{"id":"sw-pol-bar-age-buckets","type":"visualization","attributes":{"title":"Sparrow WiFi \u2014 Device Age Distribution","visState":"{\"title\": \"Sparrow WiFi \\u2014 Device Age Distribution\", \"type\": \"histogram\", \"params\": {\"type\": \"histogram\", \"grid\": {\"categoryLines\": false}, \"categoryAxes\": [{\"id\": \"CategoryAxis-1\", \"type\": \"category\", \"position\": \"bottom\", \"show\": true, \"style\": {}, \"scale\": {\"type\": \"linear\"}, \"labels\": {\"show\": true, \"truncate\": 100}, \"title\": {}}], \"valueAxes\": [{\"id\": \"ValueAxis-1\", \"name\": \"LeftAxis-1\", \"type\": \"value\", \"position\": \"left\", \"show\": true, \"style\": {}, \"scale\": {\"type\": \"linear\", \"mode\": \"normal\"}, \"labels\": {\"show\": true, \"rotate\": 0, \"filter\": false, \"truncate\": 100}, \"title\": {\"text\": \"Unique Devices\"}}], \"seriesParams\": [{\"show\": true, \"type\": \"histogram\", \"mode\": \"stacked\", \"data\": {\"label\": \"Unique Devices\", \"id\": \"1\"}, \"valueAxis\": \"ValueAxis-1\", \"drawLinesBetweenPoints\": true, \"lineWidth\": 2, \"showCircles\": true}], \"addTooltip\": true, \"addLegend\": true, \"legendPosition\": \"right\", \"times\": [], \"addTimeMarker\": false, \"palette\": {\"type\": \"palette\", \"name\": \"default\"}}, \"aggs\": [{\"id\": \"1\", \"enabled\": true, \"type\": \"cardinality\", \"schema\": \"metric\", \"params\": {\"field\": \"source.mac\", \"customLabel\": \"Unique Devices\"}}, {\"id\": \"2\", \"enabled\": true, \"type\": \"range\", \"schema\": \"bucket\", \"params\": {\"field\": \"observed.age_seconds\", \"ranges\": [{\"from\": 0, \"to\": 300, \"label\": \"< 5 min (new)\"}, {\"from\": 300, \"to\": 1800, \"label\": \"5-30 min\"}, {\"from\": 1800, \"to\": 21600, \"label\": \"30 min \\u2013 6 hr\"}, {\"from\": 21600, \"to\": 999999999, \"label\": \"> 6 hr (persistent)\"}], \"customLabel\": \"Device Age\"}}]}","uiStateJSON":"{}","description":"Unique device count bucketed by how long they have been observed","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": [], \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"}},"references":[{"name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern","id":"sparrow-wifi"}],"coreMigrationVersion":"8.17.0","typeMigrationVersion":"8.0.0","managed":false}
{"id":"sw-pol-pie-class-dist","type":"visualization","attributes":{"title":"Sparrow WiFi \u2014 Device Class Distribution","visState":"{\"title\": \"Sparrow WiFi \\u2014 Device Class Distribution\", \"type\": \"pie\", \"params\": {\"type\": \"pie\", \"addTooltip\": true, \"addLegend\": true, \"legendPosition\": \"right\", \"isDonut\": true, \"labels\": {\"show\": false, \"values\": true, \"last_level\": true, \"truncate\": 100}, \"palette\": {\"type\": \"palette\", \"name\": \"default\"}}, \"aggs\": [{\"id\": \"1\", \"enabled\": true, \"type\": \"count\", \"schema\": \"metric\", \"params\": {\"customLabel\": \"Count\"}}, {\"id\": \"2\", \"enabled\": true, \"type\": \"terms\", \"schema\": \"segment\", \"params\": {\"field\": \"device.class_guess\", \"size\": 10, \"order\": \"desc\", \"orderBy\": \"1\", \"otherBucket\": true, \"otherBucketLabel\": \"Other\", \"missingBucket\": true, \"missingBucketLabel\": \"Unknown\", \"customLabel\": \"Device Class\"}}]}","uiStateJSON":"{}","description":"Top 10 device class guesses (AP, phone, laptop, etc.)","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": [], \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"}},"references":[{"name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern","id":"sparrow-wifi"}],"coreMigrationVersion":"8.17.0","typeMigrationVersion":"8.0.0","managed":false}
{"id":"sw-pol-metric-mac-rand","type":"visualization","attributes":{"title":"Sparrow WiFi \u2014 Randomized MAC Count","visState":"{\"title\": \"Sparrow WiFi \\u2014 Randomized MAC Count\", \"type\": \"metric\", \"params\": {\"addTooltip\": true, \"addLegend\": false, \"type\": \"metric\", \"metric\": {\"percentageMode\": false, \"useRanges\": false, \"colorSchema\": \"Green to Red\", \"metricColorMode\": \"None\", \"colorsRange\": [{\"from\": 0, \"to\": 10000}], \"labels\": {\"show\": true}, \"invertColors\": false, \"style\": {\"bgFill\": \"#000\", \"bgColor\": false, \"labelColor\": false, \"subText\": \"\", \"fontSize\": 60}}}, \"aggs\": [{\"id\": \"1\", \"enabled\": true, \"type\": \"count\", \"schema\": \"metric\", \"params\": {\"customLabel\": \"Randomized MACs\"}}]}","uiStateJSON":"{}","description":"Count of devices with randomized/locally-administered MAC addresses","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": [{\"meta\": {\"index\": \"sparrow-wifi\", \"negate\": false, \"disabled\": false, \"alias\": null, \"type\": \"phrase\", \"key\": \"wifi.mac.randomized\", \"params\": {\"query\": true}}, \"query\": {\"match_phrase\": {\"wifi.mac.randomized\": true}}, \"$state\": {\"store\": \"appState\"}}], \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"}},"references":[{"name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern","id":"sparrow-wifi"}],"coreMigrationVersion":"8.17.0","typeMigrationVersion":"8.0.0","managed":false}
{"id":"sw-pol-metric-total-obs","type":"visualization","attributes":{"title":"Sparrow WiFi \u2014 Total Observations","visState":"{\"title\": \"Sparrow WiFi \\u2014 Total Observations\", \"type\": \"metric\", \"params\": {\"addTooltip\": true, \"addLegend\": false, \"type\": \"metric\", \"metric\": {\"percentageMode\": false, \"useRanges\": false, \"colorSchema\": \"Green to Red\", \"metricColorMode\": \"None\", \"colorsRange\": [{\"from\": 0, \"to\": 10000000}], \"labels\": {\"show\": true}, \"invertColors\": false, \"style\": {\"bgFill\": \"#000\", \"bgColor\": false, \"labelColor\": false, \"subText\": \"\", \"fontSize\": 60}}}, \"aggs\": [{\"id\": \"1\", \"enabled\": true, \"type\": \"count\", \"schema\": \"metric\", \"params\": {\"customLabel\": \"Total Observations\"}}]}","uiStateJSON":"{}","description":"Total WiFi observation count in the selected time window","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": [], \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"}},"references":[{"name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern","id":"sparrow-wifi"}],"coreMigrationVersion":"8.17.0","typeMigrationVersion":"8.0.0","managed":false}
{"id":"sw-pol-heatmap-dow-hour","type":"visualization","attributes":{"title":"Sparrow WiFi \u2014 Activity Heatmap (Day \u00d7 Hour UTC)","visState":"{\"title\": \"Sparrow WiFi \\u2014 Activity Heatmap (Day \\u00d7 Hour UTC)\", \"type\": \"heatmap\", \"params\": {\"type\": \"heatmap\", \"addTooltip\": true, \"addLegend\": true, \"enableHover\": false, \"legendPosition\": \"right\", \"times\": [], \"colorsNumber\": 8, \"colorSchema\": \"Greens\", \"setColorRange\": false, \"colorsRange\": [], \"invertColors\": false, \"percentageMode\": false, \"valueAxes\": [{\"show\": false, \"id\": \"ValueAxis-1\", \"type\": \"value\", \"scale\": {\"type\": \"linear\", \"defaultYExtents\": false}, \"labels\": {\"show\": false, \"rotate\": 0, \"overwriteColor\": false, \"color\": \"black\"}}]}, \"aggs\": [{\"id\": \"1\", \"enabled\": true, \"type\": \"count\", \"schema\": \"metric\", \"params\": {\"customLabel\": \"Observations\"}}, {\"id\": \"2\", \"enabled\": true, \"type\": \"terms\", \"schema\": \"segment\", \"params\": {\"field\": \"observed.day_of_week_utc\", \"size\": 7, \"order\": \"asc\", \"orderBy\": \"_key\", \"otherBucket\": false, \"customLabel\": \"Day of Week\"}}, {\"id\": \"3\", \"enabled\": true, \"type\": \"histogram\", \"schema\": \"group\", \"params\": {\"field\": \"observed.hour_utc\", \"interval\": 1, \"min_doc_count\": 0, \"extended_bounds\": {\"min\": 0, \"max\": 23}, \"customLabel\": \"Hour (UTC)\"}}]}","uiStateJSON":"{}","description":"WiFi activity heatmap: day of week vs hour of day (UTC)","version":1,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": [], \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"}"}},"references":[{"name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern","id":"sparrow-wifi"}],"coreMigrationVersion":"8.17.0","typeMigrationVersion":"8.0.0","managed":false}
{"id":"sw-dashboard-pattern-of-life","type":"dashboard","attributes":{"title":"Sparrow WiFi \u2014 Pattern of Life","description":"Long-term device behavior patterns: age distribution, class mix, MAC randomization, and temporal activity heatmap","hits":0,"timeRestore":false,"timeTo":"now","timeFrom":"now-24h","refreshInterval":{"pause":true,"value":0},"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\": {\"query\": \"\", \"language\": \"kuery\"}, \"filter\": []}"},"optionsJSON":"{\"useMargins\": true, \"syncColors\": false, \"hidePanelTitles\": false}","panelsJSON":"[{\"panelIndex\": \"1\", \"gridData\": {\"x\": 0, \"y\": 0, \"w\": 24, \"h\": 16, \"i\": \"1\"}, \"version\": \"8.17.0\", \"type\": \"visualization\", \"id\": \"sw-pol-bar-age-buckets\", \"title\": \"Sparrow WiFi \\u2014 Device Age Distribution\", \"embeddableConfig\": {\"enhancements\": {}}}, {\"panelIndex\": \"2\", \"gridData\": {\"x\": 24, \"y\": 0, \"w\": 24, \"h\": 16, \"i\": \"2\"}, \"version\": \"8.17.0\", \"type\": \"visualization\", \"id\": \"sw-pol-pie-class-dist\", \"title\": \"Sparrow WiFi \\u2014 Device Class Distribution\", \"embeddableConfig\": {\"enhancements\": {}}}, {\"panelIndex\": \"3\", \"gridData\": {\"x\": 0, \"y\": 16, \"w\": 24, \"h\": 8, \"i\": \"3\"}, \"version\": \"8.17.0\", \"type\": \"visualization\", \"id\": \"sw-pol-metric-mac-rand\", \"title\": \"Sparrow WiFi \\u2014 Randomized MAC Count\", \"embeddableConfig\": {\"enhancements\": {}}}, {\"panelIndex\": \"4\", \"gridData\": {\"x\": 24, \"y\": 16, \"w\": 24, \"h\": 8, \"i\": \"4\"}, \"version\": \"8.17.0\", \"type\": \"visualization\", \"id\": \"sw-pol-metric-total-obs\", \"title\": \"Sparrow WiFi \\u2014 Total Observations\", \"embeddableConfig\": {\"enhancements\": {}}}, {\"panelIndex\": \"5\", \"gridData\": {\"x\": 0, \"y\": 24, \"w\": 48, \"h\": 18, \"i\": \"5\"}, \"version\": \"8.17.0\", \"type\": \"visualization\", \"id\": \"sw-pol-heatmap-dow-hour\", \"title\": \"Sparrow WiFi \\u2014 Activity Heatmap (Day \\u00d7 Hour UTC)\", \"embeddableConfig\": {\"enhancements\": {}}}]","version":1},"references":[{"name":"panel_0","type":"visualization","id":"sw-pol-bar-age-buckets"},{"name":"panel_1","type":"visualization","id":"sw-pol-pie-class-dist"},{"name":"panel_2","type":"visualization","id":"sw-pol-metric-mac-rand"},{"name":"panel_3","type":"visualization","id":"sw-pol-metric-total-obs"},{"name":"panel_4","type":"visualization","id":"sw-pol-heatmap-dow-hour"},{"name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern","id":"sparrow-wifi"}],"coreMigrationVersion":"8.17.0","typeMigrationVersion":"8.3.0","managed":false}
