elastic · sharadcrest · Jul 22, 2026 · Jul 22, 2026
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.0"
+  changes:
+    - description: Support aggregation logs in the data explorer dashboards.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/20283
 - version: "1.1.0"
   changes:
     - description: Add AWS VPC Flow dashboard.

@@ -14,6 +14,7 @@
                     "explicitInput": {
                         "dataViewId": "logs-*",
                         "fieldName": "observer.hostname",
+                        "id": "15c3dcbc-d25f-44e9-a9ad-7b773eaa0a8e",
                         "searchTechnique": "prefix",
                         "selectedOptions": [],
                         "sort": {
@@ -31,6 +32,7 @@
                     "explicitInput": {
                         "dataViewId": "logs-*",
                         "fieldName": "vpn.inferences",
+                        "id": "7d61094e-24f9-42db-8d54-acd2e006aea4",
                         "searchTechnique": "prefix",
                         "selectedOptions": [],
                         "sort": {
@@ -48,6 +50,7 @@
                     "explicitInput": {
                         "dataViewId": "logs-*",
                         "fieldName": "vpn.name",
+                        "id": "f4bcd288-056d-4cbf-abb7-7d3c327845af",
                         "searchTechnique": "prefix",
                         "selectedOptions": [],
                         "sort": {
@@ -206,7 +209,7 @@
                         "id": "",
                         "params": {
                             "fontSize": 12,
-                            "markdown": "**Navigation**\n\n**Corelight**\n\n- [Security Posture](#/dashboard/corelight-7c0946bc-acd0-4ec3-ab3b-8a92853f4a3b)\n- Data Insights\n  - [Name Resolution Insights](#/dashboard/corelight-8546a96c-86c9-4edf-9d46-88338d6ac40e)\n  - [Secure Channel Insights](#/dashboard/corelight-45197477-c13f-4e52-a5dd-fb4f53564963)\n  - [Remote Activity Insights](#/dashboard/corelight-f4864774-ed73-4b78-b861-5b8235ec12cf)\n- **Security Workflows**\n  - [Intel](#/dashboard/corelight-323b0f27-993e-4fee-ae6e-b5977d7cab11)\n  - [IP Interrogation](#/dashboard/corelight-3a4a279f-f238-47de-90ba-f643c5647fde)\n  - [Log Hunting](#/dashboard/corelight-ff07e65c-2703-4cbe-a45f-3881025352a3)\n  - [Notices](#/dashboard/corelight-f7da14f0-85db-48e8-a591-1f650af0f618)\n  - [RDP Inferences Overview](#/dashboard/corelight-2d4dc345-cbbe-4d7a-9203-5ab11c8cb5ba)\n  - [SSH Inferences Overview](#/dashboard/corelight-65a5fa91-06e4-459b-b4bb-998c85a6cf08)\n  - [Corelight Suricata IDS Alert Overview](#/dashboard/corelight-f1208ffe-d168-46d1-9531-24de523d1bfb)\n  - **VPN Insights**\n- Data Explorer\n  - [AWS VPC Flow](#/dashboard/corelight-caf92ff9-71b9-402c-813a-75ba5a3cb3b8)\n  - [Connections](#/dashboard/corelight-eff0434c-1e27-4c02-959e-9f5d95488efb)\n  - [DNS](#/dashboard/corelight-58885f47-95e1-4242-a1ee-783de69ace17)\n  - [Files](#/dashboard/corelight-0cfc8a95-4979-4265-b9ad-91edf63f01a9)\n  - [HTTP](#/dashboard/corelight-8c5f15f7-7063-4228-be54-fb8c20b29caa)\n  - [Software](#/dashboard/corelight-40bbc19b-dd9c-4b43-a88a-e29fc8701902)\n  - [SSL and x509](#/dashboard/corelight-e4a93cfe-4b1f-44df-ab99-50c74f6f2203)\n\n[**Integrations Page**](/app/integrations/detail/corelight/overview)",
+                            "markdown": "**Navigation**\n\n**Corelight**\n\n- [Security Posture](#/dashboard/corelight-7c0946bc-acd0-4ec3-ab3b-8a92853f4a3b)\n- Data Insights\n  - [Name Resolution Insights](#/dashboard/corelight-8546a96c-86c9-4edf-9d46-88338d6ac40e)\n  - [Secure Channel Insights](#/dashboard/corelight-45197477-c13f-4e52-a5dd-fb4f53564963)\n  - [Remote Activity Insights](#/dashboard/corelight-f4864774-ed73-4b78-b861-5b8235ec12cf)\n- **Security Workflows**\n  - [Intel](#/dashboard/corelight-323b0f27-993e-4fee-ae6e-b5977d7cab11)\n  - [IP Interrogation](#/dashboard/corelight-3a4a279f-f238-47de-90ba-f643c5647fde)\n  - [Log Hunting](#/dashboard/corelight-ff07e65c-2703-4cbe-a45f-3881025352a3)\n  - [Notices](#/dashboard/corelight-f7da14f0-85db-48e8-a591-1f650af0f618)\n  - [RDP Inferences Overview](#/dashboard/corelight-2d4dc345-cbbe-4d7a-9203-5ab11c8cb5ba)\n  - [SSH Inferences Overview](#/dashboard/corelight-65a5fa91-06e4-459b-b4bb-998c85a6cf08)\n  - [Corelight Suricata IDS Alert Overview](#/dashboard/corelight-f1208ffe-d168-46d1-9531-24de523d1bfb)\n  - **VPN Insights**\n- Data Explorer\n  - [Asset Classification](#/dashboard/corelight-64c6d5b5-a485-4f00-b24f-6c261d595db4)\n  - [AWS VPC Flow](#/dashboard/corelight-caf92ff9-71b9-402c-813a-75ba5a3cb3b8)\n  - [Connections](#/dashboard/corelight-eff0434c-1e27-4c02-959e-9f5d95488efb)\n  - [DNS](#/dashboard/corelight-58885f47-95e1-4242-a1ee-783de69ace17)\n  - [Files](#/dashboard/corelight-0cfc8a95-4979-4265-b9ad-91edf63f01a9)\n  - [HTTP](#/dashboard/corelight-8c5f15f7-7063-4228-be54-fb8c20b29caa)\n  - [Software](#/dashboard/corelight-40bbc19b-dd9c-4b43-a88a-e29fc8701902)\n  - [SSL and x509](#/dashboard/corelight-e4a93cfe-4b1f-44df-ab99-50c74f6f2203)\n\n[**Integrations Page**](/app/integrations/detail/corelight/overview)",
                             "openLinksInNewTab": false
                         },
                         "title": "",
@@ -1503,11 +1506,7 @@
             {
                 "embeddableConfig": {
                     "description": "",
-                    "enhancements": {
-                        "dynamicActions": {
-                            "events": []
-                        }
-                    },
+                    "enhancements": {},
                     "rowsPerPage": 10
                 },
                 "gridData": {
@@ -1525,10 +1524,10 @@
         ],
         "timeRestore": false,
         "title": "[Logs Corelight] VPN Insights",
-        "version": 3
+        "version": 2
     },
     "coreMigrationVersion": "8.8.0",
-    "created_at": "2026-02-10T10:09:07.824Z",
+    "created_at": "2026-05-11T11:24:06.193Z",
     "id": "corelight-023162b6-94da-4d8d-b1f6-de6192356cce",
     "references": [
         {
@@ -1556,11 +1555,6 @@
             "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[4].meta.index",
             "type": "index-pattern"
         },
-        {
-            "id": "corelight-9eee7e02-dea8-4e4b-9dc1-9d1df9785aef",
-            "name": "7c6146fc-0124-4600-ae05-74789072e669:panel_7c6146fc-0124-4600-ae05-74789072e669",
-            "type": "search"
-        },
         {
             "id": "logs-*",
             "name": "241315f2-1624-4910-a79a-4be4628aba8a:indexpattern-datasource-layer-50f85297-0e80-4346-8a62-e12782abfa6b",
@@ -1591,6 +1585,11 @@
             "name": "8600f87d-c2ea-41a2-b50d-e494e96beee3:indexpattern-datasource-layer-03c121a4-0295-4ca7-aff1-e30f25a83774",
             "type": "index-pattern"
         },
+        {
+            "id": "corelight-9eee7e02-dea8-4e4b-9dc1-9d1df9785aef",
+            "name": "7c6146fc-0124-4600-ae05-74789072e669:panel_7c6146fc-0124-4600-ae05-74789072e669",
+            "type": "search"
+        },
         {
             "id": "logs-*",
             "name": "controlGroup_15c3dcbc-d25f-44e9-a9ad-7b773eaa0a8e:optionsListDataView",
@@ -1605,33 +1604,9 @@
             "id": "logs-*",
             "name": "controlGroup_7d61094e-24f9-42db-8d54-acd2e006aea4:optionsListDataView",
             "type": "index-pattern"
-        },
-        {
-            "id": "logs-*",
-            "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index",
-            "type": "index-pattern"
-        },
-        {
-            "id": "logs-*",
-            "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index",
-            "type": "index-pattern"
-        },
-        {
-            "id": "logs-*",
-            "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index",
-            "type": "index-pattern"
-        },
-        {
-            "id": "logs-*",
-            "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[3].meta.index",
-            "type": "index-pattern"
-        },
-        {
-            "id": "logs-*",
-            "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[4].meta.index",
-            "type": "index-pattern"
         }
     ],
     "type": "dashboard",
-    "typeMigrationVersion": "10.2.0"
+    "typeMigrationVersion": "10.2.0",
+    "updated_by": "u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0"
 }