!za}u>U|NAMQ0QZ945wE7 z97gIC=~Zz%fdW zQp7L`Hq2(d!&V93mecY=e$q`gkMt5uD6xV<2kUMOwFRe458hPeyLTI{#+#~aTYx|3 zpEBJ)p}pHui0|^@Eq)F8vVmXF-eJCuI{Ok>P4RO%Y9EX8M1_1MkD0`;Ys8xq9E-j$ zzvFK-7H!gzK);vy|Iw-2Fl;}OjV5}4zmfebe3?+ZN&*bodkU(4la)uaNP9lKQR)fG zitoc5p{*q^D9Vx#%j?7g}C!ErMGZB>u?!pM}ld=c+yUxXE@MZrc6 z1&_$}eUQV?#B8@sejjo;KXh3fkrm)*P&rlr9D%(RW^1Y4)wxFNI z<~!{+{=u(_dO1SDJDFFy8Soy~+k3vWj^h0+!yH1zoH^{#lNx?y@37l#XKs9Wx9Qn? zbZe`nIeV=8y?_+%KpX}pP+_?or}vYFivN%_#1hFJNP~RHc9zS3$ruKCEG3Fh&?WNs!F6 zdvgrg&vI|(ZD+ik2jL}M3trrn@9`wDe2*UscIA5r8)jF&2T_T?qf?`BD_p_PL&j)1 z1g2U>OQ~hj#7TsoNEeuG4}+_xe2|G#J=m%#1~!s(Hl@v=c|f9r&7g}&h%bs)0~wvM zdQOI)C9#{pN@3*;I4`5Ob6(<>^Kt8ZFmumXU zu36Hp8J6@qqkC*`yF_{ynRgPALuBzQ2hxbavS#*wU+J6W0> zS4&zqvG2#ig9ve$)7weHuz`NVhOaXdq&_~3UQP(_f}z{-;Vb+3FcwN~bJq7NU7`+9 z-enS}yqJ;>DyT?FM`a|O;F*$`!`r30)6{lJ_&x2C!InUvjq^V-kuQ{7SPvReC@z+I zV|`@WA`wFbaP(W zEoN>PMnN`iV`&#mpDM5JGr_)9*(W+)Z%> z+jLP|z2F9mWmq;&vjMxA4GWu=d7z{|cE5q2fQ?+9HeC#Yx3TpPccm6~^rYqpbafNk zP*8ajlXX=drbxFazV~iXDo2Nt^|vU7Q0~?#1=dwAVDg;|Z&!LBmw@7396?pvn7Lbr zqt|F}Y3%3;?j#y~>$*>`@P+Tw?aDF^lKaYMHe}=bE-K#Ba4@)7A)H}6q~L`*zy@7- zH)m(7Uu6mJW_9);@5YyvJ=5#zQw3i0nhVCeIFAtK&3i7zZuFTqCujRZp^-{)=RsNI z0q}GmqUNmV%n|O*vr5LjxhD%$Q@A%)i|3(Ehf zI>^0QJK(=DsuvY=c_Mi>{VgjSo~g?H^cMP1w?*` zq^W({y!n@XfY%r22wwk;NAUVjA){?Gmrrnd_zvK1!a02%#5`$E@9TcV0nkAlvq?Xr zheHkMXY_VM5_JB}98Twj$K%P9KFZ=BtET|&%4dH7mPtD7Yv)t9Mdv@~FC}nouGUBA zmEn?aVTyu0ie~7%`Criaqb2ed!@INl*!;>o&gLh(9Wb+qv-xd;&1ZLS%*J1wn4$23 zm1`0`&(2R&X}<7oZp>D1vuC`UHGKrW0ij44vm=9FNzD}}Sq%Q#oB;-ZbIyR!KcWbZ zp$cd4^9rb@72sG843Kxl(sKw>)^O}UVF{aC2L8ydj$R;zpHE zW%2k%)tHwqL45WGe4CF$U+rCE@oagp6eHdJV zAJ`~v@ZcP)JknEMg*OJ0bSpuP?KU@(Xil`$Yb=n8X{=XnZmMq!#^SL^Lpa>p8jdCM zp2BSf6?Ku&vxe=_biu3NVr(PBZGOSmy5+*l{F4{8bnpQ-FP9lO5weZSe&MCK5Fg5~ zlYYs^l0vt9nny}E9=wo4Q(=+|cz%wC<%N!%1xM!^yMyzjLi{*~=(Dr&&)i&GpDWA1 z0}JNjW4Wr(hEL9wa4V34?k@@)zvaT!5;};gpPJ{mDG!GdkJRqLmO@~M6ZQ21StIgk zq7y)%$-4^3{Xl3wxhp_&D0?f{9X>vfOeJh-o{bj59)J%O+2KllnG49{x$2oki#crU z3^uhrm2a+eP(FkSb}Qml21(>i5a#bxaGd3X`w7lb_QTO`2Q8wm?lmO4JCbJ^v1)@H z1anw>akza^r&8UyBHdH8F(lcb(JC5$H0~Yd2J#Kr%yDSXoKAi=heaZhBeFLPt{Q(d zj}2k2mGcXfavGXGeNqmESBr5e45cRFU%X>xq!ujtDqOd6c6)U`9#L=yJVNo^{3s2m z2pqQrG@CqQh+356yQe6JkEMp_uZAIYa{M!P`V($CMt8?JlQNGij9mP>bY+uPn+5i==$37HndrG)* zRBvyO^N8WFj~!nh^#gf`;Z0J8y^hZ2?DgnZt~xp|H?%c%wl;3!*{==X@_U3tci^pk zE?nQDETlhS+;lA;v_2ne_S4x>{~?`?#6mlE4X)u!`x+SU=TvD8U*XpP9h0WC5kYB3 zW+?4wa9Nag1CR)0hW8K79ZCrMw`Q~|2tBZsZnv$wV6VB*mL{&-TLx1zoN7;qb6}kh zW5xFL%QF3f6|i(g+EnXz4?eK0wvga)!a%s5ko)=!gb6UMo8!6E{Qwsdjh;qn0&;WrpEEASl%{IDSHA*9n*}?R ziU?oeJTPY_DLV>;FOV)4d77yC%<=`6G5#??5*|tDF@gzZ7q-9{(q{{N3--P$5oI5S z%L$Q@i3*W(slX5qvw;c`TG59gGDRZoltX>N*KZ-PhU$mWOq=LI5<8Q~dx6<8_=KL?^yH$o<9H{lP$nAbP(Wqm6$7vMY)Q(*A_~? z0&R^<&S8TJoz0bpsIGRR4w4HxGn+@2DF4uXTCAq^f{E&X+PBTRA))1KXY{LP_o_{OqS@*`&Fo7WwInmwv|ALA6hQ{7AT(~l z5}WD`o8a2VRK~R*o|;_kUcGY`9#O%yX>5tG(wLNaTiTXvSrJZfms|41`)bu6dk z3L2ReSb7j819DkpLDTY$G|;D((H?EEShl85EW3iqN9&og=?^G55MCTm%J{&jHo#KK z$O;)w7OW{IVV1_}wXPIsX+?~5t7AkZ@@s6hfB-@fyPn~R@_zWX?~x3Wc57fAB|)REYx!GtVW~UGlSF<+!q@HT+NSqOfr_u#IT#OX=k!a!aZNtX zJ38+xSG88@i&Sd@lS{RlQ0c$qSTYW(QK&(UNATHSo%oZtx3`MEXwc`~xYc`v{1qj$ zJZy%?zSYagzT=H7y2e2+$sr4zea@-s>UU0;IAD&Kt~TLqC(8o)M;m8cZa6XvKgjBR zhYzyZUe0W^KeG4$QR>|GgK0n0xXNvGnz(;9)kt>6DEv9geh%OqMzqTSFU)q}*IC%DIBNk8|1i$79*Wn?!SVpXipaYZeJHba|qjsZ}n} z@y~pM?`9DkuR}(a`N+$rGQ6}<#ktUO?W=BQsUFJD2o` z=5_6xJh)ZCKXRkO;y_MYN-ONjToBb|I;(q7)0wa=_w*X_;!Js�vBXki&`GOU<6C zh2mWZ%ZPqj9=V^u3EJfYlHVzsG&>ja;iK&ZzqkFerTEzy{O0?~_(#F-{Tw0qd4%8> zp3%{BSb?*Kn1lN=I>*xUjw{sZEjdEXJD;%H zB60#DAx0QKXG|`x=@al~s+NE^SqON4sM`y7?L%O9U*)X8i`0_t>Q=6tQ{I%Cc`1N=$%czmI>)bkqtJQ<{VpdibLsG?%-_8?2P$QJp=tf4uvkD_(KWvo%lknAbio`dV#NbQ*D7`qK;#Lkn0rreTKi6Shx4#c%{p$ud2gs z+ABCmb7PmQxnRgR&D;$e=B2f)H?n*i-pH!*#TL43N*CapS=p8z#{8TGgeD@U=e{=v+RK={*?uEj#Gar z8RiIo4j6NbAe4`C{$%|Y6}?hmN_Xdi_HXkL#}+wYTNMA!3y>Ibb+wKldll#}0oF+Y z^cG`Nnm2XjK_Y)}H5SA5c`8km3mLeu*mvf0{Qe6iM^@XE zdXo<-p)r&c7dRV$B&pnL;$9j*HS<^i%Zr`ZS_XJXQLU^}T*9(duUC7q06U9LOEZ~0 z@;Q?k5%mN&-aT@@TBq%{$K7N0y85!?I)ASs)jN=x-2|CQUzhZH&kv_>qB>_F`6T`y za+q*v$K;cYJo%{DkiKt{OQuQ8P(fnqGbDyH0E@)j24v_!C13u3QOP$j`wYp{@a4nr zWM{|Wzb@r#Ntg0XA1LLU_dh7*yAI%r|4&N!BL7J#-w&j(ue}e;wpjkfshNVld#r-K zy9NsSD6u~P@@Ua+v0cgD7|VRRmAcyZ8dS1(KBf1QfnE&G9B#CtO}-+(?iyU)mWeib zXP40?v7N!?IH2!>bT3DiVz_Q(x;b7-hm>q&b)U!^S;gp3GP#ju$;$vYvO;G9h?mN* z(Av)SN7z8)&Ig3a?6n<|ZyGJ8dpPBnGqY6Q#n_^D_729Zs=g>VRH%!UQ@o$G*(+lL3s~Itg0>^l9<8T!SuHS zyu~;iK18Bz68T0U`%!L70=E?ERJ zeOBYcN0(m%atTw$%D7eoa)w4$0DLBqkQfpARhs;Y2G8i~X}apySaCc{9JB1KZ5Kpfp( z4r8jQn{HoJ+xY>-Q&a{i4p?L&alj(WxWGvAMPhhC^flI-+ZqZt)kl+|U?S3x%B*&6 zeBEnmh$X{q%}w#vL{r`-Jl0WJ7m2*h4Ape49f)$-#57Av`;dnCY`&PSpA{Gs;i5gp zO6GN4NVkBnV>7CcP*Cn+(hH`i`&gEVZ+Ra5rKx9`xzeFZnE)5{ebY038o-+lcknBe z&w`AGdaEO{Ak{X9!BZ~fFNb_QKo5Ajmr6M+3f*IbK~=n$jhL&x??$y+GQgzydzyE<41j-R_pIG!M4)4@TVkIyl1RLo32%e~*Z8xttD;a1rW2` z?sDQJ&lz~O%Zo?3RA@0uL|BVCbA<_0VQF8fFoV-5Ce+FNZ(L-T8YoUvr-Fy#B+h5! zNgZpl{K_^N+L-!%7X6vvA)0o@K-Hv=)^)dZYBmljCprxKz64t-ArmP+m*s?dJM6CE z(OEMKIK`Jz+QTy}rps61yl0oVt9%WcY#w+?CW<-ti~jIntqn=4K)z_EoTb)otrbF=Bu zX}$Dl{;o#@<}*!s41E5vpc!@j+JClf1Yb4UbMa<{3Mi2a_Um(DtO0x4oTh;u8<6u= zSfnX88=fAmP&vh5v-RB0Dx2mu(6rf&n>2k-8@_K4bH+95I3Z8wYVu4eohR^&JlNB` z&aS3x_>tzorS>{RT}PU)TrM2Rw1W6A6C^vCkN5%d`PzW2)};oUsngf(B-DSt`PVbcbB#I7z7<-oKlE&DavR5yi7T<|F+ zzv)8w(+%Z{V*3R)vLAssm@AIZY&SUc^X+gVC@0&T=W>qfuoOSd&Q5pejZ9hY9FY5R zyAO20-G+!5n8%zu$$T#slNLm@P1b)lFlIQ|TiK+Z$+bpWsar#}@v;&$@Qy+c5}QZA z6{wPn9~mmV7|5TqhcmnTQv(+kVMbn)j&jhM-lnv&wiW1ahI*KH#}2TUJ?1by%S;WG z2Vw)>p^&s1z#c3~t7#aw9pfw7O;asN>qI@MRYn?O2Ysz7Zx4apO2|4zKc-}GC0Q77 zT@h6aHH9yt*Asb7zq0il4J~ZybQY5j<*rPr*nHXTzu&pNu(f-c`lo~ejjS6~3wHOA zv1wJSDXnUq?FbDE)kcK0>za0_0`DP|Gl49}Em(4*CoOCFb1Yfw3I)8DS$fz@rFp|9 z7f4^a153IphwMVsD)^s^TFFxKwk2ximXcv)u&DK1>42y;(=%Aqa`hZzD{1P=E|Jwh zDkEu??7H%c9G%g#ijmJEmzqE)>Eyv2(pTmMy*Z6mfBg}zepPE7!!zam@Z&+M)>PfN zK*kRxq!;z6T7Lt)kx{ia4N<16+o@WAXc<+@7x^S7sjOw#dWc&#I`c>L_T*f-m&f~ZCbfxzz zME+2cnW5dF(%}@!BE7Q#PWsJBVT@XAw5b0VnG~E9Lice61UDieWs!E3(>{ z)8{oh^R50%!j837%?f-%$eB96suHX>0Xq~>+7&X#fc+I1LHGiL_MC(DDK`AuHm=d) z!K1Ut50p(Tg}XEy;c=-iWTUP+@EhAU*{9$bb+<=j%?&MWF@D~g6Huhg83v<6$F z$y6+wingXgZFy%AdzG(#L%D5=$N>7&=CM@+If=^0N%*r(IN00g2+feT(4BIGK1RB) z6BmZd3i1s*Yb-E>x0$}x>!m7R^aq=b%?G?g@;HNlcT4;oPhvMSY}Y5OYHf-olFgBJ z-R4_+eo<9jxc&yyAft6`EYjdCSucyK#U96{Ib@`p+~=^_>+CFt@=3QeFT4A$9E^m@ z=(~39HxsYO&Bhz;2+KTlw;Ff+TJ+ApC8-qVDT@s{FGQ<74vO=WmD@cUkTP_ukayxQrzN(h4_pq8mJl@w!wNa9< z)#tY32|f)ka&u5b)y-}`6HzlC4$YP7DK7K%u9wbb{Jxb`hjFQmzU76dDs9_h9CqW| zl}=O~d#B}y{rx~~haK_AmyutKpFMo0I{TDiwGXP_mw)u^bHA67@_!a2rY=c!E$pVO{XeI(Z05)TC%T3hSWw5vIl ziUeDdiD;;yC0x%zUfyqxr~=e>xCO#~u)fi8^`j&+J!U2jR+AEv3U zV$x=qHg;Kickn1GxY#1W#X=q3?FJ=p_c`#n0Eb9XKBn$w@`(W7G7+kI9>_DGIqk(e zBy+(H44&k?Y`xUi5_lw#O_C|-*Zu?|GN)fxO6z6?`iuHL1Msml6Z-@N6O%s#4muW| z!#ZXK1bX}(GK*Gj=Pw}0p(2*6!a-$tqd`!z)oHR`FT;l*DropmYLyT_+&5*56YeHS ze-f*pCP4c9^`rtiWzP%JzLAihLB53;XH!{Nv;w}RK9EEQ-`TR@YL5UZrdi`}m&rXA zQ`+Vy1+8~gyi-`y7ZLg~JEN~V za%rUBoW25RM9rO?v8B)IL(nZ}(k)WDm2MfoE&EaQTxza(*Q&%Dt~q8&xI%TpX)44C zMpQ%cDi~5@1;LQIE?tZj6t%yfN;^wIm;Y##&xzG0W07jrpy_%x@lPm1D*>xiO;oj! z=ZJi+lZP=qZD|OvegA$YzJ{2uO5wpC05_tpuq(A=uO55t7iq zXox@2AiLVig(T#ezDQ(^J|c^W+bRT}F69l&2Y8I?|Du6-s0+pm5$Jge``Q{U38+xL zU5Gvz4QP~M)_b5rNI?Gjm`9es<9CH>Yyt8#BcDr+mh^MG4Bt?ETG|hNk^>jnC}v9{ zgXMjSk4qc~s^oS_fK-nC?y>B-CnWe<##dOBK1^{li#e$6(WY2~NFxm<;;9(5{h&03 zVv%5|ALWXMWQ5C;by%~|T#9#^VE%-xK(9YIpM9>cvQ8e+hjMd{8BfzZvx%!RNH08 z3%XKZ6Flfi1Ry8J6=p9bo5 zqRmz08AL87WQN_yRrJdV2RyUwfEP;yPmprq8P)!S1b2e8)ya>pMal9XLUEi7u*xV| z(te_;%y9W@0z}2L41>-Dd`OwFxiu0C#ZwIy+D$#AaJ1VLjR!-mi9|Hg)DjKF+VXyW zNU5re$FE|B70G$22OmtAisRt~Y<|k;jo$T}GeMLhN3@~gZaNS}In|1yd^(4}Y^dXF z{n55aq#@NT+_GfrQs|X;_R7w7zNnN<;g~5DWHxhBHG{A8?=u=Ar)xsy{?=>x`9_k# zI=e99uTt;}Z*T8>&L`xLz3Q8YA9)EaVdN32Jf*|!Dt_$k)dj5aNE3-Z-HU&F$H5mm z<~j)eI4P1piP7y1jGRF9g4#F<;$JvecAr2K+wH6%4tg zKV{!rf6=PC`i6O?!QO@(K5?;IT=-j=X|?Y8S?@4`d2aQReF;+urDHHGM zWHDcflS#sR2Ud5tHq0!8vV8o$(#DsuwE13~@3KT&e&7C};pdgTYv_V}VQ$|@a5yW# z2@V*}e|>ic{^bbZzp9+l-RUeBn_7vF0)^_PwvKZEv zryYWOYVDht@9|Bn$`^~dZ1l)Nu>jx;EYF(y?`HTsLkutp=P_`sXSOiI94U$yGm0NE z4NE1!$^75*>=RGt%M^cAi5dS?;>S}j)`!j~!%;pn?3ODU7)~$Enl(Hc;^^W02)Q?i zO<^zng#QYQ734jsve_`lN_;G|SNo!c$cY$){9}9SYo`d^C(o@pYQXk5Ta;FNKCcmK z&y9uTT(wW_8CqN7-}}kn_HxfVarNdHK3qZuikLnR`G+ zQuXjM<%$B>7W6HeUtg!M&8O{Uj^oSZWlF#N^G-2*RXU_){uA}uNkjCxhJ0W>z27c` zpcmbuyy@54v=B5uuKX0*P6+xD`h}nkW|H2-__QAL`7f53`jF|n<4UQ@7k;Y3jSrex z^bat;G0DY5{+WX|vv)IDD=7yK!~4z4$VwM~W;LC|@IWbM&nxC*N*ZO#U)!-DI@A{_ z&b84c;5^I}+OKpy$hi*tdEeQr-Hfk4~ozAwcpMYNvFeelY37dcgACv4UcsV zKVfd&CkOsMgp}>TvD4-H!D*@P&W=Uh{ppIw4^ZsTe?+nQoEqLK^|YH$u-$_wb}UV? z%LT;_XDD_QWQ$^74;*;^U!d4C{uWf(o-~MApGN5eM7y3d>&+QveS^iUzb5|>&U0&qS--MNX8rHO zc{0p8vYu^``WE*=74#bIh3zWnk1`)(mA=qJ%*IxO+rK((>#T+>{ttc@JbDeGD+&37 z2_8KPOj1haPiddUa}VjKWUZ8Cv%w)bje=1Bn~o~aE`QHNX~EqD0uX0>7PS#ve{rCX(&~X zmi}ExPRYEkqoo}R+%q9Lk1|UxID3bXoUa&M$>?_gx3IwxITNM6>h?<%EAViUME|k6 z{cAZBk)z7WYf?HQhur*Mm$q9x|63XEu_AK10j&JPewJ<3w`&h7@|XXO3iti#zpZfJ zi|nGp{V7!>-}I=;2h^EhJC?YM!v0-Xx$nhx%t74A{%TaL;G6r^$@{kd)#?Dn zA1^CcsTrQNx0WtW$6M4i%fC=1uTWrpNiH|5BFSZ%=78OeA#>*6nMp`|T1zwi541r= z=u)?|eFZulu9^RN`T0@IT=AjB@<-_zvuus#gmW}O^b?xFid0N$v4Ut)>&mW<5S%(S@f0Xj*O@j)>zsy)_ zt#;+z?F+@9(+3L0ACMA#3c`g$$(YuU3fb;_cRmXHTiNaAfdXfsC$}9_IqT7I zQ&X}bW|9BYWA0s%|If8t{`V4zc&={Du{_O^oNUpwYB+WD=d{7r0{A7{x3@2+gqGWM ze=*(7jX!2(3qxvh&R;0y^s2t7l#`UsWcWxy48P5m=&No~+In+^?}VExD(eyrH#%(W z{%o4gv%aOm1M8g1N{<`^+rK1uqg;q!w>a?Dirz!O?B#SfgiOypg z99kyrUV)Jy!`z^O(}IS*w+5eNMKIhWo|Wz>9ewUTq8t3f&nTl&Ww_xkxVc)(D~@f~>_q$9ze-orrN`zmw2(l=T5D zEu(6c`oYziAO(L3v=qWwrTq%(rPbbHj|TeW(~fc>pB`B4YU@tRr>76Cm=$=h3M}pP z?rKXrJ-1x%C=bL#u~JJr{a5)Je46O7#8XlOW2(C|+Ue;M96ThQp5U*K-74W0u#@j3 zD?MRU4Q!Uw*JS;1*|9{H%NV;@CJVtge|pHkuPXA{2-(;l@WTr9bUse?92w8l3h;ef zlHN}79zG<()f#7B?D#xbfUigaMPfxKsqze*ZgXo6|6+|W^x;qzpl|X zGyFQR1n-N_u;T;5?OL zZ(Z*Nbaxf!YB68sT#dQ+TRk)$Y;6B}c->3#OSzT4_-L=2Elo$49b>AFLOa$2F(zw) z&i2b?oTQm{DUp$1H`cNdWq24T|6L#0;BLcya2)5@*0XQw@L<~`MgDD+d^T#l2yOXr zl<$ruo+@AT7wUjTfZZOu_C0mhf$;^!H%IjjrRREZt5d~#m8#UM&6b>Zd*~uBp6e_q zuKBDAUhv{{tmA_<+p$n&{)T+}e3)|_aQeExnxT^2qJlgWc`tOw#pk!Itv#UajEz@E z4qUyre;0;rM(t0xzz%A2c|-nh8n&_8L~KXHHj_vG-!N?d5A2sYO6-@p+Nv1lsC+-M z&1Gw*Cw8K>&E;u>wz)hM;2=Uqg4wc+kX>;?hlDtVxd@dwHoVLwr}c;T%UFTA;*7jB{HZ7T;c!d#0Hj^>Q;Lo#?9%kdTioc>P? za2rW8z#;!R1MJ`PVYc9Z#fag7(HcsL8j=uamT4?npGXGl8&dH^ zvMC&EN;KuY{1dJ6g};++M`b9e|73QiXiX5o1wE@21ZH)Gpo5_(5qwU@pJaj`$hokW zY@e*)R(XAgl~&Mcupag^L7UJKZLDN`$9&e2-aF=ftzvXTH1Ub-T04MpKcgBw8?ya1 zV7yHS<&J50sF~Kt)6^eiPTqEk8|zRv2-emIdDrQyGX2`yGx|h4i$sn_4WM{qd>oB^rwpLq07UKOsC`{8aeR4$P^QaBRT|h=X9eb z&Cd@sTGG3=q}9f;B1CMJKF0#W$4iF~%Kc(CsF#Pd%zx9sql~P66nsX1$k$d~ImxzT z#@ERtEhrvi3@4)`JjRF?L@$;$w0{DjGcS^?Jil}n( zXAGErQRH4JyXix_vVpO;7&(@BX8mZ_ZkDbbkeEJTv<+y)poPo8uGP%fsmvMM>lf!u#n3Er6 zfu&6z!kOgRV6P@e^_2jC^1=3Q@dU|Saif^*s>bw$Ah*34U?L-}1BIG1iGNsl0;u1C zb~TevAn=1ogUz8F3BB#Gx)DAFT%$`Owde{3PgCrJ0*ivOIt}|2nmK4Lm`MqrFP?Y0 z7v#(AJj#jvKBlM}xYIdNNQdJjOSYL0@V(*>g;bK;`3BNsWfCJ}L?XcgHD|>k=G?Se za|wlJQ#%02$1LU+(1dW9{snQ_% z7B;1Git?E7{7s@Q=ML*F7h_R{5ZDZ5J}2PpFXc6FGc$;7^oF8XcXQ*ig3nzTUuA=4Ita=dP~ zPoX%~RXMUov_W)sEL%Q(cg}(ei4nD=4^dpKJT(Khm zT1Jj?5J@wGz2@k=4e~7_o3-HJ5x{B*Z^^Ndi-6Mzau$>CqPRAPV2Mq# zpPTQv(u-qM!tWYtCgCvWK5&nsEYY#Z+1r~{GAr<<0Z02` zG{q99D%#F3wXt(;_7W$&Y{$5xcQsyP%%sa@cu!ZqFQH{7X4_QckJ91I2g}NJ27X&I z4DT?&_83qti{Fl_y~S&MY}3y3YC%QW1o*etO%Jf;PR`3>E3zCpSytg^mLx>E7qhiZ z9?Z)E0JM!mQEa)V&4j&G{w3xsZ_^BArdIc%Yo=CFmk9qAaEsI3sQKkmMV-0EaiTav=oJ%(;FC2TOn_lL&agZ;iSAq#{*v*jn%*hf*Ga71 zsZQeC7;Y*aYA<7(n_I$>aI!hAXD)?aX=gR_sog3oN7pCgWz0CMU(Kv9z&$F{`3Ajj z;#O5P-ZSWfUic%|=E#GJO6f*BPN|Id$zq1?uIIPg&a&91Qe3SMU)&N(hU;U|$HVTF zsMgrIJmez%AhWVA6j`ks@Ur}svhrN$L}%nf}CBX8@04HMPlLjzn66H{qLq5#cCTuJEj}`m_48d4^*0DqLcJ)^b2Q7!IodQR=cp~?0xfLA5>C)#{Z0@+s>1;O1&&ktoS;W6CulvGGpi}P)N+D~nf+S80!F3f!ULk|l%qQd zR;5#pX7*V?Oe6YO%m4Y3D5DvkLx>DaFQIUpm2$L>$#+=(&jF0koId|&ueASj5GC(f zDMwEc=%V`kzLcYx{V7NFG7Y6uj;8$ADCDvz2#r&5n6TclGBT<#7}$xw|)JM1tGF6;`Fec}LfayrXG5 z^*+G^rg#AD?hO=0HJ+XuT%2M}}eMZ0vHHl^LB`ay2f_rzS0uv)V&CE6)6xpn)X zqvKUqd(p0fj%t)2oV(N~0+}iHPt{%jr@D(NcKI$7kS6aeTmUF2!8* zgU~kiCNP<3hiD>5pL|N>Q!rHR zm;(b6#X}ip^oU%EnBhNUqHsJd!6%f=w+c)1BMOijsO zj!lC!z$b*VQ=b&dP7kn7XGweNJ%-z4iCzZEP{2LU%2R4DI0H1tXzUsr8( z6Lb65Imd|R=XVwCr3xuilo~KN#5=&I{i5L)SSR^8)^NGy!xX6=$n}6*9g;rIso(FA z+-A;-2DdcVgf6CC=Va80*Ep&Co=YkQ^(B`(@{$Y7orGQ_LdI8qZzE++=QgkpN7&0j zvUS(EY&Y!VWIs9OEUWw2O|;$J=p_XO-65A_1Y(d#>}^AT3FR8A-*_ltf4OleAyOGZ zPTkmrM4AHr<(&sPt7ipn?u&~2*hRh|qSyEjN=6Xn421V!aHBC2w*#&QV~UH+wTWKh z{Y=qIEWbhw4k|mrCq3uHJv`FWgZ+4`gO~$VrIPG#X#)Eg?(QE=EGHWIgiaAMX`X7L z-C>X`P;61%$){#;JeURR2o^a+^Y8;Gnui-4R`YP&L2z%Er?}=pP7ox_cIS3xJhEma zwXCkY{AKOrG$*5_?;t4e**kbozU4FZfa;twEkrVlFeT`#Fp^& zp4l+-JcT0dX(3)g}D7ckkUnd0u3C~ z{7FbL&=!dJ{VR1KDvah7Jj?IiIGBH*R=5lLUCmG`8a}tFwZ65b`M65X7E(6*uCVhN zx>w@Zxjqk#@B8ROdZRgyWQt7;NiUOah;FHO4Lu}NbL;M2I0PM11%II;sZUANnT5v= zQPEXG@hPc)BgGFr1RsGaD^lty>EZ2($24h2;_;)(Up0JgA`wqU5-%5&rkbCUcID5W z<$Ox2^hI7Su$hw{mvHZ31&#(68OG#KB-|@VacjXU{3yQye<`p_v-1nPt`FkP`NZ*b z1-@<;*`BS=^o(9e@T2S#J8SC^xI>A~Cn!AY0L@0=~F*jXz^y{%OZRsbrn~S(1FY78<$DdJ-J$oW) z*RnKfxt9C-awor7Yqfk>xgRr4jy+eH>86i`vB6Crb8P)hA0_p%c!=H>!!00_i_r2e zZ;Zi_6Y2-g-KZ#z;J?M-5 z6`^9%KA#G8*`J=XZ-X7@Y-7-rZCLX)ECwhBcY4AWn(4(NwO81PRrE*iu3`FiGvl>v z$C@U4kC`oJ!C(vNBBm_{rJZJ~7bn8tT!Ie>lHRn zG2_dbx;DdBqafc3>@CjyRZcTyTCAqq-J8-$OdqILqQ`+i^Fdjl_8Uxx!43wKPcm0r z1g5|86;l?_g@euR+snB^(iRCW{)J_GMg$Tng-8Q?yG z1&l~DgcTUKcDH=buDnE@RSfo$NzLH>&VOdwV2wxA_)fPpo_uC(C-9ugwikGgw=5<# z%SjKUsHs#i`Tc-@G?=C3FDbTsm&ppAXIs6vAsVgc?4?6<$3E4Zw_)80dWTk7S0C%p zjLR&qS3uAk&?P9xQ3NkXfj;##`eZSkRJzDCoeY(rFtat0p3?1KYb9f+AFn8?LO;_T z`|0wzj2)rFcsZ-(F%$PQ1u(Tr(ejPHs8hH^=0CW9J3##b?gCIJ>{#a*@n}OVl4x#9 zw+?RDB|3f3zJa6DhB^mFryX9{*JKq+h*R&+KrePkXDR${;{%-hPUW>!9chEODp6g` zCHLud(ryL@ZSHh*m|)?mO`!pu>AHTpiUFHLJI`jkrW&&~Av2z+mA17%Y9rTa+5>8w zzr$3Uw3v9imoW0D>ZC-!L>E@clbS5&2*B&~66Gxo-K0SOP!k@NQx|>ZLy3y{M1uLS;Ov3^h&`59Tt{WkIlke_5)%gCO<&NkfPt95b! zVQ1^k>kVJ)`*u4Y;zosy%(vliC&9y=fQvnbzQ0XS=Bu4>6;XAU@&@>7uHkFzSi+jn zxI)2Hj#rvU@Dk5dSPvXYoBXo3yhgNVRddd`+7W8_2$60WQjSGmaUik4E$V8-H`$}@_R|Xf=K(y>~#rG zK!<#o;u_cD=1_-?LHQ=3e~^a=o~p)hg)$DR6r+~-!nIbo8Xm5w(iD(PkFk!*OBMAF z7eCHJ;nzYqMNz6yNWH8 zkliQ}Edf6&NVN%_4XrIrO_AopLQk@=klz>e{Jw}LIm@gMH#F2YwC0`cq}uMiVC7|7 z;8!%ncVAqfNtcOxA_fZikjSS>^hqxs>HG`gnzRSe;tp+n9@#)ynT%hm*|v(De)6V& zuHxTXSwVMmp5t_dk7Pm>BU@+7Rh;Xbm)=rDe?}4ei4@A@mSVx+zLMC1PTWt8^hNm$ zFGRQc8XoM-x3gm74X0LLthL#d5ei;f?56uDxs&fLW(7XS-NkSOLV1zX<)ga+PV`az zN5E>;0q;6p-HT~<_YhT4{P;Pr!8=~YJi1yz2caW6kx^M_qV& zNcEld`w;$_>KCbovR??d4au?uq8Tc(GENB>U?kEqHf2G?9-!d_n3>;=S$w7F0R$-8{gos#-liT6glEBOCMFzi$6^IMVCgXRud}P@azsW|365N(W&=>ULw~3@AQT&8v zicl{gUXf!wZ_1HhjOfhytLtpfEt+U*jW@S7 z#M|;t`|lImSi_FJjX&BaWzuf`|HStH6~uPC5TSnvHU5VkGuCBV9pBhxq3bSp%%E?B zbT=Gq4c;f%qp7G+RrsnL4z)bNdgVkc9OcL<6;DM&eCB9q$UEQpgdl2>$P>)?u&*FB zJ#)>Jwvcp|+yGnqWxMd8SJF+76;%Gbzv=OQ(F9n=cFJ<)ub*cn2stF6=>(y+bb?U* zpah|1Or*J{BZQ8o@~ML&ggCZ+V^D-pixnZX&WaHFY^MkzMKTv$nT`;;ad3ptQ|Sny z83cl&_3`2zBZLZf6(Mx)KSl`kvVRvLR5vI>sLF~E+MJFMnz)Myp~%h=Lh0ocnBs5h zIZn>xyynuZ@z=`aHY+>mt8`w_9oy#x{Xw7yplu*8=rYQ(;K~7Cy_WPX#l4VD)q{r! zIUMv)h}h6;P^!=Y1F1smWYz|*1tL@Ei*%Fbjhp~B@0clc6cO8gy`W6i?^ayV%Lv{* zC{t*Lq}-)smaJk0P9k)@Vxgi-6*8NEqL6Xo?!tA70qqpq)m&&5e0dLGwz zzpD74uz;`Rqe>E=AWF@p(+69?GgNc(6e{f$EOgJVgN3f4=88|PmcxBD$4Ut=RGo0M z3VRT2R1L-<#1wVH=6JZJi38oVT{%VlLD_jny1Q`2JOi_AC8Oiv@D$bPC28z65QRKK z)$BuotS9otk`bd?5ye_{6(*E2tWoU}Rb;>7OO_~(x=3g*RUwNAJjj4!sF^Z3RfbZ9 zJumC6vN&mzRM$Av;1t;glmUB?H+!77bsE#)sq@-aR%^66@@qVJ?A8&v~u}4Ngc1zEd+no zwnM%_mfbx@L%%60e`$Cdg1wR89FBa)QryDP90!2ksS{pqsE@SO*SDlQ%Dz*3rJX3@ zG3Iw_#pqZ={dcP2oy0u!T#8Y23)Dg06~z$bR|z5#aRdITo{V2A72;;C!rt@Y7D7&= zm{f_cwF-f{7>NRVUBP$N3Aj+rMNKP`e+Fb)@9lUJ-hoN&HK|g?5!!^gu~a0HXjq;T zi8drhXq*Reh#m~bTchEowrER3LtEa{ju9H4aKq6N8g8;!(44S}XZ*7{;b~2aUM!HlLoy7!-P!!*-f8WNmZrKmAztg2s^K=i z{EO0YjsW&voGs-6D{#o~Bm2uC`GB3N*bj8dQ;6v3+?)8iKg@xG?kjLW1=`<3wq}v} z0Mk9>F$dfR3gnVP5aaU|6J9pSPe6Xr$Ck$9aZWf#10I&OffQ1b$|Bzb)Oty~s1d+r zS%&@cd?+WXT}I+`;5PXVc+ia(IGk!p5xbOQJdh5&R$YLelaSp9f#HIzVZqJ+Pup(fT) z6a5}s{JY#_2^th5w(}?RP6EC&>W6=iE2yl^7ERBbvf3S znuJr?dt~EyucoUQ&FLL7MxgG^MXr_Tb}vm8%loQ0QI#;3W7)^b@shel$9T@O@;3_p z#Th_^Gs#f2t-=>bHT_s=45MY zy%jg#R>cotr>yyR%wNZ722xcFqf@_4Av87|Ygh7^hmLYHerxp<&#s8gObh z$;jmEYuKz(TwHBrDz@G&6_WUu-h;5*>%g2a#fm^?OVHeK6`Cxm{6^5r_^C;T!wpTL zB!{JWusl|jOuBvdC*AyH)F(z7M#uE!B2vHJ?Qzry-yWmx-chuJKz0_~m@U5J{~aQ# z5~A+cM5Vz`>V%E;(fWpn$i_-E$5q?q1D4o^M2B$1o^Y$SN?&xr2%D9}wV+D+S;b2d zsv7svH~iVH#c_6fE>#km!)^Btl^!aGOO5RA$Ng%@P?SAZxGBaQcgAerfp(@% zK7rW(aFUzdMzb>`V1Hnj9JE2a>2G!d4=3TKVb0T&*gXt1BOrg2aQCoLx-GzN3a|oj zt`B1yUs7)j0Bop~nui((fd0fVJbai#J9o77vq)o}OV}L0{jUJL7D89jj%O9skr5PI z!V=y;q+c5zjaFE{C&5OL;rzyWrxf=Y2Fkb9nTCTIC8FUVS#32O|-%>`F5tGVC`d$2ooPZ`;t*seDD%v;>? z$nZ?I`ESED&p2(yaJGnGz0W}oCU6!pSNtNo7O)X=>p0P2Ag}h>mgVS4Nm<{({-nzN z0lkS1v=l6)>Iy1dHoC8+;PzO5OMz#(!(F)|-B9ooM+Q$&c~78kP^k8nENQ=LjMO=H zf^g4_GJjt)!KLoiqM1N=Y4ha%Zh|SIg6+X!#>T-8SfXG@1MIH}IAmN|nh0M>L_20= z|DWpEx8pAGta_!m?#e%wRI*Y2U9e$}lcLdZn>C(e|77!iEC2V|a5TCj8`dn{y1((W zp9x3POt?%i;ZTMNM?kWe@U=k7{!jF1?*8BG(cCZHqe=f?(4#q=Q`z@-*`xVS=IVCM zDr@O3#QovBWVQdk3UVYLie+pw2Y;=pWRqAM6X`I)os`e}u}p+LM#`A6g{BJw2Z8WU z1dSa-U8jL+2Mb|SaaGY9WU(kpoE%{%W&vW|=qdPtCs5&eC?lg!p6zY>efeo6+o zY%jHTCRxecK|AYD!_}rS!5pupR@L?qOl(bZsKsB;0eM;7sy-kjta$^qK;o0BX6a)(6sl7xlllmh%R6aEJ98BMd=UdU`w@|WmMBEG&Y zO0v^ilz95LD9Iv&N$m_0;-vODa{8=5x=6Z~DDIvrSq>7tuX@lI9@@8C$=9;C@gf;2 ztldhUCdMs-#m*IaP*YEhMPt9TN(d{g?MgONa-<9!$WGgp{J1@-9k$(eCGT3>m7FAt z62nWj+pc8ucJV?F66tG7n&rOzO4e_`UrArm29?K&qz#E$HHXj07*)L(P*u2I&1_o| zXM?saS;Jr*@ipzPPCA1Rj{!tj^lq1FVaJA(T(g?{45a3}6_Pp*w4 z!(5x~xIVG4&<1>&-l|H@AdnXcv{CXlMW>CxQigvRCO*lGy!IR$-p=;M3)xiu+;P&! z1h>%LI%AP=G!_eKPIvtl>eQU!JJl7<4%D21NH}rOqf|N43CG#U3_TDS_L^giuow#U z{<5m)Y`B$5M0GmC0uW`YsPZ zSM`C`Usn~kWzA~WVMb}RyA51D}Ab(OV81#@z?i<>Uv-x7~)f7aDmnNj==?1 z)JdytR)JM@Ivk?W)>9+4Eow~_tHf)=57_#^lI~`z->cw@&iCfVo10>h#EVW(Y9j8c zYv+e=Sv9_^*yg6oJ>F9;o7A+Zm9II6rv7lH6LLG5{DWfl%y)^(%U}BTxlG!~{U+RJ z8&rAuJtLn}7|MR6d=A-Om7U;BS6^;(P)@vI2UYfPj&H7HQ9kMNIXuZ=p;deND9hAd zjuWEn3Km$haE%RrHLTLh3ms~Mf&01xX~Fa$r`AoB8SWWN7q!fp{~f_qtP=k=V7LAD z8SkG=;d#EW*)e4})8&^JdIy(ZKGJx^ zj&^%em+z{qevXQYZA4=v8f#5eNu!(NZP}Xad;52HWnDD+yE_e@b(`CNsRRFX+eM=i zkt8`sG8#?!Ya;C6zulkfFS_K5B>cl&Db!LzJ|RN?I(oHx>ub#Sef#e2pV!EYF>=Dx6Hz$D6}Rug&*a(pxz?nuz_a8VdEw zcNJsOD>ia8P~(q!*We+=;OYJ<7alOlqH;3Dgi+<>1wq7>HRTxbf~->MIt^>Rz0tWz zzL2Mq#gaD}^EoOie2>O_{LLHcizP$aCMhomrdgc@n+l*fOW(6lotNV%En$&TdSkg# z=_OC+U|9*3TfFX;r>jW85ENO;O*zW`pdC`i4KKVNNQ`fyM&)O^H9JE31j9-Nw}foIZ-9 zf-am8cn3E!kpIOe7ix}L9NX?~GaP;%Q)mJG^Hg-il^Ji$n9*w2|sl>fxq!yhEs|vI8EJc zT5Bp23!PNuj!aXFn$K$RJ=>I5<%_qvY~;Wy>@0DMonO`wIYEsm)e0#F)m7LY+ZWcE zI6pQ777)0P!P`UF0W!|FcBO5Rj+NBW8vdX;ur+oQc8+N242A2H&9V5YVQ)Rtdf858 z;y2FYe>8S^&?YsOD*Fw^wmg?;eK86&Oy%_+b=kt6&N=O(!TaLi@VV3Xp3&%^d;mxf zYIv;8DV-C{UvY9aJ0^%db=j_!sWJG1&50AsGF7{4i7BF5UoLtzk$d>5iK`P2?SjaK zn?jrzirpt#B9V-(*%VF%>zmt>(fWo^Ykfm=-m(9ETQeGs?MUR5{##`He!KP4xNw@r zl?obHo1t+bpcak05=iO)4MTI*|CXV7=Kpy^Q{@EK+Q6Y@X=+Y;YabbGw`|R`Gq&bK z77Kh}z}D1=<56hjmtpdR$G0~&$6IXh3eE<1A7pHvMCn6ByAgcduVjqP>nwKo?LQft zw`7dXSO0TkGn3(ZH>9gu;Uo$9E{;A^jYBspy_9jA(1Irv+PX{V) zV^+oOaU5EA^i|w$W!e)|>13JCxkIcCUZ*fOG&5A#4q*@1?TSB#DHgGzKN@wttxetY zn>#qA7{)0;ILX(bV11&cp$mSNo06?@4w9N%`NYyv-_#b#yDUGC$-@A`5^h#(jp5oz zJib{`VxYdD{J}=e2y&*(uh{(dp66wnZGDcz`9i}W1<#JsehrOYUX+JzQ=XAx4UL}JAV3hd3Jd^2< zsjyTTDWZ7bM{UrK9YVM03zoY}*4IFJIC2!ge1Ml_JPOLQW4{4A3akc>I)y)@!(qTA z0yf~^RA(oS0%?Kf4~~6USsR?*K5vo8EJ~e16f<%+VJCvOo-gsI5^tOz%&7$O0Z-+# zVFj4&UrVEB1;W?rrZb>@%>1Gt@%)c^$qJ_q8kdZ#Y}EZ~1?9$^LKu}pTLRW$O5(Mxuuas2f#pVCtyE4&7P zzuz?=^Z)0IqcUMHV5dQ6h6|nsfu>Lar=;R1J}UnBJi`CDBmFl|<!HJusr?Rrv| zO!0S7rZPB<5Qq3-nHr~^p;l4-9y%3#&G{r3CNh>!$V+zkM&_SFz8K(o!bbqs(}JdS z-w{9Z<^qyq#*YSZ=(iDmma1VXWgBT{D!p+8|I=}rYsSZkBZh+*|6A4Yg7{2}Thr;1 zrvi$<_KGB4aK8A^3^=O1j+p$In$i_I`NY%mmu(x}sW|61$&8znzZ>*eC;1xdip6Q) z+1>>FiZw-J0@%kX{wDE5c@g^0Gd@Z~)2$8R8yWv0|0F}Hb!N-0GwUSc-3qLsRzQ@g zv-zFWfllcqeccKni*y}2gHQgSJIP-NFu8)Qzi3sQIkz`FUQkzWhF%pi% zuduJS&zLr^W@nPXE{i zhuB#)FwO{H0@7(}(;bUbp?FhMOJsrR4o6hy0<-QDobD*|MW#Cx2$?w5p+YfWqoZ(f z$iio_XMjZv$1~s@CX=|A`6N71ORUP|T%8It%ap z1HDetPv%!Z#yqK5+2rA`U z5Q3+%WW6vb4G`&5ox_%}uBHh66ChS{@Sy|9CUxoL zw@mvvqND+9U4A@5J%BumxB;i-c&=Ba=kn|FF8{T#d`_6-^}w%%RN|-QYE_j2fLE%8 zQUl=S>P*;EW;wFF2B=HLf2q2XCxZdX1aW=CRG2*u|1w_GMG+G#~_y0u6AaT2Vs)}a$14?a-r2I-}fX3S^|j_+8+A!v`a+x;n^!el~S zGC3c}D!^0t4KrQFlQ}b()Y08@RdHQo`^lieWeR_8pH&=2&hKaqo(P6AO2Z0ThnMlI zezz|a96RqyaZ4LOG@30Q)xtN#emUu!K7CSf{DSu5;mYY9Z9Ru^92eZLJPXT+jW1#J z0>C7#gMTUZ3jx10^3BL3CPv*vDnCKt8EXhlV`31$#Y}vH68yrTW@H_sO8_1LQ7ti? z>HIPOoJ+vOiwPxj%kgtVHzN%K+UUOld=2Cb(aM8IgBKnH`>_N+6EEljT*(Jv4&h&l z;4|u23HWkJmZ)Aikw1Th_)?@Q1a~VbH6vpzFu*?`2Lss@E+?2xP4!f0Y;LP>tB(|n z;|p+Nns+PNQNuW`BF3TK;X};G0oL5N7xXQ;SCP4C`NOb}<^xwCfT%R+=cmHjOz%7& z{HH>m8NE;zli>Lvp9=beRD5c_D#L2A-l95WNP4hmh3}+d#jT{|Vh|}^c!9mz{zl<# znNpMS9Sb_HA9@xifawyDi>e-(*IXH@35Q}e@p#pp`DBaD7ty_>SLXLaJ)a@t$rxWH zLa|slRulZdZm)~PPPLEmM2>LaNA_X9$jOcpJhoPrPIeSVPa~Lc^wJz}!tql7mb!U2 zdRMfDDgwh~2hy-}4hPG8!Eh+@!GOaYs$2><+)*ee07p35l%oJgIuI_D=+%<`kPJg) z`6_F!56dQeFR`#JUh;#U58ZMaqX>8y5*~&aF#N$tvG|l__IawRTNO-iUiR)#j+hBO z3CLG&awNdX05)rkootPulPxsp$R&7$LGcaM#b3;aRT;KqA=ImkkEQp3d@aTjEVcgB zZ(?2IyIaEw(W9FvYINsDsqYd{I{YZA~;`k+E%n8B<0SED8Z%}1)aa=$In!A7$bf)X?oBz)8H2s~$Ve^jCr!ALUS7t4ltAShue8v-> zO-zN~*jW+FR95|@i^{6i94+ryS#=P{?_moak};G|{sL}2OT|ob8aS~{?}VlhzFe3j z_v?k>ZXKy1mB-@L7&}ly^at_B;$=oovdrL|r@xHIpXC3m3Uj2iy04IEFGJ`G#Q+P9 zyu@Uyz$jf$G#N_5i9KLwB(g_eMbQx8x9Nd=%tjg}_ZJnN+4p2LJgL8~Xm@}@fKtfi zkNPT${(zDwhxe7S(8Ph-qKV>#`}5z9#V5k?ebq%1Y|K$<=gabV8+6ns!?93(YlY-X zjeFd#OX`A`PAH+3Qo$>mA_;@_tcV+it{AEm$JOz z(a}wIgQNMBm*bmZt5@JMovs3CB;*(ZXOhg&XDW=-@J!W&Uo>4Mc$=<^0KR2l)Me|- z`G+OA+#2Nk8@$y(HDpTfp+3+ zv|4Yz3P<_$d84hD>}Wurmn6_@&6}I4fPU8J#8ddBcDhlGKl#S8hc!%jhOy@~-J|zf zdqc$H;YdR`5sfzR$*U$9s!cQ`l5U;gL)rsr(e7?bwCns;JMxe7SH3-}>%x71_7LwN z{@)+@llP0GUzPL0um6E6C+0Sx%EkIsxyiuixu0!=#ehuoQIDnA1WJW2a4!6k)h`TW zBq1SswR8w+OlZXIA^>fcXj<9{@(CSpENrp&>1>g-WWXOqg>ENwgB(uR9pG8cZ=+ry zv*C<>iSioQjpLx2qrlg26p(FX$N2A~0G0ve{~s%40c$xvicfhG(FI;Sh2upedR7dH zH_k6Cl3@ZXQUZsH!hW%N9VLv9QU1k*@x-Cf%hDPYM~%mD{BW>XsC}W|I4&#`i?qoX zX~)qPR$R%SyF)C~W42{&SI3vuP?I~B@|{Am5`@B2e1z~n8DprEg2gTAtS5e)ky9W$ zD|rf^8VH9v4D*?hrjYwcQb^jO4C0WfOsZUJ<+D;tyUNKM~|pV7jH!9t-2T`NHOd?u^R%mh|Xgh4p619OeP<%8S6=5C@#W zImbjYc4?}s`+oW3a7|zkEuBw(boUE~LS)=QIJ6|k>zQ&4iE`o^=_jtI%7cjOY3R>_`J_jsd@w87^0R+q;U(m0c{YvTBB9jh(F`Y6@RceVy^Nr>Cf% z^un707ImZ}PNuM8{{dwSa{rhg5@O ztP3UpdBQE-oRHT2>c7NXnMkEWWC%Dk}keQ7vTkfIm5BlJPR@k)$<{ zfvwfqb1c{@XBX=y38j}`8ySz!X3_~T)ymt?lI*?NaJNi9m!MXX*GhcG73Yy!G;tZ2 z>KTf(47O=IYQdS^n{!oI3G{dl_Z9)CjE)8wZWeq|00i3!raKZ^P|3Ms0 z0_frcd8!3XZ&1<8=h;Ja{-qS1E^3DF6x%#-nuI-kp?Fx~UxZ@H-wjVSbu;`dFwRXk za)ix)Y=|$`kB{Ks+l6EWap(qcoH{#@t4Cs+;yOGyFXj@c9@sF*m(k zz;3okDAjb2VPWTG7G{`98u( z=Mlo$Fi5SeQuXus-oC@2-PvdjbxwZ3M*6-OV&E;oO{G=K_CG0b0YP~2CI?9ccSsouf z{B4cN46e4=&ZpMczlP5XTZquKGqoI(8NSAH)RXKmKUrS@|K9Omw1R+L7GI)*YdsyIW52h%m=Bh0cTMf9o1G6LhOYjPlR|{PLpJ7gAHK_Yp zKYicKHzRzJv=RJMt|jYa_L0O+0r!3<51AwO@(vzerNBm@M+;X4on!?5?anr%&k#N> z5ZNW40D88iqGnSQu8<9W%UUns_wxy`J1%xpGx`be^%lcMg2{A_m6P5}RHz~B2!P}H zJVY$Qu*`CXjAexX5@ttFW8?#qFV|w5OMZ?|XTS;68a^95M-9G+FY@SS^aqN6@tJ)d z<#%5ZOd`e#pxD+WX$bQafDAll^6YW`O#>QE451$`~;VO4&AR6s48i0^Z{e6FZ!S{g4|>q8cik$x^3rUfoFehlZaSZbb~NQ8sH}jj~w-Yn07|t7NK3;8*Z$sai<6XG?4qjGjJylEB|~ zMGT0uB@V_JTnZRc3fR$rV{G}#eTs+`KZ!qoEATHSJPU?{g!p6QPZ~DbCCs``SL7eOj z#@EDgogI7gfa3#kKtrj_2z+D-^WSq&!Vh~5%uP3vlHEFikL}C9U0wZH8{>7 z_&YVwt__9nqFPQ2Pg82h#|mpu?JukLve@b2P%U56*%C&Up{JtJEQN zp@u5eI)hc|TeB*CYhJ75%U3ZhWd+J-E|{mVb&Q`rY;z+l0eU6FI;oalb7K{dGSwGc z?_+QaaOxe?s%7>&;KVW&j#Bv&9ap}uVuu0w0qVMg6QdqDQK9_QodZ}T`;|Y4a|OXE zE*pe^t^hKE$o!si3NZ%C6)`7PsU{f*#&2X*W&_|CJgOSdFp{U@YVg8y;u!E;jjDwj z|B_(85&lKjt}nxHIV{^qMcr&@kPw#bFh(i2Q27+AW13)!N5IJ+Rth zVNJ~ordXvfUO1^~-n_2Vyr!OP*dlkOnp!7{V&9II{X~(vsNo4i)ykSPVDZv)bqF6l zaY8tZPV+S{;2AJ0Jg2?&Frj{q7r`}!gpfioiim5@Xv%*)3C&Y>7OH-p|ml@t&!Gn|l|3N7^PyFK1h4U6EI7J=;Pf_PSGRp?sTPEU7f2U+vS8C~2 z%8zy7itZFYG3`AkF+2|zEl3wQI8-c=I=tO{&EG-4*7rB zdk?^>imY+`%-r&7GB3SCULGOTB(LV>g_6*uLnvY)5ME1on&gG|5=aQ4+8ba2+bY-_ zilEqgS$lWYwXC|X>#ns#yqURE&YW}R%sFK( zE%&3<8(UiHS{M~xj8@`{fQ&?|?^GN_)di!?&EYn~L0sD6?`VwrL#2wFtEJ)gNvNIN z2FYYG+ImW3xVfQqX)Pji#iitABzHE2JatR`@mqi_6Hif+$#`otzSQq=IQ?jg?hYU! zw22b;m6X{J3FLmfO1KWlEVOz|TkFz&dNK+{UI|1)9d&_@)^NNo9{wUNYosxqTn6pr zS=1E`Mw?nD%oBtacoUFfv_}4yUbs*oF4U1kaeOs8>uS|A6XiL^q4m;LK*po9M|8AU zGs%ZyM3-ZR1?i*$b;0#!atdAnl=!xxb(XpZ5E+6xk=h1zOb0QtD5X6$v>C`yv_APy z5_vSap(+%KFO%EZk9MQgRn76z2eMWKLKMbge=H!+nc8HE^d3a(%3`r6rB�#E@Vq zT36EA{%|t+jkwfK(+)#qovvND5Xb{)_3UVqKXTHbsbu4T{FIRTP1Y67*JP#DjkM{< zN#s+!G%dP?O_fOHVA{j2Ym}b*h`j50K+5;8R3L_m_ zPopk;6-Zgba9k!*QKPKXWy5TyOTPqnsa4w$Z3@TZ{s!0JRC4}^Ati@KkY&NDOGKe&`z{^91|UWmuuXGX!o2VDW9^Q%%jBA2t*d( zHJj@Bredi9$o!m6xDX7q%nw*YybM*eAEPlm=DzIq_1;XScBfX7N2pT7*dnszkRV z+TtS3(o}}XHo)Xfv|4`y2(uBHh)xrfdDpc|J%Hwq*F|G)k*vlsy)rgV&uxxiVw4+j z37Q*>w06`Dlu5GOW}@ioS+wD=6#2A9nrVR)4TZvQ(D@=ogfYmV=aL`9^^jpsja?>@v1o%M)a1WkFm_<_lH4>r(y|Ez3mpeZwfHot zvC&T#!M1#vqJXB(#%Pe~xt^g9(OTEFMAMT=846ZKn;YzCZM21r@5awDkU#07Iy#h! z#0_*EX`t)TXtZ9ZjOTO6Z{&5tXl-<_VTOA zQ|iaYOMtXW5d)nikE7L+8;z#l-IPgx6Gya7D$p4)LpPgY;1;}ARI)##j!7;%d}u9F zGC!j#=3n7PYZ-8&HF@zXW%8;B7UzgOGB(eKp2{X4WoOM^O2305JW`@dEpQa0ljy`C zbpCybTWN>;gTZi1YhAdRHhbjDeDX+ktYGO?py1FojqH$&zhSAVT|XX)N>^-HLy>kg z7Fl^-3Xl&(Aozdeh{Yw-NEYJ?Tcbfzm7t{+s4*JHMv=E=>- zht!5Tb0ahQRp)OAe^lH7706O5L1vv&+x2|88YvS~`cgPqcTNj;_()sdBs8=7{1&ZW z6ALSH=L$l|$;O3hE!Qtp(A)H3iIU7?ZAmrj8eVMpsxwy_{~m$56oPR*6(5%J?y3=F5}@GaA6)F_@!ihO$w{Pm9c7VFyU?{J(p(p*_Xj`BY8RFMTT|B3)|Avf zo9TbwkiUANqDH!H1bLcJR(ik!wpLEVtLMfi#bVLCN<3U5WtFE~5sB9=kHlKr{AVX~ zgm&CWQZ};o)KkOl;~E=oCS)od@9$a`2%FjOyQ(PS7>c@(vL<%H(1GMM6JJ4BS4Emn zwV`$utlkoBh%{5mAs&BlY>k2l_vX=#QZbT(9*>L*_kxBD!>YTSbl7kR8;T>~ANVkY zIQbAZoInv~t*x=U5={Qbu$~^!dElg&xdcyxBx}eU&?Nv?D z&~DUT5UrC}!zCgqL`rMDj=SECwuEDfR(%~!^LxyR(P~8Q(U-vi9jio^KCLhsr;MaY zA1jN-??S7q+gj@*HX|uDw53MXPKdVnn<%L?4Rd;E-2~=4@UH@C6=ELkm0TiEXQSFLllJ6Fa<(a-&QgPdT-H!5(xlh5TU-1pNrK<8kWZx!%tu@6 z(qhy>|Ju-+YZdB{QjwA7<}?y8w2f%-D|xIgh@6w$Ue-eYuAa^4vDHF*6$Rt*>S#>a z?;DKTtuggO)|M$WDE(W6)^2L=Q0dR$`9w$P9FG@~a{#OKqs6 z^LGXk%5+zE6Q|#xv&^>wIfyP0?}Qm_zRxuh0k2)d3DfV59prW_i8PIXw{XI=4qc+V z9Y_FeT*DED@Ik+kwX&6dpOxWM}o~7LqQ%23&syJnQ zh4#9zpWe_GM=$HED6*cD-Yz_<2L*kc1}_XF3vmZ}3aJrms^}U}i#ydBd0L%H+|>CGv^X4oYRZ=ElR# z@#q`F$Q`DbI}8l8g2w@yF_Qqy|l2AXd|OnX&XjA#T^Evrt9lsLALnVI#3u3 z3Z1a7PC3!CF{K^seB`dS$AWdmsbKaHkG@@}CL{M1SuBpRW67McbE4|8SvnQS#rYlE z;_;=W!A5qNbYEJjg751%8`+ae(|E}rO{M)fy!0H+v%5yuK({X>`W?5x1mRI2H>(Kg zCXhGAxw6?zbdLFYAT?;+DRISt?LQIOi>8pvv6Wl{h)kn{{wqXgqV;OB)h(_5SZiHt zWV@&@mc}uez#K%1q%x=z8D?22rq5A`b;`Kvr3oZk7{C~cJ!s7|TKlGAbci>;3oY_1 zbbMq+JzJ$?FYek(Sdb zzh+1DW;i;%sxI8VTWl9g6?r(NxGj;=B(h29WQQLj&8<$#4fq?L)VI%W^*6-nV$#Vi zvfU|?6~^$(t&Q}q%Gk%M;?0p4_3csmYkD^muPckUtxj5HX&s5MGR4-BjLg+^^r;K@ z>ay03(}Z^V*NWEC1!hLJF$*0t{QZ(35j8>1L48XhDWJhWPz6p`1%*(6j2)hGy z<+trX9^KL!Da#^*5O2TLWwFLl@(M;%(6{+WnF|BYPJAtkFWL~jiMJXkeqj7fXzOgaVK#9pP<0Q&r?3j(Z<^>hCfwIPE z^whSNs`$KO$C%E}BB`*e>lSp9V(B0NIxB4KVs7g~@z$H+;uhstU^KR12ss`V2=mci zh_{5pp$6KX;nL=CYuRk5DQ#KWQbifQQD`9ZHtS=yQ9eahvKhubO6Pv}vSPzgby@MC z&ZO&rCjAa&w}QI-3-6^g_n;dOT8FvdJqmqud^d&RV}ePU|eX)<|87?^Yx z#v=ua05%Iwf!qpf@fQdc6*G5fub4@`WCN^wEZkhWB64b^g%YR!Z_u(8Ws1n~4$1sC zc^@if!o2X9c`e~!#NSvs&!meMH$=xwj_P#j_gmTDkxFRjO%S>K0TdPBD!Ba&jY>0l3hg2<_g&t`gv$U=_;vcgj92kw# zXE##9bPcw_0vXN(5SgUV6$mpaLftnxqy@7y_zt+*a zRyzL5xLQc*($=QNs?Z~d>_+LZ6@-gZ>5A714zU*VSWhX+tu#fuSOwEeWFxfeij8Cow9EfUUcx?sQtal+PEB3Q zM)8ueUTWtm^WaVzr62&hx)i~_;S2%r`5*5w*7-Cqt5Vf(xRwo_@QM+VuC9||8k_Pp zY{u_L%9L+a(J`yXIv`g{_#%E89Br`8Md^FRK8{ZQ4QvIg__7N6)U4E*m#7zv`mrMqhi^sOmnB_l8`7fG-fTm$)m+UFxQTFW?H5 z)Vs>V6(M)MCm3+%{OuV1ta|3#D=J;yO1rbP+}?Z7VZUh#<$fANbQm1wP`+F}<2#g{ z@pbVtz8=sin+&%B8Vci>Nt{&J)P2HtGE~wE4TSLxu}CN%9!)gQQwEPJbQ>e(=nCzD zb*e66G*%6J1@2^&zSLZKx}ch=o~460otf>K2IJUfM?JV|Z4<%(4k#>fYy((~(0s)| zKqgc(uc|j7+R)v`Xm4gGj8(SvN~UAYtohu`tkHsuZ2s6S+->WPz~)!CFokno;jhjtX=c4+?r2#rPP9Wd;ptwSR+!FUr$ z=OQNC`5!=i7^ID=mV5LliN?n8SX#D-U?DaXBiH~^2J$Peb5!BHS%OkUIvu>6;RAI%`grLBTaGFxNUlwxT}G;(mxMoeLDF-xnaud>h6c zP)!GB*GgSVB(E>0s4jV5M&Aa(g3dtL@3B*4;|=;tzR>N(exKb_Qtx#K0zq#u5ORiA z9J^msTq=mCgU%zP=kZ)cEV@S&P0Vtj3B|eGa)xMc3x;pjH7S^}>pFdl&+QL8?BVP5 zHm_q3Bwwd@e3sn#PaU~VpZ&7KUg_{uI(?;HulqWE`nGY(u9%h5#zRnHB)$Q`8bq$r z3vwASiy4;+vDQdqxUR{69M+$TCpP(8=3lLk&0FfHjb}YaO0^O(B|ZfawN7ZHgCrcA7g^bY?2b~;-BR)<5eM}07O_TAppEOdDQeM* z?(LhHojqS@A8Ef;OkXkIAjbvqJV=S2iP0y9Cg5kQ> zC|zYK^BgX2>ZtR#wA8(=PaRVrh-r|z+$Z?Ql$Sb7-5-IA4$FxMX6s!|{`O?BI0&$f z@>nF$wo^cN!d~6zma)Zy9Ob@I*3o_|rOxZe)YjJ8ehd4PIYkm}2{%)^BOGR?brqr{ z7;Wj;g*MY&jO4;0!*?SoD6wm^t&>@|On3KuRKq`N2{Zlpst9Gd?S zf)|mLY$6Y!gJ)T~mI846+^-{>RSJM|E8ire zTQJ*yU(>ipB9>E$@eeNm*w2FO*i0w-1FIJcT~DOrB0u38)X{qHqK_I z@wVww*$_{~(l*_ril{%@Ov#wK0AOZ{=LVfT6b#di_;PHiEV2k66I7q1+pd!yOeT{p z08Ij{C9uXq+!ha+KnBBWN$j}M#efQv;6+J(J4yURCygK$-%GO5Zb=#Wak4nqVt3l@ zGe8%3LO~=0EH-&BpxY$6$UU5lUd5;eli75Y zcsmunls2r^b^%5&>q&zN75Mj)gC`RpFE~aXjMtK~%HSQu;>o#G_%<1P0rD+mOBSxC z&FG%1o8xqpI_&$C1qYCgS?GMlxCO<5^DS$&qZ5X#?QKoX^md`GF78QNYgA z2J(m$VG=tIBv_NkNtVJn3Y)h_c&&#{2(j$LhiQa-C8_7BLuuA=jVZKvNjMGUeFpJz z3-h#Yf|T0n7E9$f=JYAsvLOl32|ymO2zp0W*}_H7T7+dzU%kiSuYcB3SYEOwCHYy) z;J3*uh&1J7Fns9oRyrz5y$;7PL;A)VE+}ouVIFP)Wgv2|BQLYhRngs z@F2*?iODBoa*t6mv|#xfliZ9+w!xSk{~#CYu<=YFXJSEjl2QLhBn?L>AHh~k>4XA* zLw1xrla<6wv8+sod03V#s)eI6tY0q54`o?ez7!30+1sL&8HtT&Mp~{+7ypEGnINyt zvdkXAjij6PD-s`hXyh`Etc_RS(GGu zCJ#AHg^|!@0>0lU*JqfA3*?>bgV(h<9sZCbSYgqpRcy>jw&=?~GFtQnkGLuwiv1m@ zo4!i_gW_>kGqp21CDq^r^ca?Ai=r7V}5;hRA*X-kO)_^EV(cpTGZ<$w5&uJXc}` zPXYN{NGAtGoECUWG~Jvk{~%(>U@pnFBHbTF-Bqcq6(1GJx1tYym5u%^qBtdM&3Gd~ zk|cj8PG>t$=MNk)ZeB4WHrYmsQKsT2ceuQj*b%nOav(B{AWQ9egYo(t{Z#_on}jo= zAb7lxTGrJS8~BVr9Q0R&J(o#kUhmCGQrUaD%cO!w9F=xDL)@jVa{FacI`$VFvMlpR zHrXbn5+9|~n+54c$<`7%-K5vyqyYfeCYk3CB+s#9n`R?7A#;}`+^g4zO>l*zJ6%NQ z8X;MhMnHAEwXRW+Nux=Ik0i23no4fW%_Ub$m~6`>s^zpFY`Tq-&dSCTxn4Sje46_~ z3o`-Z3p;lh%DffnqEzrnx;SW~x6(~9eT6e!Ot(yUYcQNVl^BWkgPC^#}(paJB+r$ z4(8@E+`QY2_7O|${Je2iN(0_r3WKvls&&W9hIboxEGu`vZ@M$B?FvMm&@HogR;7{C zQV6~Opv4>X_&mPAA57#qVeH28N>_Plh1c_(kgnL85gasn5UT~cOOQS!^yy$xS_{pG z-kh_Bom>e8{LcxdvIFu%X$5!CFQd)wDz%qitScs$m{OC@(~LvqBI(%BX0{+2k#KmKldjx{daMmpE3R1GOxno z&r?|Zx!_lP%{a~n@FO%Xk;lKeKOX;VjmK9!&a71}_SV|0oX!7jPd0xEXY&D3CQ?EV ztM-)@`NK=9mzn1k?mkQ7?*FKInRx~bA9i#1TS012xcd)|#NB@bjJrPxKgu_=6uH84 zh^{px1L--3e+9x1VfZJ4q1{}59fog_@H*r2cO&#CkbZ;G{hM&oz1?j7I>zSTiwsSW zF|vko_@98n)nDI}tN$E98^E21xcW`K9M5==I12IC4$0I8xyv(Co=H7tj*0Qsq*M>ZPRjhxLg;R6S^i$4Pn>6vW$LTlK5@Ez)SiOi zLvb%YjQOv_md;Z#WB#p_`QP5n{C_2-X724)>DYMxNMF4FpXFob{X?2H zaNYePnkG~;_Wu^761<84poI$nK10iDZH;Y|FWM>ZH86CE5{;!f+~GjDK9r}oRn+f- z-d1BF>tmn^#Uj`#}k4?|vtzMz#qWlXefP3b{(|K>}KU z&?=~Ar=q6;WmT>crSnCD*MRJlPyP!+=R%FbDL*bTqqV!ifI|Y=4anlW4-31&uL^eW zMQP=`A?aR(Hh^h2;Ke}GjK&^`CCzs426Bec!tT{K)+OPlKsXc{B?l%%o9iPD0bPwE zbQmLkO_T$_o>H&RSK)IwDxCI;3YW`0(xI%6b_5ppU9u{#*lI|rJOd>^hF}R!iTnkn zxSs-jGJG$FTLFQFgH4cSzK|cfwpCIT=`#%wttK}9@=Z8*8r`*lqoO} z;Rav^61$d|%xlt?I6U>vpgq&<^oKl~(bu9s;0Tn|hr;#V@*rhv>)koKLngx%BUx&a zYbxebc4d9qY)7fbu_n!Q;e<#$81={f*2gT>OjL1(xiAv{*bE<-k7Kr`m!(zF1 zrlnfHLAVB>5JX3+>;cFG@!B*e&Gfo7(V@7TPwBcA&~T8hN<)`hY}SQ^kZY|06g7bb zQCe6;Y3KpKkAUD3GObDJ!bk)K0F9tSX>OViPScGC!Izq9ospu?0bzBz#kwb1pA7<} z>u(1*1>|!<{5VB?3yQ4P0{~k9WI?c{n;dVxG?&$9pN1d@U?oVUg6S3n zRzN9f;_~#_R;S&52}t6(>4U7DJJBGk)c|RWqF~&XPWB+P;l)&89ND?m#{5XS zE{NpmNO~?^HxP`kBl+$O-5?OBBJw7x$c;-GQWL;BB%GAaz92P&)FTOn)1gTs-y_Mi z3t%zG-y!lX(h)C!?xc(|tK*+2g)V}WZc1(K%&=I0XOVM3NW&x_gX!W7Qh-Hr8It8M zk>ROSO6ru-#RwTrz{0Z`<`WU3pBcq?gJiIZ@D~u5ie5*p?K3b?M&Jw#kt{qF$a`2v z3NvL=C&G}W(UF8}N4MJuH z*^!y{2dB^F_6LG=rS^y1TaC0SjrhrQbe4&}%|j(dIZH2W#qv^;<$<6lNRgnEXH{a6w@es%T&el4P^76jf0CDo>?q@&Ow&5Mr_$*v z^}6{5f`)GnN?t0HOQI~`L=M0 zDq}r8&*=&~MK)?25rBLihnP-X`+8V&HNshSSW;mZKsK73s)ysV85t-68GTBlfCsGXNHhq<}% zUptsqbx`p(r^D@aSGdaE-ZxCT2|1z(@Uju*m9@3bY%oK$b@p8AqY}=6I_0Ei7Qjq) z7CQ^NxT%J0Si`L@P6ISYF$J`f_-boyonV>lficmR`dN@ZWnocrEr=5cw@E9G?etE%*?bbdpF4^MxgTuQMF@TgbLD2^HpF<8oIzJf$v&=j8JYa;6>gsaEC$fc4GsP1DeV2}#a%3G6-_C}? zP(_)#e>$W*Ypak_`)YfwOBUg!%ibg z1?f|q+Ig`BJ&;3NMJO@Dtx(j69jpo=v3DxzZ*qOg3iJ-Z}&-Go>fX#WJJ3&jw#R@onXB zk%N2{YgVi zGY~;z{=ifTZX2k}4HgV0>nSlm!btF7lxureN73!Ih|*11cpagAMzW(&pFGq+$qikB zf!tFl8cl{2+iHxFK?Z|xH|W0Bi(l#UZJ+B49P39H>7s>rjF)UiI=nbNB_0qYlM#ZI z1<{MgV)(WiGP6;1kgK_+?VUmLt68bTw+xa`6VaATd>SHlIw{Thi|i$RGH@QP%>ciZ$8Rg>-{Wn z$*L3j5@-f0ylxM(azN=6k1EhSoRzpC?brmG3ZLO}RXV+;UWdK6KvV2yI}WJ?l&Rv& zLI`v!UT*9VWnOL+?!#4U8#x4=wA^Aio$Cm+e25>ps(z?U-D7*NDz zVJnkpg=6ut03`{k1N#6b!yHA#*$$L{*mg){mJj8vv9>(;sHZZ)Hts|D*o!2 zY5I#0jD@#qZK^<1aZ|SeTDXy}L6G6Bf=%59zOulwP>1GO>1DSvPdxTC$}^;ZuhzCg zM(`lCs3Nw|IMBZdkVk2$mPbpb#S4%19H1Hp-q-C3llCJbVfvh*jQ?91~AT9`?el*p6NzzoLuLq8x~!1y$K zTdZ+BY&)c#JOuwForQm7_OG+RPQs5-1ypJ94nJF_msW5zTGzErJaDNI6;X?`x$0-U7IS8s$1%?w)T1gR76&QjD zJ{6b(!hd9=y22O;5mi!qJm}WQ=rOg5XUh& z==qY)3c5=H7a-gwPGHj7nbIMZ3YT7YIlwYu6BCIlY8CH^@BefRake`}DiHy}J$VL6CQq+s`zU02; zqMX|@8VcM-g9w-F@zc^=MgIArWI2lP6Ru{a>FQ040!m$YkJzFbw(Cd*L60eGHn`T- zj5gQWxGc0vzm3a6!_0vsc+bIW9qgu?M zzq6Mvq$|LpMU>QmeQ7gi&a_U9T2G>vt(TzJr!zarVmTG z@ydv@ll8Q?)5i9S6iIJwm`R~(vDMx+7~mCQW35eOZr&y)#8;%aX{MA3 zvxRZYiP_lQ(RXAxdNdq_h+z1rON9+gMloo&*%u)4dkyN zWHrq-?=>zw+`fs!S6W`-El*ChBUs>OTUu9|(fug-CJYy2d=p0hG8(>8#J)FSaz%0q zT7XPnDWc{iMcQj|l?&(kJ$fL9p<&UB@A+I+O2>2gG12y4n`EC&Fk$yL;W&6?Up|&iD)XAaxl*%rGgfbgIO*Cr=N~Oe-5Vc zT)vwRDLUaEBKYJ)Ukp`x;S;jNriw;o%lz|GU=Wjx#waSFYjnf%B$NR#(I9*zp#%C? z6D(5FfeFN77$AMCAKF>_o?d=epE=TK00Zp+Z*1FXlmC{21H)zbQqEM-H|A5B43Ml!=F&A04Dy?r93;8g3o2+jd`!9-WlgNHdr z8Um;=8rz>Dyk?{(@$AwYvN^qA4`HNfDWi;9+Eyori;Ns z`PFJBIhkmJoaD5oOcPoHv#rIJxof1b$V=y!WJZm;tlU@FJ^D<1oh*mnN zZp+PuoXS1SYb#xX3PC3z%WN;0ro$S(F*lR;l)@LK&Kw1%IglPdD?>jgZLYF0Hzk8k zWk<5f!_?z@;)+UqCiQo%JdLEUHoA(^bK~ETj*+AA?(#UgY$_q@_MB5t_5nP4H zS;#=%L@gPf4=`MY&>n>IMe+u+51jQTf>#C7VG$^)Bl^tZt(kN!oh!g-+FvdS9suH@ zOep2Hypou1&CfvNL^RN1Zb~L7<;gtPA96{%A!TCDK2ztA6yr`EWfe^u-Ibn-(h9ft zGhG@^O0BX^t@*pIAbAuB7gHwm9>DKnvR`-bU@bqkV3Ti>{$Ui(rbACxA>A&JVe-K% zh%SZl{7)K($+nHIO1Gob;cyR=(<~EC%2j+b43k-oG%0vmBH>I(I!CXcE6bF^J5^8q zVAYRfySh(U;T##CPSCSPTdi$)Mo!J|t(MrGL|D%dxL;L;DN8nv2FOT4waL2Ul0laY z^`PI943l7vvSVHXx{1KV+${sg*ENQhFG(^DfEKpV9`v`SrMRpP`_Mw{HlXoFGCFw; zr5Z?O{%A7AY$C4wVJX4qv9+TvsgRV&e*(b_VOhMNt>2`?EI=R)wwuWf`7fETH<9wJ zl(L)$S4o4`cq$#PQjc$ylrBA}^Q#&@dk4Zl29S%>Qpp%V!e=5mK@x~DnKl6k@T^GI zN(T=PQ2obmH+>2riL^>ztK3Z*dUWVTp8>zxV^>UvU$6hFi|IR*g&R*TQ*N50l!_~} zv%`0k8;F<9Xr8}vPJ7*o`IG(5>BKubN3Q2-&uoLc-i z%55rSG5r-f>}MF!Sh^}vu-TM|5$<|sPZP^CL(S7`?><)EUloj6$~t>dkNul|iKTBitu%#|p5NaW@k$*2L2K6{OevgoX?;j*IL&%wY0a~#$1JUJR#~#V0OrPn{zghM!FJ}P559qFriWGm#uLFAZ|x{$ zf*G_9!6;^A)Y{Q9nQ0gTnVmV{m=S6I4#dGon$Hy0nC@IP3e?(| z^4vODtDTmUk+MtH1SyScQFhJiFjtWyy#^swk!%+NKdNSU^Jb7vrCbd{`vH%_lqgj6 z#jb-M`eLg=_&Z8a58DS~DN+x8?T7ADU+nNpG*kouRmtsYz&A6`wX;D=<=)`4n1cm! z8pe79aD&;*SB1brM4+Y2WNZvo84IweBoI3> ztU>4>AdEnG5XgSP;6`ufdbktP#P&+SfWbVHjBb8 zBvrvgcHHbyuu}$Qj?k^i)`s*&-G|MVAao8$O9XTaW@pW|;ls|FmBoWAAn7Ql&4|$B zwAnpO->j*h(`HX$?X=kmqGkEu-lxst;*U9P_BW)SHiO&b)OZJEckPE1&q+Y`gAT8k zQ{u&-`<&^3M%$hQ<6i*okeMyr5VkkBv|WPNar6EinK*U$b}U~b+9?N<2Cz#||{+a6hjX;duSApIvK|*x9uw zb?81(G@@%dyM;89#0gA9)1em!F&QS)T2-{xdXS8p96yX_C^|<&(KS(KcfBEgLM%cj z5`8+tBH^Kn1YiLPfN;iqi!Ci%XHFfKGruy~IO=9}CEAH}2Gd&fAi5FdZAL{&q!9baBL64w9-Mp^F*CPYiPS%SiL#7@l>v0+}(!|;G#TneR~65t@e5@-c<81=wnL}1?T`?-oZ^l>r*Cpm)7LO%|-YwVjD*)u9 z<${9dk#+J>auJW|Ys4euBK=(bp42PzWDc7W(j2khwS-#P&DslAx5VK-IMTfF2pED6 zewOM87y?@h@gPx>b$Wx*WKK#ZmXy@A^o-1`?3~=Z`~d?C5=*;$)5x1xX{qBIqrp?> z$HL+H;aF3AVkF3z1K|k8uwUi%T}LI0qttRO5+Xl^(nL%ODGcaI1uKz;QL>^kAJcP$ z9F|p)xuh&AdIZWpWL`W*=?3M$F#VXQZlwU7M<3+$sjQeHi5r$`^r@`oZdg2?XI%b- zfb7U2Q1TBsv2!VMA&-I5qw1Dk61`($$0mgiHL@p_1QjU}5f}W8jUrowWtCPm1rLz` zdW}LgYd8M(a6I855>L_|7)c!OuCt_^sgM+VS;;EFp%8DBJT$3~3S}!YjGD}7_qy({ z%VgxAl3PF}09zOV7%xW%>1Ysm(;n>~rfF#h%vn5%VJfDHi5e1=)&smHR(yH#3f}fR#I#z@gbvAL0n|#QzYfUz@fgyG>X|ZYc(Ar zcEftD?Sx26TvA$2R{q9CcIrdV{;ZMu|u% z_pr!zOl6gN7a9K`s~nbI`y_RGNeV9^GKyJ_MVad=N#So~bw5z29&>0ltA|$9EJVgE znb@D8vVk6#ReO!HN`5Ezq;2)=kr99rJ0=ts84)hANfbA#O%og0N|vILi?gC^`Rh+!l=#y>c71PQKTYeobZSzgqph97ar5Q_Q{)wd50rlG z87V#2N2GjJACbEKeMB0rIXu#6e5XlzH;j#M8Q44T4FB?T(Kd}Bc`)(YYLkVN*>AJe zI+xoOjz6wioa?uB7`9PKAEY~|6g__WMEWG6wR%0$-e`~x3Ma!rYZ*P)E49c{D}i1i zHD8rv>?>dOjRxtgJf{cGb#K$|5BvQX#zXY^F#@VGH_2OjGTHukrGgX0t`nZVvR>jkaVO3Qg0e`iEq_g3RS4Jm?A=)+Fai^dkV=yT_nV$ zqFO0i^N-Zbo(0h-#et{(KT%dr&$8N7U!hF? zWq?GEw^zCZ2e8H->GFD}>me*N{a25mj9#s-&M5PLW-y8Fo~8BaxwKTZo2W{uS(haJ zCq_UbwjTBEr1KJ=zgc(UKjHuC^>6O~#!BOnqn2^x{a?GoVRv=!|2pg*w*TvLl>fT_ z`%7F3MXpWhc`DP%2p9IQC*3moTNcNpsdU+=gl6Ic4euW`<7ix(5ovB~H=W{N?x)D5 zITVeh&W`z+viF2&j54DNA~5sU3hpsDN-Ik3bq7=xN~22x4rj6|nbO`! z-co0&BaIm>4$t(r&uVMpHIL&Ghc3!Ix&)U>{-#j5J6*|?vbK!p)qbDUT_($%bJ3EL zok{t7oIltajbVq~NHgO4;Lu?FPORP>K?Yi|FPCNaKGtWBvoO91R|ALL1HeYzr z#g}Z^dg*1CUvcGcuDW{L_G_-a?)n>Uyy@m!ZoO^C?RV_FbJy;>?%s3Hz4zV!z=IDx z{P<%}Jo?C!FFf`1Z=ZSY`Db5#<@J|deD$@re*fls@4oT&@80?G?TD|x<(6CTIC$_; zdY|&2y>e1g3R7rn&n&3=+`ap*JMP?h$FAFV+;;0NH{W#Q^*3C1?KRuC zU47MWF2C}!D=yu-<&ujpx^VNRjTfAM-nr+Teb$+)JJ+s1qjTk&Ri~fUwPD@zwvP4{ zt;^!EQ(7XS=EkP*sSUws{Yi^YTo_pDUs6|l@}dPN96xXFocXh7)y$kRed@F+lgAx5 zar}fy)m5X%ju}Z`FdRm}NGO3) zC<8kR<`@Apk)LK^W?x0hU4pPJvUQ5t^VGqR;}% zAO>-0g*I3YE1(@ZU?p_ID(HgMum;w`I#>@I;50ZL&VV!FEI1p^fpg(JI3F&6jj#ze z!-a4WTnv}M7T5}x!ewwdTme_YZ{RAp8n(f9xCX9;>)?900d9nw;AXf5ZiU-m2iy*K zz)pA+9)ri>Nq7pLhTp<7@GLwB&%+DwBD@T*z^m{Eya~U9ci{K%F1)wqAQKXqOeV9L z{->A8WH8C}uik8+w?>m*Z!pk5vcVurdV`5zK{m*;K~Lx<>4+qWq9}=yq)!r)B$Hqf zkWOTmKrbv>1W_mG*e!j)Ndl%9vLFkg5hgJS>5}LJN}^~`ud`sCPBiHBM3BrV3A0zS zMb?>;kSQrS@q*;!Lzv^3g!p^YeLVyz=lNKQ*rFoy(d5KC6Ma|ICV9n2 z$J2}L`xvXcxjH)&09OBmZz6Cf?1J5J7u*ed=vcfL?t}Z`0eBD|f`{QHc>6z^65tW_ zKH*cUmH4;Rcu6_S=tztzIu@VY{={F%>Pg0#iE+qoPkhwzLyJ8k%`+1YFV0NlC1JR^ z>&Fvbzh3{=^>6Zj@zP*@_-JJuh5uuxJ`VAJE(eqUxjpt@`M+P{V*FoL@ADs%np>IH z347m*13UmpA`=|(Uzc+DTaihT_`_E!&`%(}WL0Xsp@OGdATlWxkGz0K-avYZtkh_u zTZPg%(o0OH#*;P`;%j@oZ&Bk@vsH+uutK@WI&BFrbh5~#bv*J$o>GZyS0B>9;3?;` zujf*ZjPX2j6zL_Wgk zl4}Obk0mBZtTk6J){p8V2gBXat#549#wHs|X*_}PH^9g#^?qk!g2W=yd4do7$ic+) zo-_FUAf8}24Hhi{Ba5>5{i41SoJs$1oMhVCR|59!IsE?Bz7l*7%t(xKnN2)FG5d6$ zz|07|0sOwIj~vVl4G!e@9Xx><5)@t7jg`lr-dBQCfZ3r@<2Uz}U=A=Vj%xgG`br={ z_n`pu&HdG32#>$JzXZd0{9}D3U^`TNu$o`&D}m5kpJzv9Z5#aGxc+VVzoWD~bFtI|>w3j^LomA(|>O7uk-&GxqhV9G9>}uM=ITdG}U`iS;b|A zGSn;79i`t)${L%bP+~+;$xmT&G)7~kE3{LlLLg-;L{2U{yAAmYxiXO1{9{xHr7LU- z@ld2t2*nB+FjQIVhbs&ENM<*X0Kz~$zptEP&YnH3}&+7hoPU zTM5Tg?iJt!fD@TH7dRPUAwVs_BIUqh9l#O*+Ij(I=?^Ho7Y3*YXaHCW5K+jcQ<+_K zcFL_8APUUH-!gz00L8s@n6)wE;jjXrommzFO5Sz?tOB4Mw1FP{x|l*_!|;eRd%*N2C`6T%y=kr*!9~0G9z=4sZp) zl>n4PyNVfGgKYrY0j>eK7T`JnO4i>1Ksn=^04SAq3&5=aw^2d~;C6sJ04N!KC%`U% z-OOD8P(p2wB7~<@`+WfSD{cuM1bB$q_lG9{9tU_7;1OU}zMlkm8sN78&j36N@B+Yd z0M7$F1waYkR{$u{_7cEr0IvhQ4Db%X?*QHfcmv?~0Pg|33Gg<+Tk={ysNe3rIsO0E z-t;3+JoWUeZ~X49x8M2wd+&enhYvsg(`TRmZU6TNe)t!X0MQTY=d6G-EZEGH-be2v zDybCe!f}h^Ba}^zg`;-*C?Z7 zn=)!HRmRIz%7D6D8AO*U<7lfk&@R%3o;nQAQ-#z9Nv|S+8fD(kRPe-f1yxK@P{;%Ye;lXal2Ho! zsZ{VywStXCE7)kff{?~37-+15ncND-aw^!%u3)lK1*?rzFx+qj+YMDPU$KG(ixiAl zsNhJOf+hzlSTkS2pt%Y*%~mk0iel3hjGL-pUyFi?lNGG2S1`0u!PaICc}p5P#~O3= zpPH${T3SHh)lXip{4)(-((o+}2R?aylt6<>gPsO64HgZPhOuq zkcJ^NIB6I|Llq5EXsDrK0Szb8&_qLwhUGM@pkW;ir_*p94Y$#-gNEHS+)cxCG`vg$ zt=Ht=)9@}0@6qr_8a|_89}WLh!xUP_DXBEj`b^2Ef!1Y8DGg;b*lDPwVH6FtPE)FB zXrO`CWlEF=TK<$XX*iFD3uxF#!;LiTqTvA=o~Geh8os09;3uz71salR$fSXmGj%u( z^qZ%;Xc$YwBpRmCFpq}$G%Tc{mWD75wA`t*%&E(0SWUxP8qTGGmOb?%8ZM?`3k_Ro z*h#}fG(1DYOEl27nEDD0@6bToV=8Trseh&6dm4WD(|pO9QRrv|1i${ie}+O@$ zxQ~WMKY4w63k_G(u$_kMX`t;kou-?93k@{wblRWO>32-OlLp$a)9G)g-$Mg!*XfVY z@E8q`)9?fhPtri!dirl^px->5w)ynuX?TGK`t8%{IGFxA4R6puzkNC#3v<8uc!$cbBch8$j1MQo6Ggm5HNUH8QgwuyUx81nh%pxN~I7cxy>oVCjI)vjC2y3$UwZuLO3 zZr4h)z9P-6|G2V=h4zwDf+xb}#La@D=H4AoR-aPDGU7LZ81?me;g2d?2I$Uml@U`pZ3; z7Pzz57Z{IHpv8js_V=?RltzDcV^$(desI+r?;TG6|J(N8{(b#_dwGKXKezwpa{X%m z?H9R@UH_jS&V+vS{}D3&!utO|S<%0~u`RyzM{4$$JKYstr=U|!9)>xL%jy*P$@=qc zkDq?uFW>12*S|Uc+kWo(&vXHl`S1R9{{Ir!kC^|;F3kVg`R{T0oNhM%+t|G4Ff6N6 z;3v=j9ZUDU`O9~D!u9i>|L9v3d=&eyZhQIR=ReAS-T(hZt{-bDuICw$BiLYjpNGUt z+i}Gl3LI)C$s`UnLuZ<*0oN$d6bHI3hiTj1W)3y0W14m~-{fb)59LbbP}}I|d;Ho~ zJ`;f!)wIpka9VB=6z8PKfbX;$%yIpq7@ zO!A{#e0y8jy=NES&1O;}wT3R zY6?oDIUK{`SPnI9gK7@Pai}RwP2g}Mhm$xwj>E|uPT_DWhtoLJtccIxa3+VdIGoL4 z4Tp0$oXg=n4(D@tJckQ7Jb}X#IXsEOlQ~?-VJ(N6hKFXXP_ufsghM}v0S>u>7-+}k zG!4pn4jVXJ%ArPLoxt-+s9wQA=iEb zO*v#Ghn*a*;!sm`Tg~Ab4%c$Hj>GjFZs71V4mI5pZOiyf4$tE7Y!1)i@LUehSj5E5%B88MXh&5q;_zY)FX3UY@J}3SX(UzuBa0L6G?<>Yg`pH27_CK+G=tm1GAhcz57;P6Ban>dVdxSYck z9IoT=bPliM@HP&2aJZYpyE%N0!{JW=K#NovpZsBk%hdViZh{I<%e2GIo9;Uv+;X54iaWR#Ti>ZI* z@Out_P~kMpA)imv__&xxILziSkHbO^`M8+I$Hg?>@6-7Fm^O#Qxg7F#oW|R28gI90 zyq%`4;&45Or*U{WhgWjQ=gYL4IJ}j^yEwd$!$(y(y@kW8Io!_S^&IkXHl61;{T2>+ zzSH@9oX-1U`kfr|`8l1JJN+IG`8b{a2#1ex_&A48aQGyLd^}J8Er+~+r}ObW{do>w z;E?zCbUy#5zs}(s9P<92&hfz9Z&Wys(b&yqOHL4KfDVCYb`iKkIA;*=Csn$Nojhk8PSU$TrRtI8*4(+gwxN-@j1m$2Qp*WE*V?v`yTrz#*SgS`r1>mYV{< zIBS&xzuLw6J;=7-RJeMe3U{qkpuQqag&!9v(2#e(0tyn zGiltjz}X*F3!eX6{4Ia`0Aqf8tkn}VGM8VR3zax^jySg@zn+lhNNaU>LQRGLjf9tG zv1cUGc!+xw*Y6&-7b(9#E8&3=p%$^%3yrf)>w^mD&SiDN17rD91k~$|os(61jdIpQ zw{$?ir@O_f&UjEG-49V{toe^f197Q@UZaw^v_SuMLYgDBYj;Ae)`?~*Qia~JcJ2Iw zCM8Mu7DGyREvx&gDr<%#ev47dhd=X#hQhy(0VU-CkqFFgM|W zeP*WE>xCvQu^eHH7*-`bu#d_Ud%fs0m)>=`A>o1Lk}vjpaZGi2rB^NmLhm;{jxBUw zEasScPvf7s+|2Oj!_)NLds;%R_dZK_Y3r_~7W)%x$)$gWfAD9{0~x+M)>>)_wOW3k z@Up18mRjsjtR=^mMvXJ$vOD9*gfvI0Wp_gDG*U^z%VMpT-LXHhmb~qZ8UxB}Ypg!j zT51WkT8>M2IkdZ$TI^4(rIxuSzvI~0I6EQD5o@U>)H13`csabgmRjsjtfkg=nzWCv zu*O7VS4XU+mQbr@;(_Ur-L=$We_}29YGc%7eVhX~CN6?UtfiJvtEDEyJIv$8$_Wpg z1ixPY|G56`^Z!5d{y#te?{faC|MQDnKf?Z}A|3s|y8rKTdEIuqAge=Or&_*U$pk zK2ieZ@b}RY3_DT++?#s2{V(5+Ic8rC^cyU{`fB*qSHpj&uLh#p;4BTaMH)l1+L~X4^TV0xveP>j#cvc zQKMSy9rmASxe>=uu-1gb|ErrYk%U-%#oHhKSf|9J5A<+Kj6h@?rir-*7wowH$DYPN zkmy6KPhVf^8x11WhnVUeY{>U}`tc4%-)NBjB9vIm%Ijxb`=fP64;-V;Xb-==y}jM~ z67GlpTz+abDXx~ew)vJQ?mVKOS}mbg_V|Q%Lw~MX_Rd^W2AY_V=7_b_5^5PuN_h9v zyap%cVEehgQ`7&|GS`N{^n^4={7x;QR`!g9cR$V7b7Bt1;-#5RnIq)D>Q(e}`_|S9 z(6oq`C8RlGYiS9!vSSJFel}0gS|4heYcsARA}S;~DwC#mLu)dwOs zDQ11?0wpXS!=6<$zsg(Fbdebb7MY1)y=E}joM<6fWHy71hg=ww#be=+^IXM!^syKk zR_h`myHbq_%B>P7B_X?Dx7$UQxx9Fyl4pu$XIT3L^&8bHYo1?wetFL)8^XJo2V1ov z)W3rf{*=XG-XI(lBYXpM?8=*kgFzDhK$0Yc)%IcEQ$&BS_;Ed!?>(kOLlE9#P)<49 zk$ot_kFy7MKMdnf4H&Z*tZjxPyvIo2Xsx0_TD|=&o;ME%eAJ$jI7G!&AO7{&J+&S- zMvvmDRovBAt8z z^A#Bl?BQr`(R$%WI#Q(+9Y$61vczoC&;88AvdQmL#_W%4#34E?tF>zp28_?c`^~*3 zK+bol)5e4-wn|$z{3Fjc(soE*LF1fuM@5O?i%5I-%&B!JFLa z(}Ua}amDZ>FcA|~E5b*ZYS>zc2OY@+Phx4VWas`LnN~zQKJ0UQ6<;pgON`&{c9z(^E^n~j=?(?TLq&E+xi8@M&_sc9 zrcX>+ep^6HZ(;sx%-StIwk0a>ug;^qxizo6qLnR@XFHG^1D-^cVL={el!@*p~ z*n{=FxPZ%B5~fK5jzE3D<8>9;L##%2dx)ig3ryoy4MGjv@xhLQ_N}c?6 zpSOZ`i#O=xP2l%C!X@Q_dY`M@YY&xs12j>EJwPWqE3Ul1;+zhD$PuhiD(>&E;!dB# z;q}{DokBtG_Qz39a|*bF;XuG!;c&1-^&W@6p5^2%?>8quU7P&=qtwY?USW6Dv!N2^ zzLsc=ucX`?_Eh-%4!6I;U*rtd`|Lg!b6*s4_2a&%$YuBX>qE5LE1Z5GA1c8>xWpMK z_jxM(zFQbRKXM1V!_JBdZ-^G>^77(*Ue;oskc&2r zE9mvs7kTL1q1hj~I69-~@?Niuad&@XoF?*@huOTdhdljFDUXv?y+X;UzTceOPKV2_ zPO0*K6M4)1u3$iE%y55=>G65&zOXv)?A?7=UgGjmY*Fs;dds~bmMBE;l`(GbZ#>a? z>kFxU=hYBKeW0F_IBuV#KH&F+=qT{`9igDddBkq99o>#q{o?Zx+>T%;f-MNPBG`f8 zHUyU-cm=_;2wp~TGlDx1yo2B=1ltfiiQxALu0rrQf}0TBir{$!S0cC$!8HgjM{py8 z>k(Xp;1&eGL2xyK7ts7W(~8QSbgcUn7g`me{u-#9PGV;`aO6&-Xu|JyRvZ~q(DC85 z2YkwqLIngDB4uK<2I6ArfepVbEZRPznrZ?>PVlxE(H9T-XzK+5Mrg*IQKKcGtUH^+(2o73J=Lv)-j7a`l_YOFJc?e4Ve~ zHH;<-gzZOZ@e2A?&I+Z)1O2vmMMbE>#~0szhf0Ot?eVbn;z%ox&+QL8>|q6gJNo-N zpU>&``Q6H(bN4goQn(+yar0)C%#XH|IP6(GWVhnrhV=2M0^D={Ws zG9?mkjW)#mO}3u#fexNm$Dt%?JjvANmbO-2fRV?|^tTXxTN8`6MuXADO#VDK9B+v> z$HRxJq`2l`u8D-TD$Y}sL`tUC@UpZ5j*nC3-QN^GtboH_s0HNk*9%nj5>^Dy zarn`Ztae2fUyEQnf*TNQMz9gV6$maxa4~}C5L}4hG6b(8cm}~H1ZN^R8^Hw#-bC;i zf^!kXU;}~<=!BK93YJ4FG(Z^Qa0;|QJA@z#L0AY)P!A`;GUuCyRL%S1q5jO)qI!3z zReLcp%t&fQS(3M9uV41=@9q| z)@tsKq0_0mpnf_uBf%f#p%%(Zi0$1-iSK$hL-FD7`f7>fgk-cavJxKWw1sKP!%I4B z0CT^YhrLMacBpyib8@=ldVkEJH@!clsP~(`KE&Leh<-*+zXRU6*bj?g37iT`;dqz@ zbubfZU5`|{g|2Fo!N)I5AUpZjpNL=yIx&Yi;dP! zFpd?=kF{)rlATmnRrhqZ&lrMZ&g>FbMCq4eE0O!3*-r6k%x&(?!mWP zKK;Y`l6)Dcd#K z&ImhiT9J3&&GI(#UUzal>+$$=&pmza$z;4Xh;znhIoEh`9F8|rxImobdYsDjz@c&O zkuJ_a(+=gV13aa=#hp)hBqQ${S9AD+)~7CNb)3AVb;^o+rZjwU=DCZ#F34(gq`&&E zN&7B!owV#y*PShU@$BTJ(__7U(%a|^;Q6|}NONt{EZG9n<5JUsgwrHcKsQ5HHudly%m$6gyUAlJvC!KPizGTXG>pn{E zB~AG@U7MUBkC6MxS#pm20%;J3e2N?=%Y>5CB2&g^NjAPUBp;HSUMxrNy zKkMnDCPcuFy+5BKGwB2psfZ&5`}kJNKbOQ!2QF!WK$>SFJ2oNUkvDG53a+D|*)coK z{V}vCj2vH~0yFspK|yGT&HbT+C=M;hboXawges6YQg-1i*~Lu=9qmA(0y-wzg$l&Y zxSjZcjAWX#BAM6>!@zU)k7r}cX}XEGzgS|s-45C@eqC#3SQvX=yWI}=SKl~rIvq>K zj#|Kb+*9cILEGA2c5&M_;okP=cwz>vAd%>a=g+$F#A(AB9|N~0Ez4;~2uQ}U)`A4o zFA97Zj*;0)I^ojvW#T!9W=h;?hI383yp>%|dwMI=Ug)h%Yda0>nIv>Pe1-Y`+=^T~ zk$}1F>6f4Hf>M$w^g&%EOTC#a?O33_?foHwjv1PP!op{wBpu6d`%z1d8E2LO>Lg98 zE$?X`)$4THmM;~i8R>i42_}B}lLvXUd+8r3`6ea5Mae%=@(oJ9L&>j_-@v!R{~Gx^ zC10ati+q)Qi;`cbWRpBa{+^OP`2zV1O8%LW4e~tcksng>9C?v^mV8FO<^4SQ9QhS; zk^D6!UnGx{hsaMU`S~Y*_rTHo()t(TFkNd8!clzQbdq+`k>k?u%#cN{I~q+NQAuD^ zFoR9`?rj`CAjFm*X_Ptu{@N~>f*6DncC1s=?it#!jew!_=_x^lYWGhm(*Wqql&E8l z`=+FcAAWL5lkREmH0>AV?jUn3a*qUKw{2$FWTIxOAnBO!NH8|cr~`9qvaNgIMnN{W z$1{v$u6xpS!!XM1mN~a3PNq?UcH!xYY6B37ZL+5W=IiX0>YzTqp%>W&#ujjZFVOeCglh8%?&5Obr>ot?U zb{l56NQ%OnAqxGBQ>&i8vrZ7V13%N`)(lNPak-anhW*~lGEhGMcjnnoWY|_O{e+U+ zl-!}@8YS;h@(v}pD0!XYD{ya6@&+Z>DS4NYw<&pxlGiA?Ny+<^`~xKi$vml%Iypc} zq(FX5$s93AnN&!TRLKXF2(myp7yM^GDwAAhAct=(9b@spSci{s6+Xo*!LN4dVYnHZ z6@IMtBz#VNc5v#K;gg-0PboAmU62HwQ;6;V`=r99OOH&ybMoDvG_z3NQV)p|@3Bjt1AU>OEfmy+9;k!HP*52PxDo73Iiw!w><|+3rfHp(=Mr{ z8}9lscLUf5Ehs*eHh1HQy9v+|3yK59EvZ$Ul3J)KskNArT5c(+6_t`&G~wX)Lb0JZ zP+CwDC>`EzSsVhn=WB8_vV9dG_m8T*LHRa1*6?jQjN%Yre@6eM@K?2k!=N(^3pYS> z7?xYPg7w!kU1D!$I>c^F_p;Azb%i%G-D20X!a=XtO{IfitO`&J>J2$2*xW z8n0!0j^(Ya6yB28y70H0Higb85jtx`=**B>-jNnM6{MDT6ok(G5IVm@=o}8A^E9Z* z%qBBUG+CasTg;|QIB zA#|37(3un$*u0XJQ1Z%#etY4m3ZM7cVg>1>Bm^x=GgdCac!7bW^&|d1dxaJ1Z)c1} zCL`m^?`3sEF&+m!13FzE-Sef|;_=TH4lNwItpr&+SeX}dC|VTD+~Gp0P%?^lvMVvp z@6Zcxb80cm6gszqSx~i^@CUk5u%VU<$tU&1O zk6J#^5jx#N=#&nj(>7}PgaD!QG^ow&rqBr)%r@(`-S8~Owu4s7^c=6nY)9x^3}(B` z28zdQpV>hzzo2`e{>bj}#qkyTax|<|Gnb!v)3}S3p~3%9Tdo8s*gE* z-ccTmm^6XDJb(mu_2exi4AD=O&#T?JT zJQn7_OzgL81AzeVhEjY zA#_fK(0LOEW_<~rAYmXFD0C)-fdGuqDGvq$47f=Q%r-JGtqwO>ZFdYrnQ&u!^*^C( zQH>EQN6)kQF*DiIiP+>e`c~mz%P2my9j)B+o(2;}a4OzRD z(Rr@uzD6bx=QiX1D|HqKgfZ(nOF>{}Rb8he2t;B8M)yba_{hC<;fcVsI)O2xKs2PT;cS7RVHF*B&t&CR2W20ac?o5;}Q+a83gn{$0 zq=SdXANmm&8d4V;Ha9TV78)NnFig6BXlve4(?PZN zmeSpunI{CTZ)HbPZnsoF^xwl1Uq^4hjQ)G2TCF)BaiOtmq48;ZS#?wV#9RLXp@Cps$3Juf>4SCk`0H4qpr_eZNEx)!PG;o=Vtm?^n zJBj14-A^(YZW?M862xYUa+^96dCYB_kE>cnlc7Us5snKW!|J6Ei*MFnR~B8{1QqB8FoA2V7{FRcI)+mWKyxd3d6hUqY$n zF(jcOR-s{3(NRmRB^7T@;!e>W^G4~Ia-zcEloIVuto4z zs}v#^R$z$yrI&=gW zUP3CkrH7tb{%sITrB=XmWF%XyVFdY$AMh-`W`mRuo1Kb`870amhAJV34|_=g(^=Be zFk3(sLzN4Yg|K3z^0xSBuvJd=8hSD9L2P^_+d1*h0r3CtCzRd($a(=k_C&9V#OlxMDZb_I^CrnzD^O?ha!E2iyMTz3U# zKIqewhgg~pZB@L6<+LD9@>~u<@NvHZF|qA8TfP;5?e*;yy8)4s??8tGexn6`xf?hz zX*3iBHsd^-3sbK!-6mX?3&#)p`Q%|*LE$4;96Dyld%T`-)X`$?n5wW z<3;AD_Lt6PIJPkb4^i@^4=W!XtK-B;wQ_3k;kr7$uF8#liZ&xR6qtcV0)eJC>7(D} ztXXdY7o8Q?U1~N=&-G9;a0ua0fUm4&reQV@o6QD1s)QPgCb&C@5?F?53*b7`9K&=C zvt^iG-Sk>3%@x}>OkbFOv&pSL;!9KZ!eJ}Gx8hmuX&b)KaZL!-AW-&z>qv1RLi0dX z0t$!Id#=`_#^e*05W`2DizuJp;ba4lWc~Q8HJ^kzbUqHp?+}7yD_R?UeLC zsQk^bvJjhYuN9JUYtH>)@e zPwAxr9!e9!R}Su^fi5KlZEiFJuLU}VhmHeE2rPj}5&}rtqTT_}YH&6|CQgujs80h9 zYRSVis)8-wT;Gs(e@^{=6-a|oT8?|8Btm1Fo9lMZa0dR)ln#r-5T=KekGgFm)g~M5 z@4WmERS(I ztHc{=Vkgg&pmSd-N|LEv?I~JSj<04OlM(Z?)8e`Fk@?%5q>g zhHFD>##B-T2`}a9cY!_#+5q_%K;}O2?ZFlK%!9NzNU^gr zLk12rfg3#WE^u0}TwMhxY9ljfjs744$@PXOX13tPj?HMr>)ySqZ3I5p7)-?QhW34cvFPGios%Mer^2*-l%r zimDKhMkv|7_ zyPTPe+_cHQL9fmI*Rqm#-Uck}uo+DCF;vOhj{I>&>5#TDH7HeOL-IPQZIh~h>Qzq1 z1-U9#8u!yiy3wnuy&QjdtOAOK+_B^v@?!`?Z*DVejMtK|vxYXAZ;tv^C|Yp~m+{XD z7?*p=7Tw}oN&Dc|))vkwaWV$aTaHgjN?|%pM(r?7&`@WjVUon%&0d_~l@}x_?Zdc` zXWfPMao8WEJy3~$zXw(zO0b1rP15_dl~!!$Afg8SB1K#m7emTQJp9>fb3eX!yT#pB z{)f0{jgh1{ud5$3Jw4q$Ju|y|dvoiBZ|JMnX2zuRbO?~qL+u~onb4=;XQoV(oqjVFC6~0TwGZJ zAqeinQpYM%jTz|FY66akQ47>8G}emau8*g3QJrE!6<3F-Wtrku>=1CRQ^BWtpygap z2YOm-Po%Tar<6D7cD~-5aK z)`&jqqLDQ_7V7`e&+4`o8g0{SkA7BEgKhjdvZmKI!N8`KXE#$R`oygpD~IC)L%w%d z65X2{_-$zP!{kg_mTdA^J*$0X_j&SpT-KJ55yN!S1v(ErCJNAdMK~FaU~i&TWkf(! z0yV8%VEpN!4H(@MnSlc6wIb@aus{M+&~6o&L0FDW!>~qBhL0&ThKT-Z)J z{A)?WQI5GKr?uVy4k*wZZtGKK5Nl70S$3UnnL$xmiDJ5z=YiOVX5Es>vnHf?@RTeY zaol3$s7CLs_VixpLE!`R z{(HFhz*loQ;6c!(1?pflKns@{#C~Dme5gq;V=U!zM5=^37|;woY$TjM*}4J4dMV+I zAbviJI8e&CD_gSeOGGh%Z*@(2lSF+P#DE=Q`(XJ~7|d1rvIz?JR%n3^nZ5(W)uDGz zq_fe7>(srWo=sFMksVTt`daC1@{1yM-Q)DEY66bRH@YU|U8o49$XuBN$%_ylE&AG$$un7Cg5Go7aGZKPm17Kwf=EqDBQ_ynL;#~b z>KcYqbd*82ZosgPpe4bSL^T03Pl4iGYuR!uG01*l#tGe$bxI?)2`m>jRbXT_zwBDU z*pd+e?AAc$MRqk)rl)MP2q(**US2N38RZw>j{y-K_kee@8B+Q`I2*svB(vLCTG!~6 zNnOZ+p9%J9nL)|2uG1QHtTKa`XaS4|3JUoT8`7H0BA6{ey=0AEnGOgieM(`Puw>d` z^R(lqP;(Gptk9z-|6~>s)#UA#5^DwlOr9co5JtN&BNfa}DdX zUuICI48B8|L5!|~*(*Ir7@Hwos!7X!a@26Z#UsZF!aHlDhYB{_oAm{DzgvaqA=9HO z1{^o?L6IXc@HI`j#wG^hYoLFnLZQm<}DdRE7cm07LBuOmz*m{sK z8Dg0&RBtV(Nry~4(K0(-6)%kaEz@&)8oe_86!afTib@P-N>L$IVvv0iYZad3>p{Y_ zagYu5;CL#>1XYMdv!$AVS%ZXg;H5BS;sqbCCcnes4TQ2e-xqw{f8GQ!MZWL_=>MDl zu8?oKcHg&J1v<2da$T}|p5tot8vl6A*{xET#?4LDjvgdTMu*DCZb={>23?I_nTD|M zvE(j}j$0kah=ACM0t9+84Wyj$R4#U+0P8lv?DCyz0*)O%AN4|i;FlT1?sc27K1#rh zAn7QomKs{khr_8`K-2|`rvd>Mz53^(5qPFG;__&bL{#OH(M8eS_*9@Sz;1l%Fnsc< zVfnD9jwoVn=$mf901`FUw3M4F`L1PlB|18t3tUk>?WRiWo^N$EdW~?OKt_0f<3K}> zAMp|RJc!|E78qw-KnA%`=MM?@YzFo5Zxr}_{C<8uhx3gMI)kG&yr$z?dibU(g_`w( z`NKWabev;p-M2h2^?+Ei`N&gSa-5E3_SB}+?Ki!tAYt#i8KQv?y@OWXohW0gbdC%| zGSeklh%QMs9|>{l=?bl%?G&t+w<|QH<&tO_*Bk=Klk*!e(fw1bgs#e(O=p=s5~EuS zHI~8kO7RC!i+MJkWj`l@#vPR7yXY9)#4?b-s`X|ICz4F`uqkAqe)gm7tPJ4vy3Jg+BMg9Co`!*fXSrE z!$t!x&T6Y*Hu~2l&;xqdNq1w4Hb^}=eka7q8oFKjO{U*Y!o$EGcx7$tze1-$7U?i@y49^)0}~i zdSW_Encdrec!%Kre5>I7e4O`j4Xihbm#DnL-o!hN^U_IulFdi51o5`#fqZH8b|*8b z8a>B1mwn5vg_$L58I6o^QhYj^91m}qp!vX<+m(P*<)N{-D>;E4H5x7n%lZEL1e~nh z00t_W3KGUOREx^Um6J*9;I|Xxavz$D+Y^ZVJL@d+Y%X*6H$aQszkfJEyiB;ih?Ljd zkSbrxXNc^5j57bB!2RWj+dhxGE}kcsJtkzQWO9Q(l7k*3jD#{HrW<`vwrJYO@_Ddo zL8Dj3`_V#(Odo2edf*wMiP1Liw#HLA_IYb|%Wr4LXm^e5msF3PIIBH()%)Q05$z~! zQLbj(Lx^}*16)-`x#gQ)8ytlk=o)xn{%G_TS2ej3Fcj)Sg%GG%)j9pPUrIFSRhi#^ z@bJMS2M%G>;K;cB4T0h`kpKNG><*&4CHhK`T<~I$Fz8%cc1`-u@&?+kLl=NYQR%7p z^difElh4+OOVr=U-EA+ySI>s9XBLq2j*FoK1vGdXD6!-|_=^Y(i*U!4=2h2P9oSHb z{(=ULh|jJ*k5~IgR2Z*DzqQJ#T$LUMoVWlwI#f#pN3QE*=_SMSc*Srpp$`OMjWst@kDRD&NP?DmTOEiv*0Rs_e zstQL69FaLvE-SM~|BFM)k#Ow$`&dqEMqo?5`sP@H;bu5M8uFq01%CfNi8>7u6~F?h72fo4iFMATi;09K)1{%0;c~GA=frV~ zn~hm4Ho1&_(b=g>o{u?$EI?dI0F2?%x4q4pIo&L#3E9 z9E1yYn8COsEIYtm^RQGo>qVXOgl}soaWz1>+pK6u3&|fUk@){JjRB z@En}7Y?NkzeG0O?&XL7G5LmEVLOMjMIp4NS9|P2qIw6dD8zMQ<;cwsxHJvWplL>(f z;@+5m!2q~0+>P{7p=F79GRwu7GP*o>L||DV0x)tw4%>4tv>?a|4ulF|rfKv*f$oq} zqHRkk25Vr*Da!R5UY-2KZygOnGrkTLjMCn{np!OG0m+nK#L$81X*qWk8?bEfe5s@X zDH8aXbJ)VgBJ_o#Yyk--yh3Ka%?FZ$icBS5q08dm;@Gzf5$(1i&`mYA#Z(m_P3dkzVN3mFi`6v)enP-t$07ju$#rZfED}aMw ztm1qejTOLQIMxB-z`lLLK{!Dw35Vc33@3&P9o@HYGhr)%#Uuh-bP^FPBK6BCabx64 zHf}}m`s*xq<)h3x9qv`6{(yG48ET10^g6p6FohYKznuHbe{Fl}dL%?R`7q7GBhT03 zx=OGG(5e2MO`Wx1PQXWQwNGG;N~Yk|n;z>1h$Fnd%GGgSLlhn7pl$eM=sCvL<|xBVZZ%3ElfhUq z_*sx7*Zgl&`^|43xw((A$4P-awUGtyGcyW>20WFOqxt=g5IaB$??|P^(Lw zfvZE>?7(k80ez2^3$(35lhYU_ry*$foW6;R2Mx&e@QsgP#9BB~TmXb?wrtQ5%%Hbh z7HtnXQq=iSPmd2BK9)nQCr4Ub!*ylQL1w1`mQy}d>A+9R0tP41Fr>_=@rPJ!(y--Y zTUcp&40+qIh$c2DG!!jj)Y3dpbQ*YxfqxpDCCJrxQH4&5lyUi7fsfhO$X)gO$G-D9 zQP6d&)p;HMG)>oylE9x>)>P1Nz=*u62|Orz2@Fg~pig&kuVb!TZqY(24#SE7Ud{o*+D+(sns}-eD4u}%EPvfP zjSc5XZL@`bHCO_a&4sqJroh>x9PW()2(4&0JrjNL4w#S~PX{DC3Hify);uu7)_ezw zTVfxClCTQM)d3U_pU>vK z_9o_^b103W6^Bd%3%=C{I|dpWFJ57=)S?T|J$}&5hgOh8jUe-*x8OX{1JKQ1LR+Pd zTOZ_5L~jFn_y~9Gi+uga3^zmhUgjPrV>KoS7UvXd=UlOMj;3Jxg@L{GQ$SffI2XLa z{|@;x^WUB!t6uNq2_a^z= zcli}>hW>3wbNdW=7>Mh6Qv1+%pcbA~q}+9vqFjqoVd$PU$WN4-Ay*4i?%Gb%_YobE8ViFG>6c5kyN5!N2_B3eJWFrXU zYb=A`03@w6KxlRa^KBysQfe2*L{Yx;fZ%XBnbn#@9Ej7oz&kTL2(LJ&)FsCUr7;#H z$YT=$NVSltjnbIHXn+QDh4j#poDS27mt`EXnZOG!iGlA> zVX?du3BOSf{l*G2K_`S^k=3_2>e0?u61_Ez6Z=I$Qs*v_Ojtz1b+ZwvNu>=-F z%S(=TGS_xu_;h|a+LI3wPh1A&Rltjf(nmpPjm`k)mg#$z6}tA!LK_#ue{rQ^12=>j zivo_5Q2=o~a&1T`aWu6P6h#Z}nF}uB$4V=%Gw2_$gIweJ0xtt|J`rlQgLH?lS?+%F zFZ>JS2F%oJf}n7C81%$rJK8~f9bCLSAN`I0=-2C#EQ!UUEC<5ubpZv}I{jb0eXSap zsIw5H#=A$P20-@pq> zf~mmQ={ufH`vchyCrT~Ttzbf@C@L6PZ1v#g+2Qk~v%@DwuRKTI5OAy6oJ6>V-LvR> z8#*^VZEy=HUirlx$LcvQPx*Kbosr5V*WPiN{$$YSCm%fi(isr3Zh1*cbWGa1BRvFafQt0VyQX7pWZuj{H>4u=nMd3_q};U>IJ(X#%8i zzwbMDpOP&ZOgo+F-M#mod+vFD@9#Tz?;>F!X!*Eymy5PHf?ognrXW2iQH17KgcaIw zXkzkF!zNmgW;ltfDTL;SDRPmtXep^uXf2F8AsqRZfNS9;{brdWZgBPHjRjFRJIfeO z&U4NN;v!cUKO`S2`swQgVLHm%fzHbMr4rGC_8ES|zB1F8kS5t9PlJWNw`9X@UW{Hu z91JX6807$!WWy~SSo5o%U)+Hp_o7*AD|-%ygFzjjL&V@m*_b@WJoLWdShlIdd`(R& zR>rZ%U~tC{FP01l2_Q}5AMw`32h1RQOcjNzQq#2C#cTF9MfawW>ZVl#lrtvEqWXdH z&k~pCBY`mWmCw=GCU)S$f$m1v9(gXG^tS$SilvnVlmCJBHuef^DEtb)Qo zIR~8Ar}9r41o?OJv8)#~Xl&aO-L^&ROcOO*j2)8=+c&S9rXvSvuA#cmMG<(hKZ=LV z6gnEel7ER|ONllQnlpkeo@|(H2Qu*QRW2$gG6{$29@5jo4$_2D1_O%%b1ph0c1RBO zuD~);HgjI)NAT|c%#(>zdgUs~{ zzk1G-q1$3jO*3Z1iBL4DeP3+ZLYh$-!Qi4Lm)s%_iyw>U#qClPSTML^MN^X(y)Yo| zvPb2Ze9^xC`k$)Z@@9Fbx!^4@w{Px80-*KyFp>< z>3}faB6qau#d(L16gkSK`Ug$@S4#`brY}8=flUabJL)MyH*QfddEPXJQ8$S zB}9VV1#*5L1gD7gp|->?E^UPV-j9!MGK_ zz4n7w#G*y%z98(X9dTfY7^JrUkbCRB_<5Ch(eo zmp&A);YWmy7yc1R`|;xc7nsT)tfU3J{~<+m^{fB&aW=pMA0Z(LNq+%AZ~vbo;0M2? zVnr|fFS@7`aO1~RMEdXl_fPc#UgUiLUjY15M!}88gi=E4zXPC01!@J{`=3;FO0V{x zQlSO`ul|}xC0ayFBaZPm9KgnlCJB%H2B%23=x+dK;muFzUiSU}*>f@m&wnCnYNGk| z>pWRi2jS@pUKx z|3u~5gJ-ONu6Dx*vo^oha@+KSW|YRiYX+iW1fo$PR)`e|4_+Ms)aerqYx*VD@EC}W z&(vQUV=_!rMB=E~7<%PVfQ^rtSB-_Y9Zl|28xa8Qm(zPSQnx|$neQlL_#s_EJMz2n4DSWnNCQ{7%^a|yIW&VQX83LaEfNsm&gD1I!2Qd1fDvyio<0t+T zC*^bC?>-stwm?3WMPX}oaNpgg+%TlJ{(bOu^}0HQFmG+i zkJhP!e?MftBfl?OeLUG8%gXN!TNc{7eLo6b@my@vW0hNOnz{9}y6r!1KJaJa@e2j(x`3^R>H1}^_Pw~Cx^EY37?M2sI zw)5hZm$&U`UGUZU+jm{KYl$w`S!JQo)C%}I@lEys3e^+ZuXIm?#TiWKecXa(f{{JVo#Xr9)S((M* zgmfgf9z@hv4yymGL2 z6R(0P?q68|7Nm^BsEUI)IE6*@Mg<*d;8^d5P`QnT4TZzEz>tu}$r)f`RSAvqO`5a? zP6|_o!WJF6O9?!t0HG%Fpj~ia<^z`>#DjdOKC>g_J zkc%nIG4aZjVJvK5u_H419yU$A`Y@KDu$<)Kr>t_saI)~rNVMoaPuI}M!ReV;m|@{C z*r>}g+}+&SOohv%43J}3!JmwVEy38tkHUf`r)`a8i@!`57AQ!WS1uBa-ggd>>d z`t7-Xe+Qvl{zoBwGlUR2G&Y_$A0{mFwloY)EGHdH3JZK93kGtGnkX2TCUKnkq|F?W zamBrsNt}ZEm2^&8WilvD4TNx1#*avo5a<#K6C4eLiPI$3HVi`%MQ2-!7qk}jTMNG-gZyyi4q)^AJdHO7COoB46USK*UH& zVzDDK@v*c%kQNeI@-68g-@0^qOOmj#-j(1gEQFAVkQ`u^Gji0B6>$iZ+;~n}szk_@ zTpngIVfe?am@xT>5Hq<|Vminb(0EXj4b7c=Xos0W!Iz48L9Rth9`y91zQ;sFSO6t+ znF$VP93U2kVWI+`H*cac_XBv&ZRmUL0WUs`_}LF$N1$CE>R1dQI-dfbq_!>^D_BNlsC~_$1(my6;)tabfm^!dfEAim3U}TwX`vXwg3)Z1?BYf>FjWT2!dX`(*t2hq0X5ZM`{&U$a4}AS!JOZ z0LRMM!VsqGoh_Ye8x(eAm~fFD5F&00?7`y0LSRucVWDaVM}?@2>m+eVAh2-N6c1ti7S=sLfk?!1$TDUJn$AMSH;~( z(o2Nm?hTQ9z|{!Y*_$K-4S?MAFhmx7=Ra~4$ZCW1*XKpKUv{Mb%63;{AVAt4cB!LK+n~bZ2A{mF5 z1w0{^skoyWLXmL*U#&_|vd}|>xrkNkKH(h{vn#uX1Ok;i{QBJ0>kw|9OMqMOjF|m| zcu=TiHI|F>wRUc&A$Xz6B=$b{w@#*&JC*+4*hS%%-M)7FJsLOIZ%adx`YKpN+Ll` zIiV~OS5q@dY-P#?e=62_wBI7mtBS15Ud>^fO3LZJbO`buW;Le zoHCIKxsFqgX{t6yCMBA3QhqsO*W)g%Lh$A~2v`T{1EI>*9M{cOR2h^?gd7xT7F5|N zx|Hv7L}eCn=+)8q(S=jmZ$(2XMCuC9Ko%DHMA9-y>blt~3>0vrY#_G^IS`GdQc^Cy zKJBW<7#iL?oUYlM*4y6pp{|-tVt~_cgN;8dPBS0YxY)TTHD(y(tFcG z=}hDN^zd+FW4e)?F~+`~^WJU#7`c3X)aIYQl7*?1jkbu9ub$m(!y*DQu^<^2yzLXC z;y(F}VxSDeY|>hdI%HrQHiFg6H3J1H^dS7Og28sFG7O|ibSez(sN%s2L)LS~J2vH) z@h|0=wt-x8biT=EQPc(=uu-t6VJwOst4S2V#mFLpv|+RTkK`pGXqdVm+|$es(zmLm ztjFst$4Kcx)*ufevluy!k~-9&uoqJgl1c!1y!>^DR_lqfkT8RIARvdJ7+_6Ks17-V zuAMkZz)&QfWSN9!;VgODi45wdt!hf&S9kBK+R;_(M|=6VTcV5+QuxHt*!ZM_HK${`iEu=^(v0ftmW)a;e zAMhRtQ(t+htXV*JwVYH1%~+gg)o>3k=}*X8A{zX0RRn+E7-6}|ZURlbL9x7KQeA2< zkKXE&+w&<*?T(J5?HfI!KF`KOELvlq;~98^4p?q&ba`|n6V(LjjV!TO2C$WL(<5~O z0lyGm+Zx!_d;=P6)vXtVPCGZ~|NA@XRx`0}zE6B@NCX(U%eGu2&z4zBsF<2NBocsW1y~NqF1s~JOJV_0sc+Bf@WKAl9P|_w`u@0{%O&>SNyEzpA zGG#RsdF6$gy4ppmV+9s7miUyD8mWmc#WSfqBBZ^Sa~>V)xJbp))U7!(+smmmsyri0 zbx3cQ?$;F7{XkDI5nE4BHxpoYZx2!(H0246mZgGp^*2OM(cYA-OhzTT%{aORI`V+2 z;?P4H8m7!{hy~v!Ce$HX>LJ7?F<-<8stA8~8j}NxW=5|GI)rWMV0AH0U?QA+0l~E! zj9CWbi2^D%6h~A}yHI%Op@)ti|J}o%zVq<$XO2Jh3f!-O-Es*sdWioPod}{H!N=}S3{()U zi6r9&6DE5>2JthxN1Q~L*k?;V+FY`pTZ*9*6~vxSg976R1iCGHE$$itm~}r+|bt3zIJVUrW3zwGxf{b z;~P5HwQZ&8*1utF|5$%tZ_eHIy`&-+xX5|( zPbre4GRNR7Mu8qVrXB?|c9JajDB+70!EObj`+}556(F zs&;gB?UVg;US0FOkNa!y=w1JV7wRzQU;gRXcVGCcJI>qo!hfxX_({0CFPO0q-dCt7ni%meX?a7WfAe8g$4WmK&msf z!jlsyyg2K-+Hu;B=#4BbiWkx~m?1e0`zLgEfZ+`N$ES!g@Ba{(Fvd4*MRiSbqjMb;Zis?Tq~8Di2%T}+-VQkQ)a z$Mo0D3=VVqB01lwEp@Mc*iM%ULDs()a0}3kPn#D!36Ut}FV}p@QI<9~=S^sY3Ou&R z=}74nWM`Ui7L>u+C^ZZOf6zB;P!t&^JtQR!Bg6)UVJgBiIuIt#5FKrDCa@0u`U1kl zh*-e@+s7Q)GdZ;T>dDX#HfY2nP+YADsZZ5RQC>||aZOWk)m%tS?8akhi$kw&J-LQ= zo<0dTrFhXOM}@MBVP!C0lQosgNkTRV=##0PDYQ|fopYh&)#^*}l>5eT-{0Naho|oD z`+fgq{|3z5-(BDt=j@(w1`uTJpYg$CnRl6^ry@)zm_A}|Pr-0<{?n=E8<2)l&&ZcS z+BGU(EhzPl*b(MkW>*Y+C!Nb`T~8dtwm3<&|7Pz=!=tFO&AGL7Rdsh&*X{0f(g~1G zH%W+ykPg|1ERlpHAe)ax5$E|B29ZTk`BVf4VgMO7AwfYlWzkO@QDFo{6cI#0pCkGl z=Z&bNFb{ObARyxMsqfrd)k{J^RPg!Z-Rin^?z!8!`#JZXsuoy?#CAuE!_=QK@g$$a zdf1kMW-p+zg5lV1Ry2>b3t-813ZEDG`HV&JX{EGySE==4#-p_;=(!wVDy^Phx_FFC z`}8ubaSxTH#p~_#t<9e)!P}N6Cd>bT1V5Tf@U4pQf8_o9*G5nCF_dtfuYtt*)br1X zPON(Orkc#fRqsyN^6sQ92j@SNc~fa*{+0ui_8gqQHDl7&j0IH(7Ze?sSaopz(+3yr zIb^HU#cZLOik+C`oA7G^@pCV}(zVdDVkenQAQx?$V;LiQmk^EVJ*Y2(^?Z(uKIhFD z>xfm#ND?a9ESlie2tU=zCQ00yLM(QzBae`SR?CG)$Va*25lEd+7@Oj0M6`ACd`VK9%AF&U8s= zgVLd#ExFj+1`-MyGK&9Fj_i_TNt6h8QJKBS%iNljieZSXNxCd^Ur|z69EsoTJqI3& zYhZIhm4y~%1#JbfIS7l41Pwh{F!wLDUw-~|vCcVQm(tPL)RzmtHa_Ld6aSAm?8w7; zl{G>dZ*E@ix(%>aEaI(VvKEo-w}Xg1N8yYn$+p-ka-Dg5?&Jq!>=h-PsVT>4L`sYq zzMpVmW`3!IAvw|ohbjadOfj;U>nY-Z!eQi;B>SjaP;;dWNp7VOiD;0N#(m`GTKFWRoj#G?LB^N9sieN&rX}}Pvg*R9jBQ8&(R0SIcwKTJxj-< z{K%U5S;x^bhRNe9H2MW$9I%N_zW42rlWz~1Htn4ulZOmBHDt)hVUypR{NAm@CZBwJ zn0@MQwO-tjuxxDNktOhQ$BYGY#YKA)WKuOQ*vW#}*_4*K^BlC6&v|gPCP1IxDwQhQ zzO}T<`~I<4j;9?uk+!GHyisWtCA+T;R-`W&<2u^y(6xIHcCH_#42ZtIYZdwTd3SZ* z(|LDzUd8Q)!^(fmm^CWxgtbELzG}KKn&mn`>6N(wl7KHLfGl1!?xgC~*+4(yq;d*tajfaHlzq89-kinj3+sL&=zn?x; z{+zg?6kp>xPmB|-WKXo*MWtqIJdO#RY9*Qb;tI~<2>j+d9DD_rn6fo`K*n)58*f8d|5gA`Fn zVPBd~NxV&GnOGhckR(bsCqWctLFPu_fFuF%$wrDpchJv(J*VRR6wvGOig~830NN`aat8}G7nb2e z4+Js;F{1}E+OTKZ#reeREnf_y>BUnAm7LXplF$?d79^K4}SwtUn z=@xhx20Z{PVI|Q=4V+}stDb>To8WQy6S&H0WDQIn^(su>g(aZoPB;mHz-*WechZVw zaO)EI5FUkja02?xfT}Iz0T}2j!X}{E2Bi);Jj5a22knX}%|^#ihupV!n4x<+vFCt6qdmeo^EQE3P7l$tFWRgsLXn zsitHU3wa&8+vHIXRZ$vqle>{^bmK+cS#nm1k4L&0Z`B_nJu!laS-MHc%%a3opqB*# zH33qjM*Xza{hBA?#$8YcZ^K(a8{sfK1Yd#sX^308{3{*wt{ye0UN*g9T(e+_48{kOo5k0Aue+W%VhJr*soM zfYa+=AU7-`rr$Lbdl2nM%bBaF4(`HEq70vqM*8|T!^n}DK3~uF)8Xo65R6QYjF_?t z0^{gB7`hosr_r3Gikujmd?NH1$T7!+1ojn}_B_ra^b6=djV>fc%`?QXD}M{z4|L>I zdefy{--F?=!S%lxUUl0_7&aT$krDB(G%~1KG;0dq8uV`qYkY{D z-pjZ6(#YVNEYIbYp33l>m07mk`}0M1#JrSV;r*52{WXzA<)2weO=tbtG!2uoKi8ru z=wuEL0v^Niph65T@%emf!ROn7ckXh?ZGhY>uguM@@_B?rGPjp~owNW_1{H;Gx<1!m z>=QiHFmXJXMW(SFN{2T=?pEvp*e3O`6OI5&1v9Gblwm>b#gMoJ(3;PzEAR@5rbq1g z1o;qhliJTSp3Vo4-5_(|K4>4s1VUy?@@Pr1{UI3%Hc|>p_W@c9nKcBjuw+uHf)~r6 zeT%(b_6LYUa#SG})pxC0JGgOu2ef7~YkjDqVCvd*&1^heHgrJa=nl0N^`mq56*SIN z-@Iqu>bzG5a%=8C(yLjtzNCJ2+TLT0>jT?)DizIJgv45eB(;b$nGmN<$dsXdo`owX z_38QtT(!m)n|;mBImM4cO&t`sA3Lu4wyN6d%dhbZ95DiNt{Tud zszb0~#o^k$$LFC()x33IRSj;OUpClmK!W#kYwFq#H58-O>}fcd-o2o4&8fZ2SzFbN zaw^-DBM_&Yn#rV_HtFrFuIk4=59afg+*;z_2*o*F$BvQuC8%4%p$MlgJ3(EwMcpEc zx*E%3)bWZ{;?(g}s+&`%#Hdq}s4IFOq^lFzF5^&po^5_2+gdBzC3d!hxW%$vjM1w1 z#j|D3+S=yXYO!p!q->?}i9AjZQg@WDjQauBU%v$pfsQ|e~({BYp{?Q)^ znE{^(4D58npv?ligws4R8D7^(+;tH!qkTE0}IN)Og9f$z9BAcd<$3{sCQUrp$(7f3mmV z_P#`_Ptdy7qID0WwR@ro23Sq7+HQhl+`=ZPEns88h&91J=BypioKho3sgcwKzGO;# zvH2t!DcMLzGSXoq)nueU^8#h2=`MHm&_5;uwp9!PI1P?Rw=(_5aI zEreuAzbsAH+v=K>YUI1xK}n9F7JAYvX!Du3moOqE3RE zYZeG;S|~rSNbsf#WuU5V(Ulo?cs!Uvy6Fvd*MeGR$Mj0C**+-flB#-Ks#8^cDuyhV z@aa<}=9D~Yri!-2bwb$dWrE_s(7NhY)l@_pI$$!z`e}f*{0@s(>ZY7(nrMmJ9f#42hOU4Whq?>B7h|Z#Zt4 z46KM4&8cEUFZ#O5MSOZykvT<=nxUeN4)qd(!SJc5Dlza$6gA2|TE>4IM?8o`FD65% z>PyIje*j+s9diP9ark4gb~nmWySZb~Dem)`_!6SN=J2o&h2RJ9y!aJ&4Rp^Gmk`6q z9Glg{FcyGmz6NI5W8_U?hO|l80JDX=;S2KHXJL)740Z}j*msFM@G5(h!m@b8b}lqQ zm#as_MMt>0_dr)^`nT|o_%{3#4iU*++r>0PTA5)O?u$(`XqXr&qn*>eAGBR?e>@#< zyID%yW`8}WX)YXn7|C$qu+uz-X)u4pxZKp~KFP~)k4?4nN5$1wkq5-%JORaBiyotH zp975U;wyIYx?4yViNcSgCmZ1q-Zy?F6ioe8=zed!U=DZfO7Ue(_XN*Tmpa*zY)AvKHFZN=GA?Y7{D@F0 zYl+nLQImc@AH{}8U@OX+Z^4If6uyPIWEpvwJVkbq{p17kDfx!X5$+S#3!8lr zgx$`6Y5x?y5@w4_#I@p+;tugY#TYGz{!feZuK2NdN}MSPe^=KA>q(W~AU!BOEy#jyt9+3zQYg2IXmG zkMdv2N6Kf)cgj3fe?;A?zNEgTeyAQ*zg6dI%e05Jr!=uHyDocHUH`*PMg?wc+xrOKO)P+D;XjVVL-x1ab@3E1>88c~BTbeYy?9{mXlgnl+9}o@ ziL`#j$grJFO-YonON@EMVqk>or1(uOQ|#X?fu=e!Mre%W)34@!u{yG?BO)%LBHt*B z-#X%SZgC(ECEu+gTMM*H+pm3~eX4z<=}VmtIsfE*(fNk+edoWNUpw!1-RoNC+T>cN zzur2-xccXiaTi@Z<54b;Zf9am3H|lHjC-mp_*Yv;XNAxfBdSkKifU(io zZtOGuYW&atw)ZCBZ5&sEFd6`XZZz)3eV@cZfH(+(;30{ZXx`#!ot6lZphStJDBe0v zQPe?6lz2&&Wk=R6*^_vDkK@D{`G_Mqi7$CQisSVSFc`GcUM<+S9gm(7Y&QY#V5tz7C$GxB7R5wvG_CbkmRuBLCGVM zXC<#l-j;kQ`K{#NC5NOZq?e@6NMDw|CH+A98|lAE4^YRc3)EB8i_{y``_!k@pQ!z^ zW3qFyCuEmpugTt%{aW@%*Qt_zbl;Zn}R~6S4 zzf?TOMW^mXrv7uquyR~^Qu%G=bIL2qca$G1KT{5=4yztiJ)(M6^@{3kRq{0Z;7d=i zf4>pZ=jgx36MxQmI_v(~FoXUX3T}Cx!-+2Zttxk?Q0QL!2Gdfn&tR9ZE35;|e^(t+pHN>?KcjwG{g(Oz^>5VwraquKuDPIj zO7o)T4bA(SPc?ti?AIRCp3^>|y{vsr`+M7neae2u{xT{FhLeVG8=f;6ce? z9{fx9i|-gdHhg9nG9ETQXne%@tnn4&+r|%#zcv25@sR0+>5}Og)61r0F~9sTwKS>X zlmAjH-ZFh)`i<$|Ob5)z%@@p1nO`)&VSeBIsrgUl{gz{vbCxG8mo2YZ-n0DL@<+>F z>$LTZ^)c%YtUs~7YyHIf2kVG!(ss)BsEuohbf11{pHP>5`J>$cA|Lz$r6OH(LD%LN zUfQSAf#i?4hi~9P3h@%D2X&X?sVfGPj+ly>ao;wsZXR{ zPJJ!)z0_Z){xNm0W7=`X@tA{SGabM!hj~MXBBlfJ4Yv&Ar-q#$3_Ft)ns|6-i_D=% z=F1G@XX!1j;e%ne?~EIE?HPCanYi~QAR;Cp?cFHpw)}}s0ZKC=E1PEc&iH70LJHwY zh4Z~70h5C4Bqu$dJAIA-T}F}*!oQiLXNJx`Gp~q*WtRC>nD5gQkewi$Nm%~t`HFl` z#C@{v32}F_s!X1c`Q;%Fe&G0t<6Xxmjz2h(=k14o#Z&(m@6SK=g_F)x&PSc!cfRVp z?);_mbLX&Y+;!6RZP#-y(RW?%xIT7$<{EMzc0cHz`>;LfWHN&+>6kaWTYOnKSz{}-IxJegZJCMiWv3YD6n|G79Xl}KTgkTeFicQ?)rFy+k zpRU(S=}oT?<_IZ+L1ge53>3W?l%iabU6P@ZBwJRZo^55PhT`)T{G`KiDV}sZj47u# z4#tL%R(<&wIUk#yo-iei$@I*9`SgoC>r2Vr zIlqXAgRgzC&UO!9d4$X!Dejw&n6Kd$)ujrBtDBm-o$3AkO-??u-?_lqf<+4!DKLXCd)Dc)vlYS{)>JL!?B#w?aOz{hOJ_=ot_H#rzuT*6 zE0HZ2aaCTUqOyl)W5tOo-jb$k)W(-x3tpuYf0;hB`?!@jneZOl~p4( z=fi?PPD2!wPQ4d;`9xf4+qrAek`th%Y?s{ojCg%EtLv4?sJlM&^7Xr3zFSy$C~C~( zNbKX^p(bHASV^1F*m zWYN^PQPWY*?(r->s$%Gvu&^>Jy+28rZYn-j_*7Nk!W3#}wnmu$Uf>*U`(oANrjG?- z38(GcyKM?hn|$~9Syfp)TgvY72!Dg@cx^nXC<4~vl6YYw_mj|`vP1zKUdP@Q^e)uI z5!4B~!3$EEC_g3zMnY)CGm+a4L7e4e+iVFn3c3ss3#*i>l$7*rc4oxujR2MvC&0$e z%+^^=ihOyM61+SrkI7>IV`dYbrc*gZ$|{qosKR7IR5j4lRYkN^QA}M?RAe?46;&8* zMJC!68BIkdYf(|Gs0b)UR#TBYTcc514MjYw!D`ZIc#64>FP$0DYAG$CkkDv^LOws+ zm*dmoZfC1?f0j^Ww(C6wwMF3VcNai9rBYBBi4>>`i)!^Ifyt;7=nW>j9XJt?)C0pF zF+fUx$d)A%71aV-R9hhA73%Gk!u+Dzh~IA4Yel|RvzBJ=gaDh#wk=&R(BG@q8tm!m zK)~(kHd(c{ztgU<-`i?lCN$Tyns)&o#35Fv+gi;aCeQ-YX49_{vJA3*NzAa{o|yBa%VW+{L!!Ch84dH$|{dd?!8Xm-~`>{iS zd=FUXF*A}gpGD-Y2Z26~-E$Z-9|GZ{*fH=Iv9{d4UD$5$k>zzun(X!^O}jCO?44PN z_y`ucrxpmhw!m(zL$skI64{N_S1xI)v+Tp{qRu_ok|q?l1=<3Uj<$d((iYf-bwuod zw*~Xs0$o7sMBKIjkWOHm^1JdWZPy7b-@fueY#2;BJmVd*Nr(qkeS?RwNo*X#BsMsS zsU|^ca1f=oO=6Qt@-SA9EPNEJhpUIrr%@=CS|vL0{6SxaPps2R^e_d`iN!*pJ{SrG zgTW9DLZPNmI2djU1)IW6O~!;Xn}@KSIUFWW4>d|nTaSedbm@8&P(^8_GD5PTjU;1XOsK){rz2k%+ggJ-PlS&6SCR`x)0 zHQo~d%{@JO9&iRWaru05)uvSgeEuMhAW8J7oQNVw4w6lo_pC-(21#U)gM&?jnN5RD zO-+M?gUy2(gNU%bmx%U8w{ul#`!9dAht!0Yy}9<41DfsYUvT^oQZ=U`^;Bs6n`a

c(Nr6n|NSl>8gE@nTrK+((l?3QwhHa~OFlTK}4nw)d zDrHEUq+&{CwdSa-%E6q;!x0t3yp;kuDF{dg4=bgNoI$Bnyj8kYrCMv=s**BPYqzeI zu2rc-fNTwHjY+pMq+5kn<<_k#hIs8(rBb@{-u|^JxK>CcB2ja{O4Yn`2vY$e-RJW$ znLXZu^yjc0Jc`G*S}Ybm-)Ee0R-;kDEv9`z0v2-$`a%E;=>RyVfc8Mo<+2vR#tg-M zCJpXlhNKxu5;KpPx4jG;v!tvnTxLh;^5yeKaQgHa7lhu*7x7JD--1*BA?yrx0sKP{ z?xWLB!tDCXXa9RTFJz&eXLk(~21A`gxNeG*%F2!r94q6+F&F|WrCJRWaJ5o_pgN$IFP1CRTBUZeTDe#o2q*%JWdXTd9)LKo zI1qqX6;P@IDwSuh%bazp%uJ~?EsdgmT0FQDDZLv(cbX2xZkkEc-D!~0rfIcl5Sv)6 z01HZj7$z8ioW~F$lSNY?!McR~E%qesAHtr%PD0x}iD_Uvi6#9*bUZ^if}yqXM=+_? zVza^FV6(^&v`KAL4NEMurCL&JY?hi-wDP$|ik69?rC11sSRpehWD12qC=iJR0)a?? z)(9XV%ofsEmPn9AQ?dmDp->1iLO~WCOGL220V+n3NQ7_+4aB)(8q1c5vS~`LNCa0^ zkP(Zr>6nthMp3xK>2||d!tLZC=*Hc|-2~6=aeD4{JMZ>DXN2F4<7mkY#0Z6$$FuNx ze4diH(Isaetl8_41w~v7Lb!06%uo|3n{=mny|4qlX#xbjq!)Tbf!CMjTkcI;?juP7 zxtt{V(Akkbl8OHOb0<2^$|w_;(N7% z`z_Sj^XDxTH7yeymk9uY4G|17vDn5VyxIh7k`)CQuBSS0>IYJ4}AK@6x z)S(SjJQroA&Oazn(3v?THDU)6hm@G9VOqTzC5G)I7$rb~F5n0jM>z&av{NXt6Nt1r z3$=ra3(EwR@?2GkX9fD z&>%8YDcqG+ipna3?GOygj)Q-I?$nP%7^l;Z!cIhR81vt|8{iYbc@RrSV(BLkb@MO` zh7Mv4d$9D~AbSWK1Ah{8`dmI63?t1(iJwNw?D-a7_l>lh7AUyQe|P*6it^TNb3I54*R5W=C-AblEhv!#$0`mYN$t z7p9=pxpf)~1l%K7jy5+pClK)Y_5iBQL2*uQZkb~nFS}pCbM*Hw-qIicJ}k3}$;5*5 z4*c0W31|tb)Qi@sN*75bk{N0OWi|35cBKQnT}j!MD%cRJs*jT(4X}~tP%f!g)&bE) zi@22aNja2g&*lRg;*#|6${0}5|)Q`7X+^_-IuKE9EV#7 z6LBx8?I0+Pl~5B}Qcl>2Eretny=h5mjFbUqf|LOc8z4ZJ6Dk6Opd@4f<%9xoEvY3z zk`_Zs)o6t$@e~I*Xj32#j}FDm#1%+SDv?UWZ2(BdGae;HV2D8vRE(r-pi@H2qD*o^gCmV1 z4JjkGkx~%UK;ei029i)uB((zx??Cl}Y+#2iomsGYfepW>wC;e-C}l8MrE(gNwr7fIkP}K|1{$ zOb!t|jHMog(b75W2f(_7*^r#=0wV7?4D|c3rU}e;1cZ;nRP}y{+=J^6Edy{UBzHzxaljl);ci7apoq^CMKqcI=U&J! z?me}Oa7r(~R8WUXy0HHhk!r!?moL49EAYsL{V7l7L%F-5i2b0HF875GkEDRIxJ}0| z7yNvf?f;-5Ui=^S4L{E}(URQqgp5brPg9$Iw~u+2Zz{__hN=ygVqC?W;>leeK3h*0 z2=$%1YaAJKVgC<9C3Jlcv32#uYs=Y>+0VYP_Jv`NM+F&porge+#(?T#XD%!Dh&KZu zWb9>pCYKkoB8+5m(WcSm@dc!eUB^?~gKS`H*-Exdk2Xrrc7V5o7X+P*QbJa#m#bQfFi+uMK#1t1RmXWd&BBq^e4y@N`SUc6*=H zZcX)4;V@_kdw_XSbXHd3#VIOuL;?)Brd7$s9^07otjuGVi>t;YaFIJg*^f|AT%RNa z&@NGUsevO@pUmC|g?TOBKIswah^$z4gc_89q+ASdP+3q)q2y@nGTa_$;x}~+0@f>PtU@8?g3yj-Lqg}*@A`lNMk*+ zioDo8J$W%%8M=425VkUl!DL#nV1db$XENnO9E;yq1Aj>I5XZV8DQyMAOOgGTPl$R)$W%0&w{# za-gWJ49zLMD3ZnJmw`hV^5_;R4G&><2vRyZj-{d-Gq!$ds>Qcui?15ol4{yjR#&5$ z**=%@9FFBe+q*cG$EhsL?R}W6wP%4$y_H=&T$fI zuABFy#cWPl3`aLJm;PW6D}}|5e*$l@EQNg$V>1ire4LzM} z`}MKC%(q*f`kB{M{qXuGZ?StPv$pc+DF5ha!}KVB`fAP5(UxZ_K0Q`Zg_P9CfgoQJ9HPmAM)l^#`lC$HJ1Md@|b8}?G( zP+8%{5A24k3pOYq{&f7ui@&FDdh(sq!P@cZt57PZU<2i~T`fLJv^@23DwH&NZTuJ+ z&y(|yP{3=**y^&D$9`OGsd@a5Wzb*OhK&C1@Ot9;s6c~poLX8i2*+S%_%_BMMZ zKJeaDuTJ2Vr~s3wmeLf7%BvIlB+Wia{Ypp&AT3b^bSo1=D^a4kxuJQbq`Cg?`sPMq z^WA`}nwy*Jo0kg%jg8BNlQ0B8cS=rU=fR(ZaEwkr1)~52_hYU-a1x)yo(0w!%z@+_ zrx1ByKhP(z6$dfLC~adAiWQpiD5A^=L5`**=uSk)13&XjM{G;=`8ta4Sy|sk z`^M;sj+~{9^=+~a6gqNdd@hP-DVrT_;5R!c@c#nZbjUBFC0jt;?%e zU!mev<}C!)!u5!|Ua_!RSFNk8)~&Cu)>TwgRO`x3K!LOZF@OeW|rB7k$zP8=iy&J!SwcQIrCiBUrumHN`$h@+E>^qoDCQFwE6!kuZFR-ko zwRLd&_SWt0)>Z(mu5rxeZXLq5uYUw<-44M$j(Ol(=kz>+xjdd4x5w?_+KL`|We@IK z`@?OE|L67b)I;~1Ke-}FePdV3$18;2fAe5T+7;j0(9mzr9)Ie&H_!jPSS5ZYf3xDy zij39w9RG~9FZA4k1Hb!+6&bq7K<$6;{Jp;af2}`op^Lzi8htJuFNqPRS=y@^vZ2s>GHr;1;BmB6L6%497uA0UfgnRVZ*Xoj+^F z#$=YR)6^dPg!A~DMZ2qHmZo16T1btv_=T7D;14>B-z-cO$RgR%7e}hfBQ>MnO~D^n z*!BPXF6FSyGI*Ne9FX`;kAJw&M(0aCAPJaGQ``f(Oy}EY4;L#k-35iIW98xYpFLc1 zQm84{YRXGx5|ySLS7^%Vq#;kJ)1aGvhKSA(fmAHNu&}X0kgqC)4MK&mFjiPttjbp{ z=|r?nRSdbM!dNVht`x2m;tw`&yhsy50*m&`IZ~6BxmKQ`K-ZayqOKBGyCmI_A;lm5PPVb~QExml8xie1XeZ?D_aDuz4;L(MOU_8;Qu}2H%X!@cGc> zx)egtGUHM$7CHAu7Y^&gNv95nDN4n=(TTJ=omdBRIxV{Ko9PSt+$`K-A4%;lG?+B5 zokK&WNn_zLqses4IHb{Y^*S|Iqt%;Cg(hHY5JOw2*=Q^rDjYgSYD`CsLnbw_RD@^P zpc*RNP*_M9*QIH=n)Mo$)|8f3Xi75<6`mlE8S_nqYgh}SnnFTkR1Y098a0Hda7d$3 z4Pyok1e0ll3jqyb+5m8aW`oJ3q|sr_m<^xO{R@N-H(}ob__cO{r(x~_8$g+2EqwC{VePs1P@_pXmoc5`#!KPU@j!* zI)}*H(2c93*y_qr1(!0M&+3 z9L~y$gzv+4WN1U740IcOXNFdr0Z~RMloPohyEjuC4rh8iZubzDsnuqpI5QmPc9#zS zV*f83`%hX1URu5|a#Aw#JL*OMx4!Ef{m?NI&Hd1G#?f6mQvA=Ooz>T;x@)Od{2=n% zqrdf^v<#L|0HpWX_GjA)zU#2<@2viKYO+`>Z7+KqQkk~es}^BdwykK_$ZyKT-KDz` zFIy_kmdYRwnX@PWD3bYn=t2_oC6CmSI7nOC9E%NX+ZNmAip2n=#hgblrz>{vwsj9< zv2762(p+gru(UL%(+MN)w6uo-Pjf<8;sVZ%cgDEArF(vnfBNEqlkS0!mM@B&RFC|w zelmss;sE;$5Y;39>&g=c9z5OPs^7VnSPN~tr&Sr>ahnc#fJP91d3u!36g)E|q6G;>;^5y$wVcxfP zdjqb>*pVXv3i%^0kHnMal(^iUKmZ7?hzo$*<)@AuaREC(Ic0%>%c01fava%0`TKKR zt}QNyJ3!^+K=2<4$f?K_BwY@d-#OuTO~3?b$~6T_wnU}^E+}H#)R=1vs7?)RnJS&a zw!5Y<*z7reH2w)l99yO^zu&bR%hu-PWc&T;=_7z@vr(L#lY{3kd}xm^BQ591#6$*# z{6tzhmF{&@X`b|q3?QWCqyg}x1*wUNG+<{?Zdpb~noG6dsB2=IJUEz_mbNX;<;kG( z@*o5!GL%%#QAonU5p+)l)2846I+}JAlx)j6nvo{YpmrQRlC}+0J2SQ&EkBCwOgoCf z=Ew`8hX5IrYuiyQ7);xP zXJsD4wgQ9p_xn;)ZMLmGt=0#T4}CcAD7G!24F&^F zXKL#9fL0rTC=d)rMIu+)kj=)dFL=PFr??xttJuzTE$h?7e^T9N%quS*@rn3D}BkQtc;CtmPjR z)|A$^l`o29EZEQ9ti^<`zxo8nLCk1^0AAJxI zk<#K{2Bg2L%wgHmW}GiAO)v5pM81@2xJ-oOONuGIvPe;*0*Z=XO{XZm zsz#f{k^+x`n zL}rswVw(gmEfT*}v<9fal87w*qTuS)E6p(VT_q7o&E{ap9}-JMqSfM{U$igC;R(t0^n@zc8Wwol3dfhW~)eK_1S!pXl5h}d}d{4 zO=bJ%yjrb-F|J0d%0o8+bxMs^r_`x&Je9B!yGiY4 zf+`^NgppJePGSckxtHFI^aH8_;wUKt6gEJBtR{2>N1`LNgbJXV&_LQq8p#5JmO?7j z@jQ^$5CxFhKo|@pRltMX1q4LU0jiPoG)`*-OhwT0YC;M9XBx4Kq?80L-G-t90++}P zWGf+YgEo#qO{^oONLGWixCu8=5JwCoo#}p31O_Yu8ctD8&?cb;Q4TdyCIV$D;$BjE z6bvvxsXzh4NT>~x*@Z-Rp~^reFu)m4sF4+jLheFjnHm{K*I5DD+XyL;cagFPAp@ix zH55S5OhY+=tfM6$14p7H;u#DiDt{03c6%{m2iZodjilB>SO_yTuZsTu%mz}u11!;M zjU=E*RJIR;5+RKQQ*nR#k;4@ZYw-Aq6W^*hefoqoRh4SDsI0cs3Tx1M+E!tmtUOV1 z;xX%~6Je`4bIg3AVx*!XeOJh8x9+i;ZJ|&_=tRX+r^|vTZC10j!ejZ?X{)E=L95j~ zW*r*|j#<gyh?i_x(iW?o!j{A!z+g^+-{5%oU3`2= zZEf?qb+tm$PV%^RoFH+09U-o*U5Br$#W|eXZFmsJIYjNob@dXQBR+}=YS%$rD;9Ia z;%#C;aWOZ&;ZpaDdnQxu*yfK%9uDW7I-2^UY3aG^pB2`PHsp;@Ulbg%*~@k}ze?1# zZ!xON0AWm^VT(7KyIH!XPpNj9H7fJ7`Wym~-E8D+63gXyqb`0-Bh|kCSLLE<;gEc?(O(Qt*W$S)qanL4q%C3DQ_vSZYi&uT)LE3+fcidS1(-3YgozyCSm~*A|OTTfwfdf z3P?fRp~v?E8~SF9AS|FC=Etc?6eQ!0hoV#-LLwxOH$zRJv#Wn86geq`9AO6lrz4#j8*>2LN2S8#(_zl(o>J5JB~OU_6f%XC>aP(_#8?fwPoU< zV*pg!d;=3D6WCVA1O}Tml0E^aqfc%hn84E09lNkBZ6uO~7Cj6Ds?9=iRwPp2*tl-v z#>S0}jSx59+qh}t()+Q-jS%j=AItQzXCLp-uP?iW2+0%8yv!_2qV2`Z(5jVnZFOz& z1(!6eYiwG95>j(}&fSePiRu7AbugLjIcN)^fDk0sp3|O7lc^3sa}djccwLV54km1Q zT@aXZrAnnxp~p%V0=n$1rceZ3v_qAlnoteEnoK%b6ADL+S%9n!hkz0RW+bwf7Fb&o z31?+xX03%d6bfZ!q-JGht*wD51Yubwu)c$(KZQLDK0Q4hqI1~a0VY3-T|y+qvzX#6 z43W~~8-#NhO4CG|Hcda=OP|KlpU0TYAx!P|@yjY%u4N4kOTh=Zve2)7(fQigq3!L> zA2sW>>p%JVk4oNO7!JJocY6iF1aa__pI?0C6_EVh<9o(3JnaR|m4`Gff4qLBO2qrrHRnn07k17RgzXq!m`+<5@A;_05TEq0gLzh~b* z7lr&jvrS{OnlxsM&E*1u*>475F*~V!`^><0Q6`zoWi}c!4jT7u);T+aX7gsV(c+?l zK?u%$E(7I12uZWi>@@f`qlcik7O{XsxxI>_E2zA7K{SLk@&nfw~b<|J-T>z^7|ddZ=oR|SI#E4i_&8g3nX%wO2J79+492!)C{@j1us@i6|8Cnd8jL~^ z*E6sbKlkY&2ICK>aMuu`^Ya;{LkyI!aEL)nL$rs%5HJ|UG?zht$Q_9uT!xC+%V4^j z5Q+WMXg&jqN5uQT?PTDWhG^3mHXyT08AvIuZGyqx&oJjRm@@heQyzm5GxCRMVhLoR zGWRer3u2WHL3Zg7!)#*MOo)(bpo3x2OjT?Knm7X)46}vO3eX27(3NlYrDYE%#WVk< zWg&n}bav6JTko2AYneIw+A@vKzH1~$kx!100yvUps0q|LyY}4g@feIuj>j}?GhemQ z@$$DubRP_>Y)t<%SH<0{#FomuC+bam8*SrbxM`pL#j6mf)|HC8%U2DJ;vfCkE*;TL z-eUC2zfe-&Hylzz>N>dcO_HUGd~7BrnCe9Q%v!c|JT^ zJXzTF)O()sVZ1wLLvh@!!?ZO&u6^-6Z*UklUyYovwT+MB<`ny`x13K7%Pgaj(+_wv z4m3(f@i`XLVh7?C3#jmVDb zymSlMy1<&k^x?aEPje%ty#(WcH}E2u;w-r8>So%kM>wA8YF9&<&Hkg(Ge5?M4%jI$ zrwpg-gg}$&%A}`6SQ{P z#Om&KwhxbT=*Iac`xCFu+88fm7gs!|S|-|}2rb|(I_rU4j~%S8E2k}BhO9?CPnDyl zd-2*#F*ehPZ0bPDx9cW|O^*wUANhnDw~fC3?i*(OSGB^U_b^Kz{QaY)=C}UlRCWHO zW5LD??@Zu(N{{`k_~Y_NcVz?jU)+zE7oX9UHD0lgzP{o^;FcF#~rW>~A0PMM{7q8$2WnE7v_l129tI*v?gL{{^7x3 z*Yd}khEv$O(#Hyz!$Mn)X;%SP+E7+&dwB}9U_~jzLcHe5RKWpU*JUc$#b-O0ztH;A z2NiK1m&qg58Z>PV8wPGNG11kh_OCV9TBN&#LLmBnN+ zfH9MaPSYt1;6_tnh0%nlDxj&V3Tdgrn5qI@J53M@D-1S^$w+&P$pFD<1!^pQbv4ql z%^=HGt5p_*&0sNDOlmbpoKa(|udx-CHjKR8+x>HSoniYhQCWS}ZYf#yc%7|uR8r?S zG)xr7N>2uHyX2^4@QP`=WYtqIH|)Q9Wtgm~zACA+b_a29!F}EUY;sG#)inIJI-aXx zlw-D(F0PZ>dPgOI)YjQrM$Jg|eV*#8>h5dm?jM#;SZocbn6Elu7k@gDKpIA`9~vg}pa9SUCS;kfcnfB%dnNxU2bIws)DQOt}$TVCF1%yUQtEGSxe>yo)J8VBRym-~)RZ!&M^x{Jkb+&zza!WD( zmV{%@I#}8;3OP$Bpn}b|Wml;uPz#JtEcGOsCD&F``mOy}Oi#WXx2vYQOx^uzRk(Qn z#C?|RE2gL7dFyPUQBeBnKqQogOG68AQakx#jQI>Jmw!7oo2URwzgtg713pF#=`9OQ})Ya$K#;-9G~Vnlf28; zhKHH$K&>=MDVcwyrpxotEIU*y)}9 zE%8K3LMbEnhDA!pybhDg{xGG|CDH&H|KVW;eWldnDN(h z|Ecr8C$_F5*4f*$CYbSMWqif?AMpD_$@4!W!ykb2Ka`Pq=l_p?6^G7$Jh>ksjn6yb z>zTm}E)z@qC=qKdf|v~i)|x=~{69nD$@3wh8-2!%^&j&b&4JuK^K$>&OzydoUzEFd zo|%?ED|g@gUhV7W=8D@lHAmamG_Q{}Z|vIC*4fJnhC{lJ=-`^Z&Yoy%Y)!PUchj1- zmNn1|#o*ZL=wiY=rnfuV+0(vh-I~6>wiZQfb9i8R_mo*qEu3eGc*w7n}b`(?%6mMNxN*K}?|*3Rv2L?8KAe6vT`9d|ps|Lp&N zXD^{&?7nLJ7s#0Z|KE&IDC-ieM`dsbv3%<{v7w8KL2M1#$W8d{QM7ugBih_ z&i|~?o%8>%;n4XnO`iWHZL#*2vd-39|M;8XWx)^w{qQ?EB4X=nV%>D6ot40B-Ui6yOMe%<1~Qay$X z)^v5Zbwpv1)*I{YV16T|ph|4&>u!#rDf2g=9$(WR>+XSpBm0{%pWVBqE0)5<*thRt z!t3jT{w~(CCfdtkFjBsWBZca3>*tl@{H#gn~ z32$ptr3q8#oDZUJ=6oO%C9QAk?Gb-N$C5BnM)RijzK+fw$!&d_B^#t?Q+KcQwzf3c ztcjk0`iAzNH&M*j>jGrA^?4;~iT12tyD8e;67L1%x3#sxS!>bhsrZI=uza?dIsJ|D zwr(2Ptj%4~&RBa7I`&kzwaIguc@y2jw9V@OTWp>)q}1HjHcMu0PV|i0Z~nwVPdVyh z=($Bq$HY=@-`4TZ+Whr8bp36;vnl!xoVP35+Z*dnOfL<$wZ+=`7I(zx4As$&nDMqA zZ^&-6ycG%em~QLF*4@J7xJ*^F%Y0j#E^6M?+1j=)eQjSG92|WemfQN+pc2-$#9E_$ z?Y(8F*{!#A`)Y4tar(yCmVr&(EwsC};c^`3<+N-Xu;13Lt-qzs$@WgYt=n6Z zusz=4<#cW8>T8d7SGIMu^*V0rMz?&i;mMYF-qtN|O;#X&#B}y`tc`W&B+l5Hc&F~V zt#?7%*Qh~qU$}4UeIdE&3{JbPTV8#Wy~%d=+}7^oXKeV-0}rkc(ZGy z8E8dlvj3T91~!L=;q#bt{zuKwvA>3fo7`LtXjLln>)62%e~A{(SJ{Cz^F41=e1#qC zuVu&le?-sKqWFunM+)m!hTQy@@3_r3x6F(q<`uw8z@j-aNg89((9H^xg2}Rr=kT;& ztFH5{E}kzq_d;{<2Q`y(4(d#Q^76H`yA6gYHMd#`GjmX*mkk&gI|XAhSR5vof&M?u z#+hoRQNEZh6l#@v^c@a<q}Y)Wn-1pH-H!iW3k>x zi)I)%5>uYL1(EZETM&t7Zb2kpyaiEv@>axKN$L*M#H`9_Kl%~a)7Y!YL+F3ZZ321L zBQK(il4Oro4Fi~-FYGGkW=(1EH+;!aRvdqy=X_cCwL@ZAQXuuQc5OQ zC{=2WR;M=@=a%;J%9Y=ymv!B^uZr86d%wo6(%#xeTE$mbIfSvIzWfi4K(IB0Va(Nx6bIhi*3-Nx+7l&ava>PRDV)^{ z(7q9E;6&UJm!bumsmZ9~fDzF7Abc5ioIjGMRvE<{SO zdirB$#{y!2@{=EnkTR7pIL*&1wyk&QHvogR*4WzPBhBOZuG{A*$Gg9Y(m zG&7VDjry?+aYjaZRxp&2ksS^PvO-y5EX0O3%S2Ha%f!Md;q+j72+P7EcqAIi%#39E zv1~k=6^u1!w))wqRq?fvtPm;+Z^_D9yLN5VFOI>StEDBnwmlY~67c6XJl-1f2iIms z{P?==wia~x#@1tP%(fO@du&~-vt?6Ptdr=7c0t2JyK@2Cx@l7fk8Tut^hdWdz1Az) z*sT7x9>EREC$Ir*5ZiJ$#(~D?CUyh|0*h|M6!eQlOavTy=g@(h*jZc}kNbGOBxQ!a z3tL@HfB6M=B0gt_#wqON&f(B8o4#n_G|rmcZ#QJblkv%w$#1wqec9-ozOH@Q$PXdPFB553 z?bXO@jbD4+GE`DDf88?kYu^0$s+$`B-(7CZxU)+5ud+(`%hu)m#g5Y3W;xAYtVUnC z3g$0X(pN8D`HK~GXZ^-EwtnL;wvXmshO|HbAE6sAw==eX(O_lH&9K>_P|IAM&+}GI zA)Wf9MfGUUw9q#7ltg=alQVAYrmGy29;xP_>*n8c=juFu*MfVHPTd#jOqhGK%Ap~Q z$zU>fi+`W~XAfG{uZy->P#|E z$qlOCDoYNe)&mH7R$1BruCfGHSpXjZJPdGf71F)RvIS>|ci0)ymQ+SGK9OT##!ME* z#>yDjc1Awh1LZKphj9;v-NhK6nehBQ0}hbQiBs3W_)I`g+E!V1c%bCjxmXcB7yBL~ z2pI{+czm|Cq$`%gs6jKT9p7PyK4B1&;3fnyaWI!5ZTp0AZ(`o}3Bv$W3E-GSPcjH& z#*++=GV~LCi4*T{BNb@mYoh9RF=8@&QCa9P&B#? z@q5-Oz!EnozQx!DIDPgl!`N1aX_cjtQ@_drQ?UEkj2`xH88f#v3fkMj;5?4av+4qa zC1KR;u3ZXhy(yhy-(l( diff --git a/etc/objects/index_patterns.json b/etc/objects/index_patterns.json new file mode 100644 index 00000000..47dede71 --- /dev/null +++ b/etc/objects/index_patterns.json @@ -0,0 +1,8 @@ +{ + "attributes": { + "title": "logstash-*", + "timeFieldName": "@timestamp", + "fields": "[{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"@version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"name\":\"_score\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"name\":\"alert.action\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.action.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.category\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.category.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.cve_id\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.cve_id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.gid\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.rev\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.severity\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.signature\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.signature.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.signature_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"app\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"app.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"app_proto\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"app_proto.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.data_hex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.data_hex.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.md5_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.md5_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.sha512_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.sha512_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"auth_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"body_bytes_sent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"body_bytes_sent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"compCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"compCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.transport\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.transport.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies. path\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies. path.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies. sess_uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies. sess_uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies.io\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies.io.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies.sess_uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies.sess_uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"data\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"data.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"data_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"data_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dest_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dest_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dest_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dist\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dist.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.rrname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.rrname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.rrtype\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.rrtype.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"domain\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"domain.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"download_count\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"download_tries\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dst_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dst_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"duration\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.body_md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.body_md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.date\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.date.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.message_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.message_id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.received\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.received.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.reply_to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.reply_to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.status.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.subject_md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.subject_md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"encCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"encCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"end_time\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"euid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"euid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"event_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"event_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"eventid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"eventid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.filename\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.filename.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.magic\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.magic.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.state.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.stored\",\"type\":\"boolean\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fingerprint\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fingerprint.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"flow_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ftp.commands.arguments\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ftp.commands.arguments.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ftp.commands.command\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ftp.commands.command.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.as_org\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.as_org.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.asn\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.city_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.city_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.continent_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.continent_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_code2\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_code2.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_code3\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_code3.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.dma_code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.ip\",\"type\":\"ip\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.latitude\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.location\",\"type\":\"geo_point\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.longitude\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.postal_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.postal_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.region_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.region_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.region_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.region_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.timezone\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.timezone.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.accept\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.accept-encoding\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.accept-encoding.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.accept-language\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.accept-language.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.accept.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.cache-control\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.cache-control.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.connection\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.connection.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.cookie\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.cookie.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.dnt\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.dnt.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.host\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.referer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.referer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.upgrade-insecure-requests\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.upgrade-insecure-requests.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.user-agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.user-agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"height\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.nodeid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.nodeid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.postdata\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.postdata.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.query\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.query.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.raw\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.raw.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"host\",\"type\":\"string\",\"count\":2,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"hostname\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.accept_encoding\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.accept_encoding.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.accept_language\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.accept_language.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.authorization\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.authorization.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_content_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_content_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_refer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_refer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_user_agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_user_agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.redirect\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.redirect.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.status\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.url\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.url.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.via\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.via.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.xff\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.xff.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_referrer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_referrer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_uri\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_uri.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_user_agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_user_agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"icmp_code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"icmp_type\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"in_iface\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"in_iface.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"input\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"input.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ip_rep\",\"type\":\"string\",\"count\":2,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ip_rep.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"isError\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"is_virtual\",\"type\":\"boolean\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"kexAlgs\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"kexAlgs.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"keyAlgs\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"keyAlgs.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"lang\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"lang.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"link\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"link.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"login.password\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"login.password.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"login.username\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"login.username.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"logname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"logname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"logsource\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"logsource.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"macCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"macCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"message\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"mod\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"mod.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"operation_mode\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"os\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"os.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"outfile\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"outfile.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_by\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_by.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_caller\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_caller.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_module\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_module.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_session_state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_session_state.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"params\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"params.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"password\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"password.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"path\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"path.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"payload_printable\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"payload_printable.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"port\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"port.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"program\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"program.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proto\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proto.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.local_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.local_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.local_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.data_hex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.data_hex.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.md5_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.md5_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.sha512_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.sha512_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.remote_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.remote_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.remote_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_freq\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_freq.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_hits\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_hits.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_mtu\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_mtu.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_sig\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_sig.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"realm\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"realm.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"reason\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"reason.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"remote_host\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"remote_host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"remote_user\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"remote_user.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request_time\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request_time.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.order\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.payload.page\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.payload.page.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.payload.value\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.payload.value.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.type\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.sess_uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.sess_uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ruser\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ruser.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"sensor\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"sensor.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"sensorid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"sensorid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"session\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"session.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"session_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"shasum\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"shasum.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.helo\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.helo.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.mail_from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.mail_from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.rcpt_to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.rcpt_to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp_input\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp_input.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"src_hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_ip\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"src_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.client.proto_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.client.proto_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.client.software_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.client.software_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.server.proto_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.server.proto_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.server.software_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.server.software_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"start_time\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"status.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"stream\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"system\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"system.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip_ext\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip_ext.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip_int\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip_int.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tags\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tags.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.fingerprint\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.fingerprint.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.issuerdn\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.issuerdn.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.notafter\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.notbefore\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.sni\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.sni.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tty\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tty.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ttylog\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ttylog.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uptime\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uptime.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"url\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"url.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"user\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"user.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"username\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"username.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"value\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"value.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"vnc_handshake\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"vnc_handshake.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"width\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"xff\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"xff.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]", + "fieldFormatMap": "{\"src_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dst_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dest_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"src_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"alert.signature_id\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://doc.emergingthreats.net/bin/view/Main/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dest_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.country_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.real_region_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.city_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.number\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}&run=toolpage\",\"labelTemplate\":\"{{value}}\"}},\"status\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http.status\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dns.rrname\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http_user_agent\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"http.http_user_agent\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"os\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"link\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"event_type\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"tls.sni\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.ssllabs.com/ssltest/analyze.html?d={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"tls.version\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"src_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http_user_agent.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"geoip.country_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.city_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"status.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.number.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}&run=toolpage\",\"labelTemplate\":\"{{value}}\"}},\"geoip.asn.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"geoip.real_region_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"event_type.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"dest_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dst_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"os.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"link.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"tls.version.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"dns.rrname.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"tls.sni.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.ssllabs.com/ssltest/analyze.html?d={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http.http_user_agent.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"alert.cve_id.keyword\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.cvedetails.com/cve/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"src_ip.keyword\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.asn\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}\",\"labelTemplate\":\"{{value}}\"}}}" + } +} diff --git a/etc/objects/kibana-objects.tgz b/etc/objects/kibana-objects.tgz index 9d9569d7cbdb4f369665318413d17f42baeaca56..e92f366ff7a09c012ca960c7b318f71d3a9b5efb 100644 GIT binary patch literal 30670 zcmY(KWl$YWvw-oS!GgO62pZfSf&_ObxVy_i65QS0-5m~r;O_43?r`?L-_KjMHM1kN zGt)EO_4ITtStKIVfgqYL6zqAnP3#_5O30gwzhr&@nma;^+>;z^wC!}d{P$%A?^bVw z$e-w_vITa2E?7Td7{pO*&(q#vthbGv(~U%V!FFq0Dt@)!@e9TYq) zcOC6?Kfc8rfEH{vI5_86NtV8ES$5bHtY&_D`z_yCxDRivsp+7Vf-{x8cK`B+^rh(| z(UvZ0yYMpC2YkmUXim})NHS*a0P3H1o6xcbjX73vYp$|UERq1b7r;YiWu?u`CoSS6 z_=6>f+I{}rZc1h>21r+qN7UKmeIeTiTZzm)3PB|$K(U4SXYi$ISj3-k%Kc+)X=YtelsbAyG_Q)Ep$*Ae+YlXc}8L!t>2lp8Di+04KT|GbN_!DPinCUb{ zOZv5-CQ9Ak2+TI^T(g?EVt!>Bf;Qvdliw0hBFjl;)T6ZS@j@tyfGryMA*MY;W$d*2 z%~m=(L#>;i&ue&@o~0wZ28dw#Qn`vR!~62NaMNX#Ds@usO=(G>ALllBY55(v~uI=Res%8LUz+ z7Bp8u_rr4uy^*6h*()(oCLzA;>-)D^vh4Y^E%krVRjGycVspl9K?KT+&M{P-!dN-) zH1|RDX9xE%LX<7`dQrV->nPJ&pIePnL{N0u`^vR(smj_^;v^IOS?TGnTo@`5;Kgl* zS&5FW9GvzmJg?PYNI98}+APU&qlyHk@TX~3r9!K=t@`Ufg?;tBb{)I?HR_|utKCvE zRjC7uqQS1fdzDHvD*zr1sW3qOqMyc|Uje_qVC0j5YP~&7V}*gk_i%ea`uzdZVl?cw zfD9Hs#)kYywg%er-N0c%8Z5zF0z%D*3fsfqs>vUOgB8NYI(CDY0mDjV zrxhB(W?R-6+pI<1eKDJX2>X;lxAF6P&+%&XMZdh)E4DJL)(|6l2m?>0OZZR-A*eWwW1zE5}t!tq7QQCH#jJJtw-D z$WphcrZH{QOq6I$41-+S=BO_I9g?9|7jg4EHv8b!!+J(s5r9m{?7YKe7GHl5rVwX_ zM029uo`);^sUVqdOwt6peF=@OZ8O;v{l|pnem5&otPJ4|sd2wEqda-uvI;+$ULhC# z8D1XYBFpp_;#tN?pWjdHT>q47Wd2m(j~Cd(e;FJoiajV|3^e94O+#8@Pp_Wc5cWOGo-XBa#VXjn}T z!Ky|OU#K1rmG3$oq%Sodu}qy2{^t?5sLx%{XFW!LhOCS3be-9_Q;vr&&Du&B`&*HJ zq_H3rr&_Bw$mTDB9VVO$PSy`g#+?55Uw2csG`%21ReGgH(&d8Key7iFy2&s) z(WP0Kh?bs1x+Jl4{sQC_@UvyKeX0yBfrB)EU`yk(BDftEfnVR+anQ45-&vx}P|XAO zKi<-CXk>81C)==RN&Mc02w=?Q7DX%tWw!H9I7H`VYOwdhsI9iYM9lG%|A9lx5?f(a z@ZsHg|EJbz-Q4@9JmWsM4z~=i9ZEeo5k>85PBQ9!z(eOp+K#{Xc~p9cd$j+UQcf zA+Pw7KrO1Xmc>p{K_fMab#j~e-`l_+EBYh6y6jiY>FXvFQ&bLg4FOMv{6ED?uqwRT zlYWA=vIB^U`QhHEZQdPXZZO2{Dbw3c;-g%{H?wHBQP9=-a)dm8w79;oqsINf!N^ni zfxe^06F?|9O0r5)uN;xX%pR+WzBtm_mB7sU2X^h6O_WOM5R7YR-1Y{uMA>IEa?JCM?r~q(r0WZ3 zd&++-8)>WSkC^hhhfixKxWR_7Ieo-#LS5E@l6o{f=3h z*W^L{-2w{-T!DSyc`lLFnP0kxKBGMIi~amTh8l+P+DRV`60%UMSok^?=L%7)s(;sg zB|hcOC9yd4IVr?5kjf{=AvDut=BNKYi%i z{nE1FY1PY@x}r_p#f_n&RKn#8ZQUu!+GhU6lkJGc3^NW`C=yd+oIw6gmvTotx$*?B zEb@r}_6CLqOEHktTmzQEotEdS68cXWo?cTKG<>NhbW>(!0QCIVk$}sAYR_#oZ#|j6 zyoPnwoZYWgXtdLW+~{L?;{?&6JYQ9P~-TJ{8ZZyM!0* znt?qJ;Tk5I-zKI~Dm@lLd!tH_@|C!ZdsV|m`PmrC)3?%b>%`h?#RUyJtp#*l`nu4> zoQcXO9uGxD%iIL+|Hpnc@aG&Pw--yN6h~-x_OH`$FY%sN*d#~c$b>!Bq?S`#o9hAs z0{6%XrUD8m8Pqp%B@`EbR-Qv`;DgLPW4%;U%c7D6Ns>r>+Jk#V<5fUu#z`~jy zASBEc77WM2WMPI=v-ej%P`Lc7Q+S&-Ye{FWyDDepRQQNLCH>-YJ1{A6XR3gaXVEGu zWu~`Wg$b8Ht>&9O)SvW)rjP-*kxVD)k04)(E&f<`*np9W;{e{jlL)~}~cR#t?{xEKmP1VoD>+?>i_!uwdaYCRY$lSVDp`HJR+^)cEH@4n62 z$l0bRjI9CQ=wAhhWcI&A-^-X!4Mkvxg5-g8hu) zhA%;0_r`j91;?tD?%*B)f5rwzqy}kD-;ESrv)q3~f_-;GS79ASo0vI}Oqs*&D*3Gu zhY9zIm0vZriMCH)G(IX7MB8CD9!3+s9%mC#%6i4tcl#{UOOtx}H>(>PHd%GF(kLew zuoalHswBE%-HnEAM;nlp8mmbCXMJuR`hPn@V&Kl#=zPA?9yq2hb}{bT0{(c(JK66J zY2^k_8)Oq~`x|9|o&2WYw2@pKwZfH%(s8$CtN(>RCDcTM$mco~UPTGX1tnX~L6HX1!jA#Xk2dnjyAagm@A`F*Wfx&Gc zm!C*`EHhp2$FgCXwol`wF}i*KqwB}S!onQ4;#QZJAoFt=A{jh^F(#N-n#~uz#4Sq^6sF-x%tmmU)-_Ir3}s zblkc%#RfQ;D~;ViKNaQMh-JI*AHA)qss5hEjsPAp;vyKoz+cx0(Z!KE?U|x{Wejr@ zz|gm$dFia_82`Cj`MAn0vYVBB4-Q!sj2-iqI~U+010!W9^cta3wbAM zJ`5$*sv8I&CUe(rE{g9eRk#TJEdEZ3~Sm^jQZblU7lQBX*c z8`*A^8xv2RWb}xNNqguI*|mRp2(BH_=CUj)NnUBXQQyRzycCK)_Dnf>|5t@Pwcvo{ApQD_taB4-@dWx1xzS$V+vL^)RRS_E!BRJl)bGd2H+~7@a+6DZ>Lu6BK|bDY z0SVzK!vXD5tN$Q(=Aj*t^E$n@sJC& zMkToW!|E%G=?8V|+da6f*F9u<9fNoIv$N(8q3`NvI_#DcdZ4@&L(NU=0517WD#ARs z=&AHqv@uQoro)A;j+I5tW>S>Alk){QT~F-}|E@#(Fo)-kORS%(>B?Fw={=Wl8=^*k zI1u#|m!fg;O(Juyzq^;%)~FI>ph)HKJlW21p>DaOZrw7rQk`B}bvR_cR;VvGF~$CQ zw6=nP`3WC$tyCuF^s8;+hf_5RzOF0k>xE;Iv?t@N&r@vWNz?T60qOU;~b3lN`h zlg5uHp+jRSo|Q?Mtdz|`1mXss*T64D9TCzGVI-Aj>Y64HalxW7Cm98uTb;$6!^BW~ z^e81)iWRd9PJMT`+q4|NjrBTKV&5KjZ>gz@QWn0?mS0AQbhj){$Vr)_YmrE1IbJzS z8v`Y(cZBZvqnp8VmhTF&S}hkV{D6YV*47JgLp$z@H97WDUcTTm!HR(W9Ak+3c#e%$ z$q9eVrA`eMtrGai^H)Bl^u!CN}JsgKQnB78HZdAFTklhTx*~^`}%Bn z9u}}Bu_NRm_2(x?T}-Z8_(@I5SOOG1^_{GnUWA`ETK1VZ!%QZs?l#q#u%>rf`@ei` zDfpTXetG)v+omJcDRnkWUl`b205le%+5L%+#$cgY*WI+9#Rt^XMVsDWqiLF&gR|g( z<#_3wSas4>q|C}a|842`LL-E={;F^tdypR~laghtCw0gYJLlLv#}K>kkfUIu$>ZVhpTlOs-fv!H=vb`p_lN>go1u;P&7gd5LLRVxt2&L6^ z?}dbEIf@|*isgf&4W>`Rf3OvGSr0?5*hk_PCsQ0IZsHx89q?DjjdPO<7hbuDTCVaB zpRALG$4Vn=9UvhGXI0g{a$|D_<-Uy@4&F9UQG!q!{M#;4;FH>NZ?Z~o@e~qO_?S)Y zz!?88WbZxhP(G4p?=rUyIt~VuHFn}!IjV_Ugg!n_OI=*=y;=T(b~04?+|jrf0Rk@a z$vm5tl$}%WFDEHWFfRYp?h(d&uVGk{dP1eDFN|Z-(l(FD5S#=ii0SY>Qqs>nNK#jG z6kQ{mc*RnD=*Dlp)28SJhkgE${^hEX+T=lZRsBhJiDTez$X~DxiGCwr%g0wUxo@BP zIbvNhR`Ycfnpsh&?l>prUAMlgL8>oTYg(D-`UL)Hd3Z=3B2IZx zO_aT{*?7>oHH*|hr`g-RzEUH1ggC6_=VvM$|CtKeKzBzbtQHktD@v&}%DOOCNUU|} z{LCiq6`Cb_x)4u}YPp0+y!9AH=4}wEnpdmMx_-24iK>f>^H@PdZ}zT3ph>H?7GIti zNYHV)y+TBQ$D$6hA!M!Hre0a@XeP-tn_59#yDS4Z&J<-mZ}RDOZR8{wy9+yY)FpiB zK>6*Cgq0@v?$TY_$?>_PVmU2pKd`^f-gm^6PEz-@Y5nkch_TTy+YfDs>U5-REJUF! zMMxlv_+HZENLsjeMlx0&F+638S?WbNcYz3+s{*yZ%U2X~PEj(;Zk(h^F~yiK!AwRT z*UZiEl`L6qEH-)89u1>W{mwME$}kHT+TiqwsnxaPmUA~)DlrhuTQYIycn8znUQD+R ze8F0t;TSes)n~dDm?O_G*AAZB2hPTxKoJ0V6L_KgZ?CRk!?CRb?T;Wo<*p7sRzj>K z=T!yk6mAfGsZOOz6qyn;Fc(&%(&qLvc?#GGIhJt_Ia*7-4fbDzHgL@CpGoJwqRLo$ zr8IvV$7DYsWEQ11_si@+4yhq%&f)ZpJ;90_4)5#T#3`w_Y}+*6ob|AKhJ(JL8d`pF zUS&wO_fXWCBN47k;)<#7<~j>P>U?=P1Gi{pK8=SH;sqR@#hBUKAGRYtDDo6^n&$S+ ztbFaX-IGzQ=O~!c4=lIaTImYgdxXSxe{+ag8@zo}*5X&cOYM*hc#==hUrYB?G2Ig+b~%09%PP_%Y#4kv zJjbSQq%q3lAD_&=hD=!G)-N0S4;d&Tq&YWK>Pp9>>n9FOz~%dTbt8fKW44Z&;h@N+ z-l1l1A6F*5&JkoKd5T#H^Qbl|SdSl|w_^=`k3LyORpEW}wdbvBCWwYC`kP}J(Zyo5 z*>oU+9-3^l+q?^)UV{~v9}V67I^bU66FVzWGTvEk$>#b=Qaj|^?LMq*OtQVr3F)KO zhlM^VR*pi)1;-6_wM^&cEN8d`yWW%w+8mq($}ywyCk(zdZW|AC>T;;HB_3-CXzf!v zR@jEXZ&Ya`V=dNMQH+!2H5Pu)I*42$5NRU10GOq)MFEg@q{W*LjYT*;(jGjR`Fi8m zmcNTeGccmuJ7ONFU&HbUUfnb28-zSx_upOgy^0E;UwLc~$`K)3G`6v?X2>AeFH#`4%kxWB9RwQF%XnxEqb*xl#Ep~>|HEUQP1T(CvArKy4NXTb);b0cUs3@V9 zp>e2v345Ld{KDH_;&IK32>gJs7RgK@9_Vq{LrfS?$g?Y2>Dl1O-wOa;7-F+zcWa6jTduYIl? zbT;RwFH&t`s6?Il1lp$Uq_BW?3Dqh)*zF7YmXqrkz@M(CUD!cQHhw4X8UAB*8!yNgFEfs-hODF}^ z3W@0L?~C#jA$y>E7T;-e? zW-Yi;yJBkaF2BTOr zNy99BE_Tt<#V@p`QCn*Z-ZOE)M%@7BwZ-$}^xG4j<7@7Y>WySt#RY<-Aumf4Zir;B z^)UihL`(s&Qo^(da#edDk~h%;-Y%Uf^nrMij#QNGZc--y4*ZR6$PYX7H*BUTaeB)Z z5_^uci`GIi`M;uUvwFX+s;^Fj*k(hAI%PQnHmDHHYQrvSCaXd_0tMJ3$SMDA7qEW| zs_DL_%yzURTcLH-31j0gIqdD&#f?YUzf2-58dGJ@Zw>ZQjB$W9Z7jc`^7_T&FqAYY zzQmS)#%|rEltVbV#zw&wgGROX8J|rnC+##i<9o9Ly47s+k5x?2DhBFU=Nula&{1}=f(L~b}luNYqE87*v$?rq%YJ&}T&x^yJxuPn|m z9>$U(kz!-9#FYc0=1vK>M)AE%N8h`l>LAM|&pDj=W9dGMm?FJn;ICdi7EaKa8-`B; zlj5FHvIx>v>9(X)F8>l3JD^f?q>O?a?pkq^NqlLjj{bB~@xkz^m&vtT#Lw4!Qr z+cT**+M`q9aar=vd3}hW-*&*!vW7K;GT9!}{Zoi+_|y^gRgnv=((;ZiDHJ}n$;ZN@ zi~gObdlHUT<6lxx@!*a0MX=&jtTTGWK5xoGF;Ksi43WNt`r4h68Rc96(5v40uTEPio#=nRH-o>?5SGTq7kJ_r*RNngCw2fkWvhGZ5%H-tH~uHt^p$hV>Yy!$h4 zwzTB?GrP{#&LKO%zNRO{y70Ub!_BkW{1dKI!3B45|Jv`6{NstlYl`rrX8EMmDeYqU z-w2Zq`cDO{tA_IY;g;Vl11fQu9lt_Uo;z4bPPYTB9$EtjS-vEG5|RFdtjTbxI1 z|F>LQ)Vmk+NQUy z&`YN*LG%wl$UJ-45eo8u+D8#1}trpP@O?ja_c#6x`ed8bPPdtc7$ z-7MNbTl2xMTiyW?1*6Z(MEbxL>atUHz4gwIoiqs;6JY zeGN6y_I&ziHAG*71~a<;=CU_euM2;N`U>8snYmu z(iNoD2?Jmh|9-!qV#%+BU*&bw!kr1C)M>afG|I3E-y$LUv--9LM0c9{b_GOd4*FvT z{H?i$P__>BcXE%xAL0;poqb7zV;}oP^^MEp3P@Oi(l)>~7;`yiFCUVqd3LXK%#vrJ z4GkAU()M@%hAd_ofW>-tpo0hx#gzeg4%hw6qHBFg02WQKFZiN}4-Cc>J67bKHrc`m z4P=cCA($bGFbmkIM?HwTB6_?@cwv-+^FJqpI44cVDvPrB$CDKxR@Z8-Ovm=cc+n2} z-{bdAJ%*ziTjnWv*KV{ycoHQF?w`>f-SmA)W*8F=uc*?|k6-NY6`7Zd;dd8!X2LVC zVy({Uj&_nJNMIn10&-7|i_xkqd!UOyJEC8fd!1}8yg#<4i5_xE766l+|NJh4TFjTY z7R=JWpx(7k5?wYDk+{8-=&SBQAznGFBRm%8`6>~|Av0t2L@m2oEIkV>71SCvZ?Nl~ zMm$QZV+wmY9iDPlG>5q+M%Pn!^YT`yiSIzRV)|8iJX$;u47HNxu0GS>2RS2}gn1*q z40x!MQu#^G~X8CclAF zKAGu6O&edg$P8Xj(={`v=>arkr!uo&KgM`mnYHJxoMg|`5<5f5-mt~&Sy#Iy!AG1T zT0aR}teRh}B4GyoAq6a=Juk3w;(21@qpe+fTgoAb5#TMh6=csNOBb@EH{@>MEON|~C^zw> zlbp!O88WsOd9FE_-q^sn;`c&|Ze+#yptmh#+I6`HGXF11=#LPt(Rxgn>tJPvj!)cLl;Pl(JT|B=* zzmn}Q#y(hnEvx)O7~>f2Efz`b{fW^;0vPh!1zr_2Za|7G5SGmijGwH+^;tOfHj)R5 zt|mENNhPL8914|owFP$*vyFC4&_y*;)Tg|J<}o{PPWR#w_~CxY(mJ9@iR^ zRB3PC9gX%$zSBW2KP^Xoth$-4SfA)FrqsTzN+jjU$WiHNp6wrr!8!ng**28;q} zW>FP@qZ7nl;?&~Ji{Z?rp=zpox9?M<5W5_XEcYC>QBPYMjb?M+D}zE!>4lak{tm?M z%3Og~-Hd1+pBwHa7Iyy^E^x&+DgQtgV8XErFhM1~=bD^r0>*Vvt|0iZO}>9Hkq+ls z1rS43s`Hvz?ZL~`P-lv_3sLeZ(Ma2GDSop9WUr(AWfiFUg&P37)hpl#0n-eE#LG^B zarUAQ;m{%g-LQc9liDLV;*Jvb?b=IDE+-TXD2au zJc&eshq!IO02a8u-k>T-BX{b@mNVfa2%7-_7)_!+KwTKeyqYRlQM(b&U5_ib3TC+= z|Hl`T*vaSGb$G|H4KTj=Bd8zi3^=UmbBp+?P$?_u-?|otGkdATerfdC!tl@`Thz+C;c%x6j5R3zrD*yq6`==R@YZmnv zXn@bt7hW#I8Boq*AEiSbipb_;2qDVCg;#9<} z`lxtKt$-9)fU+&GjtDxZ1h}45#p3`_;mXg-fDmj*@M{w-Jv1vm059=!6$eWG??|DJ z0oF2>wlc%tK-m@%Js@@1?SFj2TS_E$L{}-}^@4WqPr}~~U$95Yj_`LIlR|$1cuQo(M@Yt9voggCTpeY`04K0+$|f}1koq__Ov(*&8kmfzmq%(@0LU8R3)D8q_o>E(X9 zd8E*_+8@5MJo=5&lIyFvl~s7vM80Xt9iFK61|D>qd+%GnKM=-q)xmoqu8%xYQ8YmY zBwKlun-MwW)(07y1-mJB0W& zrJq(k55E=q=wE*zfJ^LC3P`MOOH#Vx!wt=Y+RGJ;X}Lj06f8WxFV_qPjr++d{e%b= zhZJ4avcVPo`}7`Zw(~%nqK2o=Q|xa*x(cwINr^)SrdUl+LDMvBgCBD|;$EPnCuuKG zPRP^ORH&)hRCm7k}_h zLSp?)Gkeol0h{?Z5Gzn?Tn15WL>+lYuR(g2OBycro1ZFYKjlN;7Jlpx9Hy&U3MzV4 z(r@Jdg%6_Ch$>kBel1H79>dSrJ%lxIgB8h=QZhJuyyiX?*(n^;52+L&m-M< z5zbxLyq>=grXz&&3al>ZQG#RUy8Mi)##v{I-Row%yxZWx@lQsjQJZqc{M)NK&R5@y zP+ww^W~94>S`K(le>B{d4y~`VZN*CJGf`MeDCNu%iBVM8o)2)75?6hAUFAGeY)7R>kL3*v2g59VajE>%X6ykz_DPs7juIVSetmQ!4&u!9_`jRP_|HT5V{!tm#Oo^=Cfjm5F z4+em^1CB%RGS@sv7W4Amu#4v39!Su}>n)HR(NhcK`kLI(fx5OCyQJCjXt;ar0*?|u ztJ0zWq(B2BBEyRA^tpS{=e@2{Qh(Ut?=4$r?GqARmtoBk;JLmo?TP6_Sfry1FStB4 z6YM9->xcjl7?_^$6g+@qn93n|ydfLgfD|jB8xb}SYz}Hzkch+OV{ZFZLc_Z2jtVt- zn96_U-y{5X6CF|LXAsYrs8bp;{_3<{4BK)_W#8A5PK_2Dw8N$5HjzJ1x^488`1fXz za$Q3*;Iw)R?7ZjNH#`7*4N$-ch5efH*DN}c|*6JtR#3B3v3=R8i;P96e zUeg`Zu9Csr z99BPzUD~~}t+N+^aMG(+5stDHelO+rV{vE2==Sy50aN{%%}P!_d&SIe3wva4{OUn5 zdj0xut9Gw^`s27ZZk(|JhC9F2D<6St_t9G+Xhl7 z|Kk+DHZKOBpywAd{zW!?{AaSGL11~7&Yd;%S3R0U`j^D?4EoGpyvmJcU#xG+&gPWQ z6!m4ud=4H?5q=ohktpgCXpGtvvAHu&xR?k=_GWi9ZI3>%0#&5Wa2&zLL@Rl>-!yu=QkNA0p?UehFi|wJ$GE#nA}ZuOFF`(+nfY zPysexAw<(J4npyqzywDV0suP?8o|7IaVV66y2~p1>Gys4dN#EGCO`roaQ}VdFko-n zPi+^xWq=#s^SaJ`Gh+X-?TVHk*Z88r-_iu;Xf`(0Bgm=YR0m%r*Ymlj~SiY{uY+b*ARlB_E`6Fw@xkTH}%&KzbxDNGSbOy&$7?%OUTsZ9SC2$0=I+tyJG-{%j+xp+U)YH!v-AWD?OzW@Ig3a zbd3!e%G-1(PqC@_!xz`S6zIF@aEVtrvFE?56W3bb>?J5$o zm&AxSTn*)$N_un0F*ZGVwf0MI^*38r39Kz5aGt*FZ**)%`Iaw^h;6xeaoh-5OJp2D zy@H}^$`reBsPin{+#Uu1pK55)3O%LCr*u6jOP>N`e5#}2*@r#Y4W{E7HE}$FrQP3y zb?ncI-11dt=HG$L;az||D+Gu|4FhB`F(JaIZQ%6;Rt@@klpa<4krtx|Y;u@${%A`z zs6Lp6ewfA`F(R@+I_|X{uYBP&cI(NQG_9~B!JorX9^aA)Ehw!Wz;W!2G6ur7Ue<5zp zP5l9b<|m?h4~-;`883i}zZ%pdxX?mQ=P?21Na|D|5=`Rr`~4Rr8iuCYS~Lmb*y8q+~CWV1+pZsp}1#x5NC3yE?p#7V?URrB%e@Wj z47ImNetMb5_lm2fwNR^09E0`l&M%Xr?3d0^Cs>0JpzhxdWJ@A3CV;33$e0`lHFCl} zgNlahKBiiK4OCJ@68-#T5CSeh4maXt ziO+_EMSTFMCd@Cu7d%FQ+5bNAA7~W|cjno@U}IrQ{cNFO<>~B%!&f#p`ziHk1An%_ z@Bpddeo=Jo0{iHFOE|+~rDVsI0{DBXO^Cj}*T!=|G}lbu!16?=pyDtnz~&l#}SF1{#kggnBm2?S2A^o()UwKfu-+QU4Zw3wP<-c`fGYK<^o$_{-;4 z+%ob#zg3iWSw+Le->bQ_8#NzcU%Qorw7HleyeyH`)SI&i#Pxf>2S9K$^oALyr#f+H z>8x&F_Jn_77VX6G3~d7r;~;5-XF%om79b1~@M3^Qj7Bn1^NNS$kYcfoB}uMZ^N`mG?1K7?`^O88*K)%Bgm(H#hZCJn?PI#s z26Msgw0?-5wR?8YwPr#_@9Q_UrNySQ;^NXRJKVK%jOv*}0opO&u>D^T7Oyhe{vjIq zzJp-(&nxEeoNj(w_p5l7pI&QRhAo<%KgQ|9lj;98a`KV9fOLXsDj|y8#D&_xrw{P| zmRqVDv^Jw?^IU-pa|;PQ9+BMyM>e?Oo??l-h9ivuwSQ`MRylxJPMH_bM%@K1AiNJ0 zhlxOhi*2;xNI)%Mt?#xdC5WmE(S5wfemz|0+GYO3z1anIFW}x=#wo>Tu%OKQR)-zO z3z+E`h^M4{--`YbQ@{ZFyB2EP8n8#4rA$$SDDw;Ri+n#dg~R;;an(RpS|XEuCPy|B zjDd;qNe1wCG?2ikF{9%bNrw9ux*r7evID8nz*z>;4TzqS72w{&l5L=QPA3mhfO0B0 zVH8Q)*gc!N$DLZ#4447C#7jX^V;odaz#pswxg&XyC3#xN)qmgu$YAEYvut3&%#gW5 zA3sG#eKM_>n~bpZ55_F?s(lu%(4AbE+8Aeoz^BGb)}{2B{T&8GqORAGQzyzvJh_%Xl?gM1Q+)G_MQ;3W@x z8O&v5B&ccL7JZw`2@AsqR1CCb1(RsmUbdRD>uwlc!c9Y5Fr@(S+s;HMxcnqqeQR9- z3qmjnScgRe$N!tpf9RRWq^!KLz74ja$UK4ne4Oqia@F$pV;6(nd7VP5?S_m2D`-u)>d~RgayIzQpAm>R1;N|pW zPj~=?8bdrLX8vPE>ELJZ7tAsMGZUEYL9GME>xIWbyq=J;MlVJsb$CjKsE@CKf5J{I zD0o(>stLm74fIX5x2PY`fbRaLEbBsjvwm z^0Q(H>K^!M=TJuG(-it{cf_Lu9XNw`o6vd73QKD(zHGAwT_Tw5dCvM~N?OIdLbY)w z8~vc2wF}K8u2X&x<vahyHlFL!^Tmxa;6T=urpew@~r}e1C9;dqd-eQ$7=8j zK7P%#>(IyAZdbEwwA-cwf$6#H-wLN)gY5!|xJUjK|347K4fAp@SD!Dv0sf91y&0`} ziL0Mn32glq6!sFt)N%R+Y;y`~zSwA4cR2fWDKtcMfZge2V}M+WzFt9gi;YYl#_Z71 z@5a0!wf58DDP8&)TPoU=)bAEGr-A6dOO?~z*b6DJzxs&_E^%-ULns+Hb-F>0=L%J6 zvdOtt#?jypoHq@wa!Shh2#gy&MVGGL^sKWT)NTYW2oXVuxbG-%_-FPIOyCU*tYHAj zlrZlO>3r9@SngA7{aYQA(8%>c-4P3kAauotBAn;r6|YRf@yx}6J|>4~cT zzdGJBEUKvO`yLt<1Qcnc1eA~#2^~O??iQ64qy#0UHX$I=DIy`#jige8G$I{CNJw|b zFwD$)#_PG?>$sl}FCX?74vv}G>{;s{zjJ|*DYoM{)OIW?PdhShxxpj=eWG%*9Xl2F z$@#{`k5E<<0CuL$he|`ybT0W!Fi`{GERI4rJtD#iDTSRt-?)?LFCJXQWp~I}>s-_e zTDjvR)Lr-zk7#VHf6u)8*`;n_16Axz?h{o}q{G>V?S0&9X2=Ki4Q_fIv4Azh%z)CO z#>~z63_|^O6@+l7j>|GJEZ+bq-4bW7#UoS$w z=*Cfr&!7C1zoP+&DSuzLrKM-3*Cmnmj4aPb5Ns2OxehokymObwC>U{i5! zYO5d3)8g-SAYavdzBSW$Tw!qL{6=48D@NZxk+03sz3j#CPJsbsN|fTh}Gqa}Y&R9;};ZU(pJJFbqgXHa`eoyRH@Iyv;-NAuGzC+rRk!Kr(wLTg4W4Xr< zmRvF)&~sst>Q%oc-D~-GKAKL|kX7N{d1dX6nj{t4t2>T;-1?H+{AG8_If{;M%DV5N z@V#JooCkH*tH$RBcWw0Fmb`u{W;{*c`eWe9B$_QlG4tlj;_IZQ*jUHOay5m1cdi*% z3eGv|d$gc_3MV8DhKVnP9(`Yf+kU&)+fVV@xBl_<)%n)9^0#E?-C>Pn3YfCqm6po7 zVb%$)z0=8k;1%(JP6ZaF?aRVV!k#3+H~_2UL9`gJeI)$u@YKhJTOPZmp%*cyuPR!X zx*}RUCFOQg`Erd$=E?2xIJvfbBc5K5K_63x`p!y&2&cPQ*Q@e28&`(mmSiMZ1OBi_!cHzA9xexgw zln-tUzszh~*N}-V4}VD5`{IhyBV=M3^zmI0nQdVDM`5&iciP%_qisO;cokTeULQZ@ zibZc^@1RE4pjulTJpqWMr5OT35H5fitL|~*GnVA^bOhelY8r>~MgK`EDh177o4TDjAaP#-y(f%Swir9O!N?o!_<% zy0s#8c}ZJnjzUz(avzk@6~X5;yD*=B>0r7mS@UtDggAOtylz<%%*J>ZG<`5Mc}{+x z9A!39(~-c~Pg%Oxl;Yg{+1X##kli9iOPK-7#yNk6(b3mLJ{HIA6=%jONGRNU{Yb2e za6UC1sMj+cfl?IpI&`UR7--jdGu}0#YPw~S+yw^mJRFCn59a+&D&G??L2DvlG@s5O?kkV3WJr_r@cz6-ME_RE+XpofUK*TcDhPEUbC5%0|xOy z&x>H(M@|+j)SJSPgOxFk8N)U+wanZL+$EcZmtPV#46`df*S9=IuyMq`bjRh;J$Z}k zjxiV&rBp_?>qyS_F2Pk?2Ebz-z_0ZE0;mb%GM#Sft2xYdA?j+|Pg)Oei`XVwGni5} zP5yD|<=A9uFt}?ti8j~lzISMab-8bfV^a>uwdy`T?&&sKU+g`Hv(8$bz!xA@yjDRJ z+}!8qABzlv2;qBNs$L+ao7bS?+b$=8K1+`_Fe@R-#ky zU|t+#Svt_Y&YgfZ3-1B`6$tqgeB>lN$+}~&?Zki1)%w6O91E?J(edA9`MRE}Bmh&p zvc@d{3M?D%kJy8XEmgeA8Eu(F!{1rpKGM=`;AcnOqLRmaU z_W8al<7&pdp5Xg8|*G9PGJW0ur-KQ7@{fU!J+Uqf=X0msPh8VCe3K-=Nu7`+WL6J0AxwXhT zGz56R0QF>V0yKO~`mSJ`GD*Q6xstp zRy34LP6o{DxI0Ec20zCI)f6zb0VE0YRhLPweHXnqdUx&OlzXYOh2I8j73WA^m|wh> zy97&u{VpPwOMfb%oVEbT7Ss$v@5ku9_INh1Uqoras8bzi_oV0nDl|doR0k;xBInr+ zmqj0n4We>s1e(k=6Sv>K=6$(*wQ=*}puSf~xItA|4`1NaDHEYy*)ca(tqt)F%O$22xG*V;mk!HDy zIW+rx+P=Yr8RI)sjx34}AZ0xZY_sU7_V{ba+I zvQ$+mL@=?eey+3uAmuGN84bqxnpgkqeVG8jkHgG%)>60A!c<~1bl*_K$-Za7ZxH-X z>@+IT97PAw&nE8Nwg^Wf;>xQrF5=weDDz-^L+zw~yEBEM0~>wAqmrQdX0fig?h;F> zaf!H|d$UkLu3N@wT*-A|YquN!butxjzwd?{InbXXA!~$u^RqajVtLXNxYZWIgA&EI zjDNhf>)t8Uze{*^DfHDP?zwB2adwt97_&%5^d$G0cbyT3p{T|6RdxXoyCEZQ!*euW zg+c5wW;1cdroR6Y_cC!15~Ik82lX2NGu;CU?bLlSRj^eyzQZhoHL5-BAWKz%hmLl_Nj4cbU60`#hfz}-e-6*Bve zi4+EnHv7KX_hL7`8{#f4IG2Ri29Qw_mmHIbV+!RFMh zuXy6I!{a^zFer8ioOKpy$S|MJP-Y*h6|TlQl7WkC$-(B#57#qg|EaqKgn8H^AhS~<=A8{rR6@O zN?JBQp6@j7p&AaE(ig&CPbk0S%6vKW@esOIu__dx2~=>`!Mv%BT*C!e9EF~Qlhxt4 z@iKt<1TOs>O5{?&LK`UzvuI=$i(lY|U!Z`u8<6_ZU)>3Yu#&v^a_B5c(T8S;eA1oZ zi#*naDH^R!d~W{Fs`m+s@W93znQDO2<3K(&{M@71l^j6H8t${;P`uHQ+Hkvk^Zd2} zm(6uaaW4M-=-vy2;MjYRdi5Amr-?zcRdx2ce)C!246HD~)l`HO4*t%0NP)%T^qm;0 zBswXJSOkUkm3@Sr_wZ!cL5Pb$39Ar&izb!!byJ_+Phx}a?WG52{H(9V+70|HP{d|W zoTAd%#UB5^%4wM2sr?d_)3%V#=BKK$Ej+;3B}HV7?G%}K zWV9w8ihpDu%y5xL1F7;{RMu{4|G9Pw3CcX|eFu1)3!&+#>>wr~t@*2yyTr@F93sVy zn`T}Y7u?aJo{OPZdbs;#cqZxlf~jfwqi|;rY&fG2p_d(fn~*b7-#Of*Jlx}YqqhT= zjo&{7JR9WzLdvLfP^B~A<=xkRW_-733oSj8bvB9kMzl{FhO3qS>L0QjwJYy6wR2O3 zX20=P3b*ieSIn)B91RlMw5y!%zz#W3$opP5$gl*Mc755YC&FI6E@bd@ea0*N0!( zTp}jpweOKgvTVx|nO#q6nWiA?c#J7e5c$OrgZ##Ap7&1SI9lAB*%_H-9v?2)`?D?J z*@a!r^Bpn4AI}tfP1myl2Cn+o1r1wX+W$&IUBA}pb2TV@1#S7QVb10vw>i+`>W$KZ zyrqlWpWujl&W3RX>{#Wt+1aQ7GdeS1IU|ivoZ8yKqk6?IB%4dbRS$FB2b8rsqe?fT zM~Xa5PLc{U%SV|6FNZdSh4N^e+Z7*FV+JptVdBMqrP5}0upe)jFXQ^G81;0X1n4k& z@_#=;NLXb%aV@=6{+$N8y|+apu*6Mxfi|GJZAu+YPM7L0QR{Q;_Qb zcndqBv!+heb&u=m#II-1QMcF+-(`U7Ke8YHz6Bz=S0E3Y$^&>mG0=|Lp8>kZ^Zt?H zTad+R`zPVx5a+a#$|Hze)Sp>(1z4{_1sI6*-!~H9ONdZaTC<`8KdusGHeEqoCBJN` zIQmIV8FN;^IyFKlFLlC3iBq1fVaM?+p|A))^{5K4E=y#G?G`s=j-HP5p$v0=F2N_U zT{6L!n5h>VqnAAKfhPZ6UMVOXGkmVL(QRF)^knPW&%})94A{N5VH=iW^053{fJ&-x z3jD>pL0XyvKrAgcO(##)L*py=f%)n)_8}6&f0sk2XY3N1cod$!fJS4Z5M)$gty6)# zBMS6{;j_HI6@YaXC*mI5w~ecu;i977#Gcjqv9#|MX!G&+4!Dl&k?qf-!2G zsBYi89-y{aZ88SfFZdsS6PF3egPq1ms)U_>^ZB_v zC~w*&@w4m`w={D2h4(Ewg)Q(VNM5(@VL*KU6s}Ii{p0#Xd@Et z$`&~pFZ0G!*c3R`ZJE;__oB2fH+LE6>i7NNm)-LG$RACg6l09(uU@mt1wN`qj9by3 zd00{Yl2f^fto_|lf2Oo+60huE`TV&0t4dN$&6}C)ozm%K6_wwgc(xwt_uBQ(g!t&I zikimnm(RShJgN|S#&EGWo$sP}`x6MVIRH~y);Q(uTmK?eP7L%&@QZT|#T=ETPJ^Ed@IE{`_i*6D@Y{9Nx=XaRw`VRZ=blqo0r9*?6P^pVQWRe|uWd zlSqznG$k5`luL1ady=$(U^iqDapm26w>!8JzOPrxu}6e9q1gpRb!+!ccg(+R6*G?j zZ=Mg8_hPr1LO{S5k-Zb1GAm>IJQ3)7KyJttSZ8^>di_Mo8V3}~oVvp#$cw4Yx*-5}uW%Z?o)J3e4mSJ$R$mRkzet6qai#ZTP4 z`(GeL9NnG>#HLWOmU90-^A>Pdf3FPT(UX5YwsIu4>326t@8wVpChlO@p3cxmSM47A zPnNTNE=x)t*mQRIscd(CSLCjn#&N2A>8CHsq#(ZD5t6sokRm?L8dEHKmDQE=GaHkY zFGYb9TZdpkHO>-a>=eQB>s(u{j+=Oh9cj9G`QgMaLnVhrdv$kM=VLM_@<|<@dm0g! zf(Te*50_Lh?6ZZHv&1Ft&BXfR{pSL?Mg%5v44>z1Ei*k;>F2 zKs4oqCx`@k@C8W>YR}p!&B`^e$s}RtdGG5gm0RBH6dp_dYRw!=7wn`BkKRc$G2Pqf zd4{l-v5FbF7#_LfrgNlBQb#2bxPAL4qv}sRGqRpO!Y$Sx1j~MCju3>zFjZ0(|J?-v?a5G@Uc@Lfhw^|uZQH0Pa5iHX|J?e0!@5JYk zQKP>frLVNKbF=^VOB0_9jw3qvFoSGM$h`#QlHgf4GbT%|@_Am?x4GRUfV{tVSLXFf ziw#tK98fg%QClnXEuos|<(<3!K>=NCE(v`TIIdb;Y`}M16n%+!VJ6A$$8VPGf5W%` z`j_(XEe!Xc4EH;>#+Hh>N6uy?CSARR@b&reoTv20SFX)KIPUx>Yq&6Ku>1K-<~Qf_ z9^K+57&}usd{K*U_8xMgXR7I}5Y!hdvDk82?pVUxy@+*0GcQCkQ%!`!S#JXzciPq=_(|n#l>gc41Vk^XI)HpF)S* zgZ=|TyEpp*q6@yHZR@}b-t_iN@}zUN@y=nu4~libup@?HYbYZCpIPuuus22L`JdUQ zrEaXCBWzDQ>`d7(`0657T=tz;iTxKG9u|167BGIcwbNeHqExT^`rH;3+pFtLt|v-Sg=d>P!BJtvA-Jr5d;&*D2(&+tALEI)_)2en{Oc?V{){F6 zJ|MbHU+2-_dhg*C)Q7bN`Vq{e1Qy}@tH3{Yqd&9kBY87okUI)T#oB%5Us}X-wM+oH zy4AuIdh5+LY~!(w7Ap|bD2NBI1t|ZCw^UF$N#fYlPAJlP>q*uY4mCKZuj8C}S4ARI z?Sa()**6!L8B+|1sysjWBAI=lB^AYEAO&*j=b{xs-&!q6(<_PA%F_5R{3Hw1gfK+T&`gL#noRLeo~c?DE<1KOt- zy7fZ7(JM9!yG$HmsuDAs+_j46ee(nNbsPDuJ&lp33R0avzFBe2BmsKmQ-^tZNDyg= z??)O-RBnZdCrR)>mT(zmO2ALp=#{kFq)MxKJyCP_=6fZ*O6V~*TXWUDXw1+wB{^Tu zMtb;O zRCMz0%MG)rWx>Kzx}#shrTna>8)iC(bcz0vbXiKHqxGr1W&*2%4LRmgxBbJDo7&5p ziJom7E{Ya>K=jw!VcN$b(1%TGTI-1yZ}{<-OANsGK>x%e9X(?QU@+>WpUOn%HcjDo@}X zA{zY~C_tf#fqIJiA=NFY6@27M$3Rm(bNJRW_N2lOzI1`~OM6>?8s+?k@#VJtNzp}` zY1FPQoliw~9memY``t_8*eDkdX|&}%&o*`ZvQPQ8%bQAq%dSG$ShF-hp z=$F4ER&Xbn3yU<2k~!5*_bRQw7vKD~Zk9x#psZ~H&f1u^$DoRA5sUyNc*qnt6MSCr z2Hz`%=Ad&DQF*$sHsKapL-uFsLNDZ1dVPnD==H3T>vyRv=erWR&h)#yu603W{;tmz z+x$#wQxtnYsIF?P>v4@#*gxSeQMK$`xBIK$TBD)C$EzWeM?JUEhV2v^0%zUuZGk|bKZh$-0`9RxKQ zwixYj9Q+Qx3B=Zzm9r^w21ehYCSv(O;6p}CFginNDMwDEz(Cy=I7mk-Fg`>=MmYM} zRiVg*6#SU15kMyV0!~l*(JrH5=WsnmcHGCmQUN2~1IZqr70XCnWRxXW@mZ7*WMkl!!vbC4)VY!@iPmy*iU6PUK= z`2#%OERYCpX;&2PV2`s$9;do6UqJxp>Zd}dy{nlC4|h!4>SjwF%ETRvJ?d%+jA}<| zNCDylV7s1v54Jr<_>FapRQMgBao7j!sX#zE>;S?yA%7uc8)FVw>o{YZ+4$qD11Ssf zl1Rb*0ev1)DT3-6C@qE@hYMts4aXigG;DR+poyWxq`eu8jq)Eug1!5KFXfRuei z8WSENBlp7E;k}D3KG7`630(VpKtS+W6pOYck@G&L+m3mC-f_ zH&2Xn`3HMBj}gD08*i_J*~+E&Qjn+4N@?SbSR>n9)5T}>XpECR&m(Lg8$J;ik^N1? zFanI+a3R(~_;R!z4WGKE*210Sr%vI3i}7%xt$b5cJo$2Wv%H7GxGH&TC%Ec1?~Ftr zLUHC~&3M^T{ZL@`zwukc|HN+s&PIJdhUsx?dip+P z(qQKx%We>)4gr4U?|3TlJgZKL>j>U#nz@UiUWV9#oBTN&d2LV>%{?6bRD2mXhAor- z4$f{<0vDT$n;DX*1fuxw1#cT{hSPI*{!z{F-`5gDtu_y-Mk6j1e=YG)KbsK&ppI-GBvxG z-(Cs1cye0P3w_S^BnONNXXDI1?2kcEgk?gTmUyYS zJD-cuPqbTUgVe9KAA^R<0wPu&ybF9$%AG_5!PG6zzb$A_NK;p9Im|6eL)>Y#<$k*` zd6MwaiuTX;Y+Y&+aGih68boK&GLwjh_?K7HY2Id1mwrys;{rzk^yc)21|H-F8VT5m z_uNwcQFSTWfb-0pt}jmE_aEnrCu_*>jlQ#*zc~(zRF?JOaVsBea&LY_hQIwIMD*Zyc3fC4U)L5j^Lq_U>Z3tc&8GAU39BfLn;;w#H4ZMRK%pz7BDH( zWvR2uW8EMTasEL?CKUX&X=XF-`jig1qx5|V@fE|?uf(+l4+40y^6ekBU)JN$&3cEE zsx7!S#{{t`+;ST}!om_N4je6n`T*%eUCQ}W0eat{t(#mRlIaLev4DrI+D}0^cg*-A z&$S}pWJ+|B)tyf8ao)8MyhCf_`{6vr)8CgLPzg4b;vBVc2PbeXJ&DvpgE zVfQE?kEy}pkJp<|nxw$8n?2};Y6ft0%I~#py3=1d zl1}!=lLsxPh0NnqxKpx|*dEHKlW^qKlGqaWvlo+bOdZLeOyO|DrAJ=l$8FOTOHFRF z&*zcmqwp5GtX`PT%HFw*5OyS>JMLX>LZ<065bB^Go+o=521#FpZ2G|@j-O+frQcT|Mp_TmNPe${v4%;HLzsX7(%z^U)C-L`gLC)eLd zA(jslkwR(tVdW3VHr1YgrOBSePO;wTsogHjS}52JX_N|~JD>FPvtw_*!bOQ=F|1N!SK3>xBw%_3S)HRdE zr9~CB!8rc0gk1SMrcBp5RrV;8@EmC+hDv(k0UjfyhW|Q*hdGu!&*jKMP2TgcJ3Obl zC(3+;U?svpjH25B@w}pE)V8^zVaxjlPX}d4(U+FalOFf(7ZpPQyvkpX3>+9n=K>+TU*$%*sH`Zoi1*NVt#22aGh zucYr&2(YSrt~rCWWMB@Hz;PdN{Ig)>UZ4O4D=ZHcpiA{39P4%w{r>G0i}bHsg|YJ{ zPkelSjD9J9DP^qk<}-Je=Z?zNzt(k@wlX(2(|rVIPQc&>QrBe(LA6GJ-@{Z~4k3FT zAgJ{H1i$Ggd8?C;!fMJ^KHz?C8{duoWY4CPx}fs@@(j4{Xc2-^#Rw(P0x`id5isKp z`@aw}egH{)y}u7;s+&)#WIS5_Go75mw_qCrt@qe~s7)rqZe2=!j)bun|kRwiQ2hMM%zw!6(hZHztwONNC7ooN@z_ zy{=?JRFI=Ty##kz#{~5hlWps*wU_euDV~!4!P%qNiwqbNlPEZx)nUYjMT) z)s-jfH?H0z?YwuNk=b=DzF4f15T8uc4)MO)*8EhSlUJtk|1fNsptcuS*tdeaO83$5 z9y+1+&Q1Ar*w<;5FEF_hYvBnY2WCz3ch%n2^^ zN!N@tInv&?n>TEBc`%x2#pDE0Hnj^macvfY_w%WCeLlj!Uvw&-EVw*Zz4OBE zE;OBXYMiGUUhEl2&&v~qMJf!s*SO;z-FCzgabMVOg81@()d}GdTh-9)PVj!L|7|3N zv6rT99wzGO=B>ev3~do4qvoUUvKxnBWE~UCqH}8269??@w^qFU9Zu*D=K{E4X4QIR z-Hkg<4|EW)op!NhYzV_nw9Q8UjbC)*Ru2)enzQLs@`}J*IYFBmtgcaQ|^~6`% zC(q5EJ7uJ!JqD}=V?_=tA-$FFs^NALC3?tBWA~xTU%hKQH^;Ap5=1<0n}qtliCo4P zZb7PDfC;52;WtzLbep7nOKTT!wA&vd6tMNQG)3U9s_a~1zqNF{+?V}EXQ_|IQ~lFBP=#7gU?z;OgNx?SIX#^1o*K63yk- z)6lq`&jK@E>F!hae62=Tdk_6xMOCXb=rikUt&ZV8^Q{?mqkv#SKh*iZc$7}NpOpAI z!QnR~#tyjfG&UG4vG{>gNR(?7}$2aM+jH1V;xW#BjYC3wom2P{sFbsuDj$m(|Q*NOeWDd(3w_!>z1g>d6mE}*JJQ`W->kmh@32_1*{voHyj+0P?2_aAo-XFk0) zJkNbEk)?6UPW@rU60?%sR?Oa^{rR=-$B_|~Qf_P*DLkI=c3Kcgm9T~|({jVf{D$JW zSWe)0o>BxfJ903ComB9!zw~t4#``kQll=1f-?lEFM9dj?wQ5yMn;r#M6WbySeQfob z^6XUwet60&h|Sx*@EP=I@y#a|YFigZ&$p&T2u~PX5BGfRx%Iz8&>g^Q14RKBM;$y} zbpH^Fd{)^dgF6>;!rBd9da?%I7MV)wsL78?bZ)%cw zyFt^FesS)K@hz6E4aL>=VpAne~lQKUuBvig8X^dzUX;-AA`ZP&(?a0nE6>-F8@M0VBO6l^J|n?8~eWecj}R_P3Iwiph(%K3~LP7+t%$sXpb| ziwfIIA!&bYMaiP)B4t0!4n5q`h{)e~cQt21MP%9YNl}(iy?1}jqZQ2?M9+HV4CX3} zYQHX9o)@e3FljiPR^tQ_6R~zNb|(&79}{G9SGG>XYQ!7HDncdPj%ztVbGz18i!`rAzF1KFAS!9uZWVo*WXEj_-y9zDLxpY`qiih<>KnEjO*P(Vh$QG-L)SE0@4#S|nIZ;H^!a}0mo z*n$Md7N8&;TnewOn(+$9S`Ct!kRNyHvmZok(*H-f7zs?)>vb+ZzNJUQnYm^E@2C%L zU0Ij@2hr{a2w6#hAMHuvBE$%V?}MZCcR73vC=dkL{(Ava>UFVCf=P*+*+p}&fce>G zBlElVG{rvkF{kEMp~blLUHFM7$72dSRw+W6@e|l$0$TCL6b8EggWTiS819*CNef;b zvamTZh2Jk5QioriZAh!^o}b)pTs!+@`N?^oy!7wzyJ0|Z*;-R0VbzbzaRBLT9_=T_ z-m>?-;T6j#AhZKs}bz4nVd7ugqpP7XNEa&yh>p^z^ut+WSCN-c{ckHE_m9Q z+su!(o9@<(#XLaH*~jtu!m;Z%;x7CA8F$h*_s!oN;ajp2{yzMf>S@m(`;Xf^Aek4a zIz3|Gd|4M8S6;-U7P45rsa#%Q)veHA`KjkadPiEo2g}X`g-H6o7xsUv)%mEFHOUc@ zplQBSJJ|Drm;Ghv$N$eW*CmM$#oe>sOS92j(Gy_P0}d z>j3SYLc|*|_Cf_PhxM*Q>XPh0NQrnAu4xV1^@{lV;O#T>;cUbHEQj6xls|i~H%$UC ztB8?4y-3M;9Zi<+0FCMwvaelgL7#pOI^%`xVipk4??{^Z<*e99lv|?l9(>7PuEgM| z>i5gY>)MA8-N-3t-8JZ^@{bH#Icp~~tbB9B)`~}+PEv0PD-804;y~sA^E2Y}j>J2Z zt(CZXQ>+V~Fy?AUXH79!z*=Er6mmb{t%T{BwCJn?`J?*>Z2jLT@$;ul|Dd%NoXZeK znc}Es-N0v%YABzOBXjW#Dp4Bs#T8L3!k<|OfS%xa1Pdb$yT(iufP-Ni)cEEY0#RDe zE@RENzNJo(Q(OQ6oEYmqSRsc1Jp+L-p(a<{-qlLtf;)LQp~&idPlB)mI5UvYBu1Nm z*q?xcPb(Zij)7~gTpr~HJK^Xuv|z7fEB+wlCLS?>U6Y>FgvyH9m_>?-0z z)(xKi>ah!D2ca8D@zKV`wgsncj(B1*?n!AE|M=t1Y5wtv^XV&Z89jFv{v!*jifS6& zzk1%}{rjoRJR58srw`77vJiYgM~FdK!0z_K_N8GGtduufi&V1#(Q@O>XfS#Jd0{xOkFXBjZN6Shp-qIhd`zyfi= zOO|L5k^#zOdI)e{ciL#cAXl*kA&(HONU0<%k1!X7Gk3AKDL=X2V)(#L5rOTmUDeaso!_WND{q7XohxIa?`de#PT31F94mVvSIK^RePVe zqBmjL7!B5*6J3e-6=unH4AWexE8EQ~j~d=|^sUld)BuF9B3?*Y_}ZbD|L@&?{>#sn zKT!JO!!ceeT{0?q1*>c##9gA1;QqGxN@e~hIm*j9NEXh9-V|u)@OIH7{V>@fTfIX{ zx2wc7Tl0P}TbV^|NMXY3-*PSmCR2sKfmDJQA~g%e@5h@iAUqp7`J$V*o&fCavtlxW(74>vxSj!o6OP_ZQu z+wk`u_Q(Y_#gX)!Ix$Sh3Y}CgGD&<8{8deMbXCrfJ0TQB--${oPw&I??Q?_lV5kV0 zG@`x@`iJcVi+9;#4X_C2RuX)xl>=de4-(cgpK1c&NbA2#c|@Wb`kX|_NzK6saPn0i zV~LYKEIxaVRsGne3+t z`ww3&%PCTfJliN7U8fG+HX%VIQZ3J*S(v2UOZeW=M{&m|$E&D1b0}H1R47TFLv6u8 zIxelqQSW0Ii(U{&o6-Tv5gx;cR}Qf*EUJp!EFNV!lU`zWuyyeFTuj&6%nj9P2cg0Y z-Z%#vyz6h#?Efsjd3rM_wH8)?LXIfcAs*sW>Gz?Mu$Zi>E&S~yNL@0D`k#i^PIZ(G zgulvyz7U%$4+=; z{jS|RimInLm+gvg=*kEJRL_;U9{6YuE>(Fr^;$XU_o!M}XE+Y;k{n2F5&NSYCHgORGl02xlr!n!B#JUR!Tqx}vy)4W>&DDyp^V575N#hqYQMQvcY2q+f*qL?xv~?yS zVr?fl6j?u1btPIDn5O*LEL@iV~yh5Sp?D%_n2LZWc9ch#wzJ(>1gXBv2}ho z5myA>mD#c#LSFb+s1^o{=mliM=c~PsJdAn@KcihsHnLlU5mBuFjjq{^xEV$oqc)`( z(B-JG6o*4($VD1hsI%dtya}OX?yF10)|ReyO`*rz#7@C5NEynSqZ%*L)8ep@c3Nyx zd;Fsd{xjnw&KS69AtclxeejEZ!2eV?AQEzzNaz!@fnb~8_M-~O&# zmP%OmeIH@)z9vs4l{k8fNWPZ>RpBAIyPud!)JLVvt)xJ`L?;@tvL?Jr(=;Iu(%AZd z+r?zYoUyuq?N3&chk@Axd?_vgLuEpsEUyZ^@RH?zn?oIb- z8x>K$5FzDy!RWcoSKY>kqK)q85fm=Sl(?WmBarH-P(y@;$tYD4!JIOc*5ASEXc&`M z7D`tgI_)z)YI6+Fu38mkiIC{~An)dL%Z zc^thrVkyG9>ScVfE78sqCPoYK%r zIfuG!Wv&p(31jA36e()W`qoF5gf7byELdcwM)3cHST?#=IHXVPHne6W7r^c$9-$VQ7&UnE{y6tqhl^Pz-gG3!# zy2inZJmGfX?=-nH%h11S*U*IPysJ%AblD(LU%pxG_m2B?ZBZS;S0+y1ucH#BMU74$ zCgp1sn0#zlMvAY8AY4X(V=@NcLy@gM$Pmtlk_{A4|IWyP%SmCPh!UPP`yFqRQhg9I z>}uJfqNhX6B7n38wf>7#p?86E{ZQhjP0g}sd2wUI=~wv%n@sjM8yB&wJtY@(2FCGd ze?C;+^d;Q>jPu-YWtN_rUhmisdFYDs6Ap8+JM7xtBe2Gr@-9jBpBSceyV?k4agd3M zPmTLc+q0{Tebsjo+dwMcV(*bG@)K_e+gACPO7PzpYo?e33jvgk9S)lDKi*B*Wv`H{ zRKYqy)cUqi8m{Z|QXa%MMAOY)h!Ng`SXvmS6Jwma-j>bAZ*asT8lQzF!+|_`;ACFd zWQ_EcRUwIpTW?kj?gpIwDJG8IQM%ts*ljo0w*WtoPt6;bQ;Vt*>6jdgAJ@t@{I-`= zD<5&mzzn3j9?P{7zZ`90bKiSHm4}zZLl`VXD@DlmqxQ5=k^kd@ecIT&3Rdsq}lB{g+%6*d0rCk_@GT`V&o60d;HJf1tA8nrPUK2JG~KB<_x zY?CO+fc))?S^E0A{2lC&e5b%Kh>&BqihPD|97VKPBR-P>ep0;um}*jye_CCgua*=l zE6(~|YIPYE1GAOIb>;Ced7yJ(vo3Dd#)C3Aj)zoE4sUZyF84`VVtyjydX0v~>g7+)OCds7a z6+U8rQ}kub7mH2YOh}H#;dbDU?)O{c<(HwS(@RU#rK0axfecCMA4nSyV|bEWLV|KB zKc(|8O$L%yZfd*rLj-%%FypxCcMSYyJqKB6!}*38%0MK0+9*K$Q#^3HkQoA;N8cSS#aL+@=D%J`!^6!TyD8= zx<>K>X`7=jS~^pDpx#_#a9H(tonOFT@g(2?ih4eYx>(O&d^XXR&-IUxYFhkCmy!tK zeN`|=x;Q5%ifMs&>!^5bU5suo4fDvRju-mmT|m?%qi!AZ`2Ji;50vxmGyI|p|HI{0 z>__04Z;xX3rr@1}bn!3k??6XuYHPRdNF?T~H?On(BKi4m4j0X(x1?P>`1Wp+^$#tT z%Xt|c&hq5Ujnf9Es>m#W^Q$u`qr&mp zq*Hx~^Ufh1XaKz)ECD2tvDy8;z!-!!Ol#BU57~8s;{_EuzF+mfvmW%3)s27yo1fMnL$AJ-?^wWw7|uiKvRjgKoxZ z@a~CUK~Vi+mD%x+woL?UKcA5AsVm_xLO z8?Szsbd&m5YkKmU36WgB{(T=ZSJ%r&y<&WVek}=F$_R7HViAlbGi_%#+jt%CYb4ii zZ3tZpmrC-;FsMmWP zkW>D+hlxoa#OT&($u4olIV-?Mj?xa333?$yxhR8iysd(g-N{yF8Kp#q(Z4jn57#dZ zv+{U?d`Sw{7gR~{mwN&EUJ|j4vK9^W>-cSozJ`heFmSMq)yBaNc_`Kc*p2uw4eHKR z{$K?Z>@K?i`U}N5h+1VEV~CZ#tG|)8aE=ga?LePjZ}rSZUo_laFF+r|+@hw}aaY!` zoAi}7^)DOEol)ve&K~(*&;A%=O-GG=mO^a#do8R3wtQxJJ?su@$Z-w+aaIJE{nt!= z`uBwP!T^E4?3YPh-5jR=znGBmzdpJXXVLjPI#bQ$x(h}YE!g}!e17Fj_0}ZW7z#y) z*lL@SPW6tC^*h9V$w%T^pO)qqbZdS(8dJRcH#7?Y`SYDinpVV>tg38Lg|X(#MRygj zfbbAWS2L$r4IR#H$laO%m*7Cik^sTp5KMHaaRv7I1Ggl7f=@GCMOD{wXo=Xn5Gv%V z{9VrtE5(~YUE3Uxx!_5$DPCS?KxRfo;89U_(cvu%U3G0o`FOn_#hkhMk{}x&DrG}m zm;l%5MZAU>DU#LD;Tj)$$&B_Z>D+tu@GTw@XQlo9ecs2ax*p9s&jM_2wK?wgUQO4f z*Du(H=J76kDY11Qw=mlk7IBRE;s;n>`W7)w{n=GpvDS9UD@A{jZLa>oE-9llB^bz# zwXBV?Y@OGcYQ*x64ss%^huo1gb+kchQM@eH@{dyMQYWpcjGcAeXre#Oh|R5#u85E| z3Cp%E(R59sBnZXXJL9daBCJTDG&Q$b@ul)xk%~|o(~5Rcxm%a1u5lDz%C}LJ%Kpq`E zx4HY&9|~-lCiXy?ZavGO3L$|t(5=(VBtmY*mLr)5?0zl^ak&mH=Lq45H#M3J!$fx{ zcP|Vpd(pCkgExhIr2NmKi6BnO}R1^UGSjNUbfCaN*K*P(282GkOymwrn*7a>eKe#o1(m$7Y zS_GIxDG(@#5VN^j+J*WzKePmb!64$?rv96$YRe!AVm~=K4G9L+=!l zEUB?^FaOBr{wxFZ<{txMEQ&Svb%HKi!IPH@Y@qj?U(L)RSQAS|If053b0%Y7nl~Cm zo#9%@;q+Lyy%oS0^n6{N25GVWqQsCr_OsTh?B1jl?bqy2c;(8cU{_c}Hy^x)U0^!;>#4Fc&#|vNyhP5rMnOeeY^_*T$%ruj&%crrk}xyJ*F2)B=QyaFI{Gmaj~NpEU#rIc zsQIqBiCXEZ)6`-O-)^yzH76uxQ%5*e7cn+oEU}&glCBU_9fm@fy_nI9N(|#YtQ#*;I^!s z+dnw`6mUbj?6O-Xf4twH8VeP6*-#A3tk8G5>?KoJJIUpBA?U32wg=*kP&mZZ9ar1^ zTDV4yx|X1hl%&9O3~9h@~gL6;?kDK4YL-f*&90xIPEF$Xa6SI20m<42^?~(oyTux zde}m{xqo7*dKwefNG&gLe%%E|Hd_S+-Dsa1`aA1Z!E8BjTV2W*b__W#)neaP8k;-n z)W(t13jf5hImri-xx4kg!f#_BnHS2+bd0abz5=YZGY z6kuuo!!u=66$IRzUdqCyr3oUn|}A7mcPw;l9C1Tjqsj@&ah_fO_YobWHEU$}U z#v$q~u--Cz+XX()dl^3B@5AJ39*Htb-vfQp>I?Ya*FR{3ZWJ<6v_Gk`*k+}1PnOp> zMFW1qR7-$(Yv~2RHj_I6fOTN&jSVO)BAZb35+TetTE4XX4*2O1R+!^aBpQV;H;ozG zrG7RVAU}*)GA$S*5kt&f&d1G@;W#oEo_aEU=|RRm!mP0uIDMBQoR&#jhK>SthJcd#LEf0LFiK%#B|o^aCjsY@gFpD6 zoxFoTt`)fe#&T3Sr9n%JMiyiJ3-N&bc1P3&Qs3}L)k(qtkIBrWSrI>*=2?-<@1idz zO_r7l<*sYJNha;|FwAi}gJgii2NR3j?hLb6jGO0SnSvKF1;1lQ$tuAK`Ou=nNq-Pd zu9kiE?l-yx1y?d|AI4g;*nr>Nv>#+M+~qZ7gs}|?@m59>&#<5;L#HTfNHq4~O9C-< zK*9lywbjUP<*Zq!p5wmXE5MWM?nq6*qmVb0asVmu1t8RV0NAXTVVo;6f8n(#dcUI< zioK4>gtENLuYLeoW9K*Bf#m-ryjNaOXN*%`Mf~}lj*Kjw4|bSoA1N@J$>ejApM}5c z9rAGk4gMddl4ICxOYVi&SgECym88bmI-fY22?27c*2XQd7;KI`0%5c%TUxR6$@3Jn z>_-b5(SsJ)kqkUt%Kl1?2)P@D7Kg~F)jri0BBgVF^2qI5>YJm*J+Y1z*4RkK{ZW53 z&^Smo5}ByJgjDIKmoju(^tV$_FF$(eZJVc(n(tKK5F3vp9iJeC{jw_aOZT$o~>VtEg|+r zcAk+&1)`ka8u32T`g%XAMT8}-xP-oM=C%}kJVn;qSSL9>+M?R}KpvEetTpJ+ra1j& z-|wPas%auM0de1I@$ZIj?t41T<-a{ND~>5HZK;@IYXd2%=Sft7{eBk&V{Tt<+9Pe2 z1cHf4)XtJq6)t?}^vRFCDL=2FqQNP)$f`-k+Xdqm_q>-oS}Mpsb<@=?A(dK_e^0D= zA2A+R(mAUarR1yb1@~WgXmAt$R##Z4tVg2k)FA=R)nDJ_Wxoa_W+v(f^B47iszaCuwI`VsXhbsLe6{o|2pZ z;GQFH1A05ml$Jm?(HE^qS7ynCl4gl+9-vZzW@s$oaM6E!YuJLMe;!_EaLTs}i5)rm zTNWRE3W!ez_Dsu2`!3#pZPFj~)3;xg{T?R98%ISmxLwT48eZRXMU$uGO1Z+|VHCqH zT7KBqxl1^MvVW0IS~{V_yW@oVm`}EaGHR!@r+72yQA4i7LD89nZd&khFY;#oZI6$) zx6IY_FZBJ_gV-vGN@kt2yA%e~vvcvptRKwCl3BS;J^H8$lYK0BnSARc8&c=~Y9g{ZA#6HAoSYw2=KJy*+Z?r{9v>Z^Q>|OsQVes; z#SG}L?mN^t;c6uxh&$}nf9?P2sX(LJKG^!!z25vQbn>F%bN-NQK!OU2qT>%23R>^M zG`3E-De>=>YxTo(nae1j`*#}-`1J!~mv)jrm>3OIG?G;#AmfndLIL(byNC)-fa@0w z!?Fa1sC5rMBpG-B{U!9m4ux#@n7}=E+}ed)?Fb>m-{d7F&tVo9mUJ-=r1wx|Kf3;s zCH(Ht<)ZxM;7{fSk>v#dDb^{C$M%;I=_JwSz>1Dn$-~PeYH6|CQSvpWNcNBa{2<`G z9SUk!=j-K__q^OeqT1y2<3j$z@yk9dO5>Y{&v^#2M^EHGi-~(&uGF<%ID`>qZ=&g1 z9~U006fti6PLn@}T_hSQd*Ld{)Rn6r4t$1_H13v{j9WAWF%1RX*maxTa2SaM9E6wx zp;9 za786@_Nm$=GVL?lw|{%K-Sv^wWnGGX18Nft#(s5@mI+lNA~kVV*-4 z)?V&!|CESKMWmzB5DD69bcW){BSyqt3ap~I^UE%2lhK`Vm1(N`UNN?Gj!fFa?AtoN zSU6oblYbXlZB<9=((oqK+rJ7vq=G(*2TqYf>z7abm9zdCFs_NVkY?w)HcgaA(X8S1 z{#Q#S=sSd2mSx0!iDCCz)=AQZcd`8!W$3@LjQ61lce&8myuk;;RP2?3NaMS{fG7S< zaf|Mdg26M>adqmV9rbRkCX22w)@qiQ42HHiibo{wgiKb+<~=S^(vkjuC=7sAU;j;p&!=N z0aE0Zu&rB6N67ca!GLMTeEp@e|IqkLjpHSp7I?@{UH<#C2d@xIvr09L%XcOhg?QC~ z%HJxTd8V=sa#O5Q(>}Ur1wj+XZ^&`dqNPT5xQykPhUTz;$FaZLd%Z)aS#U8LJZewA4w~aer!n8PZwoZu)H8*CiNoT5q)7tAid^)k*b|;_R zpHl0EyeprZ9&dxfw7>^rfn~hIxW~yVT2R6^U{ujbHdW--)+2s7_m`zN9MBuzR;=6AXT3+L_E=_{d*MWkjw!5M&vP zU)&MS#&;6cpO8&D5v101ky3oH5xAJ~fJ%teCHN1d03|g9SXz zb?cHmaE#!6{>Cf4Zggb;mXzi9!=)E2+WXG2|61^}UNM`ZE_(=!6EYASS2n~zTA^m7 z7Mq4OoQ>zK&iV&E5h@RGoNx%tBtF;FzpeM}^|lRpYg4>%YsTl0T&M*=3y{>^&~V;~ z3!YWG`TOXCWOSKEK_9FY9~}i52F7Z9gP87!rkiWw5C*W&Oza8!2y!?&ym zY?DaoZ`{Ic^4u`vr*+Yu_v!m%y9^qX88ztq!!8%@;fx1ukZdF7PtnYx-0R>03A1MY z`1fIyuhC#K`aA1S(|oI+yh_g$9z%BiD}-J+@6Fcd8(n}?w8u`eQt== z{HwG2JQR<|&x*V5X}C;Fw>vpWxD*+Y9?F`yIknNGo8Hf!cA&;GF8|4%HgAOh=`z@z z9rk#FWbS#Sllj@nMm8Owk`gF4)xG<91-wKx_w}L%Z!7j55Pw?(+BU8Lqo_3Ctt5R0 zE?y}&p_jyK=3>$-(2ZEPVX236Lczj9F%#?KRGoq?& zp~|1}_HMHcoiMaG@D}%m3Z32N1vPk5_8KW;l=TCh3-1q~t~J+Lu!+eN6MeCpcRsyr z2?4Z6O~N$A9Yj(=gjDn;4l&mZ;&TsO@NH7&7`-!1O$_*aeY;k3uFvqJxruEh_?ZG{ zdtGSBJMuMatTP$NaE)PlCZUVFoW?VEad5>!DRHp;5I(z@+f}rkxZ59*_G!)Kn#DB@3KgsRp9MQ%{L{{3`tDus&$5=oz`X}g= z;cyHr`E?Mu&#T=9^35UUO#_pa|2~99z3K3xkKc zpLR|IBr*eU36>qn&9nJ)ICkTcS0?dC44GY0U%qK0`17h$naWw5sh+!m92zg1dM7lK zji0bMH2RX7IJ9b-{#@k0`%Mbq^*DR>w!vOoTn%A$y*|+U#iFU8`Vux+v;nQe718?{ zmLzgwIEBM~7^P}-F)*^20oZ3!e*{=Hz9N;~Aj27yn^7B%P32=ubMlCaeZw{~#IV@N z-dqZy+Au@>V#MHGZA$M_d+BI_mxxIJ%&iM4^KdIdajuH~Q9Y*Gq`&q9PdU=rMqk-q zkoC0IX=Th&O^>)hRqhWXlfLvS=ZZuU9z#N_34Mk!Yt{NMec^_(wCen7+$qwAy77&5 zW0o}fDUp+~k`v}uV^;CpUI*G3&1<$#F#@HKU*4xMj-8%&sQ<;u?0qp`Pc0^@J+P|7 z=B_(@znAn^w?!e(T1>v9bCD&O{lYd|)H4r4$AU`1of{~z?sBhg9`<3xSwR=i6)%Kwm z$*5W2Hi7$|l1?@BA{8=&kG15;mZ*ZkjpDwH$KkiwPD~?9Ot~$<<6O2DdeW%Uss1DN zP-j3XZS2c?tgap%i%&)R2mf>;&2-=hgQf2LFHP9dP(?HM z5JpAv{}MBsIbjko!N?R#0GvirKii{cN2WD{L2R_s@?2akaMRj@$U;xL;a@u%xiQKHBfLti~y^U%zzYFCsYF-zSnMYr}nRbEN9+LwNpL2 z{iw|nyqW|mOLKG=Rzlzuz$@RtTx#*bX8azZV zVm9hy_q>jzSrbylwfzg@?)BaC?Jr@>jxKR&_Z&+kYeFo7rU#*gQ4GgP1)eBc$hp!H zLF$?YL4MCZ`0lsr^U0d*cLXdZRA-mRd0vysw9}WnlXfw$(0>vW<7*pkQ1yM2x1FsZA3YXu|Oc zP+tHn^SOrsNi+1jT-GXd1!Z|*!&fWYikm607yxNhw1?>TB6-AYfr({dpaHxy;4~=? z$hJ?21=4DPSwaMcZ&D%U5a{?8&<};aF2RNM%T|+8Il1o9H@ITLA5|Pv2wR=Vvl~}h zEF5u(T!Rd2AFtR_enY@-POBZzT*NzIihFn)w1O~QM=16A+CJk}Fj3NBR{k^n12}hP z25=m|F&}_Zl2gO*4Fo*W--2!Q5k&eCRudSv{ZD@Z{OO)k7kVc5S#oMQ_^_(1fHWKi ze3*2LLnPIB!s#sMS4I#0{lrOi3L5cChYC&*F9HOr4hi)8iQvDyL#-fP#O*;5$t~>< zuHVl8uJk{&TyFuRi{k~#3gV2o=A{zCYq)6@k%BkyrivPL z@zvJZD|dp%Fvst5QcA3dy+moJ*WWP<@s+aUbIw>$TcHzY zj4nSC!XG=5_PRzl+lR*`0zr;$hbY0{K$MaN-xML2kjf9k<{ck{n^k8U-X~%Jw;Ov{ zt1ej;cV}uoL^)nFu-0JgsYw(||Le|x*3MrwKD_hBP2BZ0hO;&U`Z?|}2&2Vk&_b`w z>OVq7a}Xp;oIP+kIy(B+=Ihc)Qc7nDcDPMfH(J`H^|0gqsJp{a1Z!Kt7kzWnLiZLb zLwiBxwyFnE;#v7~WXH(_h~v10<3`wuXsR`T7!y|Gg4#2pPn6&SZAc7MzJzjh$a)Tk zgCR!$pe7JVhWk#mzMTB-mB`U|l&uG^(byYBMt`5%VT_{$x8ChntPtf5HhIa}eRcLg zM*Jze@UAKi%W^@mH8rQu7w8j%VdH*A<^U;n^&xe4gUZ+HfqiEGESGs8V0rk>S4kOr zPuU17u|0WSs&68zku^vw&2$r)9-9^xUc?P+|~((*|=Uu7;hl$?^bS zoe^N9t_QOcr$_V1zNRQwl&?EdHvcU;OKS&L)*I(x!b=!xF|*8eX8+SR8H%Wg3`qNQ zZ0cn2DQqJ| zzQm)f1bX3WMBsU9In$f5IkJvnkyjaallPlSQxAiaw5;G=W*xVC;?!;Bm~PH@(%SOj zec5y1M&Q~yTL&0~Zut-Z;#0)KAbQn=b70XkKMpE!y?kl?2wIycDS81bR{<(tSfLG3 zf8LTd%P65zSOH@_;IyLhcJRaVpt7E>ssW3Fmxe@dd9uP&a8jf8Q;$@sa|yOIF7$KBFv?bqz2ru4I(>qZxU7W{NT(6=5| z)ugg&rTp1Z4L{nYPlyf)21QCy`v&<>r{FEO?wJ67sh_BHQ&lQr{qa=OVn?D4m$_b0 zdnfolP&cOI5s;Mx*V_PmFpOyc=J~dPG@7qZk|_9n{<+3ONPTcP`~`h*Ta$3fzc|q` zue7#<(va)%2?BDJxlcmpm%TkUDd(1i{JqNXaj}7DiCKQ$*-uL}c1A$WkEm+lQFNLC z%wW-65x|-_<`S62M7;w4cQOJ#{Sr6pM;=bcKn$m z>7SGc>N;&|y*8B0F$mXjkk+DpN-FynvyU?W2MnMGkNB=F*QFIn4r(?Pmm)6~INm4{glbjV(nBp+A zf4jxER(%ipAhHZ1nRN%Yc8Ag$RT2wBIUKLD8R{y1s0ABz>uz5p7x!E#V}cgESUIb4 zgOv`eJll^XXsi9kyHDx3;w^}UyR+j4sKh?;*JnNHGfe;2hZbGogU znyjJ=E5hIJ`-@iiDlrmM?(weE!%e={@}A+_k_0)~BZ5t2QAJhTk&vUKS>ajrhbAC^ zA?_!N6uF$*DP&7x=A0PFNxK4H6p{kps$`)B{|k%Dfk~Yie7e8DvKK{kSQy~x21&+B zv_kb}I-Iaz`er4j!)vL-#^5B7ATw$1>nq}PU&lJ;%=wR#Gc>?`FJN`{r}jtM#71k! zeARoVhdR0B&iApOB4Un$viIH!7va*63fY%HfBD(7LM?#hcuhI6dj?itLxFP2BHc?4 zhEP2qHd4kwrOr{UB#Az}o-{{{B);ZimLdsLztJcAln0^!Fv-|-2>ubJR{)?u8nkVm zAnhM%L*+SUOC^L|0!{{YEYr$=yK~+unfqR>U5&YIY`5TO=8q@| z5y!3t?Ri&$8#?Z}<}dz>I06DnB_*o=&M#3)tXDTIb&0<+SGHq#^>O{`g;4SY!f-m# zUnI+7-~h!=y8qhf(p{99e3b7F5ELUq8QyLhH>jSyyx7|>QCRSZ>Wi-n$(amSBbgrc#j3nN!q)(tJO4eG58Z(LGJ%0n z?bd1E)G)--A9G8fWxYvYN&N~a8x4KAT*?ant@%XR69g_Yst@6q5Bt-Dy?-0x4K{G4 zc*I`{?=D+B#Ok^jOIQ%wOHy=F{%ruzNMZnnZ_liPzJ->%K%L?DDH zx)D__bY!F_84r=-KlV!;c>i03xZ%*|m#;>+zi1sqS>(vRhMm^=AO5W|w?9qcla#kP zr}{R5=BmkuX}wQo=m&d}@<;4sou5XYY85KtJ|~0CVd0;3l1u>%O-}%3MLr-{2*}1^ z?f}+FuM_O(RVqasPZ}NcYq<;VaPKXaY@-yAso1DQ*|smW0 z7aoQN4SSyOnB79ePr0<3a8!SZsQNwZQmP^b0HKzFzT`82ou&%5#dWs|k(>y9=G3;4 zf&%efIsUXN0BZ%-P#z@x!U)2MVzjoUBis@EEJI-@< z_Ui|5vkY%T9n090mo2$(Nug)0K=$8BP&5Bez^il%X0K{BiuNnYTWErl4>?Krl?xfW zypJ5i?)PB39bJlX*vj{YuVhTQP|(nSc)y+WXhhLbj?Vza?8!CIT4NtRtfCK$n z1q6$zK1f!U6XIV<@54R6Anl9cVRhzdGG{et(2ITa?->gz-h*!J8KtUy4}Jfm(c@+7 z+Le4w=n#}xdJSH+bA=^iLCv*o-~d+Nj)(X``;Tr*Yfv{#zwsLctiFi9 z=hP{=c^0+2rug5>E$hus`mx`RKTbN^n2j19suVUjioeX6#+k7A<^6kNRaUd`#hGg* zV0UsHJMhmL64)4Yx+6{=+WYcq z(n#;=S1Z@$W-Vw+n5g{DEhy~3FrV@k^f~Pb?Av7tYe&8ZYuli`HRaPvD#y*Q9*VZu zaeqZwd{SbP!81leZst;EA`KQsb>?O~v{7AVP`3{cT?+WwG6_I$t&|CC9O`<9aN@T^ zcfcUrAHc*2;EN>{V>CNzV)o_D}LWO302&q&kukY<2V(iaY`;NCdl-PlZ zVZo}7t≺%`$z!*#wBbSQa=2G1H_0wyIWAchQpYcdzopU$u1+NJAE9hXI~4fZo>?ZM0PeN@2`()xj#0?EpKJxeHext!@FZpDzJ$v(I|(1L}@ z-{0750*}T`Kk6(* zacO7dZ_rxomvSPZLi=I(o;8%mc-cRry3oyATdpi&i|L5;D8IH z(jcCKq9#F(5?DWhKaG-qK*9mAiRM5yEnQ@uPeQMn2pI3@WRB9* zzD*B;V1oI;#x&*x((9YNzXA`&-NLzWzb;vHec;GE`ruLjxA>Eic}P9_Mfh3SaluVe z=mTu^r@BSB~>%N9syom#GY<)VSW#(CkU2&L-j$0?*jQVe%WA8dVuid_7 z-R#@uh1T#t(l3Pzl`ByV|Awm;^7##-Sc{75Ny{DJIloGMA<;O@YDCw1fWOpR-$J|) z=og2s(0^n8z$N*poul>HmirFjzNVZr<`?I3VU5Oh z7XwUxZq;=hDiE@L!E4G?@Dyo$t&J4CtpH6i^+*YKxGgs}Ig)YZ6Th=72#k=}nO8cU z8M)kM4xR>s*b5+yE64hmEP+#qBZZ9PJ0n=J72ik99!4Dxh($9GJN~P(+EQWEm7~*s zPm_P&09RTXsK@mL_6RSGxfC9t+fgflx^4p#Q-XAeCA#ya#djEH^n`$wOT)2 zYEVygf#JDDG8lZjz(o2uNp(y>`IHxQw?-oGCmIf?nEc#!ebRrN95@snW^_Z`{|M4% zi&EoF0#?&@!JV!pA^_(gs4T_;^2q4KM`D9p0Gs(jY7U?_OD>o1G)o@WYsRP8bQ*-b z+$-ImC!d7>a3y%{h$IgHfPbszKWigj2;Iv`;b!##R|f`jU{W9q_MHm)B595{9uK8J z1+cuNZuGL z)^S$@P0VU^s`chEh-{M#pE%X(_1lIXJhtFb9)$<7VR~wTevq^|5Q2OsnjU z#S@rKeohPiD#L2$fB#FJZJ+`g(){{xI6NX+jW4*QOhRVX1g2aBZ%$JJ16KaB8QTr< zq33QPov%9=13}HbMaloy#ao6&8MW`;lz=pffQX`WcS;NrQUXeepbjE}bci4b3>c(z zN)6qT0+NG-fOLz*(A~{2Gi%>Id%yen?{_}jpXQijW{$PibzbNByVh=m6X#S4s<}xA zukDWJmiSzHfG||dkLlL{i9n~rTPTdOI-q3n)*5I49?PzQu22@H1WqVB?i*ZwzV%_ znMiL3l)&a^@-H|UrAEJVNp1AJeK`1B^mHpB>$5uM?=Wr7{XMcunziMcP4)Hr(z&YP zi^+AZH2ytr$6F`B8t1{0vSFI2<|g84n}_igySy8dfiI)xsbBc+Bc=)u0mmF7ioNxa zZR8Km^PRxmvkKX4yYu3TQZKUe&cKHED%kMu<#HnNJS_Qo?2f<%Vv z832yQ;>a)kxU)rqMX5! zBCME9jBWgVbuhX4Ucvld&`2g|# zgrd)-VN|TQ`%+WEPf;Spg>I=@ijIk?(+*3uKQdPL?0Q$51wFK+Wv z7lo?6q2qw-FrRWjX|Yome(@`BD+|e4zl!X|uI&A}8)Cr5e;5PjaWNK95vCD>xs`D2 z!PdFkLAn;{9wLI75bY{FN;J^O$eh;#Cpx~J4-lr7m|xO%ZrK|tQ+(Qlf$QKMzF}J# zSH`eD0oG%Jf31OtH}}9tJd6;B{5D591U&T{mZ6!vW065%a|p#g_ka$403P*D>&p=S zn@z+hE{&ymM%sUeYz9_(S@cn$P0{&PXx*~iiG1yV&t^1xg71tl8WAt_8*h6kGt<2Y z)2y|}p-GnzIl(Rfp4owp?R%-BCG_`f!rcj>SgxS`Wpau6{y4D+Bvagi>jQ=3b*?o- zb*dsTi z0vID%yOaZ{7`l{2%1b?ktul;_-G6?{==hk#hh5%BzOZ9-%^62*6o>FL>`-(^L8nw|ZS30JeXGBizTqrgsbmG5Ng=gQXpW zG^-|Xc1-3lUP1hvA`{P`|8dOXqgVb)JZCVj-LzUDDO{VXDx$Rc@|RT$GM0Rv(oJk2_u&Ze96oKZC<<$YgbvBZEsd$ldfe~u|tsxMY zxsQcOi~9pen1%wHH3EADO7E5oGAi#Dy=*dvlW2h`zMQY%;(QbKwhOAR^vAH)A=J1; z<_X&dOg{sEcx59&769kd@7X`T8&FVv`57yp@VQ^Dejl)(=LnPL%uNndq-;f;K!XO zlJ>G&!lG+WICi}>1@K5wlF=JrD2)Xm39*pSCC9VT6K&kRo~2B8>23h;pjQfq9_Vz} zxDZN@BYgb@AA}K+WA6gL653xA{YZ%YKPwVm&`voBG9xNhlfHnF9t?td!lX%4RcXJ% zaif0;i>`mN38bVbk5E+CTYy{!rg%Q}>!_dYW3o8Eo6q~)FR5ETjbgU)Jt+CIPB#WcToTXQSo3T)eJ=12H+CeRSyuJGED>-R*d#$&6YeD z-<}m`E(zH=So~G$Tf=>4(lRURBd3@QpC0salzP?}zS(Hc=`yiv=G0()De{DR!@7d4 zCp>k2n4tImTmz%vL|m&YR2N$UW(TaB$C%(sayAp}Dj9u@0Tcn~I;140@NRdW=#xpry0V%e13$`_Lt- zil&Lo07B5=TYCp^sAG=7K(R#~zV-JzjqCn9BR`3rez_FfIC%P$wU|-9nt*fI7!w;Q zsTeG|KwnN!`FR9%S*^(KfDC7CJrESZe~7lkIm-?LK6TO~#1{jQWg>6<8HlW;^63ZLJ1YvD_$>6C%UH z2D(5M7x3Y1P~8YA+mK-^3y94e(vq6XO)4EfcNUp+dleqri3A@XLI#j60Up{dE2w21 z%U*0PraS5|t)D~l_m_qDf0bsctam59$yOEhw?{vXfSTo(BQDFoz|Ee*4#a~s5X-K* z0Lu3HbNJ8Mh*@CudZf-4E3++S#dCPWlfQY#m;L-sD^2NDeLu!$S>Xe&fH0gqpqS*Y z5%b;b;I65tCy2AU6nBz1q0%TbbuM+zfv3fxs=EBYpMs$tgjo<-4ZZ_f=k~|2yS<25 zj*l1+!zEUKTsH5%N0@g=I1JHbs}RJ-2vkqesnGXBOI%r3Z(+9>x#aJCjItfQ0FZAG z?T3R4hKLbn^jF=xfLoCia)moW&Gn% z@=*{a^gJ+Z>?0kaPvJrSxk50eS7D=V2)zq?)E1Q<3yT^aUm!(T-H1Ke>2T73`)q&z zeX`JA+r47Tt}~$cX65UxBq_WX7l)H|QYh_z#M7^?%LXq$DfSs~bROYaE@KCi8gDkW zOS2xf7$hb~->cgFit7%hVZPg19Mq|%GX$w8t7~N9`cyuWzd#-<9vkF`_iQWOhy8sB zxHQxj5g)tJDf-1`h$JjkED~vZP&Mk>pV;0`vzYoKRYG(e&iYc(>aCvP83sO6rD$1x zhFsJR1?v${kihC5$}fN)LVo;Hod6>g_C-z=ZJ+-0HSVC1>1>UnX&6((M@@R_oU zt52T$&$XTpbPOV?_)|qI_V9hg>vo+@gyV#vV~}ZS(A%pG@9c1q4*C6n5Q}hAO9dj- z%RWK1tv-kjKI3O_b)`WehU-A(7F?Cjw_L8u|F7NXi z5|Z`lZ?REyO$}~Xrp*|&WD@3WOvsJ#UhTb*XI-v1OtJfPKmUr3_u2=JJNfEve_Mf1 zn5X=S<{0hS9n(@a)nk!&7s|i5h%T^*sZo3EKm_TTeqit-3OdmyV=^Lq8hJm>TWnrC zOU|%zR%BHUKYPaaGESVetdI-N^+{z*nXxgvW^FA#Qt*yOGs@D3xD!{jx9{-8lAAN(9P~CA^PC;S|_!xr5IMFuQl@|(Xka3FD-Zf zvdq|!!Fm{D-h)geoxu1Tas|N&+OV->?q@uGm!SKxEEI)qqPe8-ND=qw+&EAh7EOVS zRl+$x@xcW-Ze~D6AvvHmzrqKHJ-Z^b(VXLLXP223rp=OTyt%i*XQJqsD8<4+@rL@1 zZqnXB+@j4S@>CuZE%=+6Dg7ZG=19a1ysDtO&MTx;K;E!CjX|>*B_($&j=uvlGn+?F zktc-(_(HZWw~h}*aK!oFQrAQ1(yTPnYhGMNVQ)wd#>C$ky={`pxtwRXRM;%kUd%sW{`ph7&-m;dM)I{e zJm&zo9-^+|VQV0UL-h=*o&G|r0krRImFBt|{CE8`=(ARk9OFsy!5OkFr`@n^;On?YN%U5WTQ@9}FsW7`tuc{{^U zOr*iH<=i+wg*=^{3SoMM$#v+gPPa+ACH<1bLi+$jecZsY(GWpNS>PFh_^xuY-iKRJ z94G!uw5;{Y8I&ad9!rz;%KXV|A1;*jIFg19fc&cq4H)=natNZA3GlIZ7LHNbQ!tFM z%hwq;k2g#6Dovm?A@b!JZc8_pYm!e7quAMM>lV!3^NNP>S1-L{$nS-f^8x35>zMvX zHOv9Z+Yw*&$_yGzh1z^1eCt&9EJ)>X;M&&e0+n8yNWv2SO?`C<%~}oZ39^A z*tlMsieVwN5Zl+`p(+F_Yz$_sQ+6ei8G3#ns-4B>@2*UPv$K;=W44*= zo2F2N%e!v8pDFNGMXb<<%}`fsqJ)Vm8_w5vf*NQy`!In@&GPlp4$gSYiSW6=kY7sg zQbqEJS`}x}9?LWPLd0<#Z)+s_b)i^xEt0vi!v?GDB+b{>?-%x19>Z_RmG<6Xy{Jq0 z!LC)lL(L|fX{+x{pQ52t?U6)JU610Xb)rBB6GH?OZe{(wSPY_xvpDYfe#5Ze*LdUi zw>S0Qovtfg)}@wm(sJ^yqY15)xv%|BhrX5F*KwUpX{U?U>gHgN<3!kSxPx{OOXpj2 zVF&ziE~O24HgyzE-f;+v5`?BM3;RF@xCD8rfqUS%+FyDI|F(L6pXOFMPBCmZ-ZPQ= z2T>QUKX6)K`RrW(-jeOD5ug`rcB^~o9B#7JHh`$SgXd8XTmyvX=)Bk;RHNPvXA|Dl zojvbiGZU|=ioO>0^ijW8jcr>TZei_ELc&Sw4 zF@#15z9(IV0TAwdTtHEN3Vy?f7ZAvzEX5uEH>lo*|2L?Xj@)7i0)7@^yT{zg?j#Ph zc!_A+eXK|VAy(vH#sYcwXXJmzC5l(b^IBRN{zxE+{3+V-52z3oJyE&s79p8Ayd{@g2W$*5w1jxthH>zc2r_KwcffUhFyu*Cde>(G zk1RQ<8znZ1Q)SDfU0ak%NO*e7JK)!)TpSpM~meWQ^1V4-TD`1zxn=WpvU29RLR4xoJZ{BK~JB`F1c8b25n<1X0@Mel+1E7 z`nV_TURf0HREy+mPrmHEw8!SvaKa?`EAE~$&mp)G6xT9r#6x8`tb(LdrB-0F)ytS-Fnur!0vwb;ens@0Ki~>h z#-2teb5oSYG3iv!2wc~@b>;F-gUZ-Dq=9qSnNo22PSic<;;$6I$5l#%MRgi|iNe{oh}}s6Ivlb`l)gz={q((9qVN-{P76 zOlne;($Ax6?gk4PZF+vX$j6@?<}o1~sK?G8YxXzAelMp|yY^sr*W&;i$q|eV4Ba#j zI*VkWM*^V|tWHsRUL=2g1-z}AU*mb$ucGqpkuS6Q0_!=&w{Sc;hi+Ww)yDG&$#wUx zotU@ky`Qk<^Qw|=y<212ikbGj*9KGVLpY5zZ$jOhwAheT>k2})KIfdR%We)a@d6K7 zhOI!!g2Z%0YdZ4z4nujO4koKxdhglIGbG*~gYL znI9xdy{Gc}ad5aJGHF#7gR00STc(X;lmC@|vXi_s^DLI6?>X6K3OqbTQs3q90@XZ= z#oxf8M<(pOZGep8hLWG|x>4l?&ij<7H+cCX7K6OF69BF#~oofiGTVODl3Mv?Fjfjtich_T*OC11pW9)U z7sK+?{jWr-H0XGg51cLP`b_;raE^l^+6m;oC1eVZwBTY`NU!*5!e=|(vWT9~JcZ9R zl4849RBQj>cAajak57iBI8Ehh#mpf+q_!$0Bt?98dla(ar+A(lw#v9hs9YK8zA$0$QR=eP=Hq@fmbGFk53>sr_t$BJ( zKYy(fHZRDXeHMgy^x=2Y_ifQHPs(jJxm0#{-(1cIs-643Z1zPVsser0=k;ax?}V_* zE7#M1HS7dbBM{WXO1S|k%oc1=hp_45&0BQDU$T$C?&Kppo`0}SS^A{5$XB-lmm)n+ zp|zS42vpWOdR-w<=~v5hgxY}KJTYhek_(oKYdk; zf{QcNys#;R$FOLAOO4QEduUe>hvK==_Pla~nM>;F`FQK_sFDDpw2n`p+1UDhT%~T0 zXX30uf_R->6Whx@+>&(pzMuB5^7X*qA?dwJ{JH@n!>*e+9y^@DYAhmgn(%9nW-Y#} z#w`)k_-C83IH)wtn1=7!j$>t7gN5CXYu0r=o^gL&azz)gvwu=~D6{x}9_#S^d|R$1 zqhMtT3l<8QwAA7*`)kUzEBkHwq3QblM!w=nUU$uAF22Ps#Gsd0kb%*grEZi&JG~D+ zl37ziLHDiDz(DJFRbeD}uXx2^wJxy$2gT-1ctvSQ*? z6pkmSDR1wZI?5ZHOO2J3_YTB&C$ANU569DK&t82T znG)B^U2UP|VfOM<&XwEO(+6bf+uWy37-oSd^@jJ$4PbxoF9`5mDri5Yf}e7r-3FJA zQ8gx;Kz$HG4QHMQ<$gXM%e_)Box*j#A9lWpE8LbOx?_xpP+aq1aCtq*})>4Q~@T=+yd?cQ&)wO{d0@H-rGEhEDkCajtA zC-EMir$MZV%8s-xqnMEGg`x=AgZbCrO;>~m$vKnF2???!7->LmX8k)A_|p@KON5$m zEV`fr;n4Z%48=en0YMS$!jtsj7$zH5k#V%qRrgunrlpBrb~l1gKYpQa#`ACn7Je0j zZf^|%v~uz1B3d}wGvKBc1w?L6Ufi4wt-xRFeAA5R$p7kTKk$b;G5uHiePn&{*N)fD z)-MLU9eM^lT~~+w^N{=B^fYWQu8-axLm#)LtZryubG*sC6z)q5EwZ( zy}9Ldy!l}G^QhR>I_c2s*WQlqqY!37_;bzB)~IK@hIg~|^1Mem&85W&tZulo&aB1p zWfI=0Cva}-2wjN4#m-&bEYV%sEwFt{*khaRa;D!|x*~sny4qQ10dcR!xER#X%|RR9 zAE;+wvg6NkO$b`WnwN}kJEn@L-_!j09%3>KUQE0ep`E8))LLxdTQtACh%!-<6=0uN zDtQV4BpsY@xZMls)*nlLiy6<^vtmCefQJ@E5%!A2V-j@Oed{)S;!E^2u)0}tO ztL@K=-nM&UoMa~ky7i_A`ZIsFLaKD+Et&ln5M+#NKZe!oA~T#x+fQ#kp2$Z6TlwQN zBn=K>pq2qHY-^vws6q(F`~8_M;8cV1x5<+foXCk)nCV*m=}3KQL@hD{g=OiI6h2+m z_Jye5j=WcO2}XFEk)jDiiu5SZj3(SiF${#nD%GSvsn+VX3uYu4i*pZ?V*W(j6O|qK zlfNK4GNs}g@3C?_&F%QMq_VzXDHEF@LYw{tYhRZc-_f@u##JYGZMNSWauX<$W_;mp zG0b;!Xcs@0`g2LKG`TtF4yo;u4_bIydaD87s+u!Ca-k5u?)S{mAy?>@`F_ggr}k@Q zYDb->$9yb}d5foN4@lUM!~xUQNXe4smRIxLVAqS_LJ6{?Gn3iNxR3!HPyFFsz>N) z04fWbP1Iu{@UV;cLt{t0)&|JO&Ja_HmuocTZ_X(ZfA_ z{?fFx-#zEYgi$ZT+Bz0@6b)tEBOiNv9G~sko-vQS*tri>M6JB-&{83-GT&zM64HOs zPW$FjE?-5t2zm^q76T0=+b=_o{_-27;M=5};ReDS(_??5791&?0;flfM_ zL#QsUf(>bve-P=X3q+7BN-E8$+P39_w9y%QJRQ3|z>mcubNuE#Ze-ibVavSZfzS#> zNUlLRQR^{sJ%(BIF#o)fpW~rJWxXZ*XeA;iHWQ|`wjoEFv5T5Fi+@y2%8JCsPm(uJtV*!p^TAW zE=d&J`xgeh`{%zstmGOhJ~!`Q%=XXy_NwET+hb2J>mPC7o;ovqQI~sOYK!OkTM9$5 z)0)S;T0hzR4a+{ZL)r~(vxk{{0R;vf3J z^rA3%5jKzx#NLu%;DO|wh`?n;vL4G4%&=?^(SD3(xayBfyhFTzP-Rx$ST*_vbMgN&N3edort6k$xjz9VdAa|CZld9X zX}ugXZ+^EZ{;=mK7Aysa+Pz*<&5c{%@5eM!Xw1%AadP>}o*Hak)v9!Ne~=*0QD(-% zJCOJCpb^4TqvtVB%7mz5dWkd;u&pU26ua<7k?QS8njbz0D#nrz3P1uo`!O2M`@rBV zBrrEnZ@G`(6p>eCo+0@3%*?o5g`Pu+@bL=;{vB6F()p>sRKGH32__oHS1G@|jfz;f zOm&!oc@}Wx^8;V0P;VlUH`AU^H8Kd3c2BIb7kK?-ZPe0b$j5bc3ZrpesO-}Y2IFf) z%du7{se<;z{MYv9|DVU$-aB1WX6zT<&@i#x&Z??(jrx3))~b%3uds9Z_{A+xnp;&K zhY{VLy&yFduj&u7e}Q~rd@M)X3WCNG*ejLUX$9bj|G@N;ajHaZw?+NG`$7)_;;wG? zfx4jFNQy6+PrSGd+CW9m!PYUdD-eP**jd5N-{29<)(Xe7hZx<2MVf1Qm0$)IO};(% zz^y`Ez48iADo!K$V|LUsf_f|W9NofGG(VNTY$@V0^KuFC2+}5mC-BgtDZrMHRMep> znS-yIXDt8FW2E81S{tK)yTuvvSn+at$CTt3Ee!8JEV& z=FtA2a{?NvIC1kWY(q5a$U zp;Nz4&6~dV&N5vTKkg!AMT8{04=H<|A@jMlwnk^we*Ls;n(~YbLHG(gb$BFqW_*`j zy^{joF?QzRmO72G6Bk+dArkm;B0k&TVF5#d%kPOqjyLLyCrhGf7n$Kc+tcfpOCD3q z8P%(763v$*dRV%f9Uq}5&vpb@^0yy7_Q+340>an1O@8;QE(be|ZEWwBUK@}RtfKf{ zwp*6vlS_4|qY)o)7ksqyCA@a@9KXaLT((pA!Yh|#MM5=7#d~>oj8=f-!s=#a6WlN? zMg{9|GwzG}dPt(68liQu{iD)a>1Dxjw$`ur3o#BAev;y@Oz5r=3c071N*u=IvaY5ez*8&>zK2kr%&xyV* zGi%!$Ycbl({djCvvp>s?I z)Ugz$RvxKS8Guq7i`G^kYq?y_mtW%<4Ez(HvXMJ1$AnK ziERXEd~ry|{nCFc96xyKe`Lo=ziPBg%opZD1e4?zi4<9{Jv;qH8-PptbX3OgIIYff`qSm>YFg`Pk`u*ZT}2i z831%csgOXH0w4C2WDu5tPzL^ZLL4y$<$i<^KjgTlXa08s1sCl0D4P|!W%3UEQ2cT! zj||+Xw{Agx zWjS$`Z)#zVx);T*IjY9;En!!$_T%j{ZSIJd|ITv2u)SbT1s}M zlT6usRK0yD|FTW$>1{8)U7ygp{?{z6%UUTQQEioJ$-ff)6oZ8on}FQw+BT_aCQrxp88|JL2S zkSV)KoD6i)*+Zk3^p4S%~8*z98w2{bsQf!Ze! z2|=;uS5$ckQuIGLpsgmG7jt@Q)^DUp>nD8s7^@YNTff)%?OHy#EPb;lm=|BGc^6#! zA2`Y_CCXAJFlFM4zcGjSmw+IiUxH?25_;*W2@)KXp;+|~8wRIdfie|Z6~y{?QTh&a zRD@O-wmMx|=eP9Mpk)t#x8!rYJ^cv@Zjv(J5X8UqTJQN;V_)1Q;bO5F@lrl^6JfOh z9{7EfzUgynbou$GAqc$;5W4!Jq>!6tJ8o-y!dHqyYv~W+aCleh zUm(K@t*;mM|6)~$-TG&Prk!D#n(38J8V(ueWN`KYO1Q1rzKR zh~Kx?b_ELXW3;Q+)3op_9jDgM(`ZO-!@B6~11t z;ro(Kk26V9^aM{EnV$^k;PMWxB~_;`iR>g|JK|%x6`jL%a^fO14f!dMhPFP%Uf#LK z@r>uWi_J#D5{7d8eO|okS|h?QQAy_>ys(cF9u3!IPaaTBi3N ziu!qA=$6M6ds$|;Z(&mg(u9&?i~?c;cf!954?RkYP`MdyyCXuJ30+ug=pW*w^h8GL zVxM)yka|!0X$f!1EKGOrni_8G@8fOLK#k4y1_j!U@1J+U2=OO(6R>G+i~D~@j*pH} zj79q>Wq@Q|KLxWvDfwc#D52GRW6o`_22dMJFFS`768Rao%tI_)Ij$6v(+?a=c2cHx z=kuo5uB6}pdj?NW0c;zHq zY(x^-ZEyA9>$*%5f47yMk?l*MW^)IyN>YMV)VBhp6p|r)PB}AzE+pkJ{JR{y)>rDF z&;P7>aijjuM?m`%%k&R~?VhSeSrqoVVi7a>r}iFmK>jKo<#WfM5g9#t2AUoC>X9+H zXKG+d0U(L7`fmR@+_PO@-saI5-}@yusQ+$@p&8qot0qZ&$z~yPaH8Ye8Uwm^j3}baS6w)p)gY^I6U3`FBIPO z-voQllzGqw6gI8SqM%+%L+<~~f`>a5tZg&K1KSF8$M&;sSgev$&GPQo6TJ^c>-$^T zi$je+%N+7tvf2>cy`A0-BFHCJxUi~8N27t{lKi<8^}l|4cRpBOkgq4(WpVQE6!|TA z^Lq&9+(-y1=?eL_&O;%PKxNiwDojaTcC}^%M=Ve z9s`Usq>xVmjonFx6aGMVgq|$D_0q$(3y3%f?q@iWRE`lQ%t_`B0(IB%QDJ2mesvL*7orR?`9m1}LHw(2L>xuL(mmP| zw5;nQaXt77{jnVx9o-ztI1I83h)R7@20e5?&j&K_gxCoolSWB`b7bWb1~r;0LxwFQ zghXf-4rM{mLNH3LTq)f`lv=ukfm^w>Rcyc{)5<^wOl1&=tNGw>nEKn=DgWM(@cmv# z6pyZm1$czTE1%6iu~6mv%fR6b*As4$T^ z;e$i2oBm_IEC8Cc9ww{GedP=LKJf^WJpd?1)R9ZHVthg24MDA;|*|~8_d&e5AKg5ZYKeL z4YduJi3I@x_LP}>a3-Jc5?;pV1K*a3E>DXsF6e*Ek!UP}f?lAv0b^|e25PtQNOhy1 zBoCew7=)O>bS`P)FEj%4)&GRx5UQo1Z2cG`LcE7$fTmo2yr)EASC8;L!fvrJ>Oo4Y z@6gW(XSvBiFo*=jV+hmaOVGZ7e8_`Vf*S;c{-KWi9mzkb(z2kp9jKt+xGJ1a>aC)p zG#?kfv F{ug$rrV{`F diff --git a/etc/objects/kibana.esdump.json b/etc/objects/kibana.esdump.json index 5902a350..e68308f5 100644 --- a/etc/objects/kibana.esdump.json +++ b/etc/objects/kibana.esdump.json @@ -1,221 +1,221 @@ -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-Content-Type-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-21T16:13:41.385Z","visualization":{"title":"Suricata HTTP Content Type - Top 10","visState":"{\"title\":\"Suricata HTTP Content Type - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"type\":\"pie\",\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":200}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.http_content_type.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-21T11:41:58.303Z","visualization":{"title":"Suricata Countries - Top 10","visState":"{\n \"title\": \"Suricata Countries - Top 10\",\n \"type\": \"pie\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"isDonut\": true,\n \"legendPosition\": \"right\",\n \"type\": \"pie\",\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"geoip.country_name.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:bf6f6000-8598-11e7-8f60-4f4666b0a88e","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-21T11:18:49.288Z","visualization":{"title":"Suricata Events Bar","visState":"{\"title\":\"Suricata Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Suricata\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"type\":\"histogram\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Suricata\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.453Z","search":{"title":"Vnclowpot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Vnclowpot\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"},\"filter\":[]}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:NGINX-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.453Z","search":{"title":"NGINX-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"NGINX\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Glastopf-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.450Z","search":{"title":"Glastopf-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Glastopf\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Syslog-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.448Z","search":{"title":"Syslog-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"query\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"type:\\\"Syslog\\\"\"}},\"language\":\"lucene\"},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:ElasticPot-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.449Z","search":{"title":"ElasticPot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"ElasticPot\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:c3b89bc0-69a7-11e7-bcac-d3ee6f9c26fd","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.441Z","search":{"title":"T-Pot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"filter\":[],\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"ConPot\\\" OR type:\\\"Cowrie\\\" OR type:\\\"Dionaea\\\" OR type:\\\"ElasticPot\\\" OR type:\\\"eMobility\\\" OR type:\\\"Glastopf\\\" OR type:\\\"Honeytrap\\\" OR type:\\\"Mailoney\\\" OR type:\\\"p0f\\\" OR type:\\\"Suricata\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:P0f-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.443Z","search":{"title":"P0f-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"P0f\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Suricata-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.442Z","search":{"title":"Suricata-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Suricata\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:aa750980-8ab5-11e7-8fef-33e989079c7d","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.441Z","search":{"title":"Rdpy-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Rdpy\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"},\"filter\":[]}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:ConPot-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.444Z","search":{"title":"ConPot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"ConPot\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Honeytrap-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.438Z","search":{"title":"Honeytrap-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Honeytrap\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:9c35dd90-6977-11e7-9c11-8d9c11943fa0","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.413Z","search":{"title":"Mailoney-Logs","description":"","hits":0,"columns":["ip_rep","alert.cve_id"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"type:\\\"Mailoney\\\"\"}},\"language\":\"lucene\"},\"filter\":[]}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:eMobility-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.411Z","search":{"title":"eMobility-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"eMobility\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Cowrie-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.403Z","search":{"title":"Cowrie-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Cowrie\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Dionaea-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.393Z","search":{"title":"Dionaea-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Dionaea\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:3290fa70-69a2-11e7-bcac-d3ee6f9c26fd","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.367Z","search":{"title":"NSM-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"filter\":[],\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Suricata\\\" OR type:\\\"p0f\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-SSH-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.548Z","visualization":{"title":"Syslog SSH Events Histogram","visState":"{\"title\":\"Syslog SSH Events Histogram\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"mode\":\"stacked\",\"show\":\"true\",\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"tags.keyword\",\"exclude\":\"_geoip_lookup_failure\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.547Z","visualization":{"title":"Syslog Attack Map","visState":"{\"title\":\"Syslog Attack Map\",\"type\":\"tile_map\",\"params\":{\"addTooltip\":true,\"heatBlur\":15,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatNormalizeData\":true,\"heatRadius\":25,\"isDesaturated\":false,\"mapType\":\"Shaded Circle Markers\",\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"Maps provided by USGS\",\"format\":\"image/png\",\"layers\":\"0\",\"styles\":\"\",\"transparent\":true,\"version\":\"1.3.0\"},\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\"},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-SSH-Client-Software-Version-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.539Z","visualization":{"title":"Suricata SSH Client Software Version Pie - Top 10","visState":"{\"title\":\"Suricata SSH Client Software Version Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ssh.client.software_version.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.540Z","visualization":{"title":"Syslog Source IP - Top 10","visState":"{\"title\":\"Syslog Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Program-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.537Z","visualization":{"title":"Syslog Program - Top 10","visState":"{\"title\":\"Syslog Program - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"program.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Username-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.535Z","visualization":{"title":"Syslog Username Tagcloud","visState":"{\"title\":\"Syslog Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"fromDegree\":0,\"maxFontSize\":64,\"minFontSize\":16,\"orientations\":1,\"spiral\":\"archimedean\",\"textScale\":\"linear\",\"timeInterval\":500,\"toDegree\":0,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.532Z","visualization":{"title":"Syslog Events Histogram","visState":"{\"title\":\"Syslog Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"program.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.531Z","visualization":{"title":"Syslog Events by Country Histogram","visState":"{\"title\":\"Syslog Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.529Z","visualization":{"title":"Suricata Events by Country Histogram","visState":"{\"title\":\"Suricata Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.528Z","visualization":{"title":"Suricata AS/N - Top 10","visState":"{\"title\":\"Suricata AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.527Z","visualization":{"title":"NGINX Events Histogram","visState":"{\"title\":\"NGINX Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.526Z","visualization":{"title":"Suricata Attack Map","visState":"{\"title\":\"Suricata Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"mapZoom\":2,\"mapCenter\":[0,-0.17578125],\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.522Z","visualization":{"title":"Glastopf Events Histogram","visState":"{\"title\":\"Glastopf Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\",\"lineWidth\":2},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.524Z","visualization":{"title":"Syslog AS/N - Top 10","visState":"{\"title\":\"Syslog AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Alert-Signature-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.521Z","visualization":{"title":"Suricata Alert Signature - Top 10","visState":"{\"title\":\"Suricata Alert Signature - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"alert.signature_id\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ID\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"alert.signature.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Description\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.523Z","visualization":{"title":"Suricata Events Histogram","visState":"{\"title\":\"Suricata Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.519Z","visualization":{"title":"Honeytrap Events by Country Histogram","visState":"{\"title\":\"Honeytrap Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.515Z","visualization":{"title":"Syslog Countries - Top 10","visState":"{\"title\":\"Syslog Countries - Top 10\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"shareYAxis\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-HTTP-Status-Code-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.511Z","visualization":{"title":"NGINX HTTP Status Code Pie - Top 10","visState":"{\"title\":\"NGINX HTTP Status Code Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"status.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-Method-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.508Z","visualization":{"title":"Suricata HTTP Method Pie - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"http.http_method.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"title\":\"Suricata HTTP Method Pie - Top 10\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-User-Agent-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.507Z","visualization":{"title":"Suricata HTTP User Agent Pie - Top 10","visState":"{\"title\":\"Suricata HTTP User Agent Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.http_user_agent.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-HTTP-Method-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.505Z","visualization":{"title":"NGINX HTTP Method Pie - Top 10","visState":"{\"title\":\"NGINX HTTP Method Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"request_method.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:P0f-OS-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.504Z","visualization":{"title":"P0f OS Distribution","visState":"{\"title\":\"P0f OS Distribution\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"os.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"P0f-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-Hostname-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.501Z","visualization":{"title":"Suricata HTTP Hostname Pie - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"http.hostname.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"title\":\"Suricata HTTP Hostname Pie - Top 10\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.499Z","visualization":{"title":"Honeytrap Countries - Top 10","visState":"{\"title\":\"Honeytrap Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Destination-Ports-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.498Z","visualization":{"title":"Honeytrap Destination Ports - Top 10","visState":"{\"title\":\"Honeytrap Destination Ports - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-HTTP-User-Agent-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.496Z","visualization":{"title":"NGINX HTTP User Agent Pie - Top 10","visState":"{\"title\":\"NGINX HTTP User Agent Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http_user_agent.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.495Z","visualization":{"title":"NGINX Source IP - Top 10","visState":"{\"title\":\"NGINX Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.493Z","visualization":{"title":"Suricata Source IP - Top 10","visState":"{\"title\":\"Suricata Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.489Z","visualization":{"title":"Honeytrap Attack Map","visState":"{\"title\":\"Honeytrap Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.487Z","visualization":{"title":"Honeytrap AS/N - Top 10","visState":"{\"title\":\"Honeytrap AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Glastop-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.440Z","visualization":{"title":"Glastopf Source IP - Top 10","visState":"{\"title\":\"Glastopf Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.264Z","visualization":{"title":"NGINX Countries - Top 10","visState":"{\"title\":\"NGINX Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Username-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.257Z","visualization":{"title":"NGINX Username Tagcloud","visState":"{\"title\":\"NGINX Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":0,\"toDegree\":0,\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":500,\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"remote_user.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.196Z","visualization":{"title":"Glastopf Countries - Top 10","visState":"{\"title\":\"Glastopf Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.164Z","visualization":{"title":"ElasticPot Events Histogram","visState":"{\"title\":\"ElasticPot Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.204Z","visualization":{"title":"Honeytrap Source IP - Top 10","visState":"{\"title\":\"Honeytrap Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.228Z","visualization":{"title":"NGINX AS/N - Top 10","visState":"{\"title\":\"NGINX AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Fileinfo-Magic-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.252Z","visualization":{"title":"Suricata Fileinfo Magic - Top 10","visState":"{\"title\":\"Suricata Fileinfo Magic - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"fileinfo.magic.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.164Z","visualization":{"title":"eMobility Attack Map","visState":"{\"title\":\"eMobility Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ffb284f0-80cd-11e7-ab37-eb92b1bfb573","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.155Z","visualization":{"title":"ConPot Source IP Reputation","visState":"{\"title\":\"ConPot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:f28b8c60-80e4-11e7-ba6f-4542711dd148","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.202Z","visualization":{"title":"Cowrie Destination Ports Histogram Incoming","visState":"{\"title\":\"Cowrie Destination Ports Histogram Incoming\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"query\":\"dest_port:2222\",\"analyze_wildcard\":true}}},\"label\":\"SSH\"},{\"input\":{\"query\":{\"query_string\":{\"query\":\"dest_port:2223\",\"analyze_wildcard\":true}}},\"label\":\"Telnet\"}]}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.173Z","visualization":{"title":"Glastopf ASN - Top 10","visState":"{\"title\":\"Glastopf ASN - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.243Z","visualization":{"title":"NGINX Attack Map","visState":"{\"title\":\"NGINX Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.240Z","visualization":{"title":"Glastopf Events by Country Histogram","visState":"{\"title\":\"Glastopf Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.185Z","visualization":{"title":"Glastopf Attack Map","visState":"{\"title\":\"Glastopf Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Scaled Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.236Z","visualization":{"title":"NGINX Events by Country Histogram","visState":"{\"title\":\"NGINX Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.226Z","visualization":{"title":"Honeytrap Events Histogram","visState":"{\"title\":\"Honeytrap Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.136Z","visualization":{"title":"eMobility Countries - Top 10","visState":"{\"title\":\"eMobility Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.119Z","visualization":{"title":"eMobility AS/N - Top 10","visState":"{\"title\":\"eMobility AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.154Z","visualization":{"title":"eMobility Events Histogram","visState":"{\"title\":\"eMobility Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\",\"lineWidth\":2},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"legendOpen\":true}}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.153Z","visualization":{"title":"eMobility Events by Country Histogram","visState":"{\"title\":\"eMobility Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.144Z","visualization":{"title":"ElasticPot AS/N - Top 10","visState":"{\"title\":\"ElasticPot AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:f1a19000-7ebf-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.118Z","visualization":{"title":"Honeypot by Country and Port","visState":"{\"title\":\"Honeypot by Country and Port\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\",\"row\":false}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.096Z","visualization":{"title":"eMobility Source IP - Top 10","visState":"{\"title\":\"eMobility Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.105Z","visualization":{"title":"ElasticPot Source IP - Top 10","visState":"{\"title\":\"ElasticPot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.099Z","visualization":{"title":"ElasticPot Countries - Top 10","visState":"{\"title\":\"ElasticPot Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Type","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.050Z","visualization":{"title":"Dionaea Type","visState":"{\"title\":\"Dionaea Type\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"connection.type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.087Z","visualization":{"title":"Dionaea Source IP - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"CNT\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customLabel\":\"Source IP\",\"field\":\"src_ip.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"bucket\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"Dionaea Source IP - Top 10\",\"type\":\"table\"}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Password-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.035Z","visualization":{"title":"Dionaea Password Tagcloud - Large","visState":"{\"title\":\"Dionaea Password Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"sqrt\",\"orientations\":1,\"fromDegree\":0,\"toDegree\":0,\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":500,\"spiral\":\"rectangular\",\"minFontSize\":18,\"maxFontSize\":72,\"scale\":\"square root\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"login.password.keyword\",\"size\":100,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d01a6390-827e-11e7-afbf-a7491fba5d8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.022Z","visualization":{"title":"ElasticPot Events Bar","visState":"{\"title\":\"ElasticPot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"ElasticPot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ElasticPot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Transport","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.075Z","visualization":{"title":"Dionaea Transport","visState":"{\"title\":\"Dionaea Transport\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"connection.transport.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.069Z","visualization":{"title":"ElasticPot Events by Country Histogram","visState":"{\"title\":\"ElasticPot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.074Z","visualization":{"title":"ElasticPot Attack Map","visState":"{\"title\":\"ElasticPot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ec53e470-8376-11e7-9adb-2955c2136c8c","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.023Z","visualization":{"title":"Honeytrap Destination Ports Histogram","visState":"{\"title\":\"Honeytrap Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:e4b7cf40-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.067Z","visualization":{"title":"Rdpy Attack Map","visState":"{\"title\":\"Rdpy Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.033Z","visualization":{"title":"Dionaea Attack Map","visState":"{\"title\":\"Dionaea Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:da489b20-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.016Z","visualization":{"title":"Rdpy Events by Country Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Rdpy Events by Country Histogram\",\"type\":\"area\"}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Query-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.076Z","visualization":{"title":"ElasticPot Query - Top 10","visState":"{\"title\":\"ElasticPot Query - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"honeypot.query.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Query\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:e624bc50-7dd6-11e7-bee2-c98307c16efa","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.024Z","visualization":{"title":"Suricata Alert Category Histogram","visState":"{\"title\":\"Suricata Alert Category Histogram\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"alert.category.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Username-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.942Z","visualization":{"title":"Cowrie Username Tagcloud - Large","visState":"{\"title\":\"Cowrie Username Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"sqrt\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ea4752f0-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.964Z","visualization":{"title":"Vnclowpot Countries - Top 10","visState":"{\"title\":\"Vnclowpot Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Ports-Pie","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.929Z","visualization":{"title":"Cowrie Ports Pie","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"dest_port:2222\"}}},\"label\":\"SSH\"},{\"input\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"dest_port:2223\"}}},\"label\":\"Telnet\"}]},\"schema\":\"segment\",\"type\":\"filters\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"title\":\"Cowrie Ports Pie\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d2405e70-8b5e-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.955Z","visualization":{"title":"Mailoney Countries - Top 10","visState":"{\"title\":\"Mailoney Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ef227eb0-7e9d-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.005Z","visualization":{"title":"Honeypot Events by Type Histogram","visState":"{\"title\":\"Honeypot Events by Type Histogram\",\"type\":\"line\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.034Z","visualization":{"title":"Dionaea Countries - Top 10","visState":"{\"title\":\"Dionaea Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Protocol","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.992Z","visualization":{"title":"Dionaea Protocol","visState":"{\"title\":\"Dionaea Protocol\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"connection.protocol.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Destination-Ports-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.967Z","visualization":{"title":"Dionaea Destination Ports - Top 10","visState":"{\"title\":\"Dionaea Destination Ports - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.966Z","visualization":{"title":"Dionaea AS/N - Top 10","visState":"{\"title\":\"Dionaea AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Username-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.956Z","visualization":{"title":"Dionaea Username Tagcloud - Large","visState":"{\"title\":\"Dionaea Username Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"fromDegree\":0,\"maxFontSize\":64,\"minFontSize\":16,\"orientations\":1,\"spiral\":\"rectangular\",\"textScale\":\"sqrt\",\"timeInterval\":500,\"toDegree\":0,\"scale\":\"linear\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"login.username.keyword\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Password-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.944Z","visualization":{"title":"Cowrie Password Tagcloud - Large","visState":"{\"title\":\"Cowrie Password Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"sqrt\",\"orientations\":1,\"fromDegree\":0,\"toDegree\":0,\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":500,\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.963Z","visualization":{"title":"Cowrie Attack Map","visState":"{\"title\":\"Cowrie Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.919Z","visualization":{"title":"Cowrie AS/N - Top 10","visState":"{\"title\":\"Cowrie AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Username-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.927Z","visualization":{"title":"Cowrie Username Tagcloud","visState":"{\"title\":\"Cowrie Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\",\"hideLabel\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Response-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.917Z","visualization":{"title":"ConPot Response - Top 10","visState":"{\"title\":\"ConPot Response - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"response.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Response\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.907Z","visualization":{"title":"Dionaea Events by Country Histogram","visState":"{\"title\":\"Dionaea Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:db3104f0-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.900Z","visualization":{"title":"Vnclowpot Attack Map","visState":"{\"title\":\"Vnclowpot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.899Z","visualization":{"title":"Cowrie Events Histogram","visState":"{\"title\":\"Cowrie Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"legendOpen\":true}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.908Z","visualization":{"title":"Dionaea Events Histogram","visState":"{\"title\":\"Dionaea Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d1aa9740-7e9e-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.885Z","visualization":{"title":"Honeypot Attack Map","visState":"{\"title\":\"Honeypot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":0,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0],\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":3}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.878Z","visualization":{"title":"Cowrie Source IP - Top 10","visState":"{\"title\":\"Cowrie Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d94ff2a0-7ec2-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.890Z","visualization":{"title":"Honeypot AS/N - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"CNT\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customLabel\":\"AS\",\"field\":\"geoip.asn\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"bucket\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"ASN\",\"field\":\"geoip.as_org.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"bucket\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"Honeypot AS/N - Top 10\",\"type\":\"table\"}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Password-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.867Z","visualization":{"title":"Cowrie Password Tagcloud","visState":"{\"title\":\"Cowrie Password Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.866Z","visualization":{"title":"Cowrie Events by Country Histogram","visState":"{\"title\":\"Cowrie Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\",\"lineWidth\":2}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Version-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.858Z","visualization":{"title":"Cowrie Version Pie - Top 10","visState":"{\"title\":\"Cowrie Version Pie - Top 10\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"version.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.838Z","visualization":{"title":"ConPot AS/N - Top 10","visState":"{\"title\":\"ConPot AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.846Z","visualization":{"title":"Cowrie Countries - Top 10","visState":"{\"title\":\"Cowrie Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Protocol","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.830Z","visualization":{"title":"ConPot Protocol","visState":"{\"title\":\"ConPot Protocol\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"data_type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:cf8d0e40-80ea-11e7-a689-67e589a14a8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.816Z","visualization":{"title":"Dionaea Source IP Reputation","visState":"{\"title\":\"Dionaea Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.738Z","visualization":{"title":"ConPot Attack Map","visState":"{\"title\":\"ConPot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:c90f1f00-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.815Z","visualization":{"title":"Rdpy Events Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Unique Source IPs\",\"field\":\"src_ip.keyword\"},\"schema\":\"metric\",\"type\":\"cardinality\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Rdpy Events Histogram\",\"type\":\"line\"}","uiStateJSON":"{\n \"vis\": {\n \"legendOpen\": true\n }\n}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Input-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.761Z","visualization":{"title":"Cowrie Input - Top 10","visState":"{\"title\":\"Cowrie Input - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"input.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Command Line Input\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Event-Type","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.747Z","visualization":{"title":"ConPot Event Type","visState":"{\"title\":\"ConPot Event Type\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"shareYAxis\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"event_type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.758Z","visualization":{"title":"ConPot Events by Country Histogram","visState":"{\"title\":\"ConPot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.810Z","visualization":{"title":"ConPot Events Histogram","visState":"{\"title\":\"ConPot Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Input-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.727Z","visualization":{"title":"ConPot Input - Top 10","visState":"{\"title\":\"ConPot Input - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"request.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Input\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:cac48440-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.703Z","visualization":{"title":"Mailoney Source IP Reputation","visState":"{\"title\":\"Mailoney Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:bc1219b0-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.695Z","visualization":{"title":"Vnclowpot Events Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Unique Source IPs\",\"field\":\"src_ip.keyword\"},\"schema\":\"metric\",\"type\":\"cardinality\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Vnclowpot Events Histogram\",\"type\":\"line\"}","uiStateJSON":"{\n \"vis\": {\n \"legendOpen\": true\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:c0916430-8b5e-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.702Z","visualization":{"title":"Mailoney Attack Map","visState":"{\"title\":\"Mailoney Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:cda24150-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.700Z","visualization":{"title":"Vnclowpot Events by Country Histogram","visState":"{\"title\":\"Vnclowpot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:c3d133e0-85e2-11e7-916b-fb4cebb78112","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.693Z","visualization":{"title":"eMobility Source IP Reputation","visState":"{\"title\":\"eMobility Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:bf39e000-80d5-11e7-ba6f-4542711dd148","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.671Z","visualization":{"title":"Cowrie Source IP Reputation","visState":"{\"title\":\"Cowrie Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.669Z","visualization":{"title":"ConPot Countries","visState":"{\"title\":\"ConPot Countries\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:c1ef91c0-7dc2-11e7-8268-ed048f6272e0","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.663Z","visualization":{"title":"Cowrie Events Bar","visState":"{\"title\":\"Cowrie Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Cowrie\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Cowrie\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:b1a7f8d0-859b-11e7-8f60-4f4666b0a88e","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.608Z","visualization":{"title":"Suricata Source IP Reputation","visState":"{\"title\":\"Suricata Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:b9343070-80e9-11e7-a689-67e589a14a8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.619Z","visualization":{"title":"Dionaea Events Bar","visState":"{\"title\":\"Dionaea Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Dionaea\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Dionaea\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:874be060-8b54-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.618Z","visualization":{"title":"Rdpy Source IP - Top 10","visState":"{\"title\":\"Rdpy Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ad6dcb50-8b5e-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.606Z","visualization":{"title":"Mailoney AS/N - Top 10","visState":"{\"title\":\"Mailoney AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:885928c0-7ebe-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.623Z","visualization":{"title":"Honeypot Events by Country Histogram","visState":"{\"title\":\"Honeypot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:cb2a3a00-8b56-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.624Z","visualization":{"title":"Rdpy Password Tagcloud","visState":"{\"title\":\"Rdpy Password Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:99249a40-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.590Z","visualization":{"title":"Vnclowpot Events Bar","visState":"{\"title\":\"Vnclowpot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Vnclowpot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Vnclowpot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:ba9d6280-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.580Z","visualization":{"title":"Mailoney Source IP - Top 10","visState":"{\"title\":\"Mailoney Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:007e9470-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.607Z","visualization":{"title":"Vnclowpot Source IP Reputation","visState":"{\"title\":\"Vnclowpot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:88d899e0-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.588Z","visualization":{"title":"Mailoney Events by Country Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Mailoney Events by Country Histogram\",\"type\":\"area\"}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:73364660-8b54-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.564Z","visualization":{"title":"Rdpy AS/N - Top 10","visState":"{\"title\":\"Rdpy AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:87428ba0-7e9d-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.578Z","visualization":{"title":"Honeypot Events Bar","visState":"{\"title\":\"Honeypot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100,\"rotate\":0,\"filter\":false},\"title\":{\"text\":\"Honeypots\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":10,\"order\":\"asc\",\"orderBy\":\"_term\",\"customLabel\":\"Honeypots\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:6ee70b90-8374-11e7-9adb-2955c2136c8c","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.552Z","visualization":{"title":"Honeytrap Events Bar","visState":"{\"title\":\"Honeytrap Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Honeytrap\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Honeytrap\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:7dcaa2b0-8596-11e7-a686-392ac617767d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.552Z","visualization":{"title":"NGINX Top Users Histogram","visState":"{\"title\":\"NGINX Top Users Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"remote_user.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:576a3cb0-82ae-11e7-bcbe-2b6958a9c888","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.545Z","visualization":{"title":"Honeytrap Source IP Reputation","visState":"{\"title\":\"Honeytrap Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:7b61a6a0-7ebf-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.531Z","visualization":{"title":"Honeypot Destination Ports Histogram","visState":"{\"title\":\"Honeypot Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:0e34b630-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.536Z","visualization":{"title":"Vnclowpot AS/N - Top 10","visState":"{\"title\":\"Vnclowpot AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:082111a0-80cf-11e7-ab37-eb92b1bfb573","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.506Z","visualization":{"title":"ConPot Source IP - Top 10","visState":"{\"title\":\"ConPot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:0d947000-7ebd-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.524Z","visualization":{"title":"Honeypot Events Pie","visState":"{\"title\":\"Honeypot Events Pie\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:772cb2b0-7ec3-11e7-a7c8-5f38ad5bf75f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.477Z","visualization":{"title":"Honeypot Source IP - Top 10","visState":"{\"title\":\"Honeypot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:7e33e3d0-810c-11e7-8413-9fe5e30ade77","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.522Z","visualization":{"title":"Dionaea Destination Ports Histogram","visState":"{\"title\":\"Dionaea Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:51ca6ee0-80d5-11e7-ab37-eb92b1bfb573","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.511Z","visualization":{"title":"NGINX Events Bar","visState":"{\"title\":\"NGINX Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"NGINX\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"NGINX\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:762f66c0-7e9e-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.476Z","visualization":{"title":"Honeypot Events Histogram","visState":"{\"title\":\"Honeypot Events Histogram\",\"type\":\"line\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:4e2887d0-8379-11e7-97dc-15d31af3c77f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.513Z","visualization":{"title":"Honeytrap Heatmap","visState":"{\"title\":\"Honeytrap Heatmap\",\"type\":\"heatmap\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":10,\"colorSchema\":\"Yellow to Red\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"square root\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"color\":\"#555\"}}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Destination Port\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(255,255,204)\",\"100 - 200\":\"rgb(255,241,170)\",\"200 - 300\":\"rgb(254,225,135)\",\"300 - 400\":\"rgb(254,201,101)\",\"400 - 500\":\"rgb(254,171,73)\",\"500 - 600\":\"rgb(253,141,60)\",\"600 - 700\":\"rgb(252,91,46)\",\"700 - 800\":\"rgb(237,47,34)\",\"800 - 900\":\"rgb(212,16,32)\",\"900 - 1000\":\"rgb(176,0,38)\"}},\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:595d6170-85e0-11e7-916b-fb4cebb78112","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.523Z","visualization":{"title":"eMobility Events Bar","visState":"{\"title\":\"eMobility Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"ConPot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ConPot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:2a6803f0-80e7-11e7-a689-67e589a14a8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.485Z","visualization":{"title":"Cowrie Destination Ports Histogram","visState":"{\"title\":\"Cowrie Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"@timestamp per 30 seconds\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:59b9dd60-827f-11e7-afbf-a7491fba5d8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.483Z","visualization":{"title":"ElasticPot Source IP Reputation","visState":"{\"title\":\"ElasticPot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:29117a00-85dc-11e7-916b-fb4cebb78112","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.468Z","visualization":{"title":"Syslog Events Bar","visState":"{\"title\":\"Syslog Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Syslog\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Syslog\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:63672eb0-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.437Z","visualization":{"title":"Mailoney Events Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Unique Source IPs\",\"field\":\"src_ip.keyword\"},\"schema\":\"metric\",\"type\":\"cardinality\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Mailoney Events Histogram\",\"type\":\"line\"}","uiStateJSON":"{\n \"vis\": {\n \"legendOpen\": true\n }\n}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:51c331f0-8b54-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.433Z","visualization":{"title":"Rdpy Countries - Top 10","visState":"{\"title\":\"Rdpy Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:62fde9a0-858d-11e7-a686-392ac617767d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.422Z","visualization":{"title":"ConPot Events Bar","visState":"{\"title\":\"ConPot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"ConPot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ConPot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:50d82860-7ea0-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.423Z","visualization":{"title":"Honeypot Countries","visState":"{\"title\":\"Honeypot Countries\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:54213440-8b56-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.418Z","visualization":{"title":"Rdpy Username Tagcloud","visState":"{\"title\":\"Rdpy Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\",\"hideLabel\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:65ba4280-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.413Z","visualization":{"title":"Vnclowpot Handshake - Top 10","visState":"{\"title\":\"Vnclowpot Handshake - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"vnc_handshake.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"VNC Handshake\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:5234de80-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.392Z","visualization":{"title":"Mailoney Events Bar","visState":"{\"title\":\"Mailoney Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Mailoney\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Mailoney\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:307afd60-82a9-11e7-bcbe-2b6958a9c888","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.390Z","visualization":{"title":"Glastopf Events Bar","visState":"{\"title\":\"Glastopf Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Glastopf\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Glastopf\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:19865b10-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.384Z","visualization":{"title":"Vnclowpot Source IP - Top 10","visState":"{\"title\":\"Vnclowpot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:59509e90-8590-11e7-a686-392ac617767d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.376Z","visualization":{"title":"Glastopf Source IP Reputation","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"ip_rep.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"title\":\"Glastopf Source IP Reputation\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:349c11c0-7ea0-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.367Z","visualization":{"title":"Honeypot Source IP Reputation","visState":"{\"title\":\"Honeypot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:0e230290-859b-11e7-8f60-4f4666b0a88e","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.365Z","visualization":{"title":"Suricata Destination Ports Histogram","visState":"{\"title\":\"Suricata Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:0de24040-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.354Z","visualization":{"title":"Rdpy Events Bar","visState":"{\"title\":\"Rdpy Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Rdpy\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Rdpy\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:0169b450-8b62-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.343Z","visualization":{"title":"Mailoney Handshake - Top 10","visState":"{\"title\":\"Mailoney Handshake - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"smtp_input.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"SMTP Input\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:1a097850-7c22-11e7-aa1e-6bf93670d67b","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.334Z","visualization":{"title":"Suricata CVE - Top 10","visState":"{\"title\":\"Suricata CVE - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"alert.cve_id.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"CVE ID\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:051c59e0-8b53-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.294Z","visualization":{"title":"Rdpy Source IP Reputation","visState":"{\"title\":\"Rdpy Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:3be196b0-68c7-11e7-a9d5-35bd0d8c6af2","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.255Z","dashboard":{"title":">T-Pot","hits":0,"description":"T-Pot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"P0f-OS-Top-10\",\"panelIndex\":9,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-Username-Tagcloud\",\"panelIndex\":12,\"row\":13,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Cowrie-Password-Tagcloud\",\"panelIndex\":13,\"row\":13,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":8,\"id\":\"Suricata-Alert-Signature-Top-10\",\"panelIndex\":21,\"row\":16,\"size_x\":5,\"size_y\":6,\"type\":\"visualization\"},{\"col\":6,\"id\":\"1a097850-7c22-11e7-aa1e-6bf93670d67b\",\"panelIndex\":38,\"row\":16,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"e624bc50-7dd6-11e7-bee2-c98307c16efa\",\"panelIndex\":43,\"row\":9,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"d94ff2a0-7ec2-11e7-a286-9f03beba6417\",\"panelIndex\":44,\"row\":16,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"50d82860-7ea0-11e7-a286-9f03beba6417\",\"panelIndex\":45,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"7b61a6a0-7ebf-11e7-a286-9f03beba6417\",\"panelIndex\":46,\"row\":11,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"87428ba0-7e9d-11e7-a286-9f03beba6417\",\"panelIndex\":47,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"762f66c0-7e9e-11e7-a286-9f03beba6417\",\"panelIndex\":48,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"0d947000-7ebd-11e7-a286-9f03beba6417\",\"panelIndex\":49,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"885928c0-7ebe-11e7-a286-9f03beba6417\",\"panelIndex\":50,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ef227eb0-7e9d-11e7-a286-9f03beba6417\",\"panelIndex\":51,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"d1aa9740-7e9e-11e7-a286-9f03beba6417\",\"panelIndex\":52,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"772cb2b0-7ec3-11e7-a7c8-5f38ad5bf75f\",\"panelIndex\":53,\"row\":16,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"349c11c0-7ea0-11e7-a286-9f03beba6417\",\"panelIndex\":54,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"f1a19000-7ebf-11e7-a286-9f03beba6417\",\"panelIndex\":55,\"row\":13,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-21\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-38\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-44\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-52\":{\"mapCenter\":[28.92163128242129,-2.98828125],\"mapZoom\":2},\"P-53\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"vis\":{\"legendOpen\":true}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:e05aac20-8b51-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.252Z","dashboard":{"title":"Rdpy","hits":0,"description":"Rdpy Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"0de24040-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c90f1f00-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":11,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"da489b20-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":12,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"e4b7cf40-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":13,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"051c59e0-8b53-11e7-b92d-d39e43e3de0f\",\"panelIndex\":14,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"51c331f0-8b54-11e7-b92d-d39e43e3de0f\",\"panelIndex\":15,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"73364660-8b54-11e7-b92d-d39e43e3de0f\",\"panelIndex\":16,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"874be060-8b54-11e7-b92d-d39e43e3de0f\",\"panelIndex\":17,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"54213440-8b56-11e7-b92d-d39e43e3de0f\",\"panelIndex\":18,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"cb2a3a00-8b56-11e7-b92d-d39e43e3de0f\",\"panelIndex\":19,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-13\":{\"mapCenter\":[30.44867367928756,-5.44921875],\"mapZoom\":2},\"P-16\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-17\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"match_all\":{}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:ElasticPot","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.252Z","dashboard":{"title":"ElasticPot","hits":0,"description":"ElasticPot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"ElasticPot-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ElasticPot-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ElasticPot-Events-by-Country-Histogram\",\"panelIndex\":4,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ElasticPot-Map\",\"panelIndex\":5,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":5,\"id\":\"ElasticPot-Source-IP-Top-10\",\"panelIndex\":6,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ElasticPot-ASN-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":8,\"id\":\"ElasticPot-Query-Top-10\",\"panelIndex\":9,\"row\":10,\"size_x\":5,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"d01a6390-827e-11e7-afbf-a7491fba5d8a\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"59b9dd60-827f-11e7-afbf-a7491fba5d8a\",\"panelIndex\":11,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-5\":{\"mapCenter\":[28.304380682962783,3.33984375],\"mapZoom\":2},\"P-6\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"asc\"}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:Suricata","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.251Z","dashboard":{"title":"Suricata","hits":0,"description":"Suricata Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Suricata-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Suricata-Countries-Top-10\",\"panelIndex\":9,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Suricata-Fileinfo-Magic-Top-10\",\"panelIndex\":12,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Suricata-HTTP-Content-Type-Top-10\",\"panelIndex\":14,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Suricata-HTTP-Hostname-Pie-Top-10\",\"panelIndex\":15,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Suricata-HTTP-Method-Pie-Top-10\",\"panelIndex\":16,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Suricata-HTTP-User-Agent-Pie-Top-10\",\"panelIndex\":18,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Suricata-SSH-Client-Software-Version-Pie-Top-10\",\"panelIndex\":19,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Suricata-Events-by-Country-Histogram\",\"panelIndex\":22,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Suricata-Map\",\"panelIndex\":23,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Suricata-Source-IP-Top-10\",\"panelIndex\":24,\"row\":15,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Suricata-ASN-Top-10\",\"panelIndex\":25,\"row\":15,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":8,\"id\":\"Suricata-Alert-Signature-Top-10\",\"panelIndex\":26,\"row\":15,\"size_x\":5,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"e624bc50-7dd6-11e7-bee2-c98307c16efa\",\"panelIndex\":27,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bf6f6000-8598-11e7-8f60-4f4666b0a88e\",\"panelIndex\":28,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"0e230290-859b-11e7-8f60-4f4666b0a88e\",\"panelIndex\":29,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"b1a7f8d0-859b-11e7-8f60-4f4666b0a88e\",\"panelIndex\":30,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":6,\"id\":\"1a097850-7c22-11e7-aa1e-6bf93670d67b\",\"panelIndex\":31,\"row\":15,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-23\":{\"mapCenter\":[28.613459424004414,-3.33984375],\"mapZoom\":2},\"P-24\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-25\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-26\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-31\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:Honeytrap","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.248Z","dashboard":{"title":"Honeytrap","hits":0,"description":"Honeytrap Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Honeytrap-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Honeytrap-Countries-Top-10\",\"panelIndex\":5,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Honeytrap-Events-by-Country-Histogram\",\"panelIndex\":6,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Honeytrap-Destination-Ports-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Honeytrap-Map\",\"panelIndex\":8,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Honeytrap-Source-IP-Top-10\",\"panelIndex\":9,\"row\":13,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Honeytrap-ASN-Top-10\",\"panelIndex\":10,\"row\":13,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"6ee70b90-8374-11e7-9adb-2955c2136c8c\",\"panelIndex\":11,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ec53e470-8376-11e7-9adb-2955c2136c8c\",\"panelIndex\":12,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"576a3cb0-82ae-11e7-bcbe-2b6958a9c888\",\"panelIndex\":13,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"4e2887d0-8379-11e7-97dc-15d31af3c77f\",\"panelIndex\":14,\"row\":10,\"size_x\":9,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-10\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-14\":{\"vis\":{\"defaultColors\":{\"0 - 450\":\"rgb(255,255,204)\",\"450 - 900\":\"rgb(255,241,170)\",\"900 - 1350\":\"rgb(254,225,135)\",\"1350 - 1800\":\"rgb(254,201,101)\",\"1800 - 2250\":\"rgb(254,171,73)\",\"2250 - 2700\":\"rgb(253,141,60)\",\"2700 - 3150\":\"rgb(252,91,46)\",\"3150 - 3600\":\"rgb(237,47,34)\",\"3600 - 4050\":\"rgb(212,16,32)\",\"4050 - 4500\":\"rgb(176,0,38)\"}}},\"P-8\":{\"mapCenter\":[28.613459424004414,-3.69140625],\"mapZoom\":2},\"P-9\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:NGINX","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.249Z","dashboard":{"title":"NGINX","hits":0,"description":"NGINX Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"NGINX-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"NGINX-HTTP-Method-Pie-Top-10\",\"panelIndex\":3,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-HTTP-Status-Code-Pie-Top-10\",\"panelIndex\":4,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"NGINX-HTTP-User-Agent-Pie-Top-10\",\"panelIndex\":5,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-Username-Tagcloud\",\"panelIndex\":6,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"NGINX-ASN-Top-10\",\"panelIndex\":7,\"row\":12,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-Source-IP-Top-10\",\"panelIndex\":8,\"row\":12,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-Map\",\"panelIndex\":9,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"NGINX-Events-by-Country-Histogram\",\"panelIndex\":13,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"NGINX-Countries-Top-10\",\"panelIndex\":14,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"51ca6ee0-80d5-11e7-ab37-eb92b1bfb573\",\"panelIndex\":15,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"7dcaa2b0-8596-11e7-a686-392ac617767d\",\"panelIndex\":16,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"mapCenter\":[30.14512718337613,-0.87890625],\"mapZoom\":2}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:eMobility","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.244Z","dashboard":{"title":"eMobility","hits":0,"description":"eMobility Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"eMobility-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"eMobility-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"eMobility-Events-by-Country-Histogram\",\"panelIndex\":4,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"eMobility-Map\",\"panelIndex\":5,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"eMobility-Source-IP-Top-10\",\"panelIndex\":6,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"eMobility-ASN-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"595d6170-85e0-11e7-916b-fb4cebb78112\",\"panelIndex\":8,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c3d133e0-85e2-11e7-916b-fb4cebb78112\",\"panelIndex\":9,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-5\":{\"mapCenter\":[29.53522956294847,-5.44921875],\"mapZoom\":2},\"P-6\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:Glastopf","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.240Z","dashboard":{"title":"Glastopf","hits":0,"description":"Glastopf Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Glastopf-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Glastopf-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Glastopf-Map\",\"panelIndex\":5,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Glastop-Source-IP-Top-10\",\"panelIndex\":6,\"row\":10,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Glastopf-ASN-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Glastopf-Events-by-Country-Histogram\",\"panelIndex\":9,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"307afd60-82a9-11e7-bcbe-2b6958a9c888\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"59509e90-8590-11e7-a686-392ac617767d\",\"panelIndex\":11,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-5\":{\"mapCenter\":[29.84064389983441,-27.24609375],\"mapZoom\":2},\"P-6\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:dd95c950-8b5d-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.236Z","dashboard":{"title":"Mailoney","hits":0,"description":"Mailoney Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"5234de80-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"63672eb0-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":11,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"88d899e0-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":12,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"cac48440-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":13,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"d2405e70-8b5e-11e7-ba35-0d8832ac304f\",\"panelIndex\":14,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ad6dcb50-8b5e-11e7-ba35-0d8832ac304f\",\"panelIndex\":15,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"ba9d6280-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":16,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"0169b450-8b62-11e7-ba35-0d8832ac304f\",\"panelIndex\":17,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"size_x\":6,\"size_y\":6,\"panelIndex\":18,\"type\":\"visualization\",\"id\":\"c0916430-8b5e-11e7-ba35-0d8832ac304f\",\"col\":7,\"row\":1}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-15\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-16\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-17\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-18\":{\"mapZoom\":2,\"mapCenter\":[29.22889003019423,-7.207031249999999]}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"match_all\":{}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:Dionaea","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.235Z","dashboard":{"title":"Dionaea","hits":0,"description":"Dionaea Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Dionaea-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Dionaea-Destination-Ports-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Protocol\",\"panelIndex\":4,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-Username-Tagcloud-Large\",\"panelIndex\":7,\"row\":13,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Password-Tagcloud-Large\",\"panelIndex\":8,\"row\":13,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-Events-by-Country-Histogram\",\"panelIndex\":10,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Map\",\"panelIndex\":11,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-ASN-Top-10\",\"panelIndex\":12,\"row\":17,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Source-IP-Top-10\",\"panelIndex\":13,\"row\":17,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"b9343070-80e9-11e7-a689-67e589a14a8a\",\"panelIndex\":14,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"cf8d0e40-80ea-11e7-a689-67e589a14a8a\",\"panelIndex\":15,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Dionaea-Countries-Top-10\",\"panelIndex\":16,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-Type\",\"panelIndex\":17,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Dionaea-Transport\",\"panelIndex\":18,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"7e33e3d0-810c-11e7-8413-9fe5e30ade77\",\"panelIndex\":19,\"row\":10,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-11\":{\"mapCenter\":[29.53522956294847,-2.63671875],\"mapZoom\":2},\"P-12\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-13\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:dd6b19a0-85e8-11e7-9ef1-352f01cf0e9e","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.228Z","dashboard":{"title":"Vnclowpot","hits":0,"description":"Vnclowpot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"0e34b630-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":1,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"db3104f0-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":2,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ea4752f0-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"99249a40-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":4,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bc1219b0-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":5,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"cda24150-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":6,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"65ba4280-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"19865b10-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":8,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"007e9470-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":9,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-2\":{\"mapCenter\":[28.92163128242129,-5.09765625],\"mapZoom\":2},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"match_all\":{}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:Cowrie","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.225Z","dashboard":{"title":"Cowrie","hits":0,"description":"Cowrie Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Cowrie-Events-Histogram\",\"panelIndex\":22,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Cowrie-Countries-Top-10\",\"panelIndex\":28,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-Events-by-Country-Histogram\",\"panelIndex\":29,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Cowrie-Version-Pie-Top-10\",\"panelIndex\":31,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-Username-Tagcloud-Large\",\"panelIndex\":34,\"row\":12,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Password-Tagcloud-Large\",\"panelIndex\":35,\"row\":12,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Map\",\"panelIndex\":36,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Input-Top-10\",\"panelIndex\":37,\"row\":16,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Cowrie-Source-IP-Top-10\",\"panelIndex\":38,\"row\":16,\"size_x\":2,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-ASN-Top-10\",\"panelIndex\":39,\"row\":16,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Ports-Pie\",\"panelIndex\":43,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c1ef91c0-7dc2-11e7-8268-ed048f6272e0\",\"panelIndex\":44,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bf39e000-80d5-11e7-ba6f-4542711dd148\",\"panelIndex\":45,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"f28b8c60-80e4-11e7-ba6f-4542711dd148\",\"panelIndex\":46,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"2a6803f0-80e7-11e7-a689-67e589a14a8a\",\"panelIndex\":47,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-33\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-36\":{\"mapCenter\":[29.22889003019423,-0.17578125],\"mapZoom\":2},\"P-37\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-38\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-39\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:Syslog","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.219Z","dashboard":{"title":"Syslog","hits":0,"description":"Syslog Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Syslog-Events-Histogram\",\"panelIndex\":1,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Syslog-SSH-Events-Histogram\",\"panelIndex\":2,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Syslog-Events-by-Country-Histogram\",\"panelIndex\":4,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Syslog-Program-Top-10\",\"panelIndex\":6,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Syslog-Map\",\"panelIndex\":8,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Syslog-ASN-Top-10\",\"panelIndex\":9,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Syslog-Source-IP-Top-10\",\"panelIndex\":10,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Syslog-Username-Tagcloud\",\"panelIndex\":11,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"29117a00-85dc-11e7-916b-fb4cebb78112\",\"panelIndex\":12,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-10\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"mapCenter\":[29.53522956294847,-10.01953125],\"mapZoom\":2},\"P-9\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:ConPot","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.207Z","dashboard":{"title":"ConPot","hits":0,"description":"ConPot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"ConPot-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"ConPot-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ConPot-Event-Type\",\"panelIndex\":4,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"ConPot-Protocol\",\"panelIndex\":5,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ConPot-Events-by-Country-Histogram\",\"panelIndex\":6,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ConPot-Input-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":10,\"id\":\"ConPot-Response-Top-10\",\"panelIndex\":8,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ConPot-Map\",\"panelIndex\":9,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ConPot-ASN-Top-10\",\"panelIndex\":11,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ffb284f0-80cd-11e7-ab37-eb92b1bfb573\",\"panelIndex\":14,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"082111a0-80cf-11e7-ab37-eb92b1bfb573\",\"panelIndex\":15,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"62fde9a0-858d-11e7-a686-392ac617767d\",\"panelIndex\":16,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-11\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-15\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"mapCenter\":[33.7243396617476,-4.74609375],\"mapZoom\":2}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"index-pattern:a06b3310-43e2-11e8-bf89-a753125435f7","_score":1,"_source":{"type":"index-pattern","updated_at":"2018-04-25T10:04:20.915Z","index-pattern":{"title":"logstash-*","timeFieldName":"@timestamp","fields":"[{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"@version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"name\":\"_score\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"name\":\"alert.action\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.action.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.category\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.category.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.cve_id\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.cve_id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.gid\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.rev\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.severity\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.signature\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.signature.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.signature_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"app\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"app.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"app_proto\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"app_proto.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.data_hex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.data_hex.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.md5_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.md5_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.sha512_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.sha512_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"auth_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"body_bytes_sent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"body_bytes_sent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"compCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"compCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.transport\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.transport.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"data\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"data.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"data_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"data_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dest_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dest_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dest_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dist\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dist.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.rrname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.rrname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.rrtype\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.rrtype.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"domain\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"domain.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"download_count\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"download_tries\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dst_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dst_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"duration\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.body_md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.body_md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.date\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.date.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.message_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.message_id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.received\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.received.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.reply_to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.reply_to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.status.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.subject_md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.subject_md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"encCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"encCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"end_time\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"euid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"euid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"event_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"event_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"eventid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"eventid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.filename\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.filename.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.magic\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.magic.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.state.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.stored\",\"type\":\"boolean\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fingerprint\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fingerprint.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"flow_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ftp.commands.arguments\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ftp.commands.arguments.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ftp.commands.command\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ftp.commands.command.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.as_org\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.as_org.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.asn\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.city_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.city_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.continent_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.continent_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_code2\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_code2.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_code3\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_code3.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.dma_code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.ip\",\"type\":\"ip\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.latitude\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.location\",\"type\":\"geo_point\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.longitude\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.postal_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.postal_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.region_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.region_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.region_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.region_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.timezone\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.timezone.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"height\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.nodeid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.nodeid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.postdata\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.postdata.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.query\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.query.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.raw\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.raw.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"host\",\"type\":\"string\",\"count\":2,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"hostname\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.accept_encoding\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.accept_encoding.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.accept_language\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.accept_language.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.authorization\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.authorization.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_content_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_content_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_refer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_refer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_user_agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_user_agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.redirect\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.redirect.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.status\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.url\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.url.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.via\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.via.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.xff\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.xff.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_referrer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_referrer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_uri\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_uri.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_user_agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_user_agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"icmp_code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"icmp_type\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"in_iface\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"in_iface.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"input\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"input.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ip_rep\",\"type\":\"string\",\"count\":2,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ip_rep.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"isError\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"is_virtual\",\"type\":\"boolean\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"kexAlgs\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"kexAlgs.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"keyAlgs\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"keyAlgs.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"lang\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"lang.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"link\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"link.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"login.password\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"login.password.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"login.username\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"login.username.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"logname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"logname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"logsource\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"logsource.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"macCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"macCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"message\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"mod\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"mod.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"operation_mode\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"os\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"os.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"outfile\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"outfile.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_by\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_by.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_caller\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_caller.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_module\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_module.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_session_state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_session_state.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"params\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"params.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"password\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"password.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"path\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"path.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"payload_printable\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"payload_printable.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"port\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"port.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"program\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"program.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proto\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proto.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.local_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.local_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.local_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.data_hex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.data_hex.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.md5_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.md5_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.sha512_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.sha512_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.remote_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.remote_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.remote_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_freq\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_freq.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_hits\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_hits.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_mtu\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_mtu.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_sig\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_sig.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"realm\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"realm.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"reason\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"reason.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"remote_host\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"remote_host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"remote_user\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"remote_user.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request_time\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request_time.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ruser\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ruser.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"sensor\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"sensor.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"sensorid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"sensorid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"session\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"session.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"session_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"shasum\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"shasum.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.helo\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.helo.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.mail_from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.mail_from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.rcpt_to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.rcpt_to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp_input\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp_input.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"src_hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_ip\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"src_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.client.proto_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.client.proto_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.client.software_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.client.software_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.server.proto_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.server.proto_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.server.software_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.server.software_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"start_time\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"status.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"stream\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"system\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"system.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip_ext\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip_ext.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip_int\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip_int.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tags\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tags.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.fingerprint\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.fingerprint.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.issuerdn\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.issuerdn.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.notafter\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.notbefore\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.sni\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.sni.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tty\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tty.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ttylog\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ttylog.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uptime\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uptime.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"url\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"url.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"user\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"user.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"username\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"username.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"value\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"value.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"vnc_handshake\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"vnc_handshake.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"width\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"xff\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"xff.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","fieldFormatMap":"{\"src_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dst_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dest_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"src_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"alert.signature_id\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://doc.emergingthreats.net/bin/view/Main/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dest_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.country_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.real_region_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.city_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.number\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}&run=toolpage\",\"labelTemplate\":\"{{value}}\"}},\"status\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http.status\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dns.rrname\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http_user_agent\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"http.http_user_agent\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"os\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"link\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"event_type\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"tls.sni\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.ssllabs.com/ssltest/analyze.html?d={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"tls.version\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"src_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http_user_agent.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"geoip.country_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.city_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"status.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.number.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}&run=toolpage\",\"labelTemplate\":\"{{value}}\"}},\"geoip.asn.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"geoip.real_region_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"event_type.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"dest_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dst_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"os.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"link.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"tls.version.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"dns.rrname.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"tls.sni.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.ssllabs.com/ssltest/analyze.html?d={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http.http_user_agent.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"alert.cve_id.keyword\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.cvedetails.com/cve/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"src_ip.keyword\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.asn\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}\",\"labelTemplate\":\"{{value}}\"}}}"}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d3bb9bd0-4863-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T08:37:02.605Z","visualization":{"title":"Heralding Events Histogram","visState":"{\"title\":\"Heralding Events Histogram\",\"type\":\"line\",\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"},\"valueAxis\":null},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100,\"filter\":false},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:94ae10e0-4871-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T10:15:29.774Z","visualization":{"title":"Heralding Attack Map","visState":"{\"title\":\"Heralding Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatClusterSize\":1.5,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0],\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"baseLayersAreLoaded\":{},\"tmsLayers\":[{\"id\":\"road_map\",\"url\":\"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"

© OpenStreetMap contributors | Elastic Maps Service

\",\"subdomains\":[]}],\"selectedTmsLayer\":{\"id\":\"road_map\",\"url\":\"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"

© OpenStreetMap contributors | Elastic Maps Service

\",\"subdomains\":[]}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"isFilteredByCollar\":true,\"useGeocentroid\":true,\"precision\":2}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:2cf90930-47d3-11e8-a905-f74bbc7cbd2d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-24T15:21:35.299Z","visualization":{"title":"Heralding Events Bar","visState":"{\"title\":\"Heralding Events Bar\",\"type\":\"horizontal_bar\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:c2bea500-47ca-11e8-a905-f74bbc7cbd2d","_score":1,"_source":{"type":"search","updated_at":"2018-04-24T14:21:21.104Z","search":{"title":"Heralding-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"type:\\\"Heralding\\\"\",\"language\":\"lucene\"},\"filter\":[]}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:29f51af0-4876-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T10:57:18.711Z","visualization":{"title":"Heralding Protocols Histogram","visState":"{\"title\":\"Heralding Protocols Histogram\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"step-after\",\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"times\":[],\"type\":\"histogram\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Events\"},\"type\":\"value\"}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"proto.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:21ad1c80-488a-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:11:14.248Z","visualization":{"title":"Heralding AS/N - Top 10","visState":"{\"title\":\"Heralding AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}]}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:eca8e580-4877-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T11:00:54.360Z","visualization":{"title":"Heralding Source IP Reputation","visState":"{\"title\":\"Heralding Source IP Reputation\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:e1969e20-4878-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T11:07:45.282Z","visualization":{"title":"Heralding Countries - Top 10","visState":"{\"title\":\"Heralding Countries - Top 10\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:864b2f30-4883-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T12:23:56.579Z","visualization":{"title":"Heralding Ports Pie","visState":"{\"title\":\"Heralding Ports Pie\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:1268af10-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:03:39.137Z","visualization":{"title":"Heralding Username Tagcloud - Large","visState":"{\"title\":\"Heralding Username Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"right angled\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:7c5959b0-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:06:36.875Z","visualization":{"title":"Heralding Password Tagcloud - Large","visState":"{\"title\":\"Heralding Password Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"right angled\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:34dedba0-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:07:43.067Z","visualization":{"title":"Heralding Username Tagcloud","visState":"{\"title\":\"Heralding Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:5a1dc520-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:05:39.442Z","visualization":{"title":"Heralding Password Tagcloud","visState":"{\"title\":\"Heralding Password Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d0dbe890-4870-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T14:08:24.304Z","visualization":{"title":"Heralding Events by Country Histogram","visState":"{\"title\":\"Heralding Events by Country Histogram\",\"type\":\"area\",\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Events\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"dashboard:14ebefd0-488f-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-25T14:14:34.641Z","dashboard":{"title":"Heralding","hits":0,"description":"Heralding Dashboard","panelsJSON":"[{\"gridData\":{\"h\":2,\"i\":\"1\",\"w\":6,\"x\":0,\"y\":0},\"id\":\"2cf90930-47d3-11e8-a905-f74bbc7cbd2d\",\"panelIndex\":\"1\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"2\",\"w\":6,\"x\":0,\"y\":2},\"id\":\"d3bb9bd0-4863-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"2\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"3\",\"w\":6,\"x\":0,\"y\":4},\"id\":\"d0dbe890-4870-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"3\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"embeddableConfig\":{\"mapCenter\":[25.799891182088334,16.875000000000004],\"mapZoom\":2},\"gridData\":{\"h\":6,\"i\":\"4\",\"w\":6,\"x\":6,\"y\":0},\"id\":\"94ae10e0-4871-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"4\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"5\",\"w\":12,\"x\":0,\"y\":6},\"id\":\"29f51af0-4876-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"5\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"6\",\"w\":4,\"x\":0,\"y\":8},\"id\":\"eca8e580-4877-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"6\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"7\",\"w\":4,\"x\":4,\"y\":8},\"id\":\"e1969e20-4878-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"7\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"8\",\"w\":4,\"x\":8,\"y\":8},\"id\":\"864b2f30-4883-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"8\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"10\",\"w\":6,\"x\":6,\"y\":11},\"id\":\"7c5959b0-4889-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"10\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"11\",\"w\":6,\"x\":0,\"y\":11},\"id\":\"1268af10-4889-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"11\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"12\",\"w\":3,\"x\":0,\"y\":16},\"id\":\"21ad1c80-488a-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"12\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"13\",\"w\":3,\"x\":3,\"y\":16},\"id\":\"844f33f0-488a-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"13\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"14\",\"w\":6,\"x\":6,\"y\":16},\"id\":\"124a1140-488e-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"14\",\"type\":\"visualization\",\"version\":\"6.2.4\"}]","optionsJSON":"{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":false}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:15f2c000-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:14:01.514Z","visualization":{"title":"Ciscoasa Events Bar","visState":"{\n \"title\": \"Ciscoasa Events Bar\",\n \"type\": \"horizontal_bar\",\n \"params\": {\n \"type\": \"histogram\",\n \"grid\": {\n \"categoryLines\": false,\n \"style\": {\n \"color\": \"#eee\"\n }\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": false,\n \"rotate\": 90,\n \"filter\": false,\n \"truncate\": 200\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"square root\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": true,\n \"type\": \"histogram\",\n \"mode\": \"normal\",\n \"data\": {\n \"label\": \"Events\",\n \"id\": \"1\"\n },\n \"valueAxis\": \"ValueAxis-1\",\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true\n },\n {\n \"show\": true,\n \"mode\": \"normal\",\n \"type\": \"histogram\",\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"data\": {\n \"id\": \"2\",\n \"label\": \"Unique Source IPs\"\n },\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"Events\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"cardinality\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"src_ip.keyword\",\n \"customLabel\": \"Unique Source IPs\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:124a1140-488e-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:45:52.622Z","visualization":{"title":"Heralding Top Credentials Per Protocol","visState":"{\"title\":\"Heralding Top Credentials Per Protocol\",\"type\":\"table\",\"params\":{\"perPage\":100,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"proto.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Protocol\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"username.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":3,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Username\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"password.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":3,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Password\"}}]}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":null}}}}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:844f33f0-488a-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:13:59.727Z","visualization":{"title":"Heralding Source IP - Top 10","visState":"{\"title\":\"Heralding Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}]}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:Honeypot-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-28T11:05:23.734Z","search":{"title":"Honeypot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":\"type:\\\"Ciscoasa\\\" OR type:\\\"ConPot\\\" OR type:\\\"Cowrie\\\" OR type:\\\"Dionaea\\\" OR type:\\\"ElasticPot\\\" OR type:\\\"eMobility\\\" OR type:\\\"Glastopf\\\" OR type:\\\"Heralding\\\" OR type:\\\"Honeytrap\\\" OR type:\\\"Mailoney\\\" OR type:\\\"Rdpy\\\" OR type:\\\"Vnclowpot\\\"\",\"language\":\"lucene\"},\"highlightAll\":true,\"version\":true}"}}}} -{"_index":".kibana","_type":"doc","_id":"search:2934abc0-4ad4-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"search","updated_at":"2018-04-28T11:06:11.964Z","search":{"title":"Ciscoasa-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"type:\\\"Ciscoasa\\\"\",\"language\":\"lucene\"},\"filter\":[]}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:a72ec5f0-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:34:15.315Z","visualization":{"title":"Ciscoasa Events by Country Histogram","visState":"{\n \"title\": \"Ciscoasa Events by Country Histogram\",\n \"type\": \"area\",\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false,\n \"style\": {\n \"color\": \"#eee\"\n }\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"square root\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Events\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"normal\",\n \"data\": {\n \"label\": \"Events\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"Events\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"group\",\n \"params\": {\n \"field\": \"geoip.country_name.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {},\n \"customLabel\": \"Timestamp\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:b8745000-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:33:27.710Z","visualization":{"title":"Ciscoasa Attack Map","visState":"{\n \"title\": \"Ciscoasa Attack Map\",\n \"type\": \"tile_map\",\n \"params\": {\n \"mapType\": \"Shaded Circle Markers\",\n \"isDesaturated\": false,\n \"addTooltip\": true,\n \"heatClusterSize\": 1.5,\n \"legendPosition\": \"bottomright\",\n \"mapZoom\": 2,\n \"mapCenter\": [\n 0,\n 0\n ],\n \"wms\": {\n \"enabled\": false,\n \"options\": {\n \"format\": \"image/png\",\n \"transparent\": true\n },\n \"baseLayersAreLoaded\": {},\n \"tmsLayers\": [\n {\n \"id\": \"road_map\",\n \"url\": \"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\n \"minZoom\": 0,\n \"maxZoom\": 10,\n \"attribution\": \"

© OpenStreetMap contributors | Elastic Maps Service

\",\n \"subdomains\": []\n }\n ],\n \"selectedTmsLayer\": {\n \"id\": \"road_map\",\n \"url\": \"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\n \"minZoom\": 0,\n \"maxZoom\": 10,\n \"attribution\": \"

© OpenStreetMap contributors | Elastic Maps Service

\",\n \"subdomains\": []\n }\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"geohash_grid\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"geoip.location\",\n \"autoPrecision\": true,\n \"isFilteredByCollar\": true,\n \"useGeocentroid\": true,\n \"precision\": 2\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:1a80b720-4ad6-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:33:07.323Z","visualization":{"title":"Ciscoasa AS/N - Top 10","visState":"{\n \"title\": \"Ciscoasa AS/N - Top 10\",\n \"type\": \"table\",\n \"params\": {\n \"perPage\": 10,\n \"showPartialRows\": false,\n \"showMeticsAtAllLevels\": false,\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n },\n \"showTotal\": false,\n \"totalFunc\": \"sum\"\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"CNT\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"geoip.asn\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"AS\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"geoip.as_org.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"ASN\"\n }\n }\n ]\n}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:2a543aa0-4ad6-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:34:58.847Z","visualization":{"title":"Ciscoasa Source IP - Top 10","visState":"{\n \"title\": \"Ciscoasa Source IP - Top 10\",\n \"type\": \"table\",\n \"params\": {\n \"perPage\": 10,\n \"showPartialRows\": false,\n \"showMeticsAtAllLevels\": false,\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n },\n \"showTotal\": false,\n \"totalFunc\": \"sum\"\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"CNT\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"src_ip.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"Source IP\"\n }\n }\n ]\n}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:fe02b580-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:33:41.114Z","visualization":{"title":"Ciscoasa Countries - Top 10","visState":"{\n \"title\": \"Ciscoasa Countries - Top 10\",\n \"type\": \"pie\",\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"geoip.country_name.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"visualization:d77bbba0-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:35:13.594Z","visualization":{"title":"Ciscoasa Source IP Reputation","visState":"{\n \"title\": \"Ciscoasa Source IP Reputation\",\n \"type\": \"pie\",\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"ip_rep.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} -{"_index":".kibana","_type":"doc","_id":"config:6.2.4","_score":1,"_source":{"type":"config","updated_at":"2018-04-28T12:08:57.014Z","config":{"buildNum":16627,"defaultIndex":"a06b3310-43e2-11e8-bf89-a753125435f7","dateFormat:dow":"Monday","fields:popularLimit":"0","format:number:defaultPattern":"0.[000]","dateFormat":null}}} -{"_index":".kibana","_type":"doc","_id":"visualization:8a455850-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T12:13:44.582Z","visualization":{"title":"Ciscoasa Events Histogram","visState":"{\"title\":\"Ciscoasa Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"},\"valueAxis\":null},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"*\"},\"label\":\"All\"},{\"input\":{\"query\":\"src_port:*\"},\"label\":\"Exploit\"}]}}]}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"language\":\"lucene\",\"query\":\"\"}}"}}}} {"_index":".kibana","_type":"doc","_id":"dashboard:33e08170-4ad9-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-28T12:14:13.579Z","dashboard":{"title":"Ciscoasa","hits":0,"description":"Ciscoasa Dashboard","panelsJSON":"[{\"gridData\":{\"h\":2,\"i\":\"1\",\"w\":6,\"x\":0,\"y\":0},\"id\":\"15f2c000-4ad5-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"1\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"embeddableConfig\":{\"vis\":{\"legendOpen\":true}},\"gridData\":{\"h\":2,\"i\":\"2\",\"w\":6,\"x\":0,\"y\":2},\"id\":\"8a455850-4ad5-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"2\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"3\",\"w\":6,\"x\":0,\"y\":4},\"id\":\"a72ec5f0-4ad5-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"3\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"embeddableConfig\":{\"mapCenter\":[33.7243396617476,-19.687500000000004],\"mapZoom\":2},\"gridData\":{\"h\":6,\"i\":\"4\",\"w\":6,\"x\":6,\"y\":0},\"id\":\"b8745000-4ad5-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"4\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"5\",\"w\":6,\"x\":0,\"y\":6},\"id\":\"d77bbba0-4ad5-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"5\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"6\",\"w\":6,\"x\":6,\"y\":6},\"id\":\"fe02b580-4ad5-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"6\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"7\",\"w\":6,\"x\":6,\"y\":9},\"id\":\"1a80b720-4ad6-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"7\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"8\",\"w\":6,\"x\":0,\"y\":9},\"id\":\"2a543aa0-4ad6-11e8-ab1b-fdef76c312f4\",\"panelIndex\":\"8\",\"type\":\"visualization\",\"version\":\"6.2.4\"}]","optionsJSON":"{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":false}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:8a455850-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T12:13:44.582Z","visualization":{"title":"Ciscoasa Events Histogram","visState":"{\"title\":\"Ciscoasa Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"},\"valueAxis\":null},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"5\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"*\"},\"label\":\"All\"},{\"input\":{\"query\":\"src_port:*\"},\"label\":\"Exploit\"}]}}]}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"language\":\"lucene\",\"query\":\"\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d77bbba0-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:35:13.594Z","visualization":{"title":"Ciscoasa Source IP Reputation","visState":"{\n \"title\": \"Ciscoasa Source IP Reputation\",\n \"type\": \"pie\",\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"ip_rep.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:fe02b580-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:33:41.114Z","visualization":{"title":"Ciscoasa Countries - Top 10","visState":"{\n \"title\": \"Ciscoasa Countries - Top 10\",\n \"type\": \"pie\",\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"geoip.country_name.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:2a543aa0-4ad6-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:34:58.847Z","visualization":{"title":"Ciscoasa Source IP - Top 10","visState":"{\n \"title\": \"Ciscoasa Source IP - Top 10\",\n \"type\": \"table\",\n \"params\": {\n \"perPage\": 10,\n \"showPartialRows\": false,\n \"showMeticsAtAllLevels\": false,\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n },\n \"showTotal\": false,\n \"totalFunc\": \"sum\"\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"CNT\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"src_ip.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"Source IP\"\n }\n }\n ]\n}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:1a80b720-4ad6-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:33:07.323Z","visualization":{"title":"Ciscoasa AS/N - Top 10","visState":"{\n \"title\": \"Ciscoasa AS/N - Top 10\",\n \"type\": \"table\",\n \"params\": {\n \"perPage\": 10,\n \"showPartialRows\": false,\n \"showMeticsAtAllLevels\": false,\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n },\n \"showTotal\": false,\n \"totalFunc\": \"sum\"\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"CNT\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"geoip.asn\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"AS\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"bucket\",\n \"params\": {\n \"field\": \"geoip.as_org.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\",\n \"customLabel\": \"ASN\"\n }\n }\n ]\n}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:b8745000-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:33:27.710Z","visualization":{"title":"Ciscoasa Attack Map","visState":"{\n \"title\": \"Ciscoasa Attack Map\",\n \"type\": \"tile_map\",\n \"params\": {\n \"mapType\": \"Shaded Circle Markers\",\n \"isDesaturated\": false,\n \"addTooltip\": true,\n \"heatClusterSize\": 1.5,\n \"legendPosition\": \"bottomright\",\n \"mapZoom\": 2,\n \"mapCenter\": [\n 0,\n 0\n ],\n \"wms\": {\n \"enabled\": false,\n \"options\": {\n \"format\": \"image/png\",\n \"transparent\": true\n },\n \"baseLayersAreLoaded\": {},\n \"tmsLayers\": [\n {\n \"id\": \"road_map\",\n \"url\": \"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\n \"minZoom\": 0,\n \"maxZoom\": 10,\n \"attribution\": \"

© OpenStreetMap contributors | Elastic Maps Service

\",\n \"subdomains\": []\n }\n ],\n \"selectedTmsLayer\": {\n \"id\": \"road_map\",\n \"url\": \"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\n \"minZoom\": 0,\n \"maxZoom\": 10,\n \"attribution\": \"

© OpenStreetMap contributors | Elastic Maps Service

\",\n \"subdomains\": []\n }\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"geohash_grid\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"geoip.location\",\n \"autoPrecision\": true,\n \"isFilteredByCollar\": true,\n \"useGeocentroid\": true,\n \"precision\": 2\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:a72ec5f0-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:34:15.315Z","visualization":{"title":"Ciscoasa Events by Country Histogram","visState":"{\n \"title\": \"Ciscoasa Events by Country Histogram\",\n \"type\": \"area\",\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false,\n \"style\": {\n \"color\": \"#eee\"\n }\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"square root\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Events\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"normal\",\n \"data\": {\n \"label\": \"Events\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"Events\"\n }\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"group\",\n \"params\": {\n \"field\": \"geoip.country_name.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 5,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"interval\": \"auto\",\n \"customInterval\": \"2h\",\n \"min_doc_count\": 1,\n \"extended_bounds\": {},\n \"customLabel\": \"Timestamp\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:2934abc0-4ad4-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"search","updated_at":"2018-04-28T11:06:11.964Z","search":{"title":"Ciscoasa-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"type:\\\"Ciscoasa\\\"\",\"language\":\"lucene\"},\"filter\":[]}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Honeypot-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-28T11:05:23.734Z","search":{"title":"Honeypot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":\"type:\\\"Ciscoasa\\\" OR type:\\\"ConPot\\\" OR type:\\\"Cowrie\\\" OR type:\\\"Dionaea\\\" OR type:\\\"ElasticPot\\\" OR type:\\\"eMobility\\\" OR type:\\\"Glastopf\\\" OR type:\\\"Heralding\\\" OR type:\\\"Honeytrap\\\" OR type:\\\"Mailoney\\\" OR type:\\\"Rdpy\\\" OR type:\\\"Vnclowpot\\\"\",\"language\":\"lucene\"},\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:844f33f0-488a-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:13:59.727Z","visualization":{"title":"Heralding Source IP - Top 10","visState":"{\"title\":\"Heralding Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}]}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:124a1140-488e-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:45:52.622Z","visualization":{"title":"Heralding Top Credentials Per Protocol","visState":"{\"title\":\"Heralding Top Credentials Per Protocol\",\"type\":\"table\",\"params\":{\"perPage\":100,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"proto.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Protocol\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"username.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":3,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Username\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"password.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":3,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Password\"}}]}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":null}}}}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:15f2c000-4ad5-11e8-ab1b-fdef76c312f4","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-28T11:14:01.514Z","visualization":{"title":"Ciscoasa Events Bar","visState":"{\n \"title\": \"Ciscoasa Events Bar\",\n \"type\": \"horizontal_bar\",\n \"params\": {\n \"type\": \"histogram\",\n \"grid\": {\n \"categoryLines\": false,\n \"style\": {\n \"color\": \"#eee\"\n }\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": false,\n \"rotate\": 90,\n \"filter\": false,\n \"truncate\": 200\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"square root\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": true,\n \"type\": \"histogram\",\n \"mode\": \"normal\",\n \"data\": {\n \"label\": \"Events\",\n \"id\": \"1\"\n },\n \"valueAxis\": \"ValueAxis-1\",\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true\n },\n {\n \"show\": true,\n \"mode\": \"normal\",\n \"type\": \"histogram\",\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"data\": {\n \"id\": \"2\",\n \"label\": \"Unique Source IPs\"\n },\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {\n \"customLabel\": \"Events\"\n }\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"cardinality\",\n \"schema\": \"metric\",\n \"params\": {\n \"field\": \"src_ip.keyword\",\n \"customLabel\": \"Unique Source IPs\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"2934abc0-4ad4-11e8-ab1b-fdef76c312f4","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:14ebefd0-488f-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-25T14:14:34.641Z","dashboard":{"title":"Heralding","hits":0,"description":"Heralding Dashboard","panelsJSON":"[{\"gridData\":{\"h\":2,\"i\":\"1\",\"w\":6,\"x\":0,\"y\":0},\"id\":\"2cf90930-47d3-11e8-a905-f74bbc7cbd2d\",\"panelIndex\":\"1\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"2\",\"w\":6,\"x\":0,\"y\":2},\"id\":\"d3bb9bd0-4863-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"2\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"3\",\"w\":6,\"x\":0,\"y\":4},\"id\":\"d0dbe890-4870-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"3\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"embeddableConfig\":{\"mapCenter\":[25.799891182088334,16.875000000000004],\"mapZoom\":2},\"gridData\":{\"h\":6,\"i\":\"4\",\"w\":6,\"x\":6,\"y\":0},\"id\":\"94ae10e0-4871-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"4\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":2,\"i\":\"5\",\"w\":12,\"x\":0,\"y\":6},\"id\":\"29f51af0-4876-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"5\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"6\",\"w\":4,\"x\":0,\"y\":8},\"id\":\"eca8e580-4877-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"6\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"7\",\"w\":4,\"x\":4,\"y\":8},\"id\":\"e1969e20-4878-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"7\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":3,\"i\":\"8\",\"w\":4,\"x\":8,\"y\":8},\"id\":\"864b2f30-4883-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"8\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"10\",\"w\":6,\"x\":6,\"y\":11},\"id\":\"7c5959b0-4889-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"10\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"11\",\"w\":6,\"x\":0,\"y\":11},\"id\":\"1268af10-4889-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"11\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"12\",\"w\":3,\"x\":0,\"y\":16},\"id\":\"21ad1c80-488a-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"12\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"13\",\"w\":3,\"x\":3,\"y\":16},\"id\":\"844f33f0-488a-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"13\",\"type\":\"visualization\",\"version\":\"6.2.4\"},{\"gridData\":{\"h\":5,\"i\":\"14\",\"w\":6,\"x\":6,\"y\":16},\"id\":\"124a1140-488e-11e8-9b3d-f36e8d4f5cb2\",\"panelIndex\":\"14\",\"type\":\"visualization\",\"version\":\"6.2.4\"}]","optionsJSON":"{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":false}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d0dbe890-4870-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T14:08:24.304Z","visualization":{"title":"Heralding Events by Country Histogram","visState":"{\"title\":\"Heralding Events by Country Histogram\",\"type\":\"area\",\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Events\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:5a1dc520-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:05:39.442Z","visualization":{"title":"Heralding Password Tagcloud","visState":"{\"title\":\"Heralding Password Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:34dedba0-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:07:43.067Z","visualization":{"title":"Heralding Username Tagcloud","visState":"{\"title\":\"Heralding Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:7c5959b0-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:06:36.875Z","visualization":{"title":"Heralding Password Tagcloud - Large","visState":"{\"title\":\"Heralding Password Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"right angled\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:1268af10-4889-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:03:39.137Z","visualization":{"title":"Heralding Username Tagcloud - Large","visState":"{\"title\":\"Heralding Username Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"right angled\",\"minFontSize\":16,\"maxFontSize\":64},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:864b2f30-4883-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T12:23:56.579Z","visualization":{"title":"Heralding Ports Pie","visState":"{\"title\":\"Heralding Ports Pie\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:e1969e20-4878-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T11:07:45.282Z","visualization":{"title":"Heralding Countries - Top 10","visState":"{\"title\":\"Heralding Countries - Top 10\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eca8e580-4877-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T11:00:54.360Z","visualization":{"title":"Heralding Source IP Reputation","visState":"{\"title\":\"Heralding Source IP Reputation\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:21ad1c80-488a-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T13:11:14.248Z","visualization":{"title":"Heralding AS/N - Top 10","visState":"{\"title\":\"Heralding AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}]}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:29f51af0-4876-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T10:57:18.711Z","visualization":{"title":"Heralding Protocols Histogram","visState":"{\"title\":\"Heralding Protocols Histogram\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"step-after\",\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"times\":[],\"type\":\"histogram\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Events\"},\"type\":\"value\"}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"proto.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:c2bea500-47ca-11e8-a905-f74bbc7cbd2d","_score":1,"_source":{"type":"search","updated_at":"2018-04-24T14:21:21.104Z","search":{"title":"Heralding-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"type:\\\"Heralding\\\"\",\"language\":\"lucene\"},\"filter\":[]}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:2cf90930-47d3-11e8-a905-f74bbc7cbd2d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-24T15:21:35.299Z","visualization":{"title":"Heralding Events Bar","visState":"{\"title\":\"Heralding Events Bar\",\"type\":\"horizontal_bar\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:94ae10e0-4871-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T10:15:29.774Z","visualization":{"title":"Heralding Attack Map","visState":"{\"title\":\"Heralding Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatClusterSize\":1.5,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0],\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"baseLayersAreLoaded\":{},\"tmsLayers\":[{\"id\":\"road_map\",\"url\":\"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"

© OpenStreetMap contributors | Elastic Maps Service

\",\"subdomains\":[]}],\"selectedTmsLayer\":{\"id\":\"road_map\",\"url\":\"https://tiles.maps.elastic.co/v2/default/{z}/{x}/{y}.png?elastic_tile_service_tos=agree&my_app_name=kibana&my_app_version=6.2.4\",\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"

© OpenStreetMap contributors | Elastic Maps Service

\",\"subdomains\":[]}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"isFilteredByCollar\":true,\"useGeocentroid\":true,\"precision\":2}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d3bb9bd0-4863-11e8-9b3d-f36e8d4f5cb2","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-25T08:37:02.605Z","visualization":{"title":"Heralding Events Histogram","visState":"{\"title\":\"Heralding Events Histogram\",\"type\":\"line\",\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"},\"valueAxis\":null},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100,\"filter\":false},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"c2bea500-47ca-11e8-a905-f74bbc7cbd2d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:ConPot","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.207Z","dashboard":{"title":"ConPot","hits":0,"description":"ConPot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"ConPot-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"ConPot-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ConPot-Event-Type\",\"panelIndex\":4,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"ConPot-Protocol\",\"panelIndex\":5,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ConPot-Events-by-Country-Histogram\",\"panelIndex\":6,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ConPot-Input-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":10,\"id\":\"ConPot-Response-Top-10\",\"panelIndex\":8,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ConPot-Map\",\"panelIndex\":9,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ConPot-ASN-Top-10\",\"panelIndex\":11,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ffb284f0-80cd-11e7-ab37-eb92b1bfb573\",\"panelIndex\":14,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"082111a0-80cf-11e7-ab37-eb92b1bfb573\",\"panelIndex\":15,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"62fde9a0-858d-11e7-a686-392ac617767d\",\"panelIndex\":16,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-11\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-15\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"mapCenter\":[33.7243396617476,-4.74609375],\"mapZoom\":2}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:Syslog","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.219Z","dashboard":{"title":"Syslog","hits":0,"description":"Syslog Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Syslog-Events-Histogram\",\"panelIndex\":1,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Syslog-SSH-Events-Histogram\",\"panelIndex\":2,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Syslog-Events-by-Country-Histogram\",\"panelIndex\":4,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Syslog-Program-Top-10\",\"panelIndex\":6,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Syslog-Map\",\"panelIndex\":8,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Syslog-ASN-Top-10\",\"panelIndex\":9,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Syslog-Source-IP-Top-10\",\"panelIndex\":10,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Syslog-Username-Tagcloud\",\"panelIndex\":11,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"29117a00-85dc-11e7-916b-fb4cebb78112\",\"panelIndex\":12,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-10\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"mapCenter\":[29.53522956294847,-10.01953125],\"mapZoom\":2},\"P-9\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:Cowrie","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.225Z","dashboard":{"title":"Cowrie","hits":0,"description":"Cowrie Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Cowrie-Events-Histogram\",\"panelIndex\":22,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Cowrie-Countries-Top-10\",\"panelIndex\":28,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-Events-by-Country-Histogram\",\"panelIndex\":29,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Cowrie-Version-Pie-Top-10\",\"panelIndex\":31,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-Username-Tagcloud-Large\",\"panelIndex\":34,\"row\":12,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Password-Tagcloud-Large\",\"panelIndex\":35,\"row\":12,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Map\",\"panelIndex\":36,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Input-Top-10\",\"panelIndex\":37,\"row\":16,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":5,\"id\":\"Cowrie-Source-IP-Top-10\",\"panelIndex\":38,\"row\":16,\"size_x\":2,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-ASN-Top-10\",\"panelIndex\":39,\"row\":16,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cowrie-Ports-Pie\",\"panelIndex\":43,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c1ef91c0-7dc2-11e7-8268-ed048f6272e0\",\"panelIndex\":44,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bf39e000-80d5-11e7-ba6f-4542711dd148\",\"panelIndex\":45,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"f28b8c60-80e4-11e7-ba6f-4542711dd148\",\"panelIndex\":46,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"2a6803f0-80e7-11e7-a689-67e589a14a8a\",\"panelIndex\":47,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-33\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-36\":{\"mapCenter\":[29.22889003019423,-0.17578125],\"mapZoom\":2},\"P-37\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-38\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-39\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:dd6b19a0-85e8-11e7-9ef1-352f01cf0e9e","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.228Z","dashboard":{"title":"Vnclowpot","hits":0,"description":"Vnclowpot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"0e34b630-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":1,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"db3104f0-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":2,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ea4752f0-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"99249a40-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":4,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bc1219b0-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":5,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"cda24150-85e4-11e7-a042-0737cf24db6d\",\"panelIndex\":6,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"65ba4280-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"19865b10-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":8,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"007e9470-85e5-11e7-a042-0737cf24db6d\",\"panelIndex\":9,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-2\":{\"mapCenter\":[28.92163128242129,-5.09765625],\"mapZoom\":2},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"match_all\":{}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:Dionaea","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.235Z","dashboard":{"title":"Dionaea","hits":0,"description":"Dionaea Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Dionaea-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Dionaea-Destination-Ports-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Protocol\",\"panelIndex\":4,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-Username-Tagcloud-Large\",\"panelIndex\":7,\"row\":13,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Password-Tagcloud-Large\",\"panelIndex\":8,\"row\":13,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-Events-by-Country-Histogram\",\"panelIndex\":10,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Map\",\"panelIndex\":11,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-ASN-Top-10\",\"panelIndex\":12,\"row\":17,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Dionaea-Source-IP-Top-10\",\"panelIndex\":13,\"row\":17,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"b9343070-80e9-11e7-a689-67e589a14a8a\",\"panelIndex\":14,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"cf8d0e40-80ea-11e7-a689-67e589a14a8a\",\"panelIndex\":15,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Dionaea-Countries-Top-10\",\"panelIndex\":16,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Dionaea-Type\",\"panelIndex\":17,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Dionaea-Transport\",\"panelIndex\":18,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"7e33e3d0-810c-11e7-8413-9fe5e30ade77\",\"panelIndex\":19,\"row\":10,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-11\":{\"mapCenter\":[29.53522956294847,-2.63671875],\"mapZoom\":2},\"P-12\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-13\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:dd95c950-8b5d-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.236Z","dashboard":{"title":"Mailoney","hits":0,"description":"Mailoney Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"5234de80-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"63672eb0-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":11,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"88d899e0-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":12,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"cac48440-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":13,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"d2405e70-8b5e-11e7-ba35-0d8832ac304f\",\"panelIndex\":14,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ad6dcb50-8b5e-11e7-ba35-0d8832ac304f\",\"panelIndex\":15,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"ba9d6280-8b5f-11e7-b92d-d39e43e3de0f\",\"panelIndex\":16,\"row\":10,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"0169b450-8b62-11e7-ba35-0d8832ac304f\",\"panelIndex\":17,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"size_x\":6,\"size_y\":6,\"panelIndex\":18,\"type\":\"visualization\",\"id\":\"c0916430-8b5e-11e7-ba35-0d8832ac304f\",\"col\":7,\"row\":1}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-15\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-16\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-17\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-18\":{\"mapZoom\":2,\"mapCenter\":[29.22889003019423,-7.207031249999999]}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"match_all\":{}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:Glastopf","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.240Z","dashboard":{"title":"Glastopf","hits":0,"description":"Glastopf Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Glastopf-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Glastopf-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Glastopf-Map\",\"panelIndex\":5,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Glastop-Source-IP-Top-10\",\"panelIndex\":6,\"row\":10,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Glastopf-ASN-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Glastopf-Events-by-Country-Histogram\",\"panelIndex\":9,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"307afd60-82a9-11e7-bcbe-2b6958a9c888\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"59509e90-8590-11e7-a686-392ac617767d\",\"panelIndex\":11,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-5\":{\"mapCenter\":[29.84064389983441,-27.24609375],\"mapZoom\":2},\"P-6\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:eMobility","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.244Z","dashboard":{"title":"eMobility","hits":0,"description":"eMobility Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"eMobility-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"eMobility-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"eMobility-Events-by-Country-Histogram\",\"panelIndex\":4,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"eMobility-Map\",\"panelIndex\":5,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"eMobility-Source-IP-Top-10\",\"panelIndex\":6,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"eMobility-ASN-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"595d6170-85e0-11e7-916b-fb4cebb78112\",\"panelIndex\":8,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c3d133e0-85e2-11e7-916b-fb4cebb78112\",\"panelIndex\":9,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-5\":{\"mapCenter\":[29.53522956294847,-5.44921875],\"mapZoom\":2},\"P-6\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:NGINX","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.249Z","dashboard":{"title":"NGINX","hits":0,"description":"NGINX Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"NGINX-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"NGINX-HTTP-Method-Pie-Top-10\",\"panelIndex\":3,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-HTTP-Status-Code-Pie-Top-10\",\"panelIndex\":4,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"NGINX-HTTP-User-Agent-Pie-Top-10\",\"panelIndex\":5,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-Username-Tagcloud\",\"panelIndex\":6,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"NGINX-ASN-Top-10\",\"panelIndex\":7,\"row\":12,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-Source-IP-Top-10\",\"panelIndex\":8,\"row\":12,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":7,\"id\":\"NGINX-Map\",\"panelIndex\":9,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"NGINX-Events-by-Country-Histogram\",\"panelIndex\":13,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"NGINX-Countries-Top-10\",\"panelIndex\":14,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"51ca6ee0-80d5-11e7-ab37-eb92b1bfb573\",\"panelIndex\":15,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"7dcaa2b0-8596-11e7-a686-392ac617767d\",\"panelIndex\":16,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-8\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"mapCenter\":[30.14512718337613,-0.87890625],\"mapZoom\":2}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:Honeytrap","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.248Z","dashboard":{"title":"Honeytrap","hits":0,"description":"Honeytrap Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Honeytrap-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Honeytrap-Countries-Top-10\",\"panelIndex\":5,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Honeytrap-Events-by-Country-Histogram\",\"panelIndex\":6,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Honeytrap-Destination-Ports-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Honeytrap-Map\",\"panelIndex\":8,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Honeytrap-Source-IP-Top-10\",\"panelIndex\":9,\"row\":13,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Honeytrap-ASN-Top-10\",\"panelIndex\":10,\"row\":13,\"size_x\":6,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"6ee70b90-8374-11e7-9adb-2955c2136c8c\",\"panelIndex\":11,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ec53e470-8376-11e7-9adb-2955c2136c8c\",\"panelIndex\":12,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"576a3cb0-82ae-11e7-bcbe-2b6958a9c888\",\"panelIndex\":13,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"4e2887d0-8379-11e7-97dc-15d31af3c77f\",\"panelIndex\":14,\"row\":10,\"size_x\":9,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-10\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-14\":{\"vis\":{\"defaultColors\":{\"0 - 450\":\"rgb(255,255,204)\",\"450 - 900\":\"rgb(255,241,170)\",\"900 - 1350\":\"rgb(254,225,135)\",\"1350 - 1800\":\"rgb(254,201,101)\",\"1800 - 2250\":\"rgb(254,171,73)\",\"2250 - 2700\":\"rgb(253,141,60)\",\"2700 - 3150\":\"rgb(252,91,46)\",\"3150 - 3600\":\"rgb(237,47,34)\",\"3600 - 4050\":\"rgb(212,16,32)\",\"4050 - 4500\":\"rgb(176,0,38)\"}}},\"P-8\":{\"mapCenter\":[28.613459424004414,-3.69140625],\"mapZoom\":2},\"P-9\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:Suricata","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.251Z","dashboard":{"title":"Suricata","hits":0,"description":"Suricata Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"Suricata-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Suricata-Countries-Top-10\",\"panelIndex\":9,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Suricata-Fileinfo-Magic-Top-10\",\"panelIndex\":12,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Suricata-HTTP-Content-Type-Top-10\",\"panelIndex\":14,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Suricata-HTTP-Hostname-Pie-Top-10\",\"panelIndex\":15,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Suricata-HTTP-Method-Pie-Top-10\",\"panelIndex\":16,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"Suricata-HTTP-User-Agent-Pie-Top-10\",\"panelIndex\":18,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Suricata-SSH-Client-Software-Version-Pie-Top-10\",\"panelIndex\":19,\"row\":12,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Suricata-Events-by-Country-Histogram\",\"panelIndex\":22,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Suricata-Map\",\"panelIndex\":23,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Suricata-Source-IP-Top-10\",\"panelIndex\":24,\"row\":15,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Suricata-ASN-Top-10\",\"panelIndex\":25,\"row\":15,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":8,\"id\":\"Suricata-Alert-Signature-Top-10\",\"panelIndex\":26,\"row\":15,\"size_x\":5,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"e624bc50-7dd6-11e7-bee2-c98307c16efa\",\"panelIndex\":27,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"bf6f6000-8598-11e7-8f60-4f4666b0a88e\",\"panelIndex\":28,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"0e230290-859b-11e7-8f60-4f4666b0a88e\",\"panelIndex\":29,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"b1a7f8d0-859b-11e7-8f60-4f4666b0a88e\",\"panelIndex\":30,\"row\":9,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":6,\"id\":\"1a097850-7c22-11e7-aa1e-6bf93670d67b\",\"panelIndex\":31,\"row\":15,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-1\":{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(0,104,55)\"}}},\"P-23\":{\"mapCenter\":[28.613459424004414,-3.33984375],\"mapZoom\":2},\"P-24\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-25\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-26\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-31\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:ElasticPot","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.252Z","dashboard":{"title":"ElasticPot","hits":0,"description":"ElasticPot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"ElasticPot-Events-Histogram\",\"panelIndex\":2,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ElasticPot-Countries-Top-10\",\"panelIndex\":3,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ElasticPot-Events-by-Country-Histogram\",\"panelIndex\":4,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"ElasticPot-Map\",\"panelIndex\":5,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":5,\"id\":\"ElasticPot-Source-IP-Top-10\",\"panelIndex\":6,\"row\":10,\"size_x\":3,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ElasticPot-ASN-Top-10\",\"panelIndex\":7,\"row\":10,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"col\":8,\"id\":\"ElasticPot-Query-Top-10\",\"panelIndex\":9,\"row\":10,\"size_x\":5,\"size_y\":5,\"type\":\"visualization\"},{\"col\":1,\"id\":\"d01a6390-827e-11e7-afbf-a7491fba5d8a\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"59b9dd60-827f-11e7-afbf-a7491fba5d8a\",\"panelIndex\":11,\"row\":7,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-5\":{\"mapCenter\":[28.304380682962783,3.33984375],\"mapZoom\":2},\"P-6\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"asc\"}}}},\"P-7\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:e05aac20-8b51-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.252Z","dashboard":{"title":"Rdpy","hits":0,"description":"Rdpy Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"0de24040-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":10,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"c90f1f00-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":11,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"da489b20-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":12,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"e4b7cf40-8b52-11e7-b92d-d39e43e3de0f\",\"panelIndex\":13,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"051c59e0-8b53-11e7-b92d-d39e43e3de0f\",\"panelIndex\":14,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"51c331f0-8b54-11e7-b92d-d39e43e3de0f\",\"panelIndex\":15,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"73364660-8b54-11e7-b92d-d39e43e3de0f\",\"panelIndex\":16,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"874be060-8b54-11e7-b92d-d39e43e3de0f\",\"panelIndex\":17,\"row\":10,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"54213440-8b56-11e7-b92d-d39e43e3de0f\",\"panelIndex\":18,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":10,\"id\":\"cb2a3a00-8b56-11e7-b92d-d39e43e3de0f\",\"panelIndex\":19,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-13\":{\"mapCenter\":[30.44867367928756,-5.44921875],\"mapZoom\":2},\"P-16\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-17\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"match_all\":{}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"dashboard:3be196b0-68c7-11e7-a9d5-35bd0d8c6af2","_score":1,"_source":{"type":"dashboard","updated_at":"2018-04-20T20:51:11.255Z","dashboard":{"title":">T-Pot","hits":0,"description":"T-Pot Dashboard","panelsJSON":"[{\"col\":1,\"id\":\"P0f-OS-Top-10\",\"panelIndex\":9,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Cowrie-Username-Tagcloud\",\"panelIndex\":12,\"row\":13,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Cowrie-Password-Tagcloud\",\"panelIndex\":13,\"row\":13,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":8,\"id\":\"Suricata-Alert-Signature-Top-10\",\"panelIndex\":21,\"row\":16,\"size_x\":5,\"size_y\":6,\"type\":\"visualization\"},{\"col\":6,\"id\":\"1a097850-7c22-11e7-aa1e-6bf93670d67b\",\"panelIndex\":38,\"row\":16,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"e624bc50-7dd6-11e7-bee2-c98307c16efa\",\"panelIndex\":43,\"row\":9,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"d94ff2a0-7ec2-11e7-a286-9f03beba6417\",\"panelIndex\":44,\"row\":16,\"size_x\":3,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"50d82860-7ea0-11e7-a286-9f03beba6417\",\"panelIndex\":45,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"7b61a6a0-7ebf-11e7-a286-9f03beba6417\",\"panelIndex\":46,\"row\":11,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"87428ba0-7e9d-11e7-a286-9f03beba6417\",\"panelIndex\":47,\"row\":1,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"762f66c0-7e9e-11e7-a286-9f03beba6417\",\"panelIndex\":48,\"row\":3,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"0d947000-7ebd-11e7-a286-9f03beba6417\",\"panelIndex\":49,\"row\":10,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"885928c0-7ebe-11e7-a286-9f03beba6417\",\"panelIndex\":50,\"row\":7,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"ef227eb0-7e9d-11e7-a286-9f03beba6417\",\"panelIndex\":51,\"row\":5,\"size_x\":6,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"d1aa9740-7e9e-11e7-a286-9f03beba6417\",\"panelIndex\":52,\"row\":1,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":4,\"id\":\"772cb2b0-7ec3-11e7-a7c8-5f38ad5bf75f\",\"panelIndex\":53,\"row\":16,\"size_x\":2,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"349c11c0-7ea0-11e7-a286-9f03beba6417\",\"panelIndex\":54,\"row\":7,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"f1a19000-7ebf-11e7-a286-9f03beba6417\",\"panelIndex\":55,\"row\":13,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"}]","optionsJSON":"{\"darkTheme\":false}","uiStateJSON":"{\"P-21\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-38\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-44\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-52\":{\"mapCenter\":[28.92163128242129,-2.98828125],\"mapZoom\":2},\"P-53\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}},\"P-9\":{\"vis\":{\"legendOpen\":true}}}","version":1,"timeRestore":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}],\"highlightAll\":true,\"version\":true}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:051c59e0-8b53-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.294Z","visualization":{"title":"Rdpy Source IP Reputation","visState":"{\"title\":\"Rdpy Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:1a097850-7c22-11e7-aa1e-6bf93670d67b","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.334Z","visualization":{"title":"Suricata CVE - Top 10","visState":"{\"title\":\"Suricata CVE - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"alert.cve_id.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"CVE ID\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:0169b450-8b62-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.343Z","visualization":{"title":"Mailoney Handshake - Top 10","visState":"{\"title\":\"Mailoney Handshake - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"smtp_input.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"SMTP Input\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:0de24040-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.354Z","visualization":{"title":"Rdpy Events Bar","visState":"{\"title\":\"Rdpy Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Rdpy\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Rdpy\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:0e230290-859b-11e7-8f60-4f4666b0a88e","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.365Z","visualization":{"title":"Suricata Destination Ports Histogram","visState":"{\"title\":\"Suricata Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:349c11c0-7ea0-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.367Z","visualization":{"title":"Honeypot Source IP Reputation","visState":"{\"title\":\"Honeypot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:59509e90-8590-11e7-a686-392ac617767d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.376Z","visualization":{"title":"Glastopf Source IP Reputation","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"ip_rep.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"title\":\"Glastopf Source IP Reputation\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:19865b10-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.384Z","visualization":{"title":"Vnclowpot Source IP - Top 10","visState":"{\"title\":\"Vnclowpot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:307afd60-82a9-11e7-bcbe-2b6958a9c888","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.390Z","visualization":{"title":"Glastopf Events Bar","visState":"{\"title\":\"Glastopf Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Glastopf\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Glastopf\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:5234de80-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.392Z","visualization":{"title":"Mailoney Events Bar","visState":"{\"title\":\"Mailoney Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Mailoney\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Mailoney\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:65ba4280-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.413Z","visualization":{"title":"Vnclowpot Handshake - Top 10","visState":"{\"title\":\"Vnclowpot Handshake - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"vnc_handshake.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"VNC Handshake\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:54213440-8b56-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.418Z","visualization":{"title":"Rdpy Username Tagcloud","visState":"{\"title\":\"Rdpy Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\",\"hideLabel\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:50d82860-7ea0-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.423Z","visualization":{"title":"Honeypot Countries","visState":"{\"title\":\"Honeypot Countries\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:62fde9a0-858d-11e7-a686-392ac617767d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.422Z","visualization":{"title":"ConPot Events Bar","visState":"{\"title\":\"ConPot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"ConPot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ConPot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:51c331f0-8b54-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.433Z","visualization":{"title":"Rdpy Countries - Top 10","visState":"{\"title\":\"Rdpy Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:63672eb0-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.437Z","visualization":{"title":"Mailoney Events Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Unique Source IPs\",\"field\":\"src_ip.keyword\"},\"schema\":\"metric\",\"type\":\"cardinality\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Mailoney Events Histogram\",\"type\":\"line\"}","uiStateJSON":"{\n \"vis\": {\n \"legendOpen\": true\n }\n}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:29117a00-85dc-11e7-916b-fb4cebb78112","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.468Z","visualization":{"title":"Syslog Events Bar","visState":"{\"title\":\"Syslog Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Syslog\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Syslog\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:59b9dd60-827f-11e7-afbf-a7491fba5d8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.483Z","visualization":{"title":"ElasticPot Source IP Reputation","visState":"{\"title\":\"ElasticPot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:2a6803f0-80e7-11e7-a689-67e589a14a8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.485Z","visualization":{"title":"Cowrie Destination Ports Histogram","visState":"{\"title\":\"Cowrie Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"@timestamp per 30 seconds\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:595d6170-85e0-11e7-916b-fb4cebb78112","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.523Z","visualization":{"title":"eMobility Events Bar","visState":"{\"title\":\"eMobility Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"ConPot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ConPot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:4e2887d0-8379-11e7-97dc-15d31af3c77f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.513Z","visualization":{"title":"Honeytrap Heatmap","visState":"{\"title\":\"Honeytrap Heatmap\",\"type\":\"heatmap\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":10,\"colorSchema\":\"Yellow to Red\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"square root\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"color\":\"#555\"}}]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Destination Port\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"defaultColors\":{\"0 - 100\":\"rgb(255,255,204)\",\"100 - 200\":\"rgb(255,241,170)\",\"200 - 300\":\"rgb(254,225,135)\",\"300 - 400\":\"rgb(254,201,101)\",\"400 - 500\":\"rgb(254,171,73)\",\"500 - 600\":\"rgb(253,141,60)\",\"600 - 700\":\"rgb(252,91,46)\",\"700 - 800\":\"rgb(237,47,34)\",\"800 - 900\":\"rgb(212,16,32)\",\"900 - 1000\":\"rgb(176,0,38)\"}},\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:762f66c0-7e9e-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.476Z","visualization":{"title":"Honeypot Events Histogram","visState":"{\"title\":\"Honeypot Events Histogram\",\"type\":\"line\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:51ca6ee0-80d5-11e7-ab37-eb92b1bfb573","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.511Z","visualization":{"title":"NGINX Events Bar","visState":"{\"title\":\"NGINX Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"NGINX\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"NGINX\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:7e33e3d0-810c-11e7-8413-9fe5e30ade77","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.522Z","visualization":{"title":"Dionaea Destination Ports Histogram","visState":"{\"title\":\"Dionaea Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:772cb2b0-7ec3-11e7-a7c8-5f38ad5bf75f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.477Z","visualization":{"title":"Honeypot Source IP - Top 10","visState":"{\"title\":\"Honeypot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:0d947000-7ebd-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.524Z","visualization":{"title":"Honeypot Events Pie","visState":"{\"title\":\"Honeypot Events Pie\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:082111a0-80cf-11e7-ab37-eb92b1bfb573","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.506Z","visualization":{"title":"ConPot Source IP - Top 10","visState":"{\"title\":\"ConPot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:0e34b630-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.536Z","visualization":{"title":"Vnclowpot AS/N - Top 10","visState":"{\"title\":\"Vnclowpot AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:7b61a6a0-7ebf-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.531Z","visualization":{"title":"Honeypot Destination Ports Histogram","visState":"{\"title\":\"Honeypot Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:576a3cb0-82ae-11e7-bcbe-2b6958a9c888","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.545Z","visualization":{"title":"Honeytrap Source IP Reputation","visState":"{\"title\":\"Honeytrap Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:7dcaa2b0-8596-11e7-a686-392ac617767d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.552Z","visualization":{"title":"NGINX Top Users Histogram","visState":"{\"title\":\"NGINX Top Users Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"remote_user.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:6ee70b90-8374-11e7-9adb-2955c2136c8c","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.552Z","visualization":{"title":"Honeytrap Events Bar","visState":"{\"title\":\"Honeytrap Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Honeytrap\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Honeytrap\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:87428ba0-7e9d-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.578Z","visualization":{"title":"Honeypot Events Bar","visState":"{\"title\":\"Honeypot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100,\"rotate\":0,\"filter\":false},\"title\":{\"text\":\"Honeypots\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":10,\"order\":\"asc\",\"orderBy\":\"_term\",\"customLabel\":\"Honeypots\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:73364660-8b54-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.564Z","visualization":{"title":"Rdpy AS/N - Top 10","visState":"{\"title\":\"Rdpy AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:88d899e0-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.588Z","visualization":{"title":"Mailoney Events by Country Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Mailoney Events by Country Histogram\",\"type\":\"area\"}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:007e9470-85e5-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.607Z","visualization":{"title":"Vnclowpot Source IP Reputation","visState":"{\"title\":\"Vnclowpot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ba9d6280-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.580Z","visualization":{"title":"Mailoney Source IP - Top 10","visState":"{\"title\":\"Mailoney Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:99249a40-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.590Z","visualization":{"title":"Vnclowpot Events Bar","visState":"{\"title\":\"Vnclowpot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Vnclowpot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Vnclowpot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:cb2a3a00-8b56-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.624Z","visualization":{"title":"Rdpy Password Tagcloud","visState":"{\"title\":\"Rdpy Password Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:885928c0-7ebe-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.623Z","visualization":{"title":"Honeypot Events by Country Histogram","visState":"{\"title\":\"Honeypot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ad6dcb50-8b5e-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.606Z","visualization":{"title":"Mailoney AS/N - Top 10","visState":"{\"title\":\"Mailoney AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:874be060-8b54-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.618Z","visualization":{"title":"Rdpy Source IP - Top 10","visState":"{\"title\":\"Rdpy Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\n \"vis\": {\n \"params\": {\n \"sort\": {\n \"columnIndex\": null,\n \"direction\": null\n }\n }\n }\n}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:b9343070-80e9-11e7-a689-67e589a14a8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.619Z","visualization":{"title":"Dionaea Events Bar","visState":"{\"title\":\"Dionaea Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Dionaea\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Dionaea\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:b1a7f8d0-859b-11e7-8f60-4f4666b0a88e","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.608Z","visualization":{"title":"Suricata Source IP Reputation","visState":"{\"title\":\"Suricata Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:c1ef91c0-7dc2-11e7-8268-ed048f6272e0","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.663Z","visualization":{"title":"Cowrie Events Bar","visState":"{\"title\":\"Cowrie Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"Cowrie\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Cowrie\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.669Z","visualization":{"title":"ConPot Countries","visState":"{\"title\":\"ConPot Countries\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:bf39e000-80d5-11e7-ba6f-4542711dd148","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.671Z","visualization":{"title":"Cowrie Source IP Reputation","visState":"{\"title\":\"Cowrie Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:c3d133e0-85e2-11e7-916b-fb4cebb78112","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.693Z","visualization":{"title":"eMobility Source IP Reputation","visState":"{\"title\":\"eMobility Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:cda24150-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.700Z","visualization":{"title":"Vnclowpot Events by Country Histogram","visState":"{\"title\":\"Vnclowpot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:c0916430-8b5e-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.702Z","visualization":{"title":"Mailoney Attack Map","visState":"{\"title\":\"Mailoney Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:bc1219b0-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.695Z","visualization":{"title":"Vnclowpot Events Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Unique Source IPs\",\"field\":\"src_ip.keyword\"},\"schema\":\"metric\",\"type\":\"cardinality\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Vnclowpot Events Histogram\",\"type\":\"line\"}","uiStateJSON":"{\n \"vis\": {\n \"legendOpen\": true\n }\n}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:cac48440-8b5f-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.703Z","visualization":{"title":"Mailoney Source IP Reputation","visState":"{\"title\":\"Mailoney Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Input-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.727Z","visualization":{"title":"ConPot Input - Top 10","visState":"{\"title\":\"ConPot Input - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"request.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Input\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.810Z","visualization":{"title":"ConPot Events Histogram","visState":"{\"title\":\"ConPot Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.758Z","visualization":{"title":"ConPot Events by Country Histogram","visState":"{\"title\":\"ConPot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Event-Type","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.747Z","visualization":{"title":"ConPot Event Type","visState":"{\"title\":\"ConPot Event Type\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"shareYAxis\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"event_type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Input-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.761Z","visualization":{"title":"Cowrie Input - Top 10","visState":"{\"title\":\"Cowrie Input - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"input.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Command Line Input\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:c90f1f00-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.815Z","visualization":{"title":"Rdpy Events Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"Unique Source IPs\",\"field\":\"src_ip.keyword\"},\"schema\":\"metric\",\"type\":\"cardinality\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Rdpy Events Histogram\",\"type\":\"line\"}","uiStateJSON":"{\n \"vis\": {\n \"legendOpen\": true\n }\n}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.738Z","visualization":{"title":"ConPot Attack Map","visState":"{\"title\":\"ConPot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:cf8d0e40-80ea-11e7-a689-67e589a14a8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.816Z","visualization":{"title":"Dionaea Source IP Reputation","visState":"{\"title\":\"Dionaea Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Protocol","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.830Z","visualization":{"title":"ConPot Protocol","visState":"{\"title\":\"ConPot Protocol\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"data_type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.846Z","visualization":{"title":"Cowrie Countries - Top 10","visState":"{\"title\":\"Cowrie Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.838Z","visualization":{"title":"ConPot AS/N - Top 10","visState":"{\"title\":\"ConPot AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Version-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.858Z","visualization":{"title":"Cowrie Version Pie - Top 10","visState":"{\"title\":\"Cowrie Version Pie - Top 10\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"version.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.866Z","visualization":{"title":"Cowrie Events by Country Histogram","visState":"{\"title\":\"Cowrie Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\",\"lineWidth\":2}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Password-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.867Z","visualization":{"title":"Cowrie Password Tagcloud","visState":"{\"title\":\"Cowrie Password Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d94ff2a0-7ec2-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.890Z","visualization":{"title":"Honeypot AS/N - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"CNT\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customLabel\":\"AS\",\"field\":\"geoip.asn\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"bucket\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"customLabel\":\"ASN\",\"field\":\"geoip.as_org.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"bucket\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"Honeypot AS/N - Top 10\",\"type\":\"table\"}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.878Z","visualization":{"title":"Cowrie Source IP - Top 10","visState":"{\"title\":\"Cowrie Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d1aa9740-7e9e-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.885Z","visualization":{"title":"Honeypot Attack Map","visState":"{\"title\":\"Honeypot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":0,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0],\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":3}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.908Z","visualization":{"title":"Dionaea Events Histogram","visState":"{\"title\":\"Dionaea Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.899Z","visualization":{"title":"Cowrie Events Histogram","visState":"{\"title\":\"Cowrie Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"rotate\":0,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"legendOpen\":true}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:db3104f0-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.900Z","visualization":{"title":"Vnclowpot Attack Map","visState":"{\"title\":\"Vnclowpot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.907Z","visualization":{"title":"Dionaea Events by Country Histogram","visState":"{\"title\":\"Dionaea Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ConPot-Response-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.917Z","visualization":{"title":"ConPot Response - Top 10","visState":"{\"title\":\"ConPot Response - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"response.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Response\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Username-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.927Z","visualization":{"title":"Cowrie Username Tagcloud","visState":"{\"title\":\"Cowrie Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\",\"hideLabel\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.919Z","visualization":{"title":"Cowrie AS/N - Top 10","visState":"{\"title\":\"Cowrie AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.963Z","visualization":{"title":"Cowrie Attack Map","visState":"{\"title\":\"Cowrie Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Password-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.944Z","visualization":{"title":"Cowrie Password Tagcloud - Large","visState":"{\"title\":\"Cowrie Password Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"sqrt\",\"orientations\":1,\"fromDegree\":0,\"toDegree\":0,\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":500,\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"password.keyword\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{\"spy\":{\"mode\":{\"name\":null,\"fill\":false}}}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Username-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.956Z","visualization":{"title":"Dionaea Username Tagcloud - Large","visState":"{\"title\":\"Dionaea Username Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"fromDegree\":0,\"maxFontSize\":64,\"minFontSize\":16,\"orientations\":1,\"spiral\":\"rectangular\",\"textScale\":\"sqrt\",\"timeInterval\":500,\"toDegree\":0,\"scale\":\"linear\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"login.username.keyword\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.966Z","visualization":{"title":"Dionaea AS/N - Top 10","visState":"{\"title\":\"Dionaea AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Destination-Ports-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.967Z","visualization":{"title":"Dionaea Destination Ports - Top 10","visState":"{\"title\":\"Dionaea Destination Ports - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Protocol","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.992Z","visualization":{"title":"Dionaea Protocol","visState":"{\"title\":\"Dionaea Protocol\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"connection.protocol.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.034Z","visualization":{"title":"Dionaea Countries - Top 10","visState":"{\"title\":\"Dionaea Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ef227eb0-7e9d-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.005Z","visualization":{"title":"Honeypot Events by Type Histogram","visState":"{\"title\":\"Honeypot Events by Type Histogram\",\"type\":\"line\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d2405e70-8b5e-11e7-ba35-0d8832ac304f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.955Z","visualization":{"title":"Mailoney Countries - Top 10","visState":"{\"title\":\"Mailoney Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"9c35dd90-6977-11e7-9c11-8d9c11943fa0","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Ports-Pie","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.929Z","visualization":{"title":"Cowrie Ports Pie","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"dest_port:2222\"}}},\"label\":\"SSH\"},{\"input\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"dest_port:2223\"}}},\"label\":\"Telnet\"}]},\"schema\":\"segment\",\"type\":\"filters\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"title\":\"Cowrie Ports Pie\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ea4752f0-85e4-11e7-a042-0737cf24db6d","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.964Z","visualization":{"title":"Vnclowpot Countries - Top 10","visState":"{\"title\":\"Vnclowpot Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Cowrie-Username-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:14.942Z","visualization":{"title":"Cowrie Username Tagcloud - Large","visState":"{\"title\":\"Cowrie Username Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"sqrt\",\"orientations\":1,\"fromDegree\":\"0\",\"toDegree\":\"0\",\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":\"500\",\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":50,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:e624bc50-7dd6-11e7-bee2-c98307c16efa","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.024Z","visualization":{"title":"Suricata Alert Category Histogram","visState":"{\"title\":\"Suricata Alert Category Histogram\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"alert.category.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Query-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.076Z","visualization":{"title":"ElasticPot Query - Top 10","visState":"{\"title\":\"ElasticPot Query - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"honeypot.query.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Query\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:da489b20-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.016Z","visualization":{"title":"Rdpy Events by Country Histogram","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"Events\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"3\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customInterval\":\"2h\",\"customLabel\":\"Timestamp\",\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"title\":\"Rdpy Events by Country Histogram\",\"type\":\"area\"}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.033Z","visualization":{"title":"Dionaea Attack Map","visState":"{\"title\":\"Dionaea Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:e4b7cf40-8b52-11e7-b92d-d39e43e3de0f","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.067Z","visualization":{"title":"Rdpy Attack Map","visState":"{\"title\":\"Rdpy Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"aa750980-8ab5-11e7-8fef-33e989079c7d","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ec53e470-8376-11e7-9adb-2955c2136c8c","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.023Z","visualization":{"title":"Honeytrap Destination Ports Histogram","visState":"{\"title\":\"Honeytrap Destination Ports Histogram\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.074Z","visualization":{"title":"ElasticPot Attack Map","visState":"{\"title\":\"ElasticPot Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.069Z","visualization":{"title":"ElasticPot Events by Country Histogram","visState":"{\"title\":\"ElasticPot Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Transport","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.075Z","visualization":{"title":"Dionaea Transport","visState":"{\"title\":\"Dionaea Transport\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"connection.transport.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:d01a6390-827e-11e7-afbf-a7491fba5d8a","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.022Z","visualization":{"title":"ElasticPot Events Bar","visState":"{\"title\":\"ElasticPot Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":200},\"title\":{\"text\":\"ElasticPot\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ElasticPot\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Password-Tagcloud-Large","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.035Z","visualization":{"title":"Dionaea Password Tagcloud - Large","visState":"{\"title\":\"Dionaea Password Tagcloud - Large\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"sqrt\",\"orientations\":1,\"fromDegree\":0,\"toDegree\":0,\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":500,\"spiral\":\"rectangular\",\"minFontSize\":18,\"maxFontSize\":72,\"scale\":\"square root\",\"orientation\":\"right angled\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"login.password.keyword\",\"size\":100,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.087Z","visualization":{"title":"Dionaea Source IP - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{\"customLabel\":\"CNT\"},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"customLabel\":\"Source IP\",\"field\":\"src_ip.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"bucket\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"Dionaea Source IP - Top 10\",\"type\":\"table\"}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Dionaea-Type","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.050Z","visualization":{"title":"Dionaea Type","visState":"{\"title\":\"Dionaea Type\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"connection.type.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Dionaea-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.099Z","visualization":{"title":"ElasticPot Countries - Top 10","visState":"{\"title\":\"ElasticPot Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.105Z","visualization":{"title":"ElasticPot Source IP - Top 10","visState":"{\"title\":\"ElasticPot Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.096Z","visualization":{"title":"eMobility Source IP - Top 10","visState":"{\"title\":\"eMobility Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:f1a19000-7ebf-11e7-a286-9f03beba6417","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.118Z","visualization":{"title":"Honeypot by Country and Port","visState":"{\"title\":\"Honeypot by Country and Port\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\",\"row\":false}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeypot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.144Z","visualization":{"title":"ElasticPot AS/N - Top 10","visState":"{\"title\":\"ElasticPot AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.153Z","visualization":{"title":"eMobility Events by Country Histogram","visState":"{\"title\":\"eMobility Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.154Z","visualization":{"title":"eMobility Events Histogram","visState":"{\"title\":\"eMobility Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\",\"lineWidth\":2},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"legendOpen\":true}}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.119Z","visualization":{"title":"eMobility AS/N - Top 10","visState":"{\"title\":\"eMobility AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.136Z","visualization":{"title":"eMobility Countries - Top 10","visState":"{\"title\":\"eMobility Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.226Z","visualization":{"title":"Honeytrap Events Histogram","visState":"{\"title\":\"Honeytrap Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.236Z","visualization":{"title":"NGINX Events by Country Histogram","visState":"{\"title\":\"NGINX Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.185Z","visualization":{"title":"Glastopf Attack Map","visState":"{\"title\":\"Glastopf Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Scaled Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.240Z","visualization":{"title":"Glastopf Events by Country Histogram","visState":"{\"title\":\"Glastopf Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.243Z","visualization":{"title":"NGINX Attack Map","visState":"{\"title\":\"NGINX Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.173Z","visualization":{"title":"Glastopf ASN - Top 10","visState":"{\"title\":\"Glastopf ASN - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:f28b8c60-80e4-11e7-ba6f-4542711dd148","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.202Z","visualization":{"title":"Cowrie Destination Ports Histogram Incoming","visState":"{\"title\":\"Cowrie Destination Ports Histogram Incoming\",\"type\":\"area\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{\"text\":\"Timestamp\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"area\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"step-after\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"query\":\"dest_port:2222\",\"analyze_wildcard\":true}}},\"label\":\"SSH\"},{\"input\":{\"query\":{\"query_string\":{\"query\":\"dest_port:2223\",\"analyze_wildcard\":true}}},\"label\":\"Telnet\"}]}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Cowrie-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ffb284f0-80cd-11e7-ab37-eb92b1bfb573","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.155Z","visualization":{"title":"ConPot Source IP Reputation","visState":"{\"title\":\"ConPot Source IP Reputation\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ip_rep.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ConPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:eMobility-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.164Z","visualization":{"title":"eMobility Attack Map","visState":"{\"title\":\"eMobility Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"eMobility-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Fileinfo-Magic-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.252Z","visualization":{"title":"Suricata Fileinfo Magic - Top 10","visState":"{\"title\":\"Suricata Fileinfo Magic - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"fileinfo.magic.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.228Z","visualization":{"title":"NGINX AS/N - Top 10","visState":"{\"title\":\"NGINX AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.204Z","visualization":{"title":"Honeytrap Source IP - Top 10","visState":"{\"title\":\"Honeytrap Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:ElasticPot-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.164Z","visualization":{"title":"ElasticPot Events Histogram","visState":"{\"title\":\"ElasticPot Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"ElasticPot-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.196Z","visualization":{"title":"Glastopf Countries - Top 10","visState":"{\"title\":\"Glastopf Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Username-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.257Z","visualization":{"title":"NGINX Username Tagcloud","visState":"{\"title\":\"NGINX Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"textScale\":\"linear\",\"orientations\":1,\"fromDegree\":0,\"toDegree\":0,\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"timeInterval\":500,\"spiral\":\"rectangular\",\"minFontSize\":16,\"maxFontSize\":64,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"remote_user.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.264Z","visualization":{"title":"NGINX Countries - Top 10","visState":"{\"title\":\"NGINX Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Glastop-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.440Z","visualization":{"title":"Glastopf Source IP - Top 10","visState":"{\"title\":\"Glastopf Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.487Z","visualization":{"title":"Honeytrap AS/N - Top 10","visState":"{\"title\":\"Honeytrap AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.489Z","visualization":{"title":"Honeytrap Attack Map","visState":"{\"title\":\"Honeytrap Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.493Z","visualization":{"title":"Suricata Source IP - Top 10","visState":"{\"title\":\"Suricata Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.495Z","visualization":{"title":"NGINX Source IP - Top 10","visState":"{\"title\":\"NGINX Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-HTTP-User-Agent-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.496Z","visualization":{"title":"NGINX HTTP User Agent Pie - Top 10","visState":"{\"title\":\"NGINX HTTP User Agent Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http_user_agent.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Destination-Ports-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.498Z","visualization":{"title":"Honeytrap Destination Ports - Top 10","visState":"{\"title\":\"Honeytrap Destination Ports - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.499Z","visualization":{"title":"Honeytrap Countries - Top 10","visState":"{\"title\":\"Honeytrap Countries - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-Hostname-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.501Z","visualization":{"title":"Suricata HTTP Hostname Pie - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"http.hostname.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"title\":\"Suricata HTTP Hostname Pie - Top 10\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:P0f-OS-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.504Z","visualization":{"title":"P0f OS Distribution","visState":"{\"title\":\"P0f OS Distribution\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"os.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"P0f-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-HTTP-Method-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.505Z","visualization":{"title":"NGINX HTTP Method Pie - Top 10","visState":"{\"title\":\"NGINX HTTP Method Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"request_method.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-User-Agent-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.507Z","visualization":{"title":"Suricata HTTP User Agent Pie - Top 10","visState":"{\"title\":\"Suricata HTTP User Agent Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.http_user_agent.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-Method-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.508Z","visualization":{"title":"Suricata HTTP Method Pie - Top 10","visState":"{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"http.http_method.keyword\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"shareYAxis\":true},\"title\":\"Suricata HTTP Method Pie - Top 10\",\"type\":\"pie\"}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-HTTP-Status-Code-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.511Z","visualization":{"title":"NGINX HTTP Status Code Pie - Top 10","visState":"{\"title\":\"NGINX HTTP Status Code Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"status.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.515Z","visualization":{"title":"Syslog Countries - Top 10","visState":"{\"title\":\"Syslog Countries - Top 10\",\"type\":\"pie\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"shareYAxis\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Honeytrap-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.519Z","visualization":{"title":"Honeytrap Events by Country Histogram","visState":"{\"title\":\"Honeytrap Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Honeytrap-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.523Z","visualization":{"title":"Suricata Events Histogram","visState":"{\"title\":\"Suricata Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Alert-Signature-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.521Z","visualization":{"title":"Suricata Alert Signature - Top 10","visState":"{\"title\":\"Suricata Alert Signature - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"alert.signature_id\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ID\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"alert.signature.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Description\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.524Z","visualization":{"title":"Syslog AS/N - Top 10","visState":"{\"title\":\"Syslog AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Glastopf-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.522Z","visualization":{"title":"Glastopf Events Histogram","visState":"{\"title\":\"Glastopf Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\",\"interpolate\":\"linear\",\"lineWidth\":2},{\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Glastopf-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.526Z","visualization":{"title":"Suricata Attack Map","visState":"{\"title\":\"Suricata Attack Map\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Shaded Circle Markers\",\"isDesaturated\":false,\"addTooltip\":true,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatRadius\":25,\"heatBlur\":15,\"heatNormalizeData\":true,\"wms\":{\"enabled\":false,\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\",\"options\":{\"version\":\"1.3.0\",\"layers\":\"0\",\"format\":\"image/png\",\"transparent\":true,\"attribution\":\"Maps provided by USGS\",\"styles\":\"\"}},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"mapZoom\":2,\"mapCenter\":[0,-0.17578125],\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:NGINX-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.527Z","visualization":{"title":"NGINX Events Histogram","visState":"{\"title\":\"NGINX Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Events\"},\"drawLinesBetweenPoints\":true,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"show\":true,\"mode\":\"normal\",\"type\":\"line\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"NGINX-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-ASN-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.528Z","visualization":{"title":"Suricata AS/N - Top 10","visState":"{\"title\":\"Suricata AS/N - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.asn\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"AS\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"geoip.as_org.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"ASN\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.529Z","visualization":{"title":"Suricata Events by Country Histogram","visState":"{\"title\":\"Suricata Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Events-by-Country-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.531Z","visualization":{"title":"Syslog Events by Country Histogram","visState":"{\"title\":\"Syslog Events by Country Histogram\",\"type\":\"area\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"area\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.532Z","visualization":{"title":"Syslog Events Histogram","visState":"{\"title\":\"Syslog Events Histogram\",\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"interpolate\":\"linear\",\"legendPosition\":\"right\",\"radiusRatio\":9,\"scale\":\"square root\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":\"true\",\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"program.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Username-Tagcloud","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.535Z","visualization":{"title":"Syslog Username Tagcloud","visState":"{\"title\":\"Syslog Username Tagcloud\",\"type\":\"tagcloud\",\"params\":{\"font\":\"serif\",\"fontStyle\":\"normal\",\"fontWeight\":\"normal\",\"fromDegree\":0,\"maxFontSize\":64,\"minFontSize\":16,\"orientations\":1,\"spiral\":\"archimedean\",\"textScale\":\"linear\",\"timeInterval\":500,\"toDegree\":0,\"scale\":\"linear\",\"orientation\":\"single\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"username.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Program-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.537Z","visualization":{"title":"Syslog Program - Top 10","visState":"{\"title\":\"Syslog Program - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"program.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Source-IP-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.540Z","visualization":{"title":"Syslog Source IP - Top 10","visState":"{\"title\":\"Syslog Source IP - Top 10\",\"type\":\"table\",\"params\":{\"perPage\":10,\"showMeticsAtAllLevels\":false,\"showPartialRows\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"CNT\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"src_ip.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Source IP\"}}],\"listeners\":{}}","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-SSH-Client-Software-Version-Pie-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.539Z","visualization":{"title":"Suricata SSH Client Software Version Pie - Top 10","visState":"{\"title\":\"Suricata SSH Client Software Version Pie - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"ssh.client.software_version.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-Map","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.547Z","visualization":{"title":"Syslog Attack Map","visState":"{\"title\":\"Syslog Attack Map\",\"type\":\"tile_map\",\"params\":{\"addTooltip\":true,\"heatBlur\":15,\"heatMaxZoom\":16,\"heatMinOpacity\":0.1,\"heatNormalizeData\":true,\"heatRadius\":25,\"isDesaturated\":false,\"mapType\":\"Shaded Circle Markers\",\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"Maps provided by USGS\",\"format\":\"image/png\",\"layers\":\"0\",\"styles\":\"\",\"transparent\":true,\"version\":\"1.3.0\"},\"url\":\"https://basemap.nationalmap.gov/arcgis/services/USGSTopo/MapServer/WMSServer\"},\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0]},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"useGeocentroid\":true,\"precision\":2}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Syslog-SSH-Events-Histogram","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-20T20:51:15.548Z","visualization":{"title":"Syslog SSH Events Histogram","visState":"{\"title\":\"Syslog SSH Events Histogram\",\"type\":\"histogram\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Timestamp\"},\"type\":\"category\"}],\"defaultYExtents\":false,\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"legendPosition\":\"right\",\"mode\":\"stacked\",\"scale\":\"linear\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"mode\":\"stacked\",\"show\":\"true\",\"showCircles\":true,\"type\":\"histogram\",\"valueAxis\":\"ValueAxis-1\"}],\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"square root\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"\"},\"type\":\"value\"}],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"tags.keyword\",\"exclude\":\"_geoip_lookup_failure\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Timestamp\"}}],\"listeners\":{}}","uiStateJSON":"{}","description":"","savedSearchId":"Syslog-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:3290fa70-69a2-11e7-bcac-d3ee6f9c26fd","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.367Z","search":{"title":"NSM-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"filter\":[],\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Suricata\\\" OR type:\\\"p0f\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Dionaea-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.393Z","search":{"title":"Dionaea-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Dionaea\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Cowrie-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.403Z","search":{"title":"Cowrie-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Cowrie\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:eMobility-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.411Z","search":{"title":"eMobility-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"eMobility\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:9c35dd90-6977-11e7-9c11-8d9c11943fa0","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.413Z","search":{"title":"Mailoney-Logs","description":"","hits":0,"columns":["ip_rep","alert.cve_id"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"type:\\\"Mailoney\\\"\"}},\"language\":\"lucene\"},\"filter\":[]}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Honeytrap-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.438Z","search":{"title":"Honeytrap-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Honeytrap\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:ConPot-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.444Z","search":{"title":"ConPot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"ConPot\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:aa750980-8ab5-11e7-8fef-33e989079c7d","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.441Z","search":{"title":"Rdpy-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Rdpy\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"},\"filter\":[]}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Suricata-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.442Z","search":{"title":"Suricata-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Suricata\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:P0f-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.443Z","search":{"title":"P0f-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"P0f\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:c3b89bc0-69a7-11e7-bcac-d3ee6f9c26fd","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.441Z","search":{"title":"T-Pot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"filter\":[],\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"ConPot\\\" OR type:\\\"Cowrie\\\" OR type:\\\"Dionaea\\\" OR type:\\\"ElasticPot\\\" OR type:\\\"eMobility\\\" OR type:\\\"Glastopf\\\" OR type:\\\"Honeytrap\\\" OR type:\\\"Mailoney\\\" OR type:\\\"p0f\\\" OR type:\\\"Suricata\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:ElasticPot-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.449Z","search":{"title":"ElasticPot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"ElasticPot\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Syslog-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.448Z","search":{"title":"Syslog-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"query\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"type:\\\"Syslog\\\"\"}},\"language\":\"lucene\"},\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:Glastopf-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.450Z","search":{"title":"Glastopf-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Glastopf\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:NGINX-Logs","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.453Z","search":{"title":"NGINX-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"filter\":[],\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"NGINX\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"search:f9db98a0-85e6-11e7-9ef1-352f01cf0e9e","_score":1,"_source":{"type":"search","updated_at":"2018-04-20T20:51:17.453Z","search":{"title":"Vnclowpot-Logs","description":"","hits":0,"columns":["_source"],"sort":["@timestamp","desc"],"version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"index\":\"a06b3310-43e2-11e8-bf89-a753125435f7\",\"highlightAll\":true,\"version\":true,\"query\":{\"query\":{\"query_string\":{\"query\":\"type:\\\"Vnclowpot\\\"\",\"analyze_wildcard\":true}},\"language\":\"lucene\"},\"filter\":[]}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:bf6f6000-8598-11e7-8f60-4f4666b0a88e","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-21T11:18:49.288Z","visualization":{"title":"Suricata Events Bar","visState":"{\"title\":\"Suricata Events Bar\",\"type\":\"histogram\",\"params\":{\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":false,\"rotate\":90,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Suricata\"}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"BottomAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"square root\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Events\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true},{\"show\":true,\"mode\":\"normal\",\"type\":\"histogram\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"data\":{\"id\":\"3\",\"label\":\"Unique Source IPs\"},\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"type\":\"histogram\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"Events\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"type.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Suricata\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"schema\":\"metric\",\"params\":{\"field\":\"src_ip.keyword\",\"customLabel\":\"Unique Source IPs\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-Countries-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-21T11:41:58.303Z","visualization":{"title":"Suricata Countries - Top 10","visState":"{\n \"title\": \"Suricata Countries - Top 10\",\n \"type\": \"pie\",\n \"params\": {\n \"shareYAxis\": true,\n \"addTooltip\": true,\n \"addLegend\": true,\n \"isDonut\": true,\n \"legendPosition\": \"right\",\n \"type\": \"pie\",\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n }\n },\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"schema\": \"metric\",\n \"params\": {}\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"schema\": \"segment\",\n \"params\": {\n \"field\": \"geoip.country_name.keyword\",\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\",\n \"size\": 10,\n \"order\": \"desc\",\n \"orderBy\": \"1\"\n }\n }\n ]\n}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"filter\": [],\n \"query\": {\n \"query\": \"\",\n \"language\": \"lucene\"\n }\n}"}}}} +{"_index":".kibana","_type":"doc","_id":"visualization:Suricata-HTTP-Content-Type-Top-10","_score":1,"_source":{"type":"visualization","updated_at":"2018-04-21T16:13:41.385Z","visualization":{"title":"Suricata HTTP Content Type - Top 10","visState":"{\"title\":\"Suricata HTTP Content Type - Top 10\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":true,\"legendPosition\":\"right\",\"type\":\"pie\",\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":200}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.http_content_type.keyword\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}","uiStateJSON":"{}","description":"","savedSearchId":"Suricata-Logs","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}"}}}} +{"_index":".kibana","_type":"doc","_id":"index-pattern:logstash-*","_score":1,"_source":{"type":"index-pattern","updated_at":"2018-05-29T11:27:36.099Z","index-pattern":{"title":"logstash-*","timeFieldName":"@timestamp","fields":"[{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"@version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"name\":\"_score\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"name\":\"alert.action\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.action.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.category\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.category.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.cve_id\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.cve_id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.gid\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.rev\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.severity\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.signature\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"alert.signature.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"alert.signature_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"app\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"app.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"app_proto\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"app_proto.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.data_hex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.data_hex.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.md5_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.md5_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.payload.sha512_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.payload.sha512_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"attack_connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"attack_connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"auth_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"body_bytes_sent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"body_bytes_sent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"compCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"compCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.transport\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.transport.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"connection.type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"connection.type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies. path\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies. path.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies. sess_uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies. sess_uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies.io\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies.io.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"cookies.sess_uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"cookies.sess_uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"data\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"data.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"data_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"data_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dest_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dest_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dest_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dist\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dist.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.rrname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.rrname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.rrtype\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.rrtype.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dns.type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dns.type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"domain\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"domain.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"download_count\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"download_tries\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"dst_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"dst_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"duration\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.body_md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.body_md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.date\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.date.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.message_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.message_id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.received\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.received.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.reply_to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.reply_to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.status.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.subject_md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.subject_md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"email.to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"email.to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"encCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"encCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"end_time\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"euid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"euid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"event_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"event_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"eventid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"eventid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.filename\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.filename.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.magic\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.magic.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.md5\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.md5.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fileinfo.state.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.stored\",\"type\":\"boolean\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fileinfo.tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"fingerprint\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"fingerprint.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"flow_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ftp.commands.arguments\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ftp.commands.arguments.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ftp.commands.command\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ftp.commands.command.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.as_org\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.as_org.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.asn\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.city_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.city_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.continent_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.continent_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_code2\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_code2.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_code3\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_code3.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.country_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.country_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.dma_code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.ip\",\"type\":\"ip\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.latitude\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.location\",\"type\":\"geo_point\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.longitude\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.postal_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.postal_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.region_code\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.region_code.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.region_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.region_name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"geoip.timezone\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"geoip.timezone.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.accept\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.accept-encoding\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.accept-encoding.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.accept-language\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.accept-language.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.accept.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.cache-control\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.cache-control.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.connection\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.connection.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.cookie\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.cookie.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.dnt\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.dnt.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.host\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.referer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.referer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.upgrade-insecure-requests\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.upgrade-insecure-requests.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"headers.user-agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"headers.user-agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"height\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.nodeid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.nodeid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.postdata\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.postdata.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.query\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.query.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"honeypot.raw\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"honeypot.raw.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"host\",\"type\":\"string\",\"count\":2,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"hostname\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.accept_encoding\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.accept_encoding.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.accept_language\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.accept_language.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.authorization\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.authorization.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_content_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_content_type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_refer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_refer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.http_user_agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.http_user_agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.redirect\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.redirect.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.status\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.url\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.url.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.via\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.via.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http.xff\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http.xff.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_referrer\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_referrer.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_uri\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_uri.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"http_user_agent\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"http_user_agent.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"icmp_code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"icmp_type\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"id.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"in_iface\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"in_iface.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"input\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"input.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ip_rep\",\"type\":\"string\",\"count\":2,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ip_rep.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"isError\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"is_virtual\",\"type\":\"boolean\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"kexAlgs\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"kexAlgs.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"keyAlgs\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"keyAlgs.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"lang\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"lang.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"link\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"link.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"login.password\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"login.password.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"login.username\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"login.username.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"logname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"logname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"logsource\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"logsource.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"macCS\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"macCS.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"message\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"mod\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"mod.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"operation_mode\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"os\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"os.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"outfile\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"outfile.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_by\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_by.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_caller\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_caller.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_module\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_module.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pam_session_state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pam_session_state.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"params\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"params.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"password\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"password.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"path\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"path.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"payload_printable\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"payload_printable.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"pid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"pid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"port\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"port.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"program\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"program.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proto\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proto.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.local_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.local_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.local_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.data_hex\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.data_hex.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.md5_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.md5_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.payload.sha512_hash\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.payload.sha512_hash.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.protocol\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.protocol.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.remote_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"proxy_connection.remote_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"proxy_connection.remote_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_freq\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_freq.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_hits\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_hits.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_mtu\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_mtu.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"raw_sig\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"raw_sig.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"realm\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"realm.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"reason\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"reason.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"remote_host\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"remote_host.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"remote_user\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"remote_user.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request_method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request_method.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"request_time\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"request_time.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.name.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.order\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.payload.page\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.payload.page.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.payload.value\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.payload.value.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.type\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.detection.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.detection.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.response.message.sess_uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.response.message.sess_uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"response_msg.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"response_msg.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ruser\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ruser.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"sensor\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"sensor.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"sensorid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"sensorid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"session\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"session.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"session_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"shasum\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"shasum.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.helo\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.helo.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.mail_from\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.mail_from.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp.rcpt_to\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp.rcpt_to.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"smtp_input\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"smtp_input.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"src_hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_ip\",\"type\":\"string\",\"count\":1,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"src_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"src_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.client.proto_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.client.proto_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.client.software_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.client.software_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.server.proto_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.server.proto_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ssh.server.software_version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ssh.server.software_version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"start_time\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"status.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"stream\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"system\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"system.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_hostname.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip_ext\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip_ext.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"t-pot_ip_int\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"t-pot_ip_int.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tags\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tags.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.fingerprint\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.fingerprint.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.issuerdn\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.issuerdn.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.notafter\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.notbefore\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.sni\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.sni.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.subject\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.subject.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tls.version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tls.version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tty\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"tty.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"ttylog\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"ttylog.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"tx_id\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"type.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uptime\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uptime.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"url\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"url.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"user\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"user.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"username\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"username.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"uuid\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"uuid.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"value\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"value.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"version\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"version.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"vnc_handshake\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"vnc_handshake.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"width\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"name\":\"xff\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"name\":\"xff.keyword\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","fieldFormatMap":"{\"src_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dst_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dest_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"src_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_port\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.speedguide.net/port.php?port={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"alert.signature_id\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://doc.emergingthreats.net/bin/view/Main/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dest_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_ip\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.country_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.real_region_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.city_name\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.number\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}&run=toolpage\",\"labelTemplate\":\"{{value}}\"}},\"status\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http.status\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dns.rrname\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http_user_agent\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"http.http_user_agent\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"os\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"link\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"event_type\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"tls.sni\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.ssllabs.com/ssltest/analyze.html?d={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"tls.version\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"src_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http_user_agent.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"geoip.country_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"geoip.city_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"status.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://httpstatuses.com/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.number.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}&run=toolpage\",\"labelTemplate\":\"{{value}}\"}},\"geoip.asn.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"geoip.real_region_name.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://en.wikipedia.org/w/index.php?search={{value}}&title=Special:Search&go=Go\",\"labelTemplate\":\"{{value}}\"}},\"event_type.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"dest_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.remote_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"proxy_connection.local_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"dst_ip.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"os.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"link.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"tls.version.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://duckduckgo.com/?q={{value}}&t=h_&ia=web\",\"labelTemplate\":\"{{value}}\"}},\"dns.rrname.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://www.senderbase.org/lookup/?search_string={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"tls.sni.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.ssllabs.com/ssltest/analyze.html?d={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"http.http_user_agent.raw\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"http://ua.theafh.net/list.php?s={{value}}&include=yes&class=abr&do=desc\",\"labelTemplate\":\"{{value}}\"}},\"alert.cve_id.keyword\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.cvedetails.com/cve/{{value}}\",\"labelTemplate\":\"{{value}}\"}},\"src_ip.keyword\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://www.talosintelligence.com/reputation_center/lookup?search={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"geoip.asn\":{\"id\":\"url\",\"params\":{\"urlTemplate\":\"https://mxtoolbox.com/SuperTool.aspx?action=asn%3a{{value}}\",\"labelTemplate\":\"{{value}}\"}}}"}}} +{"_index":".kibana","_type":"doc","_id":"config:6.2.4","_score":1,"_source":{"type":"config","updated_at":"2018-05-29T11:28:26.730Z","config":{"buildNum":16627,"defaultIndex":"logstash-*","dateFormat:dow":"Monday","fields:popularLimit":"0","format:number:defaultPattern":"0.[000]","dateFormat":null}}}