diff --git a/README.md b/README.md
index 01ab5065..31621f80 100644
--- a/README.md
+++ b/README.md
@@ -44,6 +44,16 @@ The web UI will listen on local 8081 port.
 ## nginx_auth
 Use nginx as a proxy with authentication for backend application.
 
+## packetbeat_ek
+Demo the packetbeat, elasticsearch and kibana.
+
+Some kibana dashboard config files are included.
+
+To import them, after all containers startup, go inside the kibana container, and run
+```sh
+$ /kibana/beats-dashboards-1.0.1/load.sh http://elasticsearch:9200
+```
+
 ## registry_mirror
 docker registry mirror, with redis as the backend cache.
 
diff --git a/packetbeat_ek/docker-compose.yml b/packetbeat_ek/docker-compose.yml
new file mode 100644
index 00000000..baae97b9
--- /dev/null
+++ b/packetbeat_ek/docker-compose.yml
@@ -0,0 +1,48 @@
+# This compose file will use packetbeat with elasticsearch and kibana
+#   elasticsearch will listen on local 9200, and  use /opt/data/elasticsearch for storage.
+#   es node can scale out.
+#   kibana will liten on local 5601, will load dashboard following https://www.elastic.co/guide/en/beats/libbeat/1.0.1/getting-started.html#load-kibana-dashboards.
+# https://github.com/yeasy/docker-compose-files
+
+
+# scale this with docker-compose scale es=3
+es:
+  image: elasticsearch:2.1
+  user: elasticsearch
+  expose:
+    - "9200"
+    - "9300"
+
+#elasticsearch configuration node, should not be scaled
+#config is under /usr/share/elasticsearch/config
+#data is under /usr/share/elasticsearch/data
+elasticsearch:
+  image: elasticsearch:2.1
+  hostname: elasticsearch
+  user: elasticsearch
+  links:
+    - es:es
+  ports:
+    - "9200:9200"
+  expose:
+    - "9300"
+  volumes:
+   #- /opt/data/elasticsearch:/usr/share/elasticsearch/data
+    - packetbeat.template.json:/tmp/packetbeat.template.json
+  command: sh -c "sleep 10; curl -XPUT es:9200/_template/packetbeat -d@'/tmp/packetbeat.template.json';elasticsearch"
+
+kibana:
+  image: kibana:4.3
+  ports:
+    - "5601:5601"
+  volumes:
+    - ./kibana/:/kibana/
+  links:
+    - elasticsearch:elasticsearch
+
+packetbeat:
+  image: yeasy/packetbeat:1.0.1
+  net: host
+  privileged: true
+  volumes:
+    - packetbeat.yml:/etc/packetbeat/packetbeat.yml
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/.gitignore b/packetbeat_ek/kibana/beats-dashboards-1.0.1/.gitignore
new file mode 100644
index 00000000..b16d6cea
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/.gitignore
@@ -0,0 +1,3 @@
+*.swp
+save/env
+.DS_Store
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/CHANGELOG.md b/packetbeat_ek/kibana/beats-dashboards-1.0.1/CHANGELOG.md
new file mode 100644
index 00000000..156d8b48
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/CHANGELOG.md
@@ -0,0 +1,25 @@
+# Change Log
+All notable changes to this project will be documented in this file based on the
+[Keep a Changelog](http://keepachangelog.com/) Standard.
+
+## [Unreleased](https://github.com/elastic/libbeat/compare/1.0.0-rc1...HEAD)
+
+### Backward Compatibility Breaks
+
+### Deprecated
+
+### Added
+
+### Bugfixes
+
+## [1.0.0-rc1](https://github.com/elastic/libbeat/compare/1.0.0-beta4...1.0.0-rc1)
+
+### Backward Compatibility Breaks
+
+### Deprecated
+
+### Bugfixes
+
+### Added
+- Update index patterns, dashboards after replacing timestamp with @timestamp
+
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/Makefile b/packetbeat_ek/kibana/beats-dashboards-1.0.1/Makefile
new file mode 100644
index 00000000..fb45d134
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/Makefile
@@ -0,0 +1,9 @@
+VERSION?=$(shell git rev-parse --abbrev-ref HEAD)
+
+.PHONY: dist
+dist:
+	git archive --format tar.gz --prefix beats-dashboards-$(VERSION)/ -o ../beats-dashboards-$(VERSION).tar.gz HEAD
+
+.PHONY: upload
+upload: dist
+	aws s3 cp --acl public-read ../beats-dashboards-$(VERSION).tar.gz s3://download.elasticsearch.org/beats/dashboards/
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/README.md b/packetbeat_ek/kibana/beats-dashboards-1.0.1/README.md
new file mode 100644
index 00000000..e94dbc54
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/README.md
@@ -0,0 +1,33 @@
+Beats dashboards
+================
+
+This repository contains sample Kibana4 dashboards for visualizing the data
+gathered by the Elastic [Beats](https://www.elastic.co/products/beats).
+
+Installation
+-------------
+
+To load the dashboards, execute the script pointing to the Elasticsearch HTTP
+URL:
+
+        ./load.sh http://localhost:9200
+
+
+If you want to use HTTP authentication for Elasticsearch, you can specify the
+credentials as a second parameter:
+
+        ./load.sh http://localhost:9200 'admin:password'
+
+Technical details
+-----------------
+The `dashboards` folder contains the JSON files as exported from Kibana, by
+using the simple python tool from the `save` directory. The loader is a simple
+shell script so that you don't need python installed when loading the
+dashboards.
+
+Screenshots
+-----------
+
+  ![Packetbeat Statistics](/screenshots/Packetbeat-statistics.png)
+  ![MySql performance](/screenshots/MySql-performance.png)
+  ![Thrift performance](/screenshots/Thrift-performance.png)
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/HTTP.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/HTTP.json
new file mode 100644
index 00000000..89ccaf10
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/HTTP.json
@@ -0,0 +1,11 @@
+{
+  "hits": 0, 
+  "timeRestore": false, 
+  "description": "", 
+  "title": "HTTP", 
+  "panelsJSON": "[{\"col\":4,\"id\":\"Web-transactions\",\"row\":1,\"size_x\":9,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"HTTP-error-codes\",\"row\":8,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"HTTP-error-codes-evolution\",\"row\":8,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Navigation\",\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Total-number-of-HTTP-transactions\",\"row\":5,\"size_x\":3,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"HTTP-codes-for-the-top-queries\",\"row\":5,\"size_x\":9,\"size_y\":3,\"type\":\"visualization\"},{\"id\":\"Top-10-HTTP-requests\",\"type\":\"visualization\",\"size_x\":12,\"size_y\":5,\"col\":1,\"row\":11}]", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/MongoDB-performance.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/MongoDB-performance.json
new file mode 100644
index 00000000..8dce0580
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/MongoDB-performance.json
@@ -0,0 +1,11 @@
+{
+  "hits": 0, 
+  "timeRestore": false, 
+  "description": "", 
+  "title": "MongoDB performance", 
+  "panelsJSON": "[{\"col\":1,\"id\":\"Navigation\",\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":4,\"id\":\"MongoDB-errors\",\"row\":1,\"size_x\":5,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"MongoDB-commands\",\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"MongoDB-errors-per-collection\",\"row\":5,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":5,\"id\":\"MongoDB-in-slash-out-throughput\",\"row\":5,\"size_x\":4,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"MongoDB-response-times-by-collection\",\"row\":8,\"size_x\":8,\"size_y\":5,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Top-slowest-MongoDB-queries\",\"row\":8,\"size_x\":4,\"size_y\":5,\"type\":\"visualization\"},{\"id\":\"Number-of-MongoDB-transactions-with-writeConcern-w-equal-0\",\"type\":\"visualization\",\"size_x\":4,\"size_y\":3,\"col\":9,\"row\":5}]", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/MySQL-performance.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/MySQL-performance.json
new file mode 100644
index 00000000..75955835
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/MySQL-performance.json
@@ -0,0 +1,11 @@
+{
+  "hits": 0, 
+  "timeRestore": false, 
+  "description": "", 
+  "title": "MySQL performance", 
+  "panelsJSON": "[{\"col\":4,\"id\":\"MySQL-Errors\",\"row\":1,\"size_x\":5,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"MySQL-Methods\",\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Navigation\",\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"MySQL-throughput\",\"row\":8,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Most-frequent-MySQL-queries\",\"row\":11,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Slowest-MySQL-queries\",\"row\":11,\"size_x\":6,\"size_y\":6,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Mysql-response-times-percentiles\",\"row\":5,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"id\":\"MySQL-Reads-vs-Writes\",\"type\":\"visualization\",\"size_x\":6,\"size_y\":3,\"col\":1,\"row\":8}]", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Packetbeat-Dashboard.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Packetbeat-Dashboard.json
new file mode 100644
index 00000000..55ca19a4
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Packetbeat-Dashboard.json
@@ -0,0 +1,11 @@
+{
+  "hits": 0, 
+  "timeRestore": false, 
+  "description": "", 
+  "title": "Packetbeat Dashboard", 
+  "panelsJSON": "[{\"col\":1,\"id\":\"Web-transactions\",\"row\":5,\"size_x\":3,\"size_y\":2,\"type\":\"visualization\"},{\"col\":4,\"id\":\"DB-transactions\",\"row\":5,\"size_x\":3,\"size_y\":2,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Cache-transactions\",\"row\":5,\"size_x\":3,\"size_y\":2,\"type\":\"visualization\"},{\"col\":10,\"id\":\"RPC-transactions\",\"row\":5,\"size_x\":3,\"size_y\":2,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Response-times-percentiles\",\"row\":10,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Errors-count-over-time\",\"row\":13,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Errors-vs-successful-transactions\",\"row\":10,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Latency-histogram\",\"row\":13,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Client-locations\",\"row\":1,\"size_x\":9,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Response-times-repartition\",\"row\":7,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"id\":\"Navigation\",\"type\":\"visualization\",\"size_x\":3,\"size_y\":4,\"col\":1,\"row\":1}]", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/PgSQL-performance.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/PgSQL-performance.json
new file mode 100644
index 00000000..7316f0c0
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/PgSQL-performance.json
@@ -0,0 +1,11 @@
+{
+  "hits": 0, 
+  "timeRestore": false, 
+  "description": "", 
+  "title": "PgSQL performance", 
+  "panelsJSON": "[{\"col\":1,\"id\":\"Navigation\",\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":4,\"id\":\"PgSQL-Errors\",\"row\":1,\"size_x\":5,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"PgSQL-Methods\",\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"PgSQL-response-times-percentiles\",\"row\":5,\"size_x\":12,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"PgSQL-throughput\",\"row\":8,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"PgSQL-Reads-vs-Writes\",\"row\":8,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"id\":\"Most-frequent-PgSQL-queries\",\"type\":\"visualization\",\"size_x\":6,\"size_y\":6,\"col\":1,\"row\":11},{\"id\":\"Slowest-PgSQL-queries\",\"type\":\"visualization\",\"size_x\":6,\"size_y\":6,\"col\":7,\"row\":11}]", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Thrift-performance.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Thrift-performance.json
new file mode 100644
index 00000000..10244fd4
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Thrift-performance.json
@@ -0,0 +1,11 @@
+{
+  "hits": 0, 
+  "timeRestore": false, 
+  "description": "", 
+  "title": "Thrift performance", 
+  "panelsJSON": "[{\"col\":1,\"id\":\"Navigation\",\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":4,\"id\":\"Thrift-requests-per-minute\",\"row\":1,\"size_x\":5,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Thrift-RPC-Errors\",\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Slowest-Thrift-RPC-methods\",\"row\":5,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Thrift-response-times-percentiles\",\"row\":5,\"size_x\":6,\"size_y\":3,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Top-Thrift-RPC-methods\",\"row\":8,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Top-Thrift-RPC-calls-with-errors\",\"row\":8,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"id\":\"Thrift-transactions\",\"type\":\"search\",\"size_x\":12,\"size_y\":8,\"col\":1,\"row\":12,\"columns\":[\"method\",\"type\",\"path\",\"responsetime\",\"status\"],\"sort\":[\"@timestamp\",\"desc\"]}]", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Topbeat-Dashboard.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Topbeat-Dashboard.json
new file mode 100644
index 00000000..f8b9a2a7
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/dashboard/Topbeat-Dashboard.json
@@ -0,0 +1,13 @@
+{
+  "hits": 0, 
+  "timeFrom": "now-15m", 
+  "timeRestore": true, 
+  "description": "", 
+  "title": "Topbeat-Dashboard", 
+  "panelsJSON": "[{\"col\":1,\"id\":\"Navigation\",\"row\":1,\"size_x\":3,\"size_y\":4,\"type\":\"visualization\"},{\"col\":4,\"id\":\"System-load\",\"row\":1,\"size_x\":5,\"size_y\":4,\"type\":\"visualization\"},{\"col\":9,\"id\":\"Disk-usage-overview\",\"row\":1,\"size_x\":4,\"size_y\":4,\"type\":\"visualization\"},{\"col\":8,\"id\":\"Process-status\",\"row\":5,\"size_x\":5,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Memory-usage\",\"row\":9,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"Disk-usage\",\"row\":13,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"CPU-usage\",\"row\":9,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":7,\"id\":\"CPU-usage-per-process\",\"row\":17,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Memory-usage-per-process\",\"row\":13,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Top-processes\",\"row\":17,\"size_x\":6,\"size_y\":4,\"type\":\"visualization\"},{\"col\":1,\"id\":\"Servers\",\"row\":5,\"size_x\":7,\"size_y\":4,\"type\":\"visualization\"}]", 
+  "timeTo": "now", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[filebeat-]YYYY.MM.DD.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[filebeat-]YYYY.MM.DD.json
new file mode 100644
index 00000000..b74197a0
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[filebeat-]YYYY.MM.DD.json
@@ -0,0 +1,6 @@
+{
+  "fields": "[{\"name\":\"offset\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"line\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":false},{\"name\":\"message\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":true,\"doc_values\":false},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":false},{\"name\":\"beat.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"count\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"source\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true}]", 
+  "intervalName": "days", 
+  "timeFieldName": "@timestamp", 
+  "title": "[filebeat-]YYYY.MM.DD"
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[packetbeat-]YYYY.MM.DD.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[packetbeat-]YYYY.MM.DD.json
new file mode 100644
index 00000000..94d5d543
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[packetbeat-]YYYY.MM.DD.json
@@ -0,0 +1,6 @@
+{
+  "fields": "[{\"name\":\"port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"responsetime\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"client_proc\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"count\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"bytes_out\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"http.content_length\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"query\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"client_ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"response\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":true,\"doc_values\":false},{\"name\":\"client_location\",\"type\":\"geo_point\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":false},{\"name\":\"request\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":true,\"doc_values\":false},{\"name\":\"path\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"client_port\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"bytes_in\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"status\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"http.phrase\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"beat.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"http.code\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"params\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":true,\"doc_values\":false},{\"name\":\"ip\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"client_server\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"method\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"server\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_score\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false}]", 
+  "intervalName": "days", 
+  "timeFieldName": "@timestamp", 
+  "title": "[packetbeat-]YYYY.MM.DD"
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[topbeat-]YYYY.MM.DD.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[topbeat-]YYYY.MM.DD.json
new file mode 100644
index 00000000..82527ced
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/index-pattern/[topbeat-]YYYY.MM.DD.json
@@ -0,0 +1,7 @@
+{
+  "fields": "[{\"name\":\"proc.cpu.total\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"swap.used_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_source\",\"type\":\"_source\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"count\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.cpu.user\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.mem.share\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.ppid\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.system_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"load.load15\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.used_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"beat.hostname\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.mem.size\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.mem.rss\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"load.load5\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.cpu.start_time\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.mem.rss_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"load.load1\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.pid\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_index\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"swap.actual_used_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.user_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.actual_used_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.state\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"@timestamp\",\"type\":\"date\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.cpu.user_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"beat.name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"proc.cpu.system\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.used_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.user\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.nice\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.system_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.user\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.user\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.softirq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.irq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.irq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.irq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.system\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.irq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.used\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.user\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.idle\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.user_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.total\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.iowait\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.irq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"swap.used\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.steal\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.nice\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.idle\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.system\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.user_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.softirq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"swap.total\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.steal\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.user_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.actual_used\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.softirq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.actual_free\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.softirq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.steal\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.iowait\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.nice\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"swap.free\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.user_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.steal\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.system_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.system\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"swap.actual_used\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.idle\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.iowait\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.iowait\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.softirq\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.iowait\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.steal\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"swap.actual_free\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.nice\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.system\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.nice\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu3.idle\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.system\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"mem.free\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu.user\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu0.system_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu1.system_p\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"cpu2.idle\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.files\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.free_files\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.device_name\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.used\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.avail\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.free\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.total\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"fs.mount_point\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"shipper\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":true,\"analyzed\":false,\"doc_values\":true},{\"name\":\"_id\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_type\",\"type\":\"string\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false},{\"name\":\"_score\",\"type\":\"number\",\"count\":0,\"scripted\":false,\"indexed\":false,\"analyzed\":false,\"doc_values\":false}]", 
+  "intervalName": "days", 
+  "fieldFormatMap": "{\"proc.cpu.user_p\":{\"id\":\"percent\"},\"proc.mem.share\":{\"id\":\"bytes\"},\"proc.mem.size\":{\"id\":\"bytes\"},\"proc.mem.rss\":{\"id\":\"bytes\"},\"swap.free\":{\"id\":\"bytes\"},\"swap.used_p\":{\"id\":\"percent\"},\"mem.used\":{\"id\":\"bytes\"},\"load.load15\":{\"id\":\"number\"},\"cpu.system_p\":{\"id\":\"percent\"},\"mem.total\":{\"id\":\"bytes\"},\"fs.used_p\":{\"id\":\"percent\"},\"proc.mem.rss_p\":{\"id\":\"percent\"},\"load.load1\":{\"id\":\"number\"},\"load.load5\":{\"id\":\"number\"},\"cpu.user_p\":{\"id\":\"percent\"},\"swap.used\":{\"id\":\"bytes\"},\"mem.free\":{\"id\":\"bytes\"},\"swap.actual_free\":{\"id\":\"bytes\"},\"mem.used_p\":{\"id\":\"percent\"},\"mem.actual_free\":{\"id\":\"bytes\"},\"mem.actual_used\":{\"id\":\"bytes\"},\"fs.used\":{\"id\":\"bytes\"},\"fs.avail\":{\"id\":\"bytes\"},\"fs.free\":{\"id\":\"bytes\"},\"fs.total\":{\"id\":\"bytes\"}}", 
+  "timeFieldName": "@timestamp", 
+  "title": "[topbeat-]YYYY.MM.DD"
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Cache-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Cache-transactions.json
new file mode 100644
index 00000000..c118ade2
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Cache-transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Cache transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[],\"query\":{\"query_string\":{\"query\":\"type: redis\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "type", 
+    "method", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/DB-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/DB-transactions.json
new file mode 100644
index 00000000..8cf83236
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/DB-transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "DB transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[],\"query\":{\"query_string\":{\"query\":\"type: mysql or type: pgsql or type: mongodb\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "type", 
+    "method", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Default-Search.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Default-Search.json
new file mode 100644
index 00000000..a247635f
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Default-Search.json
@@ -0,0 +1,21 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Default Search", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"mongodb\"},\"query\":{\"match\":{\"type\":{\"query\":\"mongodb\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status", 
+    "query"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Errors.json
new file mode 100644
index 00000000..05a85da1
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Errors.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Errors", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":true,\"key\":\"status\",\"value\":\"OK\",\"disabled\":false},\"query\":{\"match\":{\"status\":{\"query\":\"OK\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "type", 
+    "method", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Filesystem-stats.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Filesystem-stats.json
new file mode 100644
index 00000000..740b37f3
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Filesystem-stats.json
@@ -0,0 +1,16 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Filesystem stats", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[topbeat-]YYYY.MM.DD\",\"query\":{\"query_string\":{\"query\":\"type: filesystem\",\"analyze_wildcard\":true}},\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"filter\":[]}"
+  }, 
+  "columns": [
+    "_source"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/HTTP-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/HTTP-errors.json
new file mode 100644
index 00000000..6a1ce271
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/HTTP-errors.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "HTTP errors", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"http\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"http\",\"type\":\"phrase\"}}}},{\"meta\":{\"negate\":true,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"http.code\",\"value\":200,\"disabled\":false},\"query\":{\"match\":{\"http.code\":{\"query\":200,\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
+  }, 
+  "columns": [
+    "type", 
+    "method", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-errors.json
new file mode 100644
index 00000000..0c8c69f1
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-errors.json
@@ -0,0 +1,21 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "MongoDB errors", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"mongodb\"},\"query\":{\"match\":{\"type\":{\"query\":\"mongodb\",\"type\":\"phrase\"}}}},{\"meta\":{\"negate\":true,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"status\",\"value\":\"OK\",\"disabled\":false},\"query\":{\"match\":{\"status\":{\"query\":\"OK\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status", 
+    "query"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-transactions-with-write-concern-0.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-transactions-with-write-concern-0.json
new file mode 100644
index 00000000..f8635ba2
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-transactions-with-write-concern-0.json
@@ -0,0 +1,21 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "MongoDB transactions with write concern 0", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"mongodb\"},\"query\":{\"match\":{\"type\":{\"query\":\"mongodb\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"request: \\\"writeConcern w 0\\\"\"}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status", 
+    "query"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-transactions.json
new file mode 100644
index 00000000..677a996c
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MongoDB-transactions.json
@@ -0,0 +1,21 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "MongoDB transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"mongodb\"},\"query\":{\"match\":{\"type\":{\"query\":\"mongodb\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status", 
+    "query"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MySQL-Transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MySQL-Transactions.json
new file mode 100644
index 00000000..43565428
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MySQL-Transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "MySQL Transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"mysql\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"mysql\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MySQL-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MySQL-errors.json
new file mode 100644
index 00000000..65ac3afa
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/MySQL-errors.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "MySQL errors", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"mysql\"},\"query\":{\"match\":{\"type\":{\"query\":\"mysql\",\"type\":\"phrase\"}}}},{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":true,\"key\":\"status\",\"value\":\"OK\",\"disabled\":false},\"query\":{\"match\":{\"status\":{\"query\":\"OK\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/PgSQL-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/PgSQL-errors.json
new file mode 100644
index 00000000..9f48e9d4
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/PgSQL-errors.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "PgSQL errors", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"pgsql\"},\"query\":{\"match\":{\"type\":{\"query\":\"pgsql\",\"type\":\"phrase\"}}}},{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":true,\"key\":\"status\",\"value\":\"OK\",\"disabled\":false},\"query\":{\"match\":{\"status\":{\"query\":\"OK\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/PgSQL-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/PgSQL-transactions.json
new file mode 100644
index 00000000..ceab018b
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/PgSQL-transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "PgSQL transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"pgsql\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"pgsql\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Proc-stats.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Proc-stats.json
new file mode 100644
index 00000000..ff8f7469
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Proc-stats.json
@@ -0,0 +1,16 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Proc stats", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[topbeat-]YYYY.MM.DD\",\"query\":{\"query_string\":{\"query\":\"type: process\",\"analyze_wildcard\":true}},\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"filter\":[]}"
+  }, 
+  "columns": [
+    "_source"
+  ]
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Processes.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Processes.json
new file mode 100644
index 00000000..5352e133
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Processes.json
@@ -0,0 +1,21 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Processes", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[topbeat-]YYYY.MM.DD\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"[topbeat-]YYYY.MM.DD\",\"key\":\"type\",\"value\":\"proc\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"proc\",\"type\":\"phrase\"}}}}]}"
+  }, 
+  "columns": [
+    "proc.name", 
+    "proc.cpu.user_p", 
+    "proc.mem.rss_p", 
+    "proc.mem.rss", 
+    "proc.state", 
+    "proc.cpu.start_time"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/RPC-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/RPC-transactions.json
new file mode 100644
index 00000000..8f021907
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/RPC-transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "RPC transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[],\"query\":{\"query_string\":{\"query\":\"type: thrift\",\"analyze_wildcard\":true}}}"
+  }, 
+  "columns": [
+    "type", 
+    "method", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/System-stats.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/System-stats.json
new file mode 100644
index 00000000..669c5cd7
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/System-stats.json
@@ -0,0 +1,16 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "System stats", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[topbeat-]YYYY.MM.DD\",\"query\":{\"query_string\":{\"query\":\"type: system\",\"analyze_wildcard\":true}},\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"require_field_match\":false,\"fragment_size\":2147483647},\"filter\":[]}"
+  }, 
+  "columns": [
+    "_source"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/System-wide.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/System-wide.json
new file mode 100644
index 00000000..4acad969
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/System-wide.json
@@ -0,0 +1,22 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "System wide", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[topbeat-]YYYY.MM.DD\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[{\"meta\":{\"negate\":false,\"index\":\"[topbeat-]YYYY.MM.DD\",\"key\":\"type\",\"value\":\"system\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"system\",\"type\":\"phrase\"}}}}]}"
+  }, 
+  "columns": [
+    "beat.name", 
+    "cpu.user_p", 
+    "cpu.steal", 
+    "load.load1", 
+    "load.load5", 
+    "mem.used", 
+    "mem.used_p"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Thrift-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Thrift-errors.json
new file mode 100644
index 00000000..735bfb8b
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Thrift-errors.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Thrift errors", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"disabled\":false,\"index\":\"[packetbeat-]YYYY.MM.DD\",\"key\":\"type\",\"negate\":false,\"value\":\"thrift\"},\"query\":{\"match\":{\"type\":{\"query\":\"thrift\",\"type\":\"phrase\"}}}},{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":true,\"key\":\"status\",\"value\":\"OK\",\"disabled\":false},\"query\":{\"match\":{\"status\":{\"query\":\"OK\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"type: thrift\"}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Thrift-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Thrift-transactions.json
new file mode 100644
index 00000000..c1f116b8
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Thrift-transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Thrift transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"thrift\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"thrift\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"type: thrift\"}}}"
+  }, 
+  "columns": [
+    "method", 
+    "type", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Web-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Web-transactions.json
new file mode 100644
index 00000000..c936357b
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/search/Web-transactions.json
@@ -0,0 +1,20 @@
+{
+  "sort": [
+    "@timestamp", 
+    "desc"
+  ], 
+  "hits": 0, 
+  "description": "", 
+  "title": "Web transactions", 
+  "version": 1, 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"http\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"http\",\"type\":\"phrase\"}}}}],\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
+  }, 
+  "columns": [
+    "type", 
+    "method", 
+    "path", 
+    "responsetime", 
+    "status"
+  ]
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Average-system-load-across-all-systems.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Average-system-load-across-all-systems.json
new file mode 100644
index 00000000..6113e951
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Average-system-load-across-all-systems.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"metric\",\"params\":{\"fontSize\":60},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"load.load1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Average system load across all systems", 
+  "version": 1, 
+  "savedSearchId": "System-wide", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/CPU-usage-per-process.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/CPU-usage-per-process.json
new file mode 100644
index 00000000..6a1658e8
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/CPU-usage-per-process.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.cpu.user_p\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"proc.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "CPU usage per process", 
+  "version": 1, 
+  "savedSearchId": "Proc-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/CPU-usage.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/CPU-usage.json
new file mode 100644
index 00000000..fd4f5d6d
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/CPU-usage.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu.system_p\"}},{\"id\":\"2\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu.user_p\"}},{\"id\":\"3\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "CPU usage", 
+  "version": 1, 
+  "savedSearchId": "System-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Cache-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Cache-transactions.json
new file mode 100644
index 00000000..e6b17197
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Cache-transactions.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Cache transactions", 
+  "version": 1, 
+  "savedSearchId": "Cache-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Client-locations.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Client-locations.json
new file mode 100644
index 00000000..bd573454
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Client-locations.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"tile_map\",\"params\":{\"isDesaturated\":true,\"mapType\":\"Shaded Circle Markers\"},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"client_location\",\"precision\":3}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Client locations", 
+  "version": 1, 
+  "savedSearchId": "Web-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/DB-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/DB-transactions.json
new file mode 100644
index 00000000..c1d029aa
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/DB-transactions.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"type\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "DB transactions", 
+  "version": 1, 
+  "savedSearchId": "DB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Disk-usage-overview.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Disk-usage-overview.json
new file mode 100644
index 00000000..d44cea05
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Disk-usage-overview.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"fs.used_p\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"beat.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Disk usage overview", 
+  "version": 1, 
+  "savedSearchId": "Filesystem-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Disk-usage.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Disk-usage.json
new file mode 100644
index 00000000..17e40e4e
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Disk-usage.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"fs.used\"}},{\"id\":\"2\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"fs.used_p\"}},{\"id\":\"3\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"fs.total\"}},{\"id\":\"4\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"fs.free\"}},{\"id\":\"5\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"fs.free\"}},{\"id\":\"6\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"fs.device_name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"7\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"fs.mount_point\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Disk usage", 
+  "version": 1, 
+  "savedSearchId": "Filesystem-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Errors-count-over-time.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Errors-count-over-time.json
new file mode 100644
index 00000000..5d101605
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Errors-count-over-time.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"type\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Errors count over time", 
+  "version": 1, 
+  "savedSearchId": "Errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Errors-vs-successful-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Errors-vs-successful-transactions.json
new file mode 100644
index 00000000..50f97d67
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Errors-vs-successful-transactions.json
@@ -0,0 +1,9 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"percentage\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"status\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[],\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
+  }, 
+  "version": 1, 
+  "description": "", 
+  "title": "Errors vs successful transactions"
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Evolution-of-the-CPU-times-per-process.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Evolution-of-the-CPU-times-per-process.json
new file mode 100644
index 00000000..44bfc8d4
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Evolution-of-the-CPU-times-per-process.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.cpu.user_p\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"s\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"proc.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Evolution of the CPU times per process", 
+  "version": 1, 
+  "savedSearchId": "Processes", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-codes-for-the-top-queries.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-codes-for-the-top-queries.json
new file mode 100644
index 00000000..2ec8f144
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-codes-for-the-top-queries.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"query\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\",\"row\":false}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.code\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "HTTP codes for the top queries", 
+  "version": 1, 
+  "savedSearchId": "Web-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-error-codes-evolution.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-error-codes-evolution.json
new file mode 100644
index 00000000..83a441fb
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-error-codes-evolution.json
@@ -0,0 +1,9 @@
+{
+  "visState": "{\"aggs\":[{\"id\":\"1\",\"params\":{\"field\":\"count\"},\"schema\":\"metric\",\"type\":\"sum\"},{\"id\":\"2\",\"params\":{\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"},{\"id\":\"3\",\"params\":{\"field\":\"http.code\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":5},\"schema\":\"group\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"defaultYExtents\":false,\"shareYAxis\":true},\"type\":\"line\"}", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"http\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"http\",\"type\":\"phrase\"}}}}],\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"query\":{\"query_string\":{\"query\":\"!http.code: [200 TO 299]\",\"analyze_wildcard\":true}}}"
+  }, 
+  "version": 1, 
+  "description": "", 
+  "title": "HTTP error codes evolution"
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-error-codes.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-error-codes.json
new file mode 100644
index 00000000..08577d68
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/HTTP-error-codes.json
@@ -0,0 +1,9 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.code\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[{\"meta\":{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"negate\":false,\"key\":\"type\",\"value\":\"http\",\"disabled\":false},\"query\":{\"match\":{\"type\":{\"query\":\"http\",\"type\":\"phrase\"}}}}],\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"query\":{\"query_string\":{\"query\":\"http.code: [300 TO *]\",\"analyze_wildcard\":true}}}"
+  }, 
+  "version": 1, 
+  "description": "", 
+  "title": "HTTP error codes"
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Latency-histogram.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Latency-histogram.json
new file mode 100644
index 00000000..1a15967d
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Latency-histogram.json
@@ -0,0 +1,9 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"responsetime\",\"interval\":10,\"min_doc_count\":false,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"index\":\"[packetbeat-]YYYY.MM.DD\",\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"filter\":[]}"
+  }, 
+  "version": 1, 
+  "description": "", 
+  "title": "Latency histogram"
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Memory-usage-per-process.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Memory-usage-per-process.json
new file mode 100644
index 00000000..fe8582b9
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Memory-usage-per-process.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.mem.rss_p\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"proc.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Memory usage per process", 
+  "version": 1, 
+  "savedSearchId": "Proc-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Memory-usage.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Memory-usage.json
new file mode 100644
index 00000000..2fdf275d
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Memory-usage.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"mem.used_p\"}},{\"id\":\"2\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"swap.used_p\"}},{\"id\":\"3\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Memory usage", 
+  "version": 1, 
+  "savedSearchId": "System-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-commands.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-commands.json
new file mode 100644
index 00000000..37515491
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-commands.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":true,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"silhouette\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"method\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MongoDB commands", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-errors-per-collection.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-errors-per-collection.json
new file mode 100644
index 00000000..aa2aeed8
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-errors-per-collection.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"radiusRatio\":9,\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"spyPerPage\":10,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"resource\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MongoDB errors per collection", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-errors.json
new file mode 100644
index 00000000..b8026632
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-errors.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"radiusRatio\":9,\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"showCircles\":true,\"smoothLines\":false,\"spyPerPage\":10,\"times\":[],\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"split\",\"params\":{\"field\":\"resource\",\"size\":3,\"order\":\"desc\",\"orderBy\":\"1\",\"row\":true}},{\"id\":\"4\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"method\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MongoDB errors", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-in-slash-out-throughput.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-in-slash-out-throughput.json
new file mode 100644
index 00000000..79da6b01
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-in-slash-out-throughput.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"bytes_in\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"4\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"bytes_out\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MongoDB in/out throughput", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-response-times-and-count.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-response-times-and-count.json
new file mode 100644
index 00000000..ca72785b
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-response-times-and-count.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":false,\"radiusRatio\":\"9\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\",\"percents\":[99]}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"resource\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1.99\"}},{\"id\":\"4\",\"type\":\"sum\",\"schema\":\"radius\",\"params\":{\"field\":\"count\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MongoDB response times and count", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-response-times-by-collection.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-response-times-by-collection.json
new file mode 100644
index 00000000..a1f3866d
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MongoDB-response-times-by-collection.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":false,\"radiusRatio\":\"9\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\",\"percents\":[99]}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"resource\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1.99\"}},{\"id\":\"4\",\"type\":\"sum\",\"schema\":\"radius\",\"params\":{\"field\":\"count\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MongoDB response times by collection", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Most-frequent-MySQL-queries.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Most-frequent-MySQL-queries.json
new file mode 100644
index 00000000..aff4e8d3
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Most-frequent-MySQL-queries.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"query\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Most frequent MySQL queries", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Most-frequent-PgSQL-queries.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Most-frequent-PgSQL-queries.json
new file mode 100644
index 00000000..4992e313
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Most-frequent-PgSQL-queries.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"query\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Most frequent PgSQL queries", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Errors.json
new file mode 100644
index 00000000..d27f2e77
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Errors.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MySQL Errors", 
+  "version": 1, 
+  "savedSearchId": "MySQL-errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Methods.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Methods.json
new file mode 100644
index 00000000..5cba41cc
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Methods.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"wiggle\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"method\",\"size\":20,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MySQL Methods", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Reads-vs-Writes.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Reads-vs-Writes.json
new file mode 100644
index 00000000..40a56577
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-Reads-vs-Writes.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"query\":\"method: SELECT\",\"analyze_wildcard\":true}}}},{\"input\":{\"query\":{\"query_string\":{\"query\":\"method: INSERT or method: UPDATE or method: DELETE\",\"analyze_wildcard\":true}}}}]}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MySQL Reads vs Writes", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-throughput.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-throughput.json
new file mode 100644
index 00000000..0bcd1bd6
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/MySQL-throughput.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"bytes_out\"}},{\"id\":\"3\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"bytes_in\"}},{\"id\":\"4\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "MySQL throughput", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Mysql-response-times-percentiles.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Mysql-response-times-percentiles.json
new file mode 100644
index 00000000..d0b92e5c
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Mysql-response-times-percentiles.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\",\"percents\":[75,99,99.5]}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Mysql response times percentiles", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Navigation.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Navigation.json
new file mode 100644
index 00000000..4a3f70d3
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Navigation.json
@@ -0,0 +1,9 @@
+{
+  "visState": "{\"aggs\":[],\"listeners\":{},\"params\":{\"markdown\":\"###Packetbeat:\\n\\n[Dashboard](/#/dashboard/Packetbeat-Dashboard)\\n\\n[Web transactions](/#/dashboard/HTTP)\\n\\n[MySQL performance](/#/dashboard/MySQL-performance)\\n\\n[PostgreSQL performance](/#/dashboard/PgSQL-performance)\\n\\n[MongoDB performance](/#/dashboard/MongoDB-performance)\\n\\n[Thrift-RPC performance](/#/dashboard/Thrift-performance)\\n\\n###Topbeat:\\n\\n[Dashboard](/#/dashboard/Topbeat-Dashboard)\"},\"type\":\"markdown\"}", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}},\"filter\":[]}"
+  }, 
+  "version": 1, 
+  "description": "", 
+  "title": "Navigation"
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json
new file mode 100644
index 00000000..d3eaccaa
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Number-of-MongoDB-transactions-with-writeConcern-w-equal-0.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"count\",\"schema\":\"radius\",\"params\":{}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Number of MongoDB transactions with writeConcern w=0", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions-with-write-concern-0", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Errors.json
new file mode 100644
index 00000000..b0f65dda
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Errors.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "PgSQL Errors", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Methods.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Methods.json
new file mode 100644
index 00000000..09d43c4d
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Methods.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"wiggle\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"method\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "PgSQL Methods", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Reads-vs-Writes.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Reads-vs-Writes.json
new file mode 100644
index 00000000..4950c070
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-Reads-vs-Writes.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"query\":\"method: SELECT\",\"analyze_wildcard\":true}}}},{\"input\":{\"query\":{\"query_string\":{\"query\":\"method: INSERT or method: UPDATE or method: DELETE\",\"analyze_wildcard\":true}}}}]}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "PgSQL Reads vs Writes", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-response-times-percentiles.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-response-times-percentiles.json
new file mode 100644
index 00000000..b634acdd
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-response-times-percentiles.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"addLegend\":true,\"addTooltip\":true,\"defaultYExtents\":false,\"shareYAxis\":true},\"aggs\":[{\"id\":\"1\",\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\",\"percents\":[75,99,99.5]}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "PgSQL response times percentiles", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-throughput.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-throughput.json
new file mode 100644
index 00000000..5c471b02
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/PgSQL-throughput.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"bytes_out\"}},{\"id\":\"2\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"bytes_in\"}},{\"id\":\"3\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "PgSQL throughput", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Process-status.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Process-status.json
new file mode 100644
index 00000000..33b0452c
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Process-status.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"proc.state\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Process status", 
+  "version": 1, 
+  "savedSearchId": "Proc-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/RPC-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/RPC-transactions.json
new file mode 100644
index 00000000..c39f57d9
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/RPC-transactions.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "RPC transactions", 
+  "version": 1, 
+  "savedSearchId": "RPC-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Reads-versus-Writes.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Reads-versus-Writes.json
new file mode 100644
index 00000000..b85e5373
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Reads-versus-Writes.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"grouped\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":{\"query_string\":{\"query\":\"method: SELECT\",\"analyze_wildcard\":true}}}},{\"input\":{\"query\":{\"query_string\":{\"query\":\"method: INSERT or method: UPDATE or method: DELETE\",\"analyze_wildcard\":true}}}}]}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Reads versus Writes", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Response-times-percentiles.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Response-times-percentiles.json
new file mode 100644
index 00000000..33e87403
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Response-times-percentiles.json
@@ -0,0 +1,9 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\",\"percents\":[75,95,99]}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[],\"index\":\"[packetbeat-]YYYY.MM.DD\",\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}}},\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\"}}}"
+  }, 
+  "version": 1, 
+  "description": "", 
+  "title": "Response times percentiles"
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Response-times-repartition.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Response-times-repartition.json
new file mode 100644
index 00000000..e8faac9d
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Response-times-repartition.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"histogram\",\"schema\":\"group\",\"params\":{\"field\":\"responsetime\",\"interval\":10,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Response times repartition", 
+  "version": 1, 
+  "savedSearchId": "Default-Search", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Servers.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Servers.json
new file mode 100644
index 00000000..b7a8b1b8
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Servers.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu.user_p\"}},{\"id\":\"3\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"cpu.system_p\"}},{\"id\":\"4\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mem.total\"}},{\"id\":\"5\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mem.used\"}},{\"id\":\"8\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mem.used_p\"}},{\"id\":\"6\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"mem.free\"}},{\"id\":\"9\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"beat.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Servers", 
+  "version": 1, 
+  "savedSearchId": "System-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-MySQL-queries.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-MySQL-queries.json
new file mode 100644
index 00000000..0b252ff0
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-MySQL-queries.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"query\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Slowest MySQL queries", 
+  "version": 1, 
+  "savedSearchId": "MySQL-Transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-PgSQL-queries.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-PgSQL-queries.json
new file mode 100644
index 00000000..828885cc
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-PgSQL-queries.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"query\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Slowest PgSQL queries", 
+  "version": 1, 
+  "savedSearchId": "PgSQL-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-Thrift-RPC-methods.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-Thrift-RPC-methods.json
new file mode 100644
index 00000000..1a9c1a8f
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Slowest-Thrift-RPC-methods.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"method\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Slowest Thrift RPC methods", 
+  "version": 1, 
+  "savedSearchId": "Thrift-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/System-load.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/System-load.json
new file mode 100644
index 00000000..63da8a44
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/System-load.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"load.load1\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"beat.name\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "System load", 
+  "version": 1, 
+  "savedSearchId": "System-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-RPC-Errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-RPC-Errors.json
new file mode 100644
index 00000000..ecaaec92
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-RPC-Errors.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Thrift RPC Errors", 
+  "version": 1, 
+  "savedSearchId": "Thrift-errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-requests-per-minute.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-requests-per-minute.json
new file mode 100644
index 00000000..90ad4179
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-requests-per-minute.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"minute\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Thrift requests per minute", 
+  "version": 1, 
+  "savedSearchId": "Thrift-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-response-times-percentiles.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-response-times-percentiles.json
new file mode 100644
index 00000000..26d6664c
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Thrift-response-times-percentiles.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"aggs\":[{\"id\":\"1\",\"params\":{\"field\":\"responsetime\",\"percents\":[75,99,99.5]},\"schema\":\"metric\",\"type\":\"percentiles\"},{\"id\":\"2\",\"params\":{\"extended_bounds\":{},\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1},\"schema\":\"segment\",\"type\":\"date_histogram\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTooltip\":true,\"defaultYExtents\":false,\"shareYAxis\":true},\"type\":\"line\"}", 
+  "description": "", 
+  "title": "Thrift response times percentiles", 
+  "version": 1, 
+  "savedSearchId": "Thrift-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-HTTP-requests.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-HTTP-requests.json
new file mode 100644
index 00000000..a266df50
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-HTTP-requests.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"query\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Top 10 HTTP requests", 
+  "version": 1, 
+  "savedSearchId": "Web-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-memory-consumers.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-memory-consumers.json
new file mode 100644
index 00000000..574eb689
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-memory-consumers.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.mem.rss_p\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"proc.name\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Top 10 memory consumers", 
+  "version": 1, 
+  "savedSearchId": "Processes", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-processes-by-total-CPU-usage.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-processes-by-total-CPU-usage.json
new file mode 100644
index 00000000..33e95015
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-10-processes-by-total-CPU-usage.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"aggs\":[{\"id\":\"1\",\"params\":{\"field\":\"proc.cpu.total\"},\"schema\":\"metric\",\"type\":\"max\"},{\"id\":\"2\",\"params\":{\"field\":\"proc.name\",\"order\":\"desc\",\"orderBy\":\"1\",\"size\":10},\"schema\":\"segment\",\"type\":\"terms\"}],\"listeners\":{},\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"defaultYExtents\":false,\"mode\":\"stacked\",\"scale\":\"linear\",\"setYExtents\":false,\"shareYAxis\":true,\"times\":[],\"yAxis\":{}},\"type\":\"histogram\"}", 
+  "description": "", 
+  "title": "Top 10 processes by total CPU usage", 
+  "version": 1, 
+  "savedSearchId": "Processes", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-Thrift-RPC-calls-with-errors.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-Thrift-RPC-calls-with-errors.json
new file mode 100644
index 00000000..bca35aac
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-Thrift-RPC-calls-with-errors.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"method\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Top Thrift-RPC calls with errors", 
+  "version": 1, 
+  "savedSearchId": "Thrift-errors", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-Thrift-RPC-methods.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-Thrift-RPC-methods.json
new file mode 100644
index 00000000..e432b603
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-Thrift-RPC-methods.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"method\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Top Thrift-RPC methods", 
+  "version": 1, 
+  "savedSearchId": "Thrift-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-processes.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-processes.json
new file mode 100644
index 00000000..9ddfb931
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-processes.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.cpu.user_p\"}},{\"id\":\"2\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.mem.rss\"}},{\"id\":\"3\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.mem.rss_p\"}},{\"id\":\"5\",\"type\":\"max\",\"schema\":\"metric\",\"params\":{\"field\":\"proc.mem.share\"}},{\"id\":\"6\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"proc.name\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Top processes", 
+  "version": 1, 
+  "savedSearchId": "Proc-stats", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-slowest-MongoDB-queries.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-slowest-MongoDB-queries.json
new file mode 100644
index 00000000..3ce2ff61
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Top-slowest-MongoDB-queries.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"table\",\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMeticsAtAllLevels\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"percentiles\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\",\"percents\":[99]}},{\"id\":\"2\",\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"query\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1.99\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Top slowest MongoDB queries", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Total-number-of-HTTP-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Total-number-of-HTTP-transactions.json
new file mode 100644
index 00000000..5878afa8
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Total-number-of-HTTP-transactions.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"aggs\":[{\"id\":\"1\",\"params\":{\"field\":\"count\"},\"schema\":\"metric\",\"type\":\"sum\"}],\"listeners\":{},\"params\":{\"fontSize\":\"37\"},\"type\":\"metric\"}", 
+  "description": "", 
+  "title": "Total number of HTTP transactions", 
+  "version": 1, 
+  "savedSearchId": "Web-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
\ No newline at end of file
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Total-time-spent-in-each-MongoDB-collection.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Total-time-spent-in-each-MongoDB-collection.json
new file mode 100644
index 00000000..1c424b04
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Total-time-spent-in-each-MongoDB-collection.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"area\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"smoothLines\":false,\"scale\":\"linear\",\"interpolate\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"responsetime\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"resource\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Total time spent in each MongoDB collection", 
+  "version": 1, 
+  "savedSearchId": "MongoDB-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Web-transactions.json b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Web-transactions.json
new file mode 100644
index 00000000..de63f1ee
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/dashboards/visualization/Web-transactions.json
@@ -0,0 +1,10 @@
+{
+  "visState": "{\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"mode\":\"stacked\",\"defaultYExtents\":false},\"aggs\":[{\"id\":\"1\",\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"count\"}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}", 
+  "description": "", 
+  "title": "Web transactions", 
+  "version": 1, 
+  "savedSearchId": "Web-transactions", 
+  "kibanaSavedObjectMeta": {
+    "searchSourceJSON": "{\"filter\":[]}"
+  }
+}
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/load.sh b/packetbeat_ek/kibana/beats-dashboards-1.0.1/load.sh
new file mode 100644
index 00000000..ca3c5053
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/load.sh
@@ -0,0 +1,56 @@
+#!/bin/bash
+
+if [ -z "$1" ]; then
+    ELASTICSEARCH=http://localhost:9200
+else
+    ELASTICSEARCH=$1
+fi
+
+if [ -z "$2" ]; then
+    CURL=curl
+else
+    CURL="curl --user $2"
+fi
+
+echo $CURL
+DIR=dashboards
+
+for file in $DIR/search/*.json
+do
+    name=`basename $file .json`
+    echo "Loading search $name:"
+    $CURL -XPUT $ELASTICSEARCH/.kibana/search/$name \
+        -d @$file || exit 1
+    echo
+done
+
+for file in $DIR/visualization/*.json
+do
+    name=`basename $file .json`
+    echo "Loading visualization $name:"
+    $CURL -XPUT $ELASTICSEARCH/.kibana/visualization/$name \
+        -d @$file || exit 1
+    echo
+done
+
+for file in $DIR/dashboard/*.json
+do
+    name=`basename $file .json`
+    echo "Loading dashboard $name:"
+    $CURL -XPUT $ELASTICSEARCH/.kibana/dashboard/$name \
+        -d @$file || exit 1
+    echo
+done
+
+for file in $DIR/index-pattern/*.json
+do
+    name=`basename $file .json`
+    printf -v escape "%q" $name
+    echo "Loading index pattern $escape:"
+
+    $CURL -XPUT $ELASTICSEARCH/.kibana/index-pattern/$escape \
+        -d @$file || exit 1
+    echo
+done
+
+
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/release.sh b/packetbeat_ek/kibana/beats-dashboards-1.0.1/release.sh
new file mode 100644
index 00000000..7dba03ee
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/release.sh
@@ -0,0 +1,19 @@
+#!/bin/sh
+# Script that builds a tar ball and uploads it to S3.
+
+VERSION=$1
+
+if [ -z $VERSION ]; then
+    echo "Usage: $0 <version>"
+    exit 1
+fi
+
+git archive \
+    --format tar.gz \
+    --prefix packetbeat-dashboards-$VERSION/ \
+    -o ../packetbeat-dashboards-$VERSION.tar.gz \
+    v$VERSION
+
+aws s3 cp \
+    packetbeat-dashboards-$VERSION.tar.gz \
+    s3://download.elasticsearch.org/beats/packetbeat/
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/README.md b/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/README.md
new file mode 100644
index 00000000..b3806237
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/README.md
@@ -0,0 +1,16 @@
+Kibana4 dashboard dump tool
+===========================
+
+Simple tool to dump / save / backup your Kibana4 dashboards.
+
+Install
+-------
+
+     virtualenv env
+     . env/bin/activate
+     pip install -r requirements.txt
+
+Usage example
+-------------
+
+      python kibana_dump.py --url 'http://localhost:9200' --dir output
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/kibana_dump.py b/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/kibana_dump.py
new file mode 100644
index 00000000..66833840
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/kibana_dump.py
@@ -0,0 +1,41 @@
+from elasticsearch import Elasticsearch
+import argparse
+import os
+import json
+
+
+def dump_objects(es, output_directory, doc_type):
+    res = es.search(
+        index='.kibana',
+        doc_type=doc_type,
+        size=1000)
+
+    dir = os.path.join(output_directory, doc_type)
+    if not os.path.exists(dir):
+        os.makedirs(dir)
+
+    for doc in res['hits']['hits']:
+        filepath = os.path.join(dir, doc['_id'] + '.json')
+        with open(filepath, 'w') as f:
+            json.dump(doc['_source'], f, indent=2)
+            print("Written {}".format(filepath))
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Dumps Kibana dashboards, vizualization and " +
+                    "searches in json files")
+    parser.add_argument("--url", help="Elasticsearch URL. E.g. " +
+                        "http://localhost:9200.", required=True)
+    parser.add_argument("--dir", help="Output directory", default="saved")
+
+    args = parser.parse_args()
+
+    es = Elasticsearch(args.url)
+    dump_objects(es, args.dir, "dashboard")
+    dump_objects(es, args.dir, "visualization")
+    dump_objects(es, args.dir, "search")
+    dump_objects(es, args.dir, "index-pattern")
+
+if __name__ == "__main__":
+    main()
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/requirements.txt b/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/requirements.txt
new file mode 100644
index 00000000..183123c4
--- /dev/null
+++ b/packetbeat_ek/kibana/beats-dashboards-1.0.1/save/requirements.txt
@@ -0,0 +1 @@
+elasticsearch
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/MySql-performance.png b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/MySql-performance.png
new file mode 100644
index 00000000..4a61e898
Binary files /dev/null and b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/MySql-performance.png differ
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Packetbeat-statistics.png b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Packetbeat-statistics.png
new file mode 100644
index 00000000..53b5622f
Binary files /dev/null and b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Packetbeat-statistics.png differ
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/PgSql-performance.png b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/PgSql-performance.png
new file mode 100644
index 00000000..56ca9d61
Binary files /dev/null and b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/PgSql-performance.png differ
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Thrift-performance.png b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Thrift-performance.png
new file mode 100644
index 00000000..ead19833
Binary files /dev/null and b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Thrift-performance.png differ
diff --git a/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Topbeat-statistics.png b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Topbeat-statistics.png
new file mode 100644
index 00000000..19d52243
Binary files /dev/null and b/packetbeat_ek/kibana/beats-dashboards-1.0.1/screenshots/Topbeat-statistics.png differ
diff --git a/packetbeat_ek/packetbeat.template.json b/packetbeat_ek/packetbeat.template.json
new file mode 100644
index 00000000..cacf9c27
--- /dev/null
+++ b/packetbeat_ek/packetbeat.template.json
@@ -0,0 +1,63 @@
+{
+  "mappings": {
+    "_default_": {
+      "_all": {
+        "enabled": true,
+        "norms": {
+          "enabled": false
+        }
+      },
+      "dynamic_templates": [
+        {
+          "template1": {
+            "mapping": {
+              "doc_values": true,
+              "ignore_above": 1024,
+              "index": "not_analyzed",
+              "type": "{dynamic_type}"
+            },
+            "match": "*"
+          }
+        }
+      ],
+      "properties": {
+        "@timestamp": {
+          "type": "date"
+        },
+        "client_location": {
+          "type": "geo_point"
+        },
+        "params": {
+          "index": "analyzed",
+          "norms": {
+            "enabled": false
+          },
+          "type": "string"
+        },
+        "query": {
+          "doc_values": true,
+          "index": "not_analyzed",
+          "type": "string"
+        },
+        "request": {
+          "index": "analyzed",
+          "norms": {
+            "enabled": false
+          },
+          "type": "string"
+        },
+        "response": {
+          "index": "analyzed",
+          "norms": {
+            "enabled": false
+          },
+          "type": "string"
+        }
+      }
+    }
+  },
+  "settings": {
+    "index.refresh_interval": "5s"
+  },
+  "template": "packetbeat-*"
+}
\ No newline at end of file
diff --git a/packetbeat_ek/packetbeat.yml b/packetbeat_ek/packetbeat.yml
new file mode 100644
index 00000000..577396f4
--- /dev/null
+++ b/packetbeat_ek/packetbeat.yml
@@ -0,0 +1,379 @@
+################### Packetbeat Configuration Example ##########################
+
+# This file contains an overview of various configuration settings. Please consult
+# the docs at https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-configuration.html
+# for more details.
+
+# The Packetbeat shipper works by sniffing the network traffic between your
+# application components. It inserts meta-data about each transaction into
+# Elasticsearch.
+
+############################# Sniffer #########################################
+
+# Select the network interfaces to sniff the data. You can use the "any"
+# keyword to sniff on all connected interfaces.
+interfaces:
+  device: any
+
+############################# Protocols #######################################
+protocols:
+  icmp:
+    # Enable ICMPv4 and ICMPv6 monitoring. Default: false
+    enabled: true
+
+  dns:
+    # Configure the ports where to listen for DNS traffic. You can disable
+    # the DNS protocol by commenting out the list of ports.
+    ports: [53]
+
+    # include_authorities controls whether or not the dns.authorities field
+    # (authority resource records) is added to messages.
+    # Default: false
+    include_authorities: true
+    # include_additionals controls whether or not the dns.additionals field
+    # (additional resource records) is added to messages.
+    # Default: false
+    include_additionals: true
+
+    # send_request and send_response control whether or not the stringified DNS
+    # request and response message are added to the result.
+    # Nearly all data about the request/response is available in the dns.*
+    # fields, but this can be useful if you need visibility specifically
+    # into the request or the response.
+    # Default: false
+    # send_request:  true
+    # send_response: true
+
+  http:
+    # Configure the ports where to listen for HTTP traffic. You can disable
+    # the HTTP protocol by commenting out the list of ports.
+    ports: [80, 8080, 8000, 5000, 8002]
+
+    # Uncomment the following to hide certain parameters in URL or forms attached
+    # to HTTP requests. The names of the parameters are case insensitive.
+    # The value of the parameters will be replaced with the 'xxxxx' string.
+    # This is generally useful for avoiding storing user passwords or other
+    # sensitive information.
+    # Only query parameters and top level form parameters are replaced.
+    # hide_keywords: ['pass', 'password', 'passwd']
+
+  memcache:
+    # Configure the ports where to listen for memcache traffic. You can disable
+    # the Memcache protocol by commenting out the list of ports.
+    ports: [11211]
+
+    # Uncomment the parseunknown option to force the memcache text protocol parser
+    # to accept unknown commands.
+    # Note: All unknown commands MUST not contain any data parts!
+    # Default: false
+    # parseunknown: true
+
+    # Update the maxvalue option to store the values - base64 encoded - in the
+    # json output.
+    # possible values:
+    #    maxvalue: -1  # store all values (text based protocol multi-get)
+    #    maxvalue: 0   # store no values at all
+    #    maxvalue: N   # store up to N values
+    # Default: 0
+    # maxvalues: -1
+
+    # Use maxbytespervalue to limit the number of bytes to be copied per value element.
+    # Note: Values will be base64 encoded, so actual size in json document
+    #       will be 4 times maxbytespervalue.
+    # Default: unlimited
+    # maxbytespervalue: 100
+
+    # UDP transaction timeout in milliseconds.
+    # Note: Quiet messages in UDP binary protocol will get response only in error case.
+    #       The memcached analyzer will wait for udptransactiontimeout milliseconds
+    #       before publishing quiet messages. Non quiet messages or quiet requests with
+    #       error response will not have to wait for the timeout.
+    # Default: 200
+    # udptransactiontimeout: 1000
+
+  mysql:
+    # Configure the ports where to listen for MySQL traffic. You can disable
+    # the MySQL protocol by commenting out the list of ports.
+    ports: [3306]
+
+  pgsql:
+    # Configure the ports where to listen for Pgsql traffic. You can disable
+    # the Pgsql protocol by commenting out the list of ports.
+    ports: [5432]
+
+  redis:
+    # Configure the ports where to listen for Redis traffic. You can disable
+    # the Redis protocol by commenting out the list of ports.
+    ports: [6379]
+
+  thrift:
+    # Configure the ports where to listen for Thrift-RPC traffic. You can disable
+    # the Thrift-RPC protocol by commenting out the list of ports.
+    ports: [9090]
+
+  mongodb:
+    # Configure the ports where to listen for MongoDB traffic. You can disable
+    # the MongoDB protocol by commenting out the list of ports.
+    ports: [27017]
+
+############################# Processes #######################################
+
+# Configure the processes to be monitored and how to find them. If a process is
+# monitored then Packetbeat attempts to use it's name to fill in the `proc` and
+# `client_proc` fields.
+# The processes can be found by searching their command line by a given string.
+#
+# Process matching is optional and can be enabled by uncommenting the following
+# lines.
+#
+#procs:
+#  enabled: false
+#  monitored:
+#    - process: mysqld
+#      cmdline_grep: mysqld
+#
+#    - process: pgsql
+#      cmdline_grep: postgres
+#
+#    - process: nginx
+#      cmdline_grep: nginx
+#
+#    - process: app
+#      cmdline_grep: gunicorn
+
+###############################################################################
+############################# Libbeat Config ##################################
+# Base config file used by all other beats for using libbeat features
+
+############################# Output ##########################################
+
+# Configure what outputs to use when sending the data collected by the beat.
+# Multiple outputs may be used.
+output:
+
+  ### Elasticsearch as output
+  elasticsearch:
+    # Array of hosts to connect to.
+    # Scheme and port can be left out and will be set to the default (http and 9200)
+    # In case you specify and additional path, the scheme is required: http://localhost:9200/path
+    # IPv6 addresses should always be defined as: https://[2001:db8::1]:9200
+    hosts: ["localhost:9200"]
+
+    # Optional protocol and basic auth credentials.
+    #protocol: "https"
+    #username: "admin"
+    #password: "s3cr3t"
+
+    # Number of workers per Elasticsearch host.
+    #worker: 1
+
+    # Optional index name. The default is "packetbeat" and generates
+    # [packetbeat-]YYYY.MM.DD keys.
+    #index: "packetbeat"
+
+    # Optional HTTP Path
+    #path: "/elasticsearch"
+
+    # Proxy server url
+    #proxy_url: http://proxy:3128
+
+    # The number of times a particular Elasticsearch index operation is attempted. If
+    # the indexing operation doesn't succeed after this many retries, the events are
+    # dropped. The default is 3.
+    #max_retries: 3
+
+    # The maximum number of events to bulk in a single Elasticsearch bulk API index request.
+    # The default is 50.
+    #bulk_max_size: 50
+
+    # Configure http request timeout before failing an request to Elasticsearch.
+    #timeout: 90
+
+    # The number of seconds to wait for new events between two bulk API index requests.
+    # If `bulk_max_size` is reached before this interval expires, addition bulk index
+    # requests are made.
+    #flush_interval: 1
+
+    # Boolean that sets if the topology is kept in Elasticsearch. The default is
+    # false. This option makes sense only for Packetbeat.
+    #save_topology: false
+
+    # The time to live in seconds for the topology information that is stored in
+    # Elasticsearch. The default is 15 seconds.
+    #topology_expire: 15
+
+    # tls configuration. By default is off.
+    #tls:
+      # List of root certificates for HTTPS server verifications
+      #certificate_authorities: ["/etc/pki/root/ca.pem"]
+
+      # Certificate for TLS client authentication
+      #certificate: "/etc/pki/client/cert.pem"
+
+      # Client Certificate Key
+      #certificate_key: "/etc/pki/client/cert.key"
+
+      # Controls whether the client verifies server certificates and host name.
+      # If insecure is set to true, all server host names and certificates will be
+      # accepted. In this mode TLS based connections are susceptible to
+      # man-in-the-middle attacks. Use only for testing.
+      #insecure: true
+
+      # Configure cipher suites to be used for TLS connections
+      #cipher_suites: []
+
+      # Configure curve types for ECDHE based cipher suites
+      #curve_types: []
+
+      # Configure minimum TLS version allowed for connection to logstash
+      #min_version: 1.0
+
+      # Configure maximum TLS version allowed for connection to logstash
+      #max_version: 1.2
+
+
+  ### Logstash as output
+  #logstash:
+    # The Logstash hosts
+    #hosts: ["localhost:5044"]
+
+    # Number of workers per Logstash host.
+    #worker: 1
+
+    # Set gzip compression level.
+    #compression_level: 3
+
+    # Optional load balance the events between the Logstash hosts
+    #loadbalance: true
+
+    # Optional index name. The default index name depends on the each beat.
+    # For Packetbeat, the default is set to packetbeat, for Topbeat
+    # top topbeat and for Filebeat to filebeat.
+    #index: packetbeat
+
+    # Optional TLS. By default is off.
+    #tls:
+      # List of root certificates for HTTPS server verifications
+      #certificate_authorities: ["/etc/pki/root/ca.pem"]
+
+      # Certificate for TLS client authentication
+      #certificate: "/etc/pki/client/cert.pem"
+
+      # Client Certificate Key
+      #certificate_key: "/etc/pki/client/cert.key"
+
+      # Controls whether the client verifies server certificates and host name.
+      # If insecure is set to true, all server host names and certificates will be
+      # accepted. In this mode TLS based connections are susceptible to
+      # man-in-the-middle attacks. Use only for testing.
+      #insecure: true
+
+      # Configure cipher suites to be used for TLS connections
+      #cipher_suites: []
+
+      # Configure curve types for ECDHE based cipher suites
+      #curve_types: []
+
+
+  ### File as output
+  #file:
+    # Path to the directory where to save the generated files. The option is mandatory.
+    #path: "/tmp/packetbeat"
+
+    # Name of the generated files. The default is `packetbeat` and it generates files: `packetbeat`, `packetbeat.1`, `packetbeat.2`, etc.
+    #filename: packetbeat
+
+    # Maximum size in kilobytes of each file. When this size is reached, the files are
+    # rotated. The default value is 10 MB.
+    #rotate_every_kb: 10000
+
+    # Maximum number of files under path. When this number of files is reached, the
+    # oldest file is deleted and the rest are shifted from last to first. The default
+    # is 7 files.
+    #number_of_files: 7
+
+
+  ### Console output
+  # console:
+    # Pretty print json event
+    #pretty: false
+
+
+############################# Shipper #########################################
+
+shipper:
+  # The name of the shipper that publishes the network data. It can be used to group
+  # all the transactions sent by a single shipper in the web interface.
+  # If this options is not defined, the hostname is used.
+  #name:
+
+  # The tags of the shipper are included in their own field with each
+  # transaction published. Tags make it easy to group servers by different
+  # logical properties.
+  #tags: ["service-X", "web-tier"]
+
+  # Uncomment the following if you want to ignore transactions created
+  # by the server on which the shipper is installed. This option is useful
+  # to remove duplicates if shippers are installed on multiple servers.
+  #ignore_outgoing: true
+
+  # How often (in seconds) shippers are publishing their IPs to the topology map.
+  # The default is 10 seconds.
+  #refresh_topology_freq: 10
+
+  # Expiration time (in seconds) of the IPs published by a shipper to the topology map.
+  # All the IPs will be deleted afterwards. Note, that the value must be higher than
+  # refresh_topology_freq. The default is 15 seconds.
+  #topology_expire: 15
+
+  # Internal queue size for single events in processing pipeline
+  #queue_size: 1000
+
+  # Configure local GeoIP database support.
+  # If no paths are not configured geoip is disabled.
+  #geoip:
+    #paths:
+    #  - "/usr/share/GeoIP/GeoLiteCity.dat"
+    #  - "/usr/local/var/GeoIP/GeoLiteCity.dat"
+
+
+############################# Logging #########################################
+
+# There are three options for the log ouput: syslog, file, stderr.
+# Under Windows systems, the log files are per default sent to the file output,
+# under all other system per default to syslog.
+logging:
+
+  # Send all logging output to syslog. On Windows default is false, otherwise
+  # default is true.
+  #to_syslog: true
+
+  # Write all logging output to files. Beats automatically rotate files if rotateeverybytes
+  # limit is reached.
+  #to_files: false
+
+  # To enable logging to files, to_files option has to be set to true
+  files:
+    # The directory where the log files will written to.
+    #path: /var/log/mybeat
+
+    # The name of the files where the logs are written to.
+    #name: mybeat
+
+    # Configure log file size limit. If limit is reached, log file will be
+    # automatically rotated
+    rotateeverybytes: 10485760 # = 10MB
+
+    # Number of rotated log files to keep. Oldest files will be deleted first.
+    #keepfiles: 7
+
+  # Enable debug output for selected components. To enable all selectors use ["*"]
+  # Other available selectors are beat, publish, service
+  # Multiple selectors can be chained.
+  #selectors: [ ]
+
+  # Sets log level. The default log level is error.
+  # Available log levels are: critical, error, warning, info, debug
+  #level: error
+
+