Network operations and packet inspection in Kibana
This download gives Elastic users a practical Kibana starting point for network monitoring. It combines a live topology dashboard with a packet inspection workbench so network, security, and observability teams can review paths, services, traffic flows, TLS/DNS posture, and IDS findings from one reusable package.
Use it when you need to understand how network components connect, where traffic is flowing, and which packet-inspection or Suricata signals deserve attention. The dashboards are especially useful for labs, demos, proof-of-concepts, and teams building their own network operations views on top of Elasticsearch data.
What is included
- Network Operations – Live Topology: a Kibana dashboard with a topology-style Vega visualization for external, edge, services, and data tiers.
- Packet Inspection Workbench: a Kibana dashboard for packet-inspection context, including application transactions, TLS and DNS posture, and Suricata IDS findings.
- Reusable Vega visualizations for network topology, packet overview, source requirements, transactions, TLS/DNS posture, and Suricata alert review.
- Two Kibana saved-object NDJSON exports packaged in a ZIP for import through Kibana Saved Objects or the Elastic Content Share deployment flow.
When to use it
Use this suite when you want to prototype a network operations dashboard, explain traffic paths during an incident, review service dependencies, or combine packet inspection with security findings. It gives teams a visual foundation that can be adapted to packet capture, flow, firewall, DNS, TLS, and IDS datasets already stored in Elasticsearch.
After import, review the expected data views, index names, and field mappings. The dashboards may need adjustments for your packet capture pipeline, Suricata field names, topology model, and time range before they are used for production operations or security reporting.
Compatibility and source
This package was exported from the Elastic Content Share Kibana 9.4.3 test deployment and contains unmanaged Kibana saved objects. The NDJSON files report a Kibana core migration version of 8.8.0, and the download is tagged for Elastic Stack 9.4.3.
Source: creator-submitted Kibana saved-object export from the Elastic Content Share 9.4.3 test cluster. Dashboard IDs: network-operations-live-topology and packet-inspection-workbench.
Related downloads: Industrial Network Template – Dashboards and Filebeat Suricata Canvas dashboard. You can also browse more Kibana Vega examples, Elastic Observability downloads, and Elastic Security downloads.
| Tested versions | 9.4.3 |
| ECS compliant | Ready for publishing review |
| Tested versions |
You must log in to submit a review.