[Corelight] Add security workflows dashboards (#12215)

* Add security workflows dashboards

packages/corelight/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.4.0"
+  changes:
+    - description: Add security workflows dashboards.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/12215
 - version: "0.3.0"
   changes:
     - description: Added an alert insight panel and updated the VPN connections visualization to a line chart in the security posture dashboard.

packages/corelight/docs/README.md

@@ -3,10 +3,18 @@
 [Corelight](https://corelight.com/) provides network detection and response (NDR) solutions that enhance visibility, threat detection, and incident response by leveraging open-source technologies like Zeek. Its platform integrates with existing security tools to deliver high-fidelity network data, helping organizations detect and respond to threats more effectively across both on-premises and cloud environments​.
 
 This integration includes only the Corelight dashboards mentioned below:
-- Security Posture
-- Remote Activity Insights
+- Corelight Suricata IDS Alert Overview
+- Intel
+- IP Interrogation
+- Log Hunting
 - Name Resolution Insights
+- Notices
+- RDP Inferences Overview
+- Remote Activity Insights
 - Secure Channel Insights
+- Security Posture
+- SSH Inferences Overview
+- VPN Insights
 
 ## Prerequisites:
 

packages/corelight/kibana/dashboard/corelight-45197477-c13f-4e52-a5dd-fb4f53564963.json

@@ -12,18 +12,21 @@
             "panelsJSON": {
                 "b7b4bc2e-98d1-453a-a412-a37228a386b1": {
                     "explicitInput": {
-                        "enhancements": {},
+                        "dataViewId": "logs-*",
                         "fieldName": "observer.hostname",
-                        "grow": true,
                         "id": "b7b4bc2e-98d1-453a-a412-a37228a386b1",
                         "searchTechnique": "prefix",
-                        "title": "Sensor",
-                        "width": "medium"
+                        "selectedOptions": [],
+                        "sort": {
+                            "by": "_count",
+                            "direction": "desc"
+                        },
+                        "title": "Sensor"
                     },
-                    "grow": false,
+                    "grow": true,
                     "order": 0,
                     "type": "optionsListControl",
-                    "width": "small"
+                    "width": "medium"
                 }
             },
             "showApplySelections": false
@@ -49,7 +52,11 @@
             {
                 "embeddableConfig": {
                     "description": "",
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -87,7 +94,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": false,
                     "savedVis": {
                         "data": {
@@ -104,7 +115,7 @@
                         "id": "",
                         "params": {
                             "fontSize": 12,
-                            "markdown": "**Navigation**\n\n**Corelight**\n\n- [Security Posture](#/dashboard/corelight-7c0946bc-acd0-4ec3-ab3b-8a92853f4a3b)\n- [Name Resolution Insights](#/dashboard/corelight-8546a96c-86c9-4edf-9d46-88338d6ac40e)\n- [**Secure Channel Insights (This Page)**](#/dashboard/corelight-45197477-c13f-4e52-a5dd-fb4f53564963)\n- [Remote Activity Insights](#/dashboard/corelight-f4864774-ed73-4b78-b861-5b8235ec12cf)\n\n[**Integrations Page**](/app/integrations/detail/corelight/overview)",
+                            "markdown": "**Navigation**\n\n**Corelight**\n\n- [Security Posture](#/dashboard/corelight-7c0946bc-acd0-4ec3-ab3b-8a92853f4a3b)\n- **Data Insights**\n  - [Name Resolution Insights](#/dashboard/corelight-8546a96c-86c9-4edf-9d46-88338d6ac40e)\n  - **Secure Channel Insights**\n  - [Remote Activity Insights](#/dashboard/corelight-f4864774-ed73-4b78-b861-5b8235ec12cf)\n- Security Workflows\n  - [Intel](#/dashboard/corelight-323b0f27-993e-4fee-ae6e-b5977d7cab11)\n  - [IP Interrogation](#/dashboard/corelight-3a4a279f-f238-47de-90ba-f643c5647fde)\n  - [Log Hunting](#/dashboard/corelight-ff07e65c-2703-4cbe-a45f-3881025352a3)\n  - [Notices](#/dashboard/corelight-f7da14f0-85db-48e8-a591-1f650af0f618)\n  - [RDP Inferences Overview](#/dashboard/corelight-2d4dc345-cbbe-4d7a-9203-5ab11c8cb5ba)\n  - [SSH Inferences Overview](#/dashboard/corelight-65a5fa91-06e4-459b-b4bb-998c85a6cf08)\n  - [Corelight Suricata IDS Alert Overview](#/dashboard/corelight-f1208ffe-d168-46d1-9531-24de523d1bfb)\n  - [VPN Insights](#/dashboard/corelight-023162b6-94da-4d8d-b1f6-de6192356cce)\n\n[**Integrations Page**](/app/integrations/detail/corelight/overview)",
                             "openLinksInNewTab": false
                         },
                         "title": "",
@@ -206,7 +217,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -323,7 +338,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -708,7 +727,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -825,7 +848,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -1206,7 +1233,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -1323,7 +1354,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -1704,7 +1739,11 @@
             },
             {
                 "embeddableConfig": {
-                    "enhancements": {},
+                    "enhancements": {
+                        "dynamicActions": {
+                            "events": []
+                        }
+                    },
                     "hidePanelTitles": true,
                     "savedVis": {
                         "data": {
@@ -1882,9 +1921,9 @@
         "version": 2
     },
     "coreMigrationVersion": "8.8.0",
-    "created_at": "2024-11-06T06:41:37.294Z",
+    "created_at": "2025-01-03T09:56:21.193Z",
     "id": "corelight-45197477-c13f-4e52-a5dd-fb4f53564963",
-    "managed": false,
+    "managed": true,
     "references": [
         {
             "id": "logs-*",