{"action":"created","issue":{"url":"https://api.github.com/repos/wwalker0307/ElasticMARC/issues/1","repository_url":"https://api.github.com/repos/wwalker0307/ElasticMARC","labels_url":"https://api.github.com/repos/wwalker0307/ElasticMARC/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/wwalker0307/ElasticMARC/issues/1/comments","events_url":"https://api.github.com/repos/wwalker0307/ElasticMARC/issues/1/events","html_url":"https://github.com/wwalker0307/ElasticMARC/issues/1","id":307685760,"number":1,"title":"Errors in visualizations","user":{"login":"tratchel","id":37665112,"avatar_url":"https://avatars3.githubusercontent.com/u/37665112?v=4","gravatar_id":"","url":"https://api.github.com/users/tratchel","html_url":"https://github.com/tratchel","followers_url":"https://api.github.com/users/tratchel/followers","following_url":"https://api.github.com/users/tratchel/following{/other_user}","gists_url":"https://api.github.com/users/tratchel/gists{/gist_id}","starred_url":"https://api.github.com/users/tratchel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tratchel/subscriptions","organizations_url":"https://api.github.com/users/tratchel/orgs","repos_url":"https://api.github.com/users/tratchel/repos","events_url":"https://api.github.com/users/tratchel/events{/privacy}","received_events_url":"https://api.github.com/users/tratchel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-22T15:10:43Z","updated_at":"2018-03-23T03:05:01Z","closed_at":null,"author_association":"NONE","body":"Hi wwalker0307,\r\nFirst off, thanks so much for providing this.  We've been working to get DMARC data ingested in Elastic ourselves and your work saved us a significant amount of time (and likely headaches).  \r\n\r\nAfter importing the visualizations and dashboards, there are a few errors that we ran into.\r\n\r\nErrors I get in the console: \r\n\r\n> - “Could not locate that index-pattern-field (id: authresult.spf_domain.keyword)”\r\n> - “Could not locate that index-pattern-field (id: authresult.dkim_result.keyword)”\r\n> - “Could not locate that visualization (id: 9627e210-0fba-11e8-8dc5-e141d701899b)”  \r\n\r\nThe first two were simple fixes, I just updated the id: from `authresult.blah ` to `auth_result.blah` and they worked perfectly.  \r\n\r\nThe last one for a missing visualization I'm less sure about.  The error we get is below, so I'm not sure what visualization it's trying to load\r\n\r\n![viz_err](https://user-images.githubusercontent.com/37665112/37778615-5ddc7094-2db8-11e8-80c9-2dacc0d234d0.png)\r\n\r\nBut judging from the screenshot on the ElasticMARC repo it looks like Top Senders (IP)\r\n\r\n![dashboard](https://user-images.githubusercontent.com/37665112/37778690-8ddff4d2-2db8-11e8-8679-44bbabee4b15.JPG)\r\n\r\nWhen I look at the ElasticMARC/kibana/visuals/DMARCVisuals.json I see visualizations for the other **Top Senders (x)** visuals, but nothing for Top Senders (IP) so I think it just might be missing.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/wwalker0307/ElasticMARC/issues/comments/375529180","html_url":"https://github.com/wwalker0307/ElasticMARC/issues/1#issuecomment-375529180","issue_url":"https://api.github.com/repos/wwalker0307/ElasticMARC/issues/1","id":375529180,"user":{"login":"wwalker0307","id":36755138,"avatar_url":"https://avatars2.githubusercontent.com/u/36755138?v=4","gravatar_id":"","url":"https://api.github.com/users/wwalker0307","html_url":"https://github.com/wwalker0307","followers_url":"https://api.github.com/users/wwalker0307/followers","following_url":"https://api.github.com/users/wwalker0307/following{/other_user}","gists_url":"https://api.github.com/users/wwalker0307/gists{/gist_id}","starred_url":"https://api.github.com/users/wwalker0307/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wwalker0307/subscriptions","organizations_url":"https://api.github.com/users/wwalker0307/orgs","repos_url":"https://api.github.com/users/wwalker0307/repos","events_url":"https://api.github.com/users/wwalker0307/events{/privacy}","received_events_url":"https://api.github.com/users/wwalker0307/received_events","type":"User","site_admin":false},"created_at":"2018-03-23T03:05:01Z","updated_at":"2018-03-23T03:05:01Z","author_association":"OWNER","body":"Ya, I made a few last minute changes across different deployments that lead to the disparity in the authresult/auth_result field name.  I've since made some changes and broken the visualizations into three separate files.  Would you mind grabbing the new ones and importing them into your setup.  I believe the issue is resolved in them.  I also made a fix to another the Top Senders (IP) table, that while missing, was aggregating the wrong number."}}
{"actor":{"display_login":"wwalker0307"}}