mirror of
https://github.com/domainaware/parsedmarc.git
synced 2026-02-17 07:03:58 +00:00
108 lines
4.7 KiB
XML
108 lines
4.7 KiB
XML
<form version="1.1" theme="dark">
|
|
<label>SMTP TLS Reporting</label>
|
|
<fieldset submitButton="false" autoRun="true">
|
|
<input type="time" token="time">
|
|
<label></label>
|
|
<default>
|
|
<earliest>-7d@h</earliest>
|
|
<latest>now</latest>
|
|
</default>
|
|
</input>
|
|
<input type="text" token="organization_name" searchWhenChanged="true">
|
|
<label>Organization name</label>
|
|
<default>*</default>
|
|
<initialValue>*</initialValue>
|
|
</input>
|
|
<input type="text" token="policy_domain">
|
|
<label>Policy domain</label>
|
|
<default>*</default>
|
|
<initialValue>*</initialValue>
|
|
</input>
|
|
<input type="dropdown" token="policy_type" searchWhenChanged="true">
|
|
<label>Policy type</label>
|
|
<choice value="*">Any</choice>
|
|
<choice value="tlsa">tlsa</choice>
|
|
<choice value="sts">sts</choice>
|
|
<choice value="no-policy-found">no-policy-found</choice>
|
|
<default>*</default>
|
|
<initialValue>*</initialValue>
|
|
</input>
|
|
</fieldset>
|
|
<row>
|
|
<panel>
|
|
<title>Reporting organizations</title>
|
|
<table>
|
|
<search>
|
|
<query>index=email sourcetype=smtp:tls organization_name=$organization_name$ policies{}.policy_domain=$policy_domain$
|
|
| rename policies{}.policy_domain as policy_domain
|
|
| rename policies{}.policy_type as policy_type
|
|
| rename policies{}.failed_session_count as failed_sessions
|
|
| rename policies{}.failure_details{}.failed_session_count as failed_sessions
|
|
| rename policies{}.successful_session_count as successful_sessions
|
|
| rename policies{}.failure_details{}.sending_mta_ip as sending_mta_ip
|
|
| rename policies{}.failure_details{}.receiving_ip as receiving_ip
|
|
| rename policies{}.failure_details{}.receiving_mx_hostname as receiving_mx_hostname
|
|
| rename policies{}.failure_details{}.result_type as failure_type
|
|
| fillnull value=0 failed_sessions
|
|
| stats sum(failed_sessions) as failed_sessions sum(successful_sessions) as successful_sessions by organization_name
|
|
| sort -successful_sessions 0</query>
|
|
<earliest>$time.earliest$</earliest>
|
|
<latest>$time.latest$</latest>
|
|
</search>
|
|
<option name="drilldown">none</option>
|
|
<option name="refresh.display">progressbar</option>
|
|
</table>
|
|
</panel>
|
|
<panel>
|
|
<title>Domains</title>
|
|
<table>
|
|
<search>
|
|
<query>index=email sourcetype=smtp:tls organization_name=$organization_name$ policies{}.policy_domain=$policy_domain$
|
|
| rename policies{}.policy_domain as policy_domain
|
|
| rename policies{}.policy_type as policy_type
|
|
| rename policies{}.failed_session_count as failed_sessions
|
|
| rename policies{}.failure_details{}.failed_session_count as failed_sessions
|
|
| rename policies{}.successful_session_count as successful_sessions
|
|
| rename policies{}.failure_details{}.sending_mta_ip as sending_mta_ip
|
|
| rename policies{}.failure_details{}.receiving_ip as receiving_ip
|
|
| rename policies{}.failure_details{}.receiving_mx_hostname as receiving_mx_hostname
|
|
| rename policies{}.failure_details{}.result_type as failure_type
|
|
| fillnull value=0 failed_sessions
|
|
| stats sum(failed_sessions) as failed_sessions sum(successful_sessions) as successful_sessions by policy_domain
|
|
| sort -successful_sessions 0</query>
|
|
<earliest>$time.earliest$</earliest>
|
|
<latest>$time.latest$</latest>
|
|
</search>
|
|
<option name="drilldown">none</option>
|
|
<option name="refresh.display">progressbar</option>
|
|
</table>
|
|
</panel>
|
|
</row>
|
|
<row>
|
|
<panel>
|
|
<title>Failure details</title>
|
|
<table>
|
|
<search>
|
|
<query>index=email sourcetype=smtp:tls organization_name=$organization_name$ policies{}.policy_domain=$policy_domain$ policies{}.failure_details{}.result_type=*
|
|
| rename policies{}.policy_domain as policy_domain
|
|
| rename policies{}.policy_type as policy_type
|
|
| rename policies{}.failed_session_count as failed_sessions
|
|
| rename policies{}.failure_details{}.failed_session_count as failed_sessions
|
|
| rename policies{}.successful_session_count as successful_sessions
|
|
| rename policies{}.failure_details{}.sending_mta_ip as sending_mta_ip
|
|
| rename policies{}.failure_details{}.receiving_ip as receiving_ip
|
|
| rename policies{}.failure_details{}.receiving_mx_hostname as receiving_mx_hostname
|
|
| fillnull value=0 failed_sessions
|
|
| rename policies{}.failure_details{}.result_type as failure_type
|
|
| table _time organization_name policy_domain policy_type failed_sessions successful_sessions sending_mta_ip receiving_ip receiving_mx_hostname failure_type
|
|
| sort by -_time 0</query>
|
|
<earliest>$time.earliest$</earliest>
|
|
<latest>$time.latest$</latest>
|
|
</search>
|
|
<option name="drilldown">none</option>
|
|
<option name="refresh.display">progressbar</option>
|
|
</table>
|
|
</panel>
|
|
</row>
|
|
</form>
|