DNS Insights - Overview
NS1 DNS Insights dashboard providing an overview of DNS and network metrics.
An NS1 DNS Insights dashboard for displaying Orb DNS and Network metrics. See orb.community.
{
  "__inputs": [
    {
      "name": "DS_THANOS_QUERY FRONTEND",
      "label": "Thanos Query Frontend",
      "description": "",
      "type": "datasource",
      "pluginId": "prometheus",
      "pluginName": "Prometheus"
    }
  ],
  "__elements": [],
  "__requires": [
    {
      "type": "grafana",
      "id": "grafana",
      "name": "Grafana",
      "version": "8.5.13"
    },
    {
      "type": "panel",
      "id": "piechart",
      "name": "Pie chart",
      "version": ""
    },
    {
      "type": "datasource",
      "id": "prometheus",
      "name": "Prometheus",
      "version": "1.0.0"
    },
    {
      "type": "panel",
      "id": "stat",
      "name": "Stat",
      "version": ""
    },
    {
      "type": "panel",
      "id": "table",
      "name": "Table",
      "version": ""
    },
    {
      "type": "panel",
      "id": "timeseries",
      "name": "Time series",
      "version": ""
    }
  ],
  "annotations": {
    "list": [
      {
        "builtIn": 1,
        "datasource": {
          "type": "datasource",
          "uid": "grafana"
        },
        "enable": true,
        "hide": true,
        "iconColor": "rgba(0, 211, 255, 1)",
        "name": "Annotations & Alerts",
        "target": {
          "limit": 100,
          "matchAny": false,
          "tags": [],
          "type": "dashboard"
        },
        "type": "dashboard"
      }
    ]
  },
  "description": "NS1 DNS Insights dashboard providing an overview of DNS and network metrics.",
  "editable": true,
  "fiscalYearStartMonth": 0,
  "gnetId": 17170,
  "graphTooltip": 1,
  "id": null,
  "iteration": 1665600223169,
  "links": [
    {
      "asDropdown": false,
      "icon": "external link",
      "includeVars": false,
      "keepTime": false,
      "tags": [],
      "targetBlank": true,
      "title": "NS1 DNS Insights",
      "tooltip": "",
      "type": "link",
      "url": "https://ns1.com/writable/resources/Data-Sheets/ns1-ds-DNS_Insights.pdf"
    },
    {
      "asDropdown": true,
      "icon": "external link",
      "includeVars": true,
      "keepTime": true,
      "tags": [
        "dns_insights"
      ],
      "targetBlank": true,
      "title": "DNS Insights Dashboards",
      "tooltip": "",
      "type": "dashboards",
      "url": ""
    }
  ],
  "liveNow": false,
  "panels": [
    {
      "collapsed": false,
      "datasource": {
        "type": "datasource",
        "uid": "grafana"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 0
      },
      "id": 47,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "datasource",
            "uid": "grafana"
          },
          "refId": "A"
        }
      ],
      "title": "Overview",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              }
            ]
          },
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 3,
        "w": 3,
        "x": 0,
        "y": 1
      },
      "id": 52,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "colorMode": "value",
        "graphMode": "none",
        "justifyMode": "auto",
        "orientation": "auto",
        "reduceOptions": {
          "calcs": [
            "lastNotNull"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "textMode": "auto"
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": false,
          "expr": "count(count by (pop) (dns_wire_packets_total{agent=~\"$agent\",policy=~\"$policy\"}))",
          "hide": false,
          "instant": false,
          "interval": "",
          "legendFormat": "__auto",
          "queryType": "randomWalk",
          "refId": "C"
        }
      ],
      "title": "Reporting POPs",
      "type": "stat"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 5,
        "x": 3,
        "y": 1
      },
      "id": 86,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "table",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "9.0.3-0dc0087e",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_wire_packets_total{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])) by (pop)",
          "hide": false,
          "instant": false,
          "interval": "",
          "intervalFactor": 1,
          "legendFormat": "{{pop}}",
          "queryType": "randomWalk",
          "refId": "B"
        }
      ],
      "title": "Traffic Distribution by POP",
      "type": "piechart"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              }
            ]
          },
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 3,
        "w": 3,
        "x": 8,
        "y": 1
      },
      "id": 97,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "colorMode": "value",
        "graphMode": "area",
        "justifyMode": "auto",
        "orientation": "auto",
        "reduceOptions": {
          "calcs": [
            "mean"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "textMode": "auto"
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(avg_over_time(dns_wire_packets_queries{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]) > avg_over_time(dns_wire_packets_replies{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]) OR avg_over_time(dns_wire_packets_replies{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]))/60",
          "hide": false,
          "instant": false,
          "interval": "",
          "intervalFactor": 1,
          "legendFormat": "",
          "queryType": "randomWalk",
          "refId": "B"
        }
      ],
      "title": "Average QPS",
      "type": "stat"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              }
            ]
          },
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 3,
        "w": 3,
        "x": 0,
        "y": 4
      },
      "id": 80,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "colorMode": "value",
        "graphMode": "area",
        "justifyMode": "auto",
        "orientation": "auto",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "textMode": "auto"
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": true,
          "expr": "sum(sum_over_time(dns_wire_packets_total{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]))",
          "hide": false,
          "interval": "",
          "legendFormat": "__auto",
          "range": true,
          "refId": "A"
        }
      ],
      "title": "Packets Processed",
      "type": "stat"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "thresholds"
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              }
            ]
          },
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 3,
        "w": 3,
        "x": 8,
        "y": 4
      },
      "id": 90,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "colorMode": "value",
        "graphMode": "area",
        "justifyMode": "auto",
        "orientation": "auto",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "textMode": "auto"
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_wire_packets_queries{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]) > sum_over_time(dns_wire_packets_replies{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]) OR sum_over_time(dns_wire_packets_replies{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]))",
          "hide": false,
          "instant": false,
          "interval": "",
          "intervalFactor": 1,
          "legendFormat": "",
          "queryType": "randomWalk",
          "refId": "B"
        }
      ],
      "title": "Total Queries",
      "type": "stat"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "datasource",
        "uid": "grafana"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 7
      },
      "id": 45,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "datasource",
            "uid": "grafana"
          },
          "refId": "A"
        }
      ],
      "title": "DNS Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 0,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 12,
        "w": 18,
        "x": 0,
        "y": 8
      },
      "id": 30,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [
            "mean",
            "count"
          ],
          "displayMode": "table",
          "placement": "right",
          "sortBy": "Mean",
          "sortDesc": true
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.1",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(dns_top_qname2{agent=~\"$agent\",policy=~\"$policy\"}[${__interval}])/120) by (qname))",
          "hide": false,
          "instant": false,
          "interval": "1m",
          "intervalFactor": 1,
          "legendFormat": "{{name}}",
          "queryType": "randomWalk",
          "refId": "A"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(dns_top_qname3{agent=~\"$agent\",policy=~\"$policy\"}[${__interval}])/120)by (qname))",
          "hide": false,
          "instant": false,
          "interval": "1m",
          "intervalFactor": 1,
          "legendFormat": "{{name}}",
          "queryType": "randomWalk",
          "refId": "B"
        }
      ],
      "title": "Most Active Domains (QPS)",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 6,
        "x": 18,
        "y": 8
      },
      "id": 38,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "tooltip": {
          "mode": "multi",
          "sort": "none"
        }
      },
      "pluginVersion": "7.5.3",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_top_rcode{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])) by (rcode)",
          "hide": false,
          "interval": "",
          "legendFormat": "{{name}}",
          "queryType": "randomWalk",
          "refId": "C"
        }
      ],
      "title": "Response/Error Codes",
      "type": "piechart"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 6,
        "w": 6,
        "x": 18,
        "y": 14
      },
      "id": 37,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "7.5.3",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_top_qtype{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])) by (qtype)",
          "hide": false,
          "interval": "",
          "legendFormat": "{{name}}",
          "queryType": "randomWalk",
          "refId": "C"
        }
      ],
      "title": "Requested Query Types",
      "type": "piechart"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "datasource",
        "uid": "grafana"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 20
      },
      "id": 65,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "datasource",
            "uid": "grafana"
          },
          "refId": "A"
        }
      ],
      "title": "DNS Top Domains",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Metric"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 361
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 141
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "qname suffix"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 341
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "QNAME Suffix"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 349
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 9,
        "w": 9,
        "x": 0,
        "y": 21
      },
      "id": 28,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum_over_time(dns_top_qname2{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{qname}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top Domains (2 levels)",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "QNAME Suffix",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Metric"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 361
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 123
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 9,
        "w": 9,
        "x": 9,
        "y": 21
      },
      "id": 59,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum_over_time(dns_top_qname3{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{qname}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top Domains (3 levels)",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "QNAME Suffix",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "prometheus",
        "uid": "nQyVPwQGz"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 30
      },
      "id": 88,
      "panels": [],
      "title": "DNS Response Code Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "QName"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 299
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 124
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 10,
        "w": 6,
        "x": 0,
        "y": 31
      },
      "id": 56,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Responses"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum_over_time(dns_top_nxdomain{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{qname}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top NXDOMAIN",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "QNAME",
              "Value (sum)": "Total Responses"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "QName"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Metric"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 235
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 121
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "QNAME"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 203
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Total Responses"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 130
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 10,
        "w": 6,
        "x": 6,
        "y": 31
      },
      "id": 57,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": []
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum_over_time(dns_top_refused{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{qname}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top REFUSED",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "QNAME",
              "Value (sum)": "Total Responses"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "QName"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 299
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 133
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Metric"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 226
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "QNAME"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 201
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 10,
        "w": 6,
        "x": 12,
        "y": 31
      },
      "id": 81,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Responses"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum_over_time(dns_top_nodata{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{qname}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top NOERROR & NODATA",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "QNAME",
              "Value (sum)": "Total Responses"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": true,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "QName"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 234
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 119
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "Metric"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 241
              }
            ]
          },
          {
            "matcher": {
              "id": "byName",
              "options": "QNAME"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 181
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 10,
        "w": 6,
        "x": 18,
        "y": 31
      },
      "id": 58,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Responses"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum_over_time(dns_top_srvfail{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{qname}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top SRVFAIL",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "QNAME",
              "Value (sum)": "Total Responses"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "datasource",
        "uid": "grafana"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 41
      },
      "id": 6,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "datasource",
            "uid": "grafana"
          },
          "refId": "A"
        }
      ],
      "title": "DNS Traffic Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "reqps"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Xact Out (remote server)"
            },
            "properties": [
              {
                "id": "custom.transform",
                "value": "negative-Y"
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 42
      },
      "id": 27,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(avg_over_time(dns_wire_packets_queries{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60)",
          "interval": "",
          "legendFormat": "DNS Queries",
          "queryType": "randomWalk",
          "refId": "A"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "-sum(avg_over_time(dns_wire_packets_replies{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60)",
          "hide": false,
          "interval": "",
          "legendFormat": "DNS Replies",
          "queryType": "randomWalk",
          "refId": "B"
        }
      ],
      "title": "DNS Queries & Responses",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "reqps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 42
      },
      "id": 25,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(avg_over_time(dns_wire_packets_ipv4{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60)",
          "interval": "",
          "legendFormat": "IPv4",
          "queryType": "randomWalk",
          "refId": "A"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(avg_over_time(dns_wire_packets_ipv6{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60)",
          "hide": false,
          "interval": "",
          "legendFormat": "IPv6",
          "queryType": "randomWalk",
          "refId": "B"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(avg_over_time(dns_wire_packets_tcp{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60)",
          "hide": false,
          "interval": "",
          "legendFormat": "TCP",
          "queryType": "randomWalk",
          "refId": "C"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(avg_over_time(dns_wire_packets_udp{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60)",
          "hide": false,
          "interval": "",
          "legendFormat": "UDP",
          "queryType": "randomWalk",
          "refId": "D"
        }
      ],
      "title": "L3/L4 Network Protocols",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "reqps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 49
      },
      "id": 31,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(5,sum(avg_over_time(dns_top_rcode{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (rcode))",
          "interval": "",
          "legendFormat": "{{rcode}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top Response/Error Codes",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "reqps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 49
      },
      "id": 32,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "right"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(dns_top_qtype{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (qtype))",
          "interval": "",
          "legendFormat": "{{name}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top Requested Query Types",
      "type": "timeseries"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "datasource",
        "uid": "grafana"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 56
      },
      "id": 69,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "datasource",
            "uid": "grafana"
          },
          "refId": "A"
        }
      ],
      "title": "DNS Resolvers Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 108
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 0,
        "y": 57
      },
      "id": 15,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": true,
          "expr": "sum_over_time(packets_top_ipv4{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{ipv4}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top IPv4 Resolvers",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "Source Address",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 6,
        "y": 57
      },
      "id": 61,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": true,
          "expr": "sum_over_time(packets_top_ipv6{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{ipv6}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top IPv6 Resolvers",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "Source Address",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 110
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 12,
        "y": 57
      },
      "id": 62,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": true,
          "expr": "sum_over_time(packets_top_geoLoc{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{geo_loc}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top Resolver Geo Locations",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "Location",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 109
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 18,
        "y": 57
      },
      "id": 63,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": true,
          "expr": "sum_over_time(packets_top_ASN{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{asn}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top Resolver ASNs",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "ASN",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 64
      },
      "id": 100,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": false,
          "expr": "sum by (geo) (label_replace(sum_over_time(packets_top_geoLoc{policy=~\"$policy\",agent=~\"$agent\",geo_loc!~\"Unknown\"}[$__interval]),\"geo\",\"$1\",\"geo_loc\",\"(^[A-Z]{2,}/[A-Za-z ]+).*\"))",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{geo}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Resolver Distribution by Country",
      "transformations": [],
      "type": "piechart"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 64
      },
      "id": 101,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": false,
          "expr": "sum(sum_over_time(packets_top_ASN{agent=~\"$agent\",policy=~\"$policy\",asn!~\"Unknown\"}[$__interval])) by (asn)",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{asn}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Resolver ASN Distribution",
      "transformations": [],
      "type": "piechart"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "prometheus",
        "uid": "nQyVPwQGz"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 71
      },
      "id": 92,
      "panels": [],
      "title": "EDNS Client Subnets (ECS) Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 0,
        "y": 72
      },
      "id": 102,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "bottom",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "text": {},
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "7.5.3",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_wire_packets_query_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]))",
          "hide": false,
          "interval": "",
          "legendFormat": "Queries with ECS",
          "queryType": "randomWalk",
          "refId": "C"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_wire_packets_queries{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])) -sum(sum_over_time(dns_wire_packets_query_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval]))",
          "hide": false,
          "interval": "",
          "legendFormat": "Queries without ECS",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "ECS Queries",
      "type": "piechart"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 117
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 6,
        "y": 72
      },
      "id": 83,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": true,
          "expr": "sum_over_time(dns_top_query_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{ecs}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top ECS",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              },
              "{__name__=\"dns_top_query_ecs\", agent=\"dns01-lga99-n0091\", agent_id=\"a2de9d6d-5ad6-4d8a-9b9e-f63c43734c3c\", ecs=\"0.0.0.0\", env=\"prod\", instance=\"dns01-lga99-n0091\", network=\"91\", node_type=\"dns\", policy=\"DNS-default_ECS\", policy_id=\"5e15b6f9-0a65-4009-a8cc-dd4874da8b6e\", pop=\"lga99\"}": {
                "aggregations": [],
                "operation": "groupby"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "Client Subnet",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 115
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 12,
        "y": 72
      },
      "id": 84,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": true,
          "expr": "sum_over_time(dns_top_geo_loc_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{geo_loc}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top ECS Geo Locations",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              },
              "{__name__=\"dns_top_query_ecs\", agent=\"dns01-lga99-n0091\", agent_id=\"a2de9d6d-5ad6-4d8a-9b9e-f63c43734c3c\", ecs=\"0.0.0.0\", env=\"prod\", instance=\"dns01-lga99-n0091\", network=\"91\", node_type=\"dns\", policy=\"DNS-default_ECS\", policy_id=\"5e15b6f9-0a65-4009-a8cc-dd4874da8b6e\", pop=\"lga99\"}": {
                "aggregations": [],
                "operation": "groupby"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "Location",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "continuous-RdYlGr"
          },
          "custom": {
            "align": "auto",
            "displayMode": "auto",
            "filterable": false,
            "inspect": false
          },
          "mappings": [],
          "thresholds": {
            "mode": "percentage",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "dark-red",
                "value": 80
              }
            ]
          },
          "unit": "short"
        },
        "overrides": [
          {
            "matcher": {
              "id": "byName",
              "options": "Value (sum)"
            },
            "properties": [
              {
                "id": "custom.width",
                "value": 113
              }
            ]
          }
        ]
      },
      "gridPos": {
        "h": 7,
        "w": 6,
        "x": 18,
        "y": 72
      },
      "id": 85,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "footer": {
          "fields": "",
          "reducer": [
            "sum"
          ],
          "show": false
        },
        "showHeader": true,
        "sortBy": [
          {
            "desc": true,
            "displayName": "Total Packets"
          }
        ]
      },
      "pluginVersion": "8.5.13",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": true,
          "expr": "sum_over_time(dns_top_asn_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{asn}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Top ECS ASNs",
      "transformations": [
        {
          "id": "seriesToRows",
          "options": {}
        },
        {
          "id": "groupBy",
          "options": {
            "fields": {
              "Metric": {
                "aggregations": [],
                "operation": "groupby"
              },
              "Value": {
                "aggregations": [
                  "sum"
                ],
                "operation": "aggregate"
              },
              "{__name__=\"dns_top_query_ecs\", agent=\"dns01-lga99-n0091\", agent_id=\"a2de9d6d-5ad6-4d8a-9b9e-f63c43734c3c\", ecs=\"0.0.0.0\", env=\"prod\", instance=\"dns01-lga99-n0091\", network=\"91\", node_type=\"dns\", policy=\"DNS-default_ECS\", policy_id=\"5e15b6f9-0a65-4009-a8cc-dd4874da8b6e\", pop=\"lga99\"}": {
                "aggregations": [],
                "operation": "groupby"
              }
            }
          }
        },
        {
          "id": "organize",
          "options": {
            "excludeByName": {},
            "indexByName": {},
            "renameByName": {
              "Metric": "ASN",
              "Value (sum)": "Total Packets"
            }
          }
        }
      ],
      "type": "table"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 79
      },
      "id": 98,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": false,
          "expr": "sum by (geo) (label_replace(sum_over_time(dns_top_geo_loc_ecs{policy=~\"$policy\",agent=~\"$agent\",geo_loc!~\"Unknown\"}[$__interval]),\"geo\",\"$1\",\"geo_loc\",\"(^[A-Z]{2,}/[A-Za-z ]+).*\"))",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{geo}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "ECS Distribution by Country",
      "transformations": [],
      "type": "piechart"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            }
          },
          "mappings": [],
          "unit": "short"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 79
      },
      "id": 99,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "displayLabels": [],
        "legend": {
          "displayMode": "list",
          "placement": "right",
          "values": [
            "percent"
          ]
        },
        "pieType": "pie",
        "reduceOptions": {
          "calcs": [
            "sum"
          ],
          "fields": "",
          "values": false
        },
        "tooltip": {
          "mode": "single",
          "sort": "none"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "editorMode": "code",
          "exemplar": false,
          "expr": "sum(sum_over_time(dns_top_asn_ecs{agent=~\"$agent\",policy=~\"$policy\",asn!~\"Unknown\"}[$__interval])) by (asn)",
          "format": "time_series",
          "instant": false,
          "interval": "",
          "legendFormat": "{{asn}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "ECS ASN Distribution",
      "transformations": [],
      "type": "piechart"
    },
    {
      "collapsed": false,
      "datasource": {
        "type": "datasource",
        "uid": "grafana"
      },
      "gridPos": {
        "h": 1,
        "w": 24,
        "x": 0,
        "y": 86
      },
      "id": 4,
      "panels": [],
      "targets": [
        {
          "datasource": {
            "type": "datasource",
            "uid": "grafana"
          },
          "refId": "A"
        }
      ],
      "title": "DNS Source Details",
      "type": "row"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 4,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "pps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 87
      },
      "id": 73,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(packets_top_ipv4{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (ipv4))",
          "format": "time_series",
          "hide": false,
          "interval": "",
          "legendFormat": "{{ipv6}}",
          "queryType": "randomWalk",
          "refId": "B"
        },
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(packets_top_ipv6{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (ipv6))",
          "format": "time_series",
          "hide": false,
          "interval": "",
          "legendFormat": "{{ipv6}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Resolvers",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "pps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 87
      },
      "id": 9,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(dns_top_query_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (ecs))",
          "format": "time_series",
          "hide": false,
          "interval": "",
          "legendFormat": "{{ipv4}}",
          "queryType": "randomWalk",
          "refId": "B"
        }
      ],
      "title": "ECS Subnets",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "pps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 94
      },
      "id": 74,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(packets_top_ASN{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (asn))",
          "format": "time_series",
          "interval": "",
          "legendFormat": "ASN {{asn}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Resolver ASNs",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "pps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 94
      },
      "id": 94,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(dns_top_asn_ecs{agent=~\"$agent\",policy=~\"$policy\",asn!~\"Unknown\"}[$__interval])/60) by (asn))",
          "format": "time_series",
          "interval": "",
          "legendFormat": "ASN {{asn}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "ECS ASNs",
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "pps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 0,
        "y": 101
      },
      "id": 95,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(packets_top_geoLoc{agent=~\"$agent\",policy=~\"$policy\",geo_loc\n!~\"Unknown\"}[$__interval])/60) by (geo_loc))",
          "format": "time_series",
          "interval": "",
          "legendFormat": "{{geo_loc}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "Resolver Geo Locations",
      "transformations": [],
      "type": "timeseries"
    },
    {
      "datasource": {
        "type": "prometheus",
        "uid": "${DS_THANOS_QUERY FRONTEND}"
      },
      "description": "",
      "fieldConfig": {
        "defaults": {
          "color": {
            "mode": "palette-classic"
          },
          "custom": {
            "axisLabel": "",
            "axisPlacement": "auto",
            "barAlignment": 0,
            "drawStyle": "line",
            "fillOpacity": 10,
            "gradientMode": "none",
            "hideFrom": {
              "legend": false,
              "tooltip": false,
              "viz": false
            },
            "lineInterpolation": "linear",
            "lineWidth": 1,
            "pointSize": 5,
            "scaleDistribution": {
              "type": "linear"
            },
            "showPoints": "never",
            "spanNulls": true,
            "stacking": {
              "group": "A",
              "mode": "none"
            },
            "thresholdsStyle": {
              "mode": "off"
            }
          },
          "mappings": [],
          "thresholds": {
            "mode": "absolute",
            "steps": [
              {
                "color": "green",
                "value": null
              },
              {
                "color": "red",
                "value": 80
              }
            ]
          },
          "unit": "pps"
        },
        "overrides": []
      },
      "gridPos": {
        "h": 7,
        "w": 12,
        "x": 12,
        "y": 101
      },
      "id": 11,
      "interval": "1m",
      "maxDataPoints": 180,
      "options": {
        "legend": {
          "calcs": [],
          "displayMode": "hidden",
          "placement": "bottom"
        },
        "tooltip": {
          "mode": "multi",
          "sort": "desc"
        }
      },
      "pluginVersion": "8.4.4",
      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${DS_THANOS_QUERY FRONTEND}"
          },
          "exemplar": false,
          "expr": "topk(10,sum(avg_over_time(dns_top_geo_loc_ecs{agent=~\"$agent\",policy=~\"$policy\"}[$__interval])/60) by (geo_loc))",
          "format": "time_series",
          "interval": "",
          "legendFormat": "{{geo_loc}}",
          "queryType": "randomWalk",
          "refId": "A"
        }
      ],
      "title": "ECS Geo Locations",
      "type": "timeseries"
    }
  ],
  "refresh": false,
  "schemaVersion": 36,
  "style": "dark",
  "tags": [
    "dns_insights"
  ],
  "templating": {
    "list": [
      {
        "current": {},
        "datasource": {
          "type": "prometheus",
          "uid": "${DS_THANOS_QUERY FRONTEND}"
        },
        "definition": "label_values(policy)",
        "description": "Agent collection policy",
        "hide": 0,
        "includeAll": false,
        "label": "Policy",
        "multi": false,
        "name": "policy",
        "options": [],
        "query": {
          "query": "label_values(policy)",
          "refId": "StandardVariableQuery"
        },
        "refresh": 2,
        "regex": "",
        "skipUrlSync": false,
        "sort": 1,
        "tagValuesQuery": "",
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      },
      {
        "allValue": ".*",
        "current": {},
        "datasource": {
          "type": "prometheus",
          "uid": "${DS_THANOS_QUERY FRONTEND}"
        },
        "definition": "label_values(dns_wire_packets_events{policy=\"$policy\"},network)",
        "hide": 0,
        "includeAll": true,
        "label": "Network",
        "multi": false,
        "name": "network",
        "options": [],
        "query": {
          "query": "label_values(dns_wire_packets_events{policy=\"$policy\"},network)",
          "refId": "StandardVariableQuery"
        },
        "refresh": 1,
        "regex": "",
        "skipUrlSync": false,
        "sort": 3,
        "type": "query"
      },
      {
        "allValue": "",
        "current": {},
        "datasource": {
          "type": "prometheus",
          "uid": "${DS_THANOS_QUERY FRONTEND}"
        },
        "definition": "label_values(dns_wire_packets_events{policy=\"$policy\",network=~\"$network\"},agent)",
        "description": "Orb agents",
        "hide": 0,
        "includeAll": true,
        "label": "Agent",
        "multi": true,
        "name": "agent",
        "options": [],
        "query": {
          "query": "label_values(dns_wire_packets_events{policy=\"$policy\",network=~\"$network\"},agent)",
          "refId": "StandardVariableQuery"
        },
        "refresh": 2,
        "regex": "",
        "skipUrlSync": false,
        "sort": 1,
        "tagValuesQuery": "",
        "tagsQuery": "",
        "type": "query",
        "useTags": false
      }
    ]
  },
  "time": {
    "from": "now-1h",
    "to": "now"
  },
  "timepicker": {
    "refresh_intervals": [
      "1m",
      "5m",
      "15m",
      "30m",
      "1h",
      "2h",
      "1d"
    ]
  },
  "timezone": "browser",
  "title": "DNS Insights - Overview",
  "uid": "q35JzriVz",
  "version": 23,
  "weekStart": ""
}