Files
marcredhat-siem-toolkit-pat…/parsers/ueba_baselines_peer
T
marc 7c1687efce Sync upstream features; preserve fork KV scanner, parsers, verifier
Brought in 35 upstream commits (MITRE heatmap, health score, dependency map,
PowerQuery playground, onboarding tracker, product grouping, modern UI redesign).

Preserved fork additions:
  backend/routers/quality.py  KV scanner, pattern refs, JS keys, JSON mode,
                              /parsers + /sync-from-sdl endpoints
  parsers/                    96 OCSF + tenant parsers
  tools/stormshield-verify/   end-to-end ingest regression test
  .gitignore                  un-ignored parsers/*
  CHANGES.md, PATCHES.md
2026-05-22 18:19:52 +02:00

1 line
41 KiB
Plaintext

{"columnNames": ["entity_type", "peer_id", "family", "feature_name", "mu", "sigma", "q99", "n"], "rows": [["user", "role=Nurse|hosp=HOSP-003", "auth", "auth_total", 1.5, 0.6708203932499369, 3.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "auth_total", 1.3333333333333333, 0.6236095644623235, 3.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "auth_total", 1.8, 0.8717797887081348, 4.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "auth_total", 1.2307692307692308, 0.4213250442347432, 2.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "auth_total", 1.5454545454545454, 0.6555547773570889, 3.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "auth_fail", 0.5, 0.5, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "auth_fail", 0.75, 0.5951190357119042, 2.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "auth_fail", 0.6, 0.48989794855663565, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "auth_fail", 0.8461538461538461, 0.532938710021193, 2.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "auth_fail", 0.5454545454545454, 0.6555547773570889, 2.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "auth_succ", 1.0, 0.4472135954999579, 2.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "auth_succ", 0.5833333333333334, 0.6400954789890506, 2.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "auth_succ", 1.2, 1.16619037896906, 4.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "auth_succ", 0.38461538461538464, 0.48650425541051995, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "auth_succ", 1.0, 0.6030226891555273, 2.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "auth_fail_ratio", 0.2833333333333333, 0.3253203549323856, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "auth_fail_ratio", 0.5694444444444444, 0.45368008252947434, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "auth_fail_ratio", 0.45, 0.4153311931459037, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "auth_fail_ratio", 0.6923076923076923, 0.41779924966154675, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "auth_fail_ratio", 0.3333333333333333, 0.3956837835515332, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "login_success", 0.3, 0.45825756949558394, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "login_success", 0.25, 0.4330127018922193, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "login_success", 0.0, 0.0, 0.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "login_success", 0.07692307692307693, 0.26646935501059654, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "login_success", 0.36363636363636365, 0.48104569292083466, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "login_failure", 0.2, 0.4000000000000001, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "login_failure", 0.16666666666666666, 0.3726779962499649, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "login_failure", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "login_failure", 0.07692307692307693, 0.26646935501059654, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "login_failure", 0.09090909090909091, 0.28747978728803447, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "logout", 0.2, 0.4, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "logout", 0.08333333333333333, 0.2763853991962833, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "logout", 0.6, 1.0198039027185568, 3.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "logout", 0.07692307692307693, 0.26646935501059654, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "logout", 0.18181818181818182, 0.38569460791993493, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "session_timeout", 0.2, 0.4000000000000001, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "session_timeout", 0.16666666666666666, 0.37267799624996495, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "session_timeout", 0.2, 0.4000000000000001, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "session_timeout", 0.0, 0.0, 0.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "session_timeout", 0.18181818181818182, 0.38569460791993493, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "mfa_success", 0.0, 0.0, 0.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "mfa_success", 0.0, 0.0, 0.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "mfa_success", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "mfa_success", 0.23076923076923078, 0.4213250442347432, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "mfa_success", 0.09090909090909091, 0.2874797872880344, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "mfa_failure", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "mfa_failure", 0.0, 0.0, 0.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "mfa_failure", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "mfa_failure", 0.07692307692307693, 0.2664693550105966, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "mfa_failure", 0.0, 0.0, 0.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "mfa_fail_ratio", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "mfa_fail_ratio", 0.0, 0.0, 0.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "mfa_fail_ratio", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "mfa_fail_ratio", 0.07692307692307693, 0.2664693550105966, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "mfa_fail_ratio", 0.0, 0.0, 0.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "password_change", 0.3, 0.45825756949558394, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "password_change", 0.08333333333333333, 0.2763853991962833, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "password_change", 0.3, 0.45825756949558394, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "password_change", 0.0, 0.0, 0.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "password_change", 0.18181818181818182, 0.385694607919935, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "password_reset_req", 0.0, 0.0, 0.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "password_reset_req", 0.25, 0.4330127018922193, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "password_reset_req", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "password_reset_req", 0.15384615384615385, 0.36080121229410994, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "password_reset_req", 0.2727272727272727, 0.616575453011388, 2.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "account_locked", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "account_locked", 0.16666666666666666, 0.3726779962499649, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "account_locked", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "account_locked", 0.23076923076923078, 0.4213250442347432, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "account_locked", 0.09090909090909091, 0.2874797872880344, 1.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "account_unlocked_fail", 0.1, 0.30000000000000004, 1.0, 10], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "account_unlocked_fail", 0.16666666666666666, 0.3726779962499649, 1.0, 12], ["user", "role=Physician|hosp=HOSP-003", "auth", "account_unlocked_fail", 0.2, 0.4000000000000001, 1.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "account_unlocked_fail", 0.3076923076923077, 0.46153846153846156, 1.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "account_unlocked_fail", 0.09090909090909091, 0.2874797872880344, 1.0, 11], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_events", 1.9574468085106382, 1.1100593583613256, 6.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_events", 1.4, 0.632455532033676, 3.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_events", 1.3333333333333333, 0.4714045207910317, 2.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_events", 1.4, 0.48989794855663565, 2.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_events", 1.4545454545454546, 0.6555547773570889, 3.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_events", 1.6666666666666667, 0.7453559924999299, 3.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_failures", 0.5319148936170213, 0.7949592209476344, 4.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_failures", 0.12, 0.3249615361854385, 1.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_failures", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_failures", 0.2, 0.4000000000000001, 1.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_failures", 0.45454545454545453, 0.7820295697311479, 2.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_failures", 0.0, 0.0, 0.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_infos", 0.0, 0.0, 0.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_infos", 0.0, 0.0, 0.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_infos", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_infos", 0.3, 0.45825756949558405, 1.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_infos", 0.2727272727272727, 0.4453617714151233, 1.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_infos", 0.5, 0.5, 1.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_failure_ratio", 0.3439716312056737, 0.43543442522969733, 1.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_failure_ratio", 0.12, 0.3249615361854385, 1.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_failure_ratio", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_failure_ratio", 0.1, 0.20000000000000004, 0.5, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_failure_ratio", 0.2424242424242424, 0.4042928504280707, 1.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_failure_ratio", 0.0, 0.0, 0.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_high_severity", 0.0851063829787234, 0.27903993720434067, 1.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_high_severity", 0.04, 0.19595917942265437, 1.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_high_severity", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_high_severity", 0.3, 0.45825756949558394, 1.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_high_severity", 0.18181818181818182, 0.38569460791993493, 1.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_high_severity", 0.3333333333333333, 0.4714045207910317, 1.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_auth_events", 1.0, 1.0314212462587935, 4.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_auth_events", 0.48, 0.574108003776293, 2.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_auth_events", 1.1666666666666667, 0.6871842709362768, 2.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_auth_events", 0.9, 0.5385164807134504, 2.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_auth_events", 0.9090909090909091, 0.6680426571226848, 2.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_auth_events", 1.0, 0.5773502691896257, 2.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_data_events", 0.9574468085106383, 1.443362604778437, 6.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_data_events", 0.92, 0.9765244492586961, 3.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_data_events", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_data_events", 0.0, 0.0, 0.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_data_events", 0.0, 0.0, 0.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_data_events", 0.0, 0.0, 0.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_ti_events", 0.0, 0.0, 0.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_ti_events", 0.0, 0.0, 0.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_ti_events", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_ti_events", 0.5, 0.6708203932499369, 2.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_ti_events", 0.5454545454545454, 0.49792959773196915, 1.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_ti_events", 0.6666666666666666, 0.74535599249993, 2.0, 6], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_card_events", 0.0, 0.0, 0.0, 47], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_card_events", 0.0, 0.0, 0.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_card_events", 1.1666666666666667, 0.6871842709362768, 2.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_card_events", 0.9, 0.5385164807134504, 2.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_card_events", 0.9090909090909091, 0.6680426571226848, 2.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_card_events", 1.0, 0.5773502691896257, 2.0, 6], ["host", "host_fam=avelios|loc=Berlin", "network", "ti_events", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "ti_events", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "ti_events", 1.0, 0.0, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "ti_events", 1.3333333333333333, 0.4714045207910317, 2.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "ti_events", 1.25, 0.4330127018922193, 2.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "ti_events", 1.0, 0.0, 1.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "ti_failures", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "ti_failures", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "ti_failures", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "ti_failures", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "ti_failures", 0.5, 0.5, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "ti_failures", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "ti_failure_ratio", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "ti_failure_ratio", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "ti_failure_ratio", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "ti_failure_ratio", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "ti_failure_ratio", 0.375, 0.414578098794425, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "ti_failure_ratio", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "konnektor_connected", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "konnektor_connected", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "konnektor_connected", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "konnektor_connected", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "konnektor_connected", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "konnektor_connected", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "konnektor_disconnected", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "konnektor_disconnected", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "konnektor_disconnected", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "konnektor_disconnected", 0.3333333333333333, 0.4714045207910317, 1.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "konnektor_disconnected", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "konnektor_disconnected", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "konnektor_health_check", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "konnektor_health_check", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "konnektor_health_check", 0.16666666666666666, 0.37267799624996495, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "konnektor_health_check", 0.3333333333333333, 0.4714045207910317, 1.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "konnektor_health_check", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "konnektor_health_check", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "konnektor_flap_score", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "konnektor_flap_score", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "konnektor_flap_score", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "konnektor_flap_score", 0.3333333333333333, 0.4714045207910317, 1.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "konnektor_flap_score", 0.5, 0.5, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "konnektor_flap_score", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "vpn_tunnel_failed", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "vpn_tunnel_failed", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "vpn_tunnel_failed", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "vpn_tunnel_failed", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "vpn_tunnel_failed", 0.5, 0.5, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "vpn_tunnel_failed", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "vpn_tunnel_reconnect", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "vpn_tunnel_reconnect", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "vpn_tunnel_reconnect", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "vpn_tunnel_reconnect", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "vpn_tunnel_reconnect", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "vpn_tunnel_reconnect", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "cert_expired", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "cert_expired", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "cert_expired", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "cert_expired", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "cert_expired", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "cert_expired", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "cert_expiring", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "cert_expiring", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "cert_expiring", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "cert_expiring", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "cert_expiring", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "cert_expiring", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "cert_valid", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "cert_valid", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "cert_valid", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "cert_valid", 0.3333333333333333, 0.4714045207910317, 1.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "cert_valid", 0.0, 0.0, 0.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "cert_valid", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "ti_service_unavailable", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "ti_service_unavailable", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "ti_service_unavailable", 0.0, 0.0, 0.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "ti_service_unavailable", 0.3333333333333333, 0.4714045207910317, 1.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "ti_service_unavailable", 0.25, 0.4330127018922193, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "ti_service_unavailable", 0.0, 0.0, 0.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "ti_service_available", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "ti_service_available", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "ti_service_available", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "ti_service_available", 0.0, 0.0, 0.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "ti_service_available", 0.5, 0.5, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "ti_service_available", 1.0, 0.0, 1.0, 1], ["host", "host_fam=avelios|loc=Berlin", "network", "high_sev_events", 0.0, 0.0, 0.0, 18], ["host", "host_fam=avelios|loc=Munich", "network", "high_sev_events", 0.0, 0.0, 0.0, 14], ["host", "host_fam=omniconnect|loc=Munich", "network", "high_sev_events", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "high_sev_events", 0.6666666666666666, 0.4714045207910317, 1.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "high_sev_events", 0.75, 0.4330127018922193, 1.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "high_sev_events", 0.0, 0.0, 0.0, 1], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "dt_events", 1.1428571428571428, 0.3499271061118826, 2.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "dt_events", 1.125, 0.33071891388307384, 2.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "dt_events", 1.0, 0.0, 1.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "dt_events", 1.3333333333333333, 0.4714045207910317, 2.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "dt_events", 1.0, 0.0, 1.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "dt_failures", 0.0, 0.0, 0.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "dt_failures", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "dt_failures", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "dt_failures", 0.0, 0.0, 0.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "dt_failures", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "export_initiated", 0.14285714285714285, 0.34992710611188266, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "export_initiated", 0.125, 0.33071891388307384, 1.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "export_initiated", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "export_initiated", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "export_initiated", 0.5, 0.5, 1.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "export_completed", 0.14285714285714285, 0.3499271061118826, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "export_completed", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "export_completed", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "export_completed", 0.0, 0.0, 0.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "export_completed", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "import_initiated", 0.14285714285714285, 0.34992710611188266, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "import_initiated", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "import_initiated", 0.125, 0.33071891388307384, 1.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "import_initiated", 0.3333333333333333, 0.4714045207910317, 1.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "import_initiated", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "import_completed", 0.14285714285714285, 0.3499271061118826, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "import_completed", 0.125, 0.33071891388307384, 1.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "import_completed", 0.25, 0.4330127018922193, 1.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "import_completed", 0.3333333333333333, 0.4714045207910317, 1.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "import_completed", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "email_notifications", 0.0, 0.0, 0.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "email_notifications", 0.375, 0.4841229182759271, 1.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "email_notifications", 0.25, 0.4330127018922193, 1.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "email_notifications", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "email_notifications", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "report_generated", 0.2857142857142857, 0.4517539514526256, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "report_generated", 0.25, 0.4330127018922193, 1.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "report_generated", 0.25, 0.4330127018922193, 1.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "report_generated", 0.0, 0.0, 0.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "report_generated", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "fhir_requests", 0.0, 0.0, 0.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "fhir_requests", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "fhir_requests", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "fhir_requests", 0.16666666666666666, 0.37267799624996495, 1.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "fhir_requests", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "hl7_received", 0.14285714285714285, 0.34992710611188266, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "hl7_received", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "hl7_received", 0.125, 0.33071891388307384, 1.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "hl7_received", 0.0, 0.0, 0.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "hl7_received", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "hl7_sent", 0.0, 0.0, 0.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "hl7_sent", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "hl7_sent", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "hl7_sent", 0.0, 0.0, 0.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "hl7_sent", 0.0, 0.0, 0.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "print_jobs", 0.14285714285714285, 0.3499271061118826, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "print_jobs", 0.25, 0.4330127018922193, 1.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "print_jobs", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "print_jobs", 0.16666666666666666, 0.372677996249965, 1.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "print_jobs", 0.5, 0.5, 1.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "total_records_exported", 106.57142857142857, 175.98933177314805, 468.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "total_records_exported", 84.75, 224.22742361272404, 678.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "total_records_exported", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "total_records_exported", 146.66666666666666, 327.9566366999692, 880.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "total_records_exported", 151.5, 151.5, 303.0, 2], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "external_destinations", 0.14285714285714285, 0.3499271061118826, 1.0, 7], ["user", "role=Physician|hosp=HOSP-003", "cloud", "external_destinations", 0.0, 0.0, 0.0, 8], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "external_destinations", 0.0, 0.0, 0.0, 8], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "external_destinations", 0.0, 0.0, 0.0, 6], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "external_destinations", 0.0, 0.0, 0.0, 2], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_events", 1.4, 0.4898979485566356, 2.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_events", 1.125, 0.33071891388307384, 2.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_events", 1.25, 0.4330127018922193, 2.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_events", 1.2, 0.4, 2.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_failures", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_failures", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_failures", 0.5, 0.8660254037844386, 2.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_failures", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_failure_ratio", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_failure_ratio", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_failure_ratio", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_failure_ratio", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_read_success", 0.4, 0.48989794855663565, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_read_success", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_read_success", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_read_success", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_read_failure", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_read_failure", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_read_failure", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_read_failure", 0.2, 0.4, 1.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_pin_verified", 0.4, 0.48989794855663565, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_pin_verified", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_pin_verified", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_pin_verified", 0.2, 0.4000000000000001, 1.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_pin_failed", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_pin_failed", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_pin_failed", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_pin_failed", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_pin_blocked", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_pin_blocked", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_pin_blocked", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_pin_blocked", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_removed", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_removed", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_removed", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_removed", 0.2, 0.4, 1.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_decryption", 0.2, 0.4000000000000001, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_decryption", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_decryption", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_decryption", 0.6, 0.48989794855663565, 1.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_signature_created", 0.2, 0.4, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_signature_created", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_signature_created", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_signature_created", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_auth_success", 0.2, 0.4, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_auth_success", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_auth_success", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_auth_success", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "card_auth_failed", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "card_auth_failed", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "card_auth_failed", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "card_auth_failed", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "smcb_events", 0.4, 0.48989794855663565, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "smcb_events", 0.25, 0.4330127018922193, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "smcb_events", 0.375, 0.4841229182759271, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "smcb_events", 0.4, 0.48989794855663565, 1.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "hba_events", 0.4, 0.48989794855663565, 1.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "hba_events", 0.375, 0.4841229182759271, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "hba_events", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "hba_events", 0.2, 0.4, 1.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "qes_pin_attempts", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "qes_pin_attempts", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "qes_pin_attempts", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "qes_pin_attempts", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "low_attempts_remaining", 0.0, 0.0, 0.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "low_attempts_remaining", 0.0, 0.0, 0.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "low_attempts_remaining", 0.125, 0.33071891388307384, 1.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "low_attempts_remaining", 0.0, 0.0, 0.0, 5], ["user", "role=Nurse|hosp=HOSP-003", "auth", "distinct_src_ip", 1.5, 0.6708203932499369, 3.0, 10], ["user", "role=Physician|hosp=HOSP-003", "auth", "distinct_src_ip", 1.8, 0.8717797887081348, 4.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "distinct_src_ip", 1.2307692307692308, 0.4213250442347432, 2.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "distinct_src_ip", 1.5454545454545454, 0.6555547773570889, 3.0, 11], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "distinct_src_ip", 1.3636363636363635, 0.642824346533225, 3.0, 11], ["user", "role=Nurse|hosp=HOSP-003", "auth", "distinct_src_host", 1.5, 0.6708203932499369, 3.0, 10], ["user", "role=Physician|hosp=HOSP-003", "auth", "distinct_src_host", 1.7, 0.6403124237432849, 3.0, 10], ["user", "role=SystemAdmin|hosp=HOSP-003", "auth", "distinct_src_host", 1.0769230769230769, 0.26646935501059654, 2.0, 13], ["user", "role=BillingClerk|hosp=HOSP-001", "auth", "distinct_src_host", 1.4545454545454546, 0.6555547773570889, 3.0, 11], ["user", "role=Pharmacist|hosp=HOSP-003", "auth", "distinct_src_host", 1.2727272727272727, 0.4453617714151233, 2.0, 11], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_distinct_users", 1.8, 0.9568466729604884, 5.0, 45], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_distinct_users", 1.28, 0.44899888641287294, 2.0, 25], ["host", "host_fam=avelios|loc=Berlin", "endpoint", "host_distinct_etypes", 1.8222222222222222, 0.9015761233378132, 4.0, 45], ["host", "host_fam=avelios|loc=Munich", "endpoint", "host_distinct_etypes", 1.32, 0.5455272678794343, 3.0, 25], ["host", "host_fam=omniconnect|loc=Berlin", "endpoint", "host_distinct_etypes", 1.3333333333333333, 0.4714045207910317, 2.0, 6], ["host", "host_fam=omniconnect|loc=Frankfurt", "endpoint", "host_distinct_etypes", 1.4, 0.48989794855663565, 2.0, 10], ["host", "host_fam=omniconnect|loc=Munich", "endpoint", "host_distinct_etypes", 1.4545454545454546, 0.6555547773570889, 3.0, 11], ["host", "host_fam=omniconnect|loc=Hamburg", "endpoint", "host_distinct_etypes", 1.6666666666666667, 0.7453559924999299, 3.0, 6], ["host", "host_fam=omniconnect|loc=Munich", "network", "distinct_telematik_ids", 1.0, 0.0, 1.0, 6], ["host", "host_fam=omniconnect|loc=Hamburg", "network", "distinct_telematik_ids", 1.3333333333333333, 0.4714045207910317, 2.0, 3], ["host", "host_fam=omniconnect|loc=Frankfurt", "network", "distinct_telematik_ids", 1.25, 0.4330127018922193, 2.0, 4], ["host", "host_fam=omniconnect|loc=Berlin", "network", "distinct_telematik_ids", 1.0, 0.0, 1.0, 1], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "distinct_destinations", 1.0, 0.0, 1.0, 3], ["user", "role=Physician|hosp=HOSP-003", "cloud", "distinct_destinations", 1.0, 0.0, 1.0, 1], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "distinct_destinations", 1.0, 0.0, 1.0, 1], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "distinct_destinations", 1.0, 0.0, 1.0, 1], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "distinct_destinations", 1.0, 0.0, 1.0, 1], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "distinct_export_types", 1.0, 0.0, 1.0, 2], ["user", "role=Physician|hosp=HOSP-003", "cloud", "distinct_export_types", 1.0, 0.0, 1.0, 1], ["user", "role=SystemAdmin|hosp=HOSP-003", "cloud", "distinct_export_types", 1.0, 0.0, 1.0, 1], ["user", "role=Pharmacist|hosp=HOSP-003", "cloud", "distinct_export_types", 1.0, 0.0, 1.0, 1], ["user", "role=BillingClerk|hosp=HOSP-001", "cloud", "distinct_msg_types", 1.0, 0.0, 1.0, 1], ["user", "role=Nurse|hosp=HOSP-003", "cloud", "distinct_msg_types", 1.0, 0.0, 1.0, 1], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "distinct_cards", 1.4, 0.4898979485566356, 2.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "distinct_cards", 1.125, 0.33071891388307384, 2.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "distinct_cards", 1.25, 0.4330127018922193, 2.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "distinct_cards", 1.2, 0.4, 2.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "distinct_terminals", 1.4, 0.4898979485566356, 2.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "distinct_terminals", 1.125, 0.33071891388307384, 2.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "distinct_terminals", 1.25, 0.4330127018922193, 2.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "distinct_terminals", 1.2, 0.4, 2.0, 5], ["host", "host_fam=omniconnect|loc=Berlin", "healthcare", "distinct_card_types", 1.4, 0.4898979485566356, 2.0, 5], ["host", "host_fam=omniconnect|loc=Frankfurt", "healthcare", "distinct_card_types", 1.0, 0.0, 1.0, 8], ["host", "host_fam=omniconnect|loc=Munich", "healthcare", "distinct_card_types", 1.25, 0.4330127018922193, 2.0, 8], ["host", "host_fam=omniconnect|loc=Hamburg", "healthcare", "distinct_card_types", 1.0, 0.0, 1.0, 5]]}