ELK Templates

gistfile1.txt

root@elk:~# curl -XGET "http://localhost:9200/_template"
{"default":{"order":-1,"index_patterns":["*"],"settings":{"index":{"number_of_shards":"5","number_of_replicas":"0"}},"mappings":{},"aliases":{}},"logstash-index-template":{"order":0,"index_patterns":[".logstash"],"settings":{"index":{"number_of_shards":"1","auto_expand_replicas":"0-1","codec":"best_compression"}},"mappings":{"doc":{"_meta":{"logstash-version":"6.6.1"},"dynamic":"strict","properties":{"description":{"type":"text"},"last_modified":{"type":"date"},"pipeline_metadata":{"properties":{"version":{"type":"short"},"type":{"type":"keyword"}}},"pipeline":{"type":"text"},"pipeline_settings":{"dynamic":false,"type":"object"},"username":{"type":"keyword"},"metadata":{"type":"object","dynamic":false}}}},"aliases":{}},"security-index-template":{"order":1000,"index_patterns":[".security-*"],"settings":{"index":{"format":"6","analysis":{"filter":{"email":{"type":"pattern_capture","preserve_original":"true","patterns":["([^@]+)","(\\p{L}+)","(\\d+)","@(.+)"]}},"analyzer":{"email":{"filter":["email","lowercase","unique"],"tokenizer":"uax_url_email"}}},"number_of_shards":"1","priority":"1000","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"_meta":{"security-version":"6.6.1"},"dynamic":"strict","properties":{"username":{"type":"keyword"},"roles":{"type":"keyword"},"password":{"type":"keyword","index":false,"doc_values":false},"full_name":{"type":"text"},"email":{"type":"text","analyzer":"email"},"metadata":{"type":"object","dynamic":true},"enabled":{"type":"boolean"},"cluster":{"type":"keyword"},"indices":{"type":"object","properties":{"field_security":{"properties":{"grant":{"type":"keyword"},"except":{"type":"keyword"}}},"names":{"type":"keyword"},"privileges":{"type":"keyword"},"query":{"type":"keyword"}}},"applications":{"type":"object","properties":{"application":{"type":"keyword"},"privileges":{"type":"keyword"},"resources":{"type":"keyword"}}},"application":{"type":"keyword"},"global":{"type":"object","properties":{"application":{"type":"object","properties":{"manage":{"type":"object","properties":{"applications":{"type":"keyword"}}}}}}},"name":{"type":"keyword"},"run_as":{"type":"keyword"},"doc_type":{"type":"keyword"},"type":{"type":"keyword"},"actions":{"type":"keyword"},"expiration_time":{"type":"date","format":"epoch_millis"},"creation_time":{"type":"date","format":"epoch_millis"},"rules":{"type":"object","dynamic":true},"refresh_token":{"type":"object","properties":{"token":{"type":"keyword"},"refreshed":{"type":"boolean"},"invalidated":{"type":"boolean"},"client":{"type":"object","properties":{"type":{"type":"keyword"},"user":{"type":"keyword"},"realm":{"type":"keyword"}}}}},"access_token":{"type":"object","properties":{"user_token":{"type":"object","properties":{"id":{"type":"keyword"},"expiration_time":{"type":"date","format":"epoch_millis"},"version":{"type":"integer"},"metadata":{"type":"object","dynamic":true},"authentication":{"type":"binary"}}},"invalidated":{"type":"boolean"},"realm":{"type":"keyword"}}}}}},"aliases":{}},".ml-config":{"order":0,"version":6060199,"index_patterns":[".ml-config"],"settings":{"index":{"max_result_window":"10000","unassigned":{"node_left":{"delayed_timeout":"1m"}},"number_of_shards":"1","auto_expand_replicas":"0-1"}},"mappings":{"doc":{"_meta":{"version":"6.6.1"},"dynamic_templates":[{"strings_as_keywords":{"match":"*","mapping":{"type":"keyword"}}}],"properties":{"config_type":{"type":"keyword"},"job_id":{"type":"keyword"},"job_type":{"type":"keyword"},"job_version":{"type":"keyword"},"groups":{"type":"keyword"},"analysis_config":{"properties":{"bucket_span":{"type":"keyword"},"categorization_field_name":{"type":"keyword"},"categorization_filters":{"type":"keyword"},"categorization_analyzer":{"enabled":false},"latency":{"type":"keyword"},"summary_count_field_name":{"type":"keyword"},"detectors":{"properties":{"detector_description":{"type":"text"},"function":{"type":"keyword"},"field_name":{"type":"keyword"},"by_field_name":{"type":"keyword"},"over_field_name":{"type":"keyword"},"partition_field_name":{"type":"keyword"},"use_null":{"type":"boolean"},"exclude_frequent":{"type":"keyword"},"custom_rules":{"type":"nested","properties":{"actions":{"type":"keyword"},"scope":{"enabled":false},"conditions":{"type":"nested","properties":{"applies_to":{"type":"keyword"},"operator":{"type":"keyword"},"value":{"type":"double"}}}}},"detector_index":{"type":"integer"}}},"influencers":{"type":"keyword"},"multivariate_by_fields":{"type":"boolean"}}},"analysis_limits":{"properties":{"model_memory_limit":{"type":"keyword"},"categorization_examples_limit":{"type":"long"}}},"create_time":{"type":"date"},"custom_settings":{"enabled":false},"data_description":{"properties":{"format":{"type":"keyword"},"time_field":{"type":"keyword"},"time_format":{"type":"keyword"},"field_delimiter":{"type":"keyword"},"quote_character":{"type":"keyword"}}},"description":{"type":"text"},"finished_time":{"type":"date"},"last_data_time":{"type":"date"},"established_model_memory":{"type":"long"},"model_plot_config":{"properties":{"enabled":{"type":"boolean"},"terms":{"type":"keyword"}}},"renormalization_window_days":{"type":"long"},"background_persist_interval":{"type":"keyword"},"model_snapshot_retention_days":{"type":"long"},"results_retention_days":{"type":"long"},"model_snapshot_id":{"type":"keyword"},"results_index_name":{"type":"keyword"},"datafeed_id":{"type":"keyword"},"query_delay":{"type":"keyword"},"frequency":{"type":"keyword"},"indices":{"type":"keyword"},"types":{"type":"keyword"},"query":{"enabled":false},"scroll_size":{"type":"long"},"aggregations":{"enabled":false},"script_fields":{"enabled":false},"chunking_config":{"properties":{"mode":{"type":"keyword"},"time_span":{"type":"keyword"}}},"delayed_data_check_config":{"properties":{"enabled":{"type":"boolean"},"check_window":{"type":"keyword"}}},"headers":{"enabled":false}}}},"aliases":{}},".monitoring-kibana":{"order":0,"version":6050399,"index_patterns":[".monitoring-kibana-6-*"],"settings":{"index":{"format":"6","codec":"best_compression","number_of_shards":"1","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"dynamic":false,"properties":{"cluster_uuid":{"type":"keyword"},"timestamp":{"type":"date","format":"date_time"},"interval_ms":{"type":"long"},"type":{"type":"keyword"},"source_node":{"properties":{"uuid":{"type":"keyword"},"host":{"type":"keyword"},"transport_address":{"type":"keyword"},"ip":{"type":"keyword"},"name":{"type":"keyword"},"timestamp":{"type":"date","format":"date_time"}}},"kibana_stats":{"properties":{"kibana":{"properties":{"uuid":{"type":"keyword"},"name":{"type":"keyword"},"host":{"type":"keyword"},"transport_address":{"type":"keyword"},"version":{"type":"keyword"},"snapshot":{"type":"boolean"},"status":{"type":"keyword"},"statuses":{"properties":{"name":{"type":"keyword"},"state":{"type":"keyword"}}}}},"cloud":{"properties":{"name":{"type":"keyword"},"id":{"type":"keyword"},"vm_type":{"type":"keyword"},"region":{"type":"keyword"},"zone":{"type":"keyword"},"metadata":{"type":"object"}}},"os":{"properties":{"load":{"properties":{"1m":{"type":"half_float"},"5m":{"type":"half_float"},"15m":{"type":"half_float"}}},"memory":{"properties":{"total_in_bytes":{"type":"float"},"free_in_bytes":{"type":"float"},"used_in_bytes":{"type":"float"}}},"uptime_in_millis":{"type":"long"}}},"process":{"properties":{"memory":{"properties":{"heap":{"properties":{"total_in_bytes":{"type":"float"},"used_in_bytes":{"type":"float"},"size_limit":{"type":"float"}}},"resident_set_size_in_bytes":{"type":"float"}}},"event_loop_delay":{"type":"float"},"uptime_in_millis":{"type":"long"}}},"sockets":{"properties":{"http":{"properties":{"total":{"type":"long"}}},"https":{"properties":{"total":{"type":"long"}}}}},"timestamp":{"type":"date"},"requests":{"properties":{"disconnects":{"type":"long"},"total":{"type":"long"},"status_codes":{"type":"object"}}},"response_times":{"properties":{"average":{"type":"float"},"max":{"type":"float"}}},"concurrent_connections":{"type":"long"}}}}}},"aliases":{}},".triggered_watches":{"order":2147483647,"index_patterns":[".triggered_watches*"],"settings":{"index":{"format":"6","refresh_interval":"-1","number_of_shards":"1","priority":"900","auto_expand_replicas":"0-1"}},"mappings":{"doc":{"dynamic":"strict","properties":{"trigger_event":{"type":"object","dynamic":true,"enabled":false,"properties":{"schedule":{"type":"object","dynamic":true,"properties":{"triggered_time":{"type":"date"},"scheduled_time":{"type":"date"}}}}},"state":{"type":"keyword"}}}},"aliases":{}},".watches":{"order":2147483647,"index_patterns":[".watches*"],"settings":{"index":{"format":"6","number_of_shards":"1","priority":"800","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"dynamic":"strict","properties":{"status":{"type":"object","enabled":false,"dynamic":true},"trigger":{"type":"object","enabled":false,"dynamic":true},"input":{"type":"object","enabled":false,"dynamic":true},"condition":{"type":"object","enabled":false,"dynamic":true},"throttle_period":{"type":"keyword","index":false,"doc_values":false},"throttle_period_in_millis":{"type":"long","index":false,"doc_values":false},"transform":{"type":"object","enabled":false,"dynamic":true},"actions":{"type":"object","enabled":false,"dynamic":true},"metadata":{"type":"object","dynamic":true}}}},"aliases":{}},".ml-anomalies-":{"order":0,"version":6060199,"index_patterns":[".ml-anomalies-*"],"settings":{"index":{"unassigned":{"node_left":{"delayed_timeout":"1m"}},"translog":{"durability":"async"},"auto_expand_replicas":"0-1","query":{"default_field":"all_field_values"}}},"mappings":{"doc":{"_meta":{"version":"6.6.1"},"dynamic_templates":[{"strings_as_keywords":{"match":"*","mapping":{"type":"keyword"}}}],"properties":{"all_field_values":{"type":"text","analyzer":"whitespace"},"job_id":{"type":"keyword","copy_to":"all_field_values"},"timestamp":{"type":"date"},"result_type":{"type":"keyword"},"anomaly_score":{"type":"double"},"raw_anomaly_score":{"type":"double"},"initial_anomaly_score":{"type":"double"},"is_interim":{"type":"boolean"},"event_count":{"type":"long"},"bucket_span":{"type":"long"},"processing_time_ms":{"type":"long"},"scheduled_events":{"type":"keyword"},"bucket_influencers":{"type":"nested","properties":{"job_id":{"type":"keyword"},"result_type":{"type":"keyword"},"influencer_field_name":{"type":"keyword"},"initial_anomaly_score":{"type":"double"},"anomaly_score":{"type":"double"},"raw_anomaly_score":{"type":"double"},"probability":{"type":"double"},"timestamp":{"type":"date"},"bucket_span":{"type":"long"},"is_interim":{"type":"boolean"}}},"model_feature":{"type":"keyword"},"model_lower":{"type":"double"},"model_upper":{"type":"double"},"model_median":{"type":"double"},"forecast_lower":{"type":"double"},"forecast_upper":{"type":"double"},"forecast_prediction":{"type":"double"},"forecast_id":{"type":"keyword"},"forecast_start_timestamp":{"type":"date"},"forecast_end_timestamp":{"type":"date"},"forecast_create_timestamp":{"type":"date"},"forecast_expiry_timestamp":{"type":"date"},"forecast_messages":{"type":"keyword"},"forecast_progress":{"type":"double"},"forecast_status":{"type":"keyword"},"forecast_memory_bytes":{"type":"long"},"detector_index":{"type":"integer"},"actual":{"type":"double"},"typical":{"type":"double"},"probability":{"type":"double"},"multi_bucket_impact":{"type":"double"},"function":{"type":"keyword"},"function_description":{"type":"keyword"},"by_field_name":{"type":"keyword"},"by_field_value":{"type":"keyword","copy_to":"all_field_values"},"field_name":{"type":"keyword"},"partition_field_name":{"type":"keyword"},"partition_field_value":{"type":"keyword","copy_to":"all_field_values"},"over_field_name":{"type":"keyword"},"over_field_value":{"type":"keyword","copy_to":"all_field_values"},"record_score":{"type":"double"},"initial_record_score":{"type":"double"},"causes":{"type":"nested","properties":{"actual":{"type":"double"},"typical":{"type":"double"},"probability":{"type":"double"},"function":{"type":"keyword"},"function_description":{"type":"keyword"},"by_field_name":{"type":"keyword"},"by_field_value":{"type":"keyword","copy_to":"all_field_values"},"correlated_by_field_value":{"type":"keyword","copy_to":"all_field_values"},"field_name":{"type":"keyword"},"partition_field_name":{"type":"keyword"},"partition_field_value":{"type":"keyword","copy_to":"all_field_values"},"over_field_name":{"type":"keyword"},"over_field_value":{"type":"keyword","copy_to":"all_field_values"}}},"influencers":{"type":"nested","properties":{"influencer_field_name":{"type":"keyword"},"influencer_field_values":{"type":"keyword","copy_to":"all_field_values"}}},"influencer_score":{"type":"double"},"initial_influencer_score":{"type":"double"},"influencer_field_name":{"type":"keyword"},"influencer_field_value":{"type":"keyword","copy_to":"all_field_values"},"model_bytes":{"type":"long"},"total_by_field_count":{"type":"long"},"total_over_field_count":{"type":"long"},"total_partition_field_count":{"type":"long"},"bucket_allocation_failures_count":{"type":"long"},"memory_status":{"type":"keyword"},"log_time":{"type":"date"},"category_id":{"type":"long"},"terms":{"type":"text"},"regex":{"type":"keyword"},"max_matching_length":{"type":"long"},"examples":{"type":"text"},"processed_record_count":{"type":"long"},"processed_field_count":{"type":"long"},"input_bytes":{"type":"long"},"input_record_count":{"type":"long"},"input_field_count":{"type":"long"},"invalid_date_count":{"type":"long"},"missing_field_count":{"type":"long"},"out_of_order_timestamp_count":{"type":"long"},"empty_bucket_count":{"type":"long"},"sparse_bucket_count":{"type":"long"},"bucket_count":{"type":"long"},"earliest_record_timestamp":{"type":"date"},"latest_record_timestamp":{"type":"date"},"latest_empty_bucket_timestamp":{"type":"date"},"latest_sparse_bucket_timestamp":{"type":"date"},"last_data_time":{"type":"date"},"description":{"type":"text"},"snapshot_id":{"type":"keyword"},"snapshot_doc_count":{"type":"integer"},"retain":{"type":"boolean"},"model_size_stats":{"properties":{"job_id":{"type":"keyword"},"result_type":{"type":"keyword"},"timestamp":{"type":"date"},"model_bytes":{"type":"long"},"total_by_field_count":{"type":"long"},"total_over_field_count":{"type":"long"},"total_partition_field_count":{"type":"long"},"bucket_allocation_failures_count":{"type":"long"},"memory_status":{"type":"keyword"},"log_time":{"type":"date"}}},"quantiles":{"enabled":false},"latest_record_time_stamp":{"type":"date"},"latest_result_time_stamp":{"type":"date"}}}},"aliases":{}},".ml-notifications":{"order":0,"version":6060199,"index_patterns":[".ml-notifications"],"settings":{"index":{"number_of_shards":"1","auto_expand_replicas":"0-1","unassigned":{"node_left":{"delayed_timeout":"1m"}}}},"mappings":{"audit_message":{"properties":{"job_id":{"type":"keyword"},"level":{"type":"keyword"},"message":{"type":"text","fields":{"raw":{"type":"keyword"}}},"timestamp":{"type":"date"},"node_name":{"type":"keyword"}}}},"aliases":{}},".monitoring-logstash":{"order":0,"version":6050399,"index_patterns":[".monitoring-logstash-6-*"],"settings":{"index":{"format":"6","codec":"best_compression","number_of_shards":"1","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"dynamic":false,"properties":{"cluster_uuid":{"type":"keyword"},"timestamp":{"type":"date","format":"date_time"},"interval_ms":{"type":"long"},"type":{"type":"keyword"},"source_node":{"properties":{"uuid":{"type":"keyword"},"host":{"type":"keyword"},"transport_address":{"type":"keyword"},"ip":{"type":"keyword"},"name":{"type":"keyword"},"timestamp":{"type":"date","format":"date_time"}}},"logstash_stats":{"type":"object","properties":{"logstash":{"properties":{"uuid":{"type":"keyword"},"name":{"type":"keyword"},"ephemeral_id":{"type":"keyword"},"host":{"type":"keyword"},"http_address":{"type":"keyword"},"version":{"type":"keyword"},"snapshot":{"type":"boolean"},"status":{"type":"keyword"},"pipeline":{"properties":{"workers":{"type":"short"},"batch_size":{"type":"long"}}}}},"events":{"properties":{"filtered":{"type":"long"},"in":{"type":"long"},"out":{"type":"long"},"duration_in_millis":{"type":"long"}}},"timestamp":{"type":"date"},"jvm":{"properties":{"uptime_in_millis":{"type":"long"},"gc":{"properties":{"collectors":{"properties":{"old":{"properties":{"collection_count":{"type":"long"},"collection_time_in_millis":{"type":"long"}}},"young":{"properties":{"collection_count":{"type":"long"},"collection_time_in_millis":{"type":"long"}}}}}}},"mem":{"properties":{"heap_max_in_bytes":{"type":"long"},"heap_used_in_bytes":{"type":"long"},"heap_used_percent":{"type":"long"}}}}},"os":{"properties":{"cpu":{"properties":{"load_average":{"properties":{"1m":{"type":"half_float"},"5m":{"type":"half_float"},"15m":{"type":"half_float"}}}}},"cgroup":{"properties":{"cpuacct":{"properties":{"control_group":{"type":"keyword"},"usage_nanos":{"type":"long"}}},"cpu":{"properties":{"control_group":{"type":"keyword"},"stat":{"properties":{"number_of_elapsed_periods":{"type":"long"},"number_of_times_throttled":{"type":"long"},"time_throttled_nanos":{"type":"long"}}}}}}}}},"process":{"properties":{"cpu":{"properties":{"percent":{"type":"long"}}},"max_file_descriptors":{"type":"long"},"open_file_descriptors":{"type":"long"}}},"reloads":{"properties":{"failures":{"type":"long"},"successes":{"type":"long"}}},"queue":{"properties":{"events_count":{"type":"long"},"type":{"type":"keyword"}}},"pipelines":{"type":"nested","properties":{"id":{"type":"keyword"},"hash":{"type":"keyword"},"ephemeral_id":{"type":"keyword"},"events":{"properties":{"in":{"type":"long"},"filtered":{"type":"long"},"out":{"type":"long"},"duration_in_millis":{"type":"long"},"queue_push_duration_in_millis":{"type":"long"}}},"queue":{"properties":{"events_count":{"type":"long"},"type":{"type":"keyword"},"max_queue_size_in_bytes":{"type":"long"},"queue_size_in_bytes":{"type":"long"}}},"vertices":{"type":"nested","properties":{"id":{"type":"keyword"},"pipeline_ephemeral_id":{"type":"keyword"},"events_in":{"type":"long"},"events_out":{"type":"long"},"duration_in_millis":{"type":"long"},"queue_push_duration_in_millis":{"type":"long"},"long_counters":{"type":"nested","properties":{"name":{"type":"keyword"},"value":{"type":"long"}}},"double_gauges":{"type":"nested","properties":{"name":{"type":"keyword"},"value":{"type":"double"}}}}},"reloads":{"properties":{"failures":{"type":"long"},"successes":{"type":"long"}}}}},"workers":{"type":"short"},"batch_size":{"type":"integer"}}},"logstash_state":{"properties":{"uuid":{"type":"keyword"},"name":{"type":"keyword"},"host":{"type":"keyword"},"http_address":{"type":"keyword"},"ephemeral_id":{"type":"keyword"},"version":{"type":"keyword"},"snapshot":{"type":"boolean"},"status":{"type":"keyword"},"pipeline":{"properties":{"id":{"type":"keyword"},"hash":{"type":"keyword"},"ephemeral_id":{"type":"keyword"},"workers":{"type":"short"},"batch_size":{"type":"integer"},"format":{"type":"keyword"},"version":{"type":"keyword"},"representation":{"enabled":false}}}}}}}},"aliases":{}},".ml-state":{"order":0,"version":6060199,"index_patterns":[".ml-state"],"settings":{"index":{"auto_expand_replicas":"0-1","unassigned":{"node_left":{"delayed_timeout":"1m"}}}},"mappings":{"doc":{"_meta":{"version":"6.6.1"},"enabled":false}},"aliases":{}},".monitoring-es":{"order":0,"version":6050399,"index_patterns":[".monitoring-es-6-*"],"settings":{"index":{"format":"6","codec":"best_compression","number_of_shards":"1","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"date_detection":false,"dynamic":false,"properties":{"cluster_uuid":{"type":"keyword"},"state_uuid":{"type":"keyword"},"timestamp":{"type":"date","format":"date_time"},"interval_ms":{"type":"long"},"type":{"type":"keyword"},"source_node":{"properties":{"uuid":{"type":"keyword"},"host":{"type":"keyword"},"transport_address":{"type":"keyword"},"ip":{"type":"keyword"},"name":{"type":"keyword"},"timestamp":{"type":"date","format":"date_time"}}},"indices_stats":{"properties":{"_all":{"properties":{"primaries":{"properties":{"docs":{"properties":{"count":{"type":"long"}}},"indexing":{"properties":{"index_total":{"type":"long"},"index_time_in_millis":{"type":"long"}}},"search":{"properties":{"query_total":{"type":"long"},"query_time_in_millis":{"type":"long"}}}}},"total":{"properties":{"docs":{"properties":{"count":{"type":"long"}}},"indexing":{"properties":{"index_total":{"type":"long"},"index_time_in_millis":{"type":"long"}}},"search":{"properties":{"query_total":{"type":"long"},"query_time_in_millis":{"type":"long"}}}}}}}}},"index_stats":{"properties":{"index":{"type":"keyword"},"primaries":{"properties":{"docs":{"properties":{"count":{"type":"long"}}},"fielddata":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"}}},"store":{"properties":{"size_in_bytes":{"type":"long"}}},"indexing":{"properties":{"index_total":{"type":"long"},"index_time_in_millis":{"type":"long"},"throttle_time_in_millis":{"type":"long"}}},"merges":{"properties":{"total_size_in_bytes":{"type":"long"}}},"query_cache":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"},"hit_count":{"type":"long"},"miss_count":{"type":"long"}}},"request_cache":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"},"hit_count":{"type":"long"},"miss_count":{"type":"long"}}},"search":{"properties":{"query_total":{"type":"long"},"query_time_in_millis":{"type":"long"}}},"segments":{"properties":{"count":{"type":"integer"},"memory_in_bytes":{"type":"long"},"terms_memory_in_bytes":{"type":"long"},"points_memory_in_bytes":{"type":"long"},"stored_fields_memory_in_bytes":{"type":"long"},"term_vectors_memory_in_bytes":{"type":"long"},"norms_memory_in_bytes":{"type":"long"},"doc_values_memory_in_bytes":{"type":"long"},"index_writer_memory_in_bytes":{"type":"long"},"version_map_memory_in_bytes":{"type":"long"},"fixed_bit_set_memory_in_bytes":{"type":"long"}}},"refresh":{"properties":{"total_time_in_millis":{"type":"long"}}}}},"total":{"properties":{"docs":{"properties":{"count":{"type":"long"}}},"fielddata":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"}}},"store":{"properties":{"size_in_bytes":{"type":"long"}}},"indexing":{"properties":{"index_total":{"type":"long"},"index_time_in_millis":{"type":"long"},"throttle_time_in_millis":{"type":"long"}}},"merges":{"properties":{"total_size_in_bytes":{"type":"long"}}},"query_cache":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"},"hit_count":{"type":"long"},"miss_count":{"type":"long"}}},"request_cache":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"},"hit_count":{"type":"long"},"miss_count":{"type":"long"}}},"search":{"properties":{"query_total":{"type":"long"},"query_time_in_millis":{"type":"long"}}},"segments":{"properties":{"count":{"type":"integer"},"memory_in_bytes":{"type":"long"},"terms_memory_in_bytes":{"type":"long"},"points_memory_in_bytes":{"type":"long"},"stored_fields_memory_in_bytes":{"type":"long"},"term_vectors_memory_in_bytes":{"type":"long"},"norms_memory_in_bytes":{"type":"long"},"doc_values_memory_in_bytes":{"type":"long"},"index_writer_memory_in_bytes":{"type":"long"},"version_map_memory_in_bytes":{"type":"long"},"fixed_bit_set_memory_in_bytes":{"type":"long"}}},"refresh":{"properties":{"total_time_in_millis":{"type":"long"}}}}}}},"cluster_stats":{"properties":{"nodes":{"type":"object"},"indices":{"type":"object"}}},"cluster_state":{"properties":{"version":{"type":"long"},"nodes_hash":{"type":"integer"},"master_node":{"type":"keyword"},"state_uuid":{"type":"keyword"},"status":{"type":"keyword"},"nodes":{"type":"object"},"shards":{"type":"object"}}},"node_stats":{"properties":{"node_id":{"type":"keyword"},"node_master":{"type":"boolean"},"mlockall":{"type":"boolean"},"indices":{"properties":{"docs":{"properties":{"count":{"type":"long"}}},"fielddata":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"}}},"indexing":{"properties":{"index_time_in_millis":{"type":"long"},"index_total":{"type":"long"},"throttle_time_in_millis":{"type":"long"}}},"query_cache":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"},"hit_count":{"type":"long"},"miss_count":{"type":"long"}}},"request_cache":{"properties":{"memory_size_in_bytes":{"type":"long"},"evictions":{"type":"long"},"hit_count":{"type":"long"},"miss_count":{"type":"long"}}},"search":{"properties":{"query_time_in_millis":{"type":"long"},"query_total":{"type":"long"}}},"segments":{"properties":{"count":{"type":"integer"},"memory_in_bytes":{"type":"long"},"terms_memory_in_bytes":{"type":"long"},"points_memory_in_bytes":{"type":"long"},"stored_fields_memory_in_bytes":{"type":"long"},"term_vectors_memory_in_bytes":{"type":"long"},"norms_memory_in_bytes":{"type":"long"},"doc_values_memory_in_bytes":{"type":"long"},"index_writer_memory_in_bytes":{"type":"long"},"version_map_memory_in_bytes":{"type":"long"},"fixed_bit_set_memory_in_bytes":{"type":"long"}}},"store":{"properties":{"size_in_bytes":{"type":"long"}}}}},"fs":{"properties":{"total":{"properties":{"total_in_bytes":{"type":"long"},"free_in_bytes":{"type":"long"},"available_in_bytes":{"type":"long"}}},"data":{"properties":{"spins":{"type":"boolean"}}},"io_stats":{"properties":{"total":{"properties":{"operations":{"type":"long"},"read_operations":{"type":"long"},"write_operations":{"type":"long"},"read_kilobytes":{"type":"long"},"write_kilobytes":{"type":"long"}}}}}}},"os":{"properties":{"cgroup":{"properties":{"cpuacct":{"properties":{"control_group":{"type":"keyword"},"usage_nanos":{"type":"long"}}},"cpu":{"properties":{"cfs_quota_micros":{"type":"long"},"control_group":{"type":"keyword"},"stat":{"properties":{"number_of_elapsed_periods":{"type":"long"},"number_of_times_throttled":{"type":"long"},"time_throttled_nanos":{"type":"long"}}}}},"memory":{"properties":{"control_group":{"type":"keyword"},"limit_in_bytes":{"type":"keyword"},"usage_in_bytes":{"type":"keyword"}}}}},"cpu":{"properties":{"load_average":{"properties":{"1m":{"type":"half_float"},"5m":{"type":"half_float"},"15m":{"type":"half_float"}}}}}}},"process":{"properties":{"open_file_descriptors":{"type":"long"},"max_file_descriptors":{"type":"long"},"cpu":{"properties":{"percent":{"type":"half_float"}}}}},"jvm":{"properties":{"mem":{"properties":{"heap_used_in_bytes":{"type":"long"},"heap_used_percent":{"type":"half_float"},"heap_max_in_bytes":{"type":"long"}}},"gc":{"properties":{"collectors":{"properties":{"young":{"properties":{"collection_count":{"type":"long"},"collection_time_in_millis":{"type":"long"}}},"old":{"properties":{"collection_count":{"type":"long"},"collection_time_in_millis":{"type":"long"}}}}}}}}},"thread_pool":{"properties":{"bulk":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"generic":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"get":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"index":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"management":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"search":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"watcher":{"properties":{"threads":{"type":"integer"},"queue":{"type":"integer"},"rejected":{"type":"long"}}},"write":{"properties":{"queue":{"type":"integer"},"rejected":{"type":"long"}}}}}}},"index_recovery":{"type":"object"},"shard":{"properties":{"state":{"type":"keyword"},"primary":{"type":"boolean"},"index":{"type":"keyword"},"relocating_node":{"type":"keyword"},"shard":{"type":"long"},"node":{"type":"keyword"}}},"job_stats":{"properties":{"job_id":{"type":"keyword"},"state":{"type":"keyword"},"data_counts":{"properties":{"input_bytes":{"type":"long"},"processed_record_count":{"type":"long"},"empty_bucket_count":{"type":"long"},"sparse_bucket_count":{"type":"long"},"bucket_count":{"type":"long"},"earliest_record_timestamp":{"type":"date"},"latest_record_timestamp":{"type":"date"}}},"model_size_stats":{"properties":{"model_bytes":{"type":"long"},"bucket_allocation_failures_count":{"type":"long"}}},"node":{"properties":{"id":{"type":"keyword"}}}}},"ccr_stats":{"properties":{"remote_cluster":{"type":"keyword"},"leader_index":{"type":"keyword"},"follower_index":{"type":"keyword"},"shard_id":{"type":"integer"},"leader_global_checkpoint":{"type":"long"},"leader_max_seq_no":{"type":"long"},"follower_global_checkpoint":{"type":"long"},"follower_max_seq_no":{"type":"long"},"last_requested_seq_no":{"type":"long"},"outstanding_read_requests":{"type":"long"},"outstanding_write_requests":{"type":"long"},"write_buffer_operation_count":{"type":"long"},"write_buffer_size_in_bytes":{"type":"long"},"follower_mapping_version":{"type":"long"},"follower_settings_version":{"type":"long"},"total_read_time_millis":{"type":"long"},"total_read_remote_exec_time_millis":{"type":"long"},"successful_read_requests":{"type":"long"},"failed_read_requests":{"type":"long"},"operations_read":{"type":"long"},"bytes_read":{"type":"long"},"total_write_time_millis":{"type":"long"},"successful_write_requests":{"type":"long"},"failed_write_requests":{"type":"long"},"operations_written":{"type":"long"},"read_exceptions":{"type":"nested","properties":{"from_seq_no":{"type":"long"},"retries":{"type":"integer"},"exception":{"type":"object","properties":{"type":{"type":"keyword"},"reason":{"type":"text"}}}}},"time_since_last_read_millis":{"type":"long"},"fatal_exception":{"type":"object","properties":{"type":{"type":"keyword"},"reason":{"type":"text"}}}}},"ccr_auto_follow_stats":{"properties":{"number_of_failed_follow_indices":{"type":"long"},"number_of_failed_remote_cluster_state_requests":{"type":"long"},"number_of_successful_follow_indices":{"type":"long"},"recent_auto_follow_errors":{"type":"nested","properties":{"leader_index":{"type":"keyword"},"auto_follow_exception":{"type":"object","properties":{"type":{"type":"keyword"},"reason":{"type":"text"}}}}},"auto_followed_clusters":{"type":"nested","properties":{"cluster_name":{"type":"keyword"},"time_since_last_check_millis":{"type":"long"},"last_seen_metadata_version":{"type":"long"}}}}}}}},"aliases":{}},"winlogbeat":{"order":1,"index_patterns":["winlogbeat-6.6.1-*"],"settings":{"index":{"mapping":{"total_fields":{"limit":"10000"}},"refresh_interval":"5s","number_of_shards":"6","number_of_replicas":"0"}},"mappings":{"doc":{"_meta":{"version":"6.6.1"},"date_detection":false,"dynamic_templates":[{"event_data":{"mapping":{"type":"keyword"},"match_mapping_type":"string","path_match":"event_data.*"}},{"user_data":{"mapping":{"type":"keyword"},"match_mapping_type":"string","path_match":"user_data.*"}},{"fields":{"mapping":{"type":"keyword"},"match_mapping_type":"string","path_match":"fields.*"}},{"docker.container.labels":{"mapping":{"type":"keyword"},"match_mapping_type":"string","path_match":"docker.container.labels.*"}},{"strings_as_keyword":{"mapping":{"ignore_above":1024,"type":"keyword"},"match_mapping_type":"string"}}],"properties":{"@timestamp":{"type":"date"},"activity_id":{"ignore_above":1024,"type":"keyword"},"beat":{"properties":{"hostname":{"ignore_above":1024,"type":"keyword"},"name":{"ignore_above":1024,"type":"keyword"},"timezone":{"ignore_above":1024,"type":"keyword"},"version":{"ignore_above":1024,"type":"keyword"}}},"cloud":{"properties":{"availability_zone":{"path":"meta.cloud.availability_zone","type":"alias"},"instance":{"properties":{"id":{"path":"meta.cloud.instance_id","type":"alias"},"name":{"path":"meta.cloud.instance_name","type":"alias"}}},"machine":{"properties":{"type":{"path":"meta.cloud.machine_type","type":"alias"}}},"project":{"properties":{"id":{"path":"meta.cloud.project_id","type":"alias"}}},"provider":{"path":"meta.cloud.provider","type":"alias"},"region":{"path":"meta.cloud.region","type":"alias"}}},"computer_name":{"ignore_above":1024,"type":"keyword"},"container":{"properties":{"id":{"path":"docker.container.id","type":"alias"},"image":{"properties":{"name":{"path":"docker.container.image","type":"alias"}}},"name":{"path":"docker.container.name","type":"alias"}}},"docker":{"properties":{"container":{"properties":{"id":{"ignore_above":1024,"type":"keyword"},"image":{"ignore_above":1024,"type":"keyword"},"labels":{"type":"object"},"name":{"ignore_above":1024,"type":"keyword"}}}}},"error":{"properties":{"code":{"type":"long"},"message":{"norms":false,"type":"text"},"type":{"ignore_above":1024,"type":"keyword"}}},"event":{"properties":{"timezone":{"path":"beat.timezone","type":"alias"}}},"event_data":{"type":"object"},"event_id":{"type":"long"},"fields":{"type":"object"},"host":{"properties":{"architecture":{"ignore_above":1024,"type":"keyword"},"hostname":{"path":"beat.hostname","type":"alias"},"id":{"ignore_above":1024,"type":"keyword"},"ip":{"type":"ip"},"mac":{"ignore_above":1024,"type":"keyword"},"name":{"ignore_above":1024,"type":"keyword"},"os":{"properties":{"family":{"ignore_above":1024,"type":"keyword"},"platform":{"ignore_above":1024,"type":"keyword"},"version":{"ignore_above":1024,"type":"keyword"}}}}},"keywords":{"ignore_above":1024,"type":"keyword"},"kubernetes":{"properties":{"annotations":{"type":"object"},"container":{"properties":{"image":{"ignore_above":1024,"type":"keyword"},"name":{"ignore_above":1024,"type":"keyword"}}},"labels":{"type":"object"},"namespace":{"ignore_above":1024,"type":"keyword"},"node":{"properties":{"name":{"ignore_above":1024,"type":"keyword"}}},"pod":{"properties":{"name":{"ignore_above":1024,"type":"keyword"},"uid":{"ignore_above":1024,"type":"keyword"}}}}},"level":{"ignore_above":1024,"type":"keyword"},"log_name":{"ignore_above":1024,"type":"keyword"},"message":{"norms":false,"type":"text"},"message_error":{"ignore_above":1024,"type":"keyword"},"meta":{"properties":{"cloud":{"properties":{"availability_zone":{"ignore_above":1024,"type":"keyword"},"instance_id":{"ignore_above":1024,"type":"keyword"},"instance_name":{"ignore_above":1024,"type":"keyword"},"machine_type":{"ignore_above":1024,"type":"keyword"},"project_id":{"ignore_above":1024,"type":"keyword"},"provider":{"ignore_above":1024,"type":"keyword"},"region":{"ignore_above":1024,"type":"keyword"}}}}},"opcode":{"ignore_above":1024,"type":"keyword"},"process_id":{"type":"long"},"provider_guid":{"ignore_above":1024,"type":"keyword"},"record_number":{"ignore_above":1024,"type":"keyword"},"related_activity_id":{"ignore_above":1024,"type":"keyword"},"source_name":{"ignore_above":1024,"type":"keyword"},"tags":{"ignore_above":1024,"type":"keyword"},"task":{"ignore_above":1024,"type":"keyword"},"thread_id":{"type":"long"},"type":{"ignore_above":1024,"type":"keyword"},"user":{"properties":{"domain":{"ignore_above":1024,"type":"keyword"},"identifier":{"ignore_above":1024,"type":"keyword"},"name":{"ignore_above":1024,"type":"keyword"},"type":{"ignore_above":1024,"type":"keyword"}}},"user_data":{"type":"object"},"version":{"type":"long"},"xml":{"norms":false,"type":"text"}}}},"aliases":{}},".monitoring-beats":{"order":0,"version":6050399,"index_patterns":[".monitoring-beats-6-*"],"settings":{"index":{"format":"6","codec":"best_compression","number_of_shards":"1","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"dynamic":false,"properties":{"beats_state":{"properties":{"beat":{"properties":{"host":{"type":"keyword"},"name":{"type":"keyword"},"type":{"type":"keyword"},"uuid":{"type":"keyword"},"version":{"type":"keyword"}}},"state":{"properties":{"beat":{"properties":{"name":{"type":"keyword"}}},"host":{"properties":{"architecture":{"type":"keyword"},"name":{"type":"keyword"},"os":{"properties":{"build":{"type":"keyword"},"family":{"type":"keyword"},"platform":{"type":"keyword"},"version":{"type":"keyword"}}}}},"input":{"properties":{"count":{"type":"long"},"names":{"type":"keyword"}}},"module":{"properties":{"count":{"type":"long"},"names":{"type":"keyword"}}},"output":{"properties":{"name":{"type":"keyword"}}},"service":{"properties":{"id":{"type":"keyword"},"name":{"type":"keyword"},"version":{"type":"keyword"}}}}},"timestamp":{"format":"date_time","type":"date"}}},"beats_stats":{"properties":{"beat":{"properties":{"host":{"type":"keyword"},"name":{"type":"keyword"},"type":{"type":"keyword"},"uuid":{"type":"keyword"},"version":{"type":"keyword"}}},"metrics":{"properties":{"beat":{"properties":{"cpu":{"properties":{"system":{"properties":{"ticks":{"type":"long"},"time":{"properties":{"ms":{"type":"long"}}}}},"total":{"properties":{"value":{"type":"long"},"ticks":{"type":"long"},"time":{"properties":{"ms":{"type":"long"}}}}},"user":{"properties":{"ticks":{"type":"long"},"time":{"properties":{"ms":{"type":"long"}}}}}}},"info":{"properties":{"ephemeral_id":{"type":"keyword"},"uptime":{"properties":{"ms":{"type":"long"}}}}},"memstats":{"properties":{"gc_next":{"type":"long"},"memory_alloc":{"type":"long"},"memory_total":{"type":"long"},"rss":{"type":"long"}}},"handles":{"properties":{"open":{"type":"long"},"limit":{"properties":{"hard":{"type":"long"},"soft":{"type":"long"}}}}}}},"apm-server":{"properties":{"server":{"properties":{"request":{"properties":{"count":{"type":"long"}}},"concurrent":{"properties":{"wait":{"properties":{"ms":{"type":"long"}}}}},"response":{"properties":{"count":{"type":"long"},"errors":{"properties":{"count":{"type":"long"},"toolarge":{"type":"long"},"validate":{"type":"long"},"ratelimit":{"type":"long"},"queue":{"type":"long"},"closed":{"type":"long"},"forbidden":{"type":"long"},"concurrency":{"type":"long"},"unauthorized":{"type":"long"},"internal":{"type":"long"},"decode":{"type":"long"},"method":{"type":"long"}}},"valid":{"properties":{"ok":{"type":"long"},"accepted":{"type":"long"},"count":{"type":"long"}}}}}}},"decoder":{"properties":{"deflate":{"properties":{"content-length":{"type":"long"},"count":{"type":"long"}}},"gzip":{"properties":{"content-length":{"type":"long"},"count":{"type":"long"}}},"uncompressed":{"properties":{"content-length":{"type":"long"},"count":{"type":"long"}}},"reader":{"properties":{"size":{"type":"long"},"count":{"type":"long"}}},"missing-content-length":{"properties":{"count":{"type":"long"}}}}},"processor":{"properties":{"metric":{"properties":{"decoding":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"validation":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"transformations":{"type":"long"}}},"sourcemap":{"properties":{"counter":{"type":"long"},"decoding":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"validation":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}}}},"transaction":{"properties":{"decoding":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"validation":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"transformations":{"type":"long"},"transactions":{"type":"long"},"spans":{"type":"long"},"stacktraces":{"type":"long"},"frames":{"type":"long"}}},"error":{"properties":{"decoding":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"validation":{"properties":{"errors":{"type":"long"},"count":{"type":"long"}}},"transformations":{"type":"long"},"errors":{"type":"long"},"stacktraces":{"type":"long"},"frames":{"type":"long"}}},"span":{"properties":{"transformations":{"type":"long"}}}}}}},"libbeat":{"properties":{"config":{"properties":{"module":{"properties":{"running":{"type":"long"},"starts":{"type":"long"},"stops":{"type":"long"}}},"reloads":{"type":"long"}}},"output":{"properties":{"events":{"properties":{"acked":{"type":"long"},"active":{"type":"long"},"batches":{"type":"long"},"dropped":{"type":"long"},"duplicates":{"type":"long"},"failed":{"type":"long"},"total":{"type":"long"},"toomany":{"type":"long"}}},"read":{"properties":{"bytes":{"type":"long"},"errors":{"type":"long"}}},"type":{"type":"keyword"},"write":{"properties":{"bytes":{"type":"long"},"errors":{"type":"long"}}}}},"pipeline":{"properties":{"clients":{"type":"long"},"events":{"properties":{"active":{"type":"long"},"dropped":{"type":"long"},"failed":{"type":"long"},"filtered":{"type":"long"},"published":{"type":"long"},"retry":{"type":"long"},"total":{"type":"long"}}},"queue":{"properties":{"acked":{"type":"long"}}}}}}},"system":{"properties":{"load":{"properties":{"1":{"type":"double"},"15":{"type":"double"},"5":{"type":"double"},"norm":{"properties":{"1":{"type":"double"},"15":{"type":"double"},"5":{"type":"double"}}}}}}}}},"tags":{"type":"keyword"},"timestamp":{"format":"date_time","type":"date"}}},"cluster_uuid":{"type":"keyword"},"interval_ms":{"type":"long"},"source_node":{"properties":{"host":{"type":"keyword"},"ip":{"type":"keyword"},"name":{"type":"keyword"},"transport_address":{"type":"keyword"},"uuid":{"type":"keyword"}}},"timestamp":{"format":"date_time","type":"date"},"type":{"type":"keyword"}}}},"aliases":{}},"logstash":{"order":0,"version":60001,"index_patterns":["logstash-*"],"settings":{"index":{"refresh_interval":"5s"}},"mappings":{"_default_":{"dynamic_templates":[{"message_field":{"path_match":"message","match_mapping_type":"string","mapping":{"type":"text","norms":false}}},{"string_fields":{"match":"*","match_mapping_type":"string","mapping":{"type":"text","norms":false,"fields":{"keyword":{"type":"keyword","ignore_above":256}}}}}],"properties":{"@timestamp":{"type":"date"},"@version":{"type":"keyword"},"geoip":{"dynamic":true,"properties":{"ip":{"type":"ip"},"location":{"type":"geo_point"},"latitude":{"type":"half_float"},"longitude":{"type":"half_float"}}}}}},"aliases":{}},".ml-meta":{"order":0,"version":6060199,"index_patterns":[".ml-meta"],"settings":{"index":{"number_of_shards":"1","auto_expand_replicas":"0-1","unassigned":{"node_left":{"delayed_timeout":"1m"}}}},"mappings":{"doc":{"dynamic_templates":[{"strings_as_keywords":{"match":"*","mapping":{"type":"keyword"}}}],"properties":{"calendar_id":{"type":"keyword"},"job_ids":{"type":"keyword"},"description":{"type":"keyword"},"start_time":{"type":"date"},"end_time":{"type":"date"}}}},"aliases":{}},".monitoring-alerts":{"order":0,"version":6050399,"index_patterns":[".monitoring-alerts-6"],"settings":{"index":{"format":"6","codec":"best_compression","number_of_shards":"1","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"dynamic":false,"properties":{"timestamp":{"type":"date"},"update_timestamp":{"type":"date"},"resolved_timestamp":{"type":"date"},"prefix":{"type":"text"},"message":{"type":"text"},"suffix":{"type":"text"},"metadata":{"properties":{"cluster_uuid":{"type":"keyword"},"link":{"type":"keyword"},"severity":{"type":"short"},"type":{"type":"keyword"},"version":{"type":"keyword"},"watch":{"type":"keyword"}}}}}},"aliases":{}},"kibana_index_template:.kibana":{"order":0,"index_patterns":[".kibana"],"settings":{"index":{"number_of_shards":"1","auto_expand_replicas":"0-1"}},"mappings":{"doc":{"dynamic":"strict","properties":{"config":{"dynamic":"true","properties":{"buildNum":{"type":"keyword"}}},"migrationVersion":{"dynamic":"true","type":"object"},"type":{"type":"keyword"},"namespace":{"type":"keyword"},"updated_at":{"type":"date"},"telemetry":{"properties":{"enabled":{"type":"boolean"}}},"graph-workspace":{"properties":{"description":{"type":"text"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"numLinks":{"type":"integer"},"numVertices":{"type":"integer"},"title":{"type":"text"},"version":{"type":"integer"},"wsState":{"type":"text"}}},"space":{"properties":{"name":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":2048}}},"description":{"type":"text"},"initials":{"type":"keyword"},"color":{"type":"keyword"},"_reserved":{"type":"boolean"}}},"apm-telemetry":{"properties":{"has_any_services":{"type":"boolean"},"services_per_agent":{"properties":{"python":{"type":"long","null_value":0},"java":{"type":"long","null_value":0},"nodejs":{"type":"long","null_value":0},"js-base":{"type":"long","null_value":0},"ruby":{"type":"long","null_value":0},"go":{"type":"long","null_value":0}}}}},"canvas-workpad":{"dynamic":false,"properties":{"name":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"id":{"type":"text","index":false},"@timestamp":{"type":"date"},"@created":{"type":"date"}}},"index-pattern":{"properties":{"fieldFormatMap":{"type":"text"},"fields":{"type":"text"},"intervalName":{"type":"keyword"},"notExpandable":{"type":"boolean"},"sourceFilters":{"type":"text"},"timeFieldName":{"type":"keyword"},"title":{"type":"text"},"type":{"type":"keyword"},"typeMeta":{"type":"keyword"}}},"visualization":{"properties":{"description":{"type":"text"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"savedSearchId":{"type":"keyword"},"title":{"type":"text"},"uiStateJSON":{"type":"text"},"version":{"type":"integer"},"visState":{"type":"text"}}},"search":{"properties":{"columns":{"type":"keyword"},"description":{"type":"text"},"hits":{"type":"integer"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"sort":{"type":"keyword"},"title":{"type":"text"},"version":{"type":"integer"}}},"dashboard":{"properties":{"description":{"type":"text"},"hits":{"type":"integer"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"optionsJSON":{"type":"text"},"panelsJSON":{"type":"text"},"refreshInterval":{"properties":{"display":{"type":"keyword"},"pause":{"type":"boolean"},"section":{"type":"integer"},"value":{"type":"integer"}}},"timeFrom":{"type":"keyword"},"timeRestore":{"type":"boolean"},"timeTo":{"type":"keyword"},"title":{"type":"text"},"uiStateJSON":{"type":"text"},"version":{"type":"integer"}}},"url":{"properties":{"accessCount":{"type":"long"},"accessDate":{"type":"date"},"createDate":{"type":"date"},"url":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":2048}}}}},"server":{"properties":{"uuid":{"type":"keyword"}}},"kql-telemetry":{"properties":{"optInCount":{"type":"long"},"optOutCount":{"type":"long"}}},"timelion-sheet":{"properties":{"description":{"type":"text"},"hits":{"type":"integer"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"timelion_chart_height":{"type":"integer"},"timelion_columns":{"type":"integer"},"timelion_interval":{"type":"keyword"},"timelion_other_interval":{"type":"keyword"},"timelion_rows":{"type":"integer"},"timelion_sheet":{"type":"text"},"title":{"type":"text"},"version":{"type":"integer"}}}}}},"aliases":{}},".watch-history-9":{"order":2147483647,"index_patterns":[".watcher-history-9*"],"settings":{"index":{"format":"6","number_of_shards":"1","auto_expand_replicas":"0-1","number_of_replicas":"0"}},"mappings":{"doc":{"_meta":{"watcher-history-version":"9"},"dynamic_templates":[{"disabled_payload_fields":{"path_match":"result\\.(input(\\..+)*|(transform(\\..+)*)|(actions\\.transform(\\..+)*))\\.payload","match_pattern":"regex","mapping":{"type":"object","enabled":false}}},{"disabled_search_request_body_fields":{"path_match":"result\\.(input(\\..+)*|(transform(\\..+)*)|(actions\\.transform(\\..+)*))\\.search\\.request\\.(body|template)","match_pattern":"regex","mapping":{"type":"object","enabled":false}}},{"disabled_exception_fields":{"path_match":"result\\.(input(\\..+)*|(transform(\\..+)*)|(actions\\.transform(\\..+)*)|actions)\\.error","match_pattern":"regex","mapping":{"type":"object","enabled":false}}},{"disabled_jira_custom_fields":{"path_match":"result.actions.jira.fields.customfield_*","mapping":{"type":"object","enabled":false}}}],"dynamic":false,"properties":{"watch_id":{"type":"keyword"},"node":{"type":"keyword"},"trigger_event":{"type":"object","dynamic":true,"properties":{"type":{"type":"keyword"},"triggered_time":{"type":"date"},"manual":{"type":"object","dynamic":true,"properties":{"schedule":{"type":"object","dynamic":true,"properties":{"scheduled_time":{"type":"date"}}}}},"schedule":{"type":"object","dynamic":true,"properties":{"scheduled_time":{"type":"date"}}}}},"vars":{"type":"object","enabled":false},"input":{"type":"object","enabled":false},"condition":{"type":"object","enabled":false},"state":{"type":"keyword"},"status":{"type":"object","enabled":false,"dynamic":true},"messages":{"type":"text"},"user":{"type":"text"},"exception":{"type":"object","enabled":false},"result":{"type":"object","dynamic":true,"properties":{"execution_time":{"type":"date"},"execution_duration":{"type":"long"},"input":{"type":"object","dynamic":true,"properties":{"type":{"type":"keyword"},"status":{"type":"keyword"},"payload":{"type":"object","enabled":false},"search":{"type":"object","dynamic":true,"properties":{"request":{"type":"object","dynamic":true,"properties":{"search_type":{"type":"keyword"},"indices":{"type":"keyword"},"types":{"type":"keyword"}}}}},"http":{"type":"object","dynamic":true,"properties":{"request":{"type":"object","dynamic":true,"properties":{"path":{"type":"keyword"},"host":{"type":"keyword"}}}}}}},"condition":{"type":"object","dynamic":true,"properties":{"type":{"type":"keyword"},"status":{"type":"keyword"},"met":{"type":"boolean"},"compare":{"type":"object","enabled":false},"array_compare":{"type":"object","enabled":false},"script":{"type":"object","enabled":false}}},"transform":{"type":"object","dynamic":true,"properties":{"type":{"type":"keyword"},"search":{"type":"object","dynamic":true,"properties":{"request":{"type":"object","dynamic":true,"properties":{"indices":{"type":"keyword"},"types":{"type":"keyword"}}}}}}},"actions":{"type":"nested","include_in_parent":true,"dynamic":true,"properties":{"id":{"type":"keyword"},"type":{"type":"keyword"},"status":{"type":"keyword"},"reason":{"type":"keyword"},"email":{"type":"object","dynamic":true,"properties":{"message":{"type":"object","dynamic":true,"properties":{"id":{"type":"keyword"},"from":{"type":"keyword"},"reply_to":{"type":"keyword"},"to":{"type":"keyword"},"cc":{"type":"keyword"},"bcc":{"type":"keyword"}}}}},"webhook":{"type":"object","dynamic":true,"properties":{"request":{"type":"object","dynamic":true,"properties":{"path":{"type":"keyword"},"host":{"type":"keyword"}}}}},"index":{"type":"object","dynamic":true,"properties":{"response":{"type":"object","dynamic":true,"properties":{"index":{"type":"keyword"},"type":{"type":"keyword"},"id":{"type":"keyword"}}}}},"hipchat":{"type":"object","dynamic":true,"properties":{"account":{"type":"keyword"},"sent_messages":{"type":"nested","include_in_parent":true,"dynamic":true,"properties":{"status":{"type":"keyword"},"reason":{"type":"text"},"request":{"type":"object","enabled":false},"response":{"type":"object","enabled":false},"room":{"type":"keyword"},"user":{"type":"keyword"},"message":{"type":"object","dynamic":true,"properties":{"message_format":{"type":"keyword"},"color":{"type":"keyword"},"notify":{"type":"boolean"},"message":{"type":"text"},"from":{"type":"text"}}}}}}},"jira":{"type":"object","dynamic":true,"properties":{"account":{"type":"keyword"},"reason":{"type":"text"},"request":{"type":"object","enabled":false},"response":{"type":"object","enabled":false},"fields":{"type":"object","dynamic":true,"properties":{"summary":{"type":"text"},"description":{"type":"text"},"labels":{"type":"text"},"project":{"type":"object","dynamic":true,"properties":{"key":{"type":"keyword"},"id":{"type":"keyword"}}},"issuetype":{"type":"object","dynamic":true,"properties":{"name":{"type":"keyword"},"id":{"type":"keyword"}}}}},"result":{"type":"object","dynamic":true,"properties":{"id":{"type":"keyword"},"key":{"type":"keyword"},"self":{"type":"keyword"}}}}},"slack":{"type":"object","dynamic":true,"properties":{"account":{"type":"keyword"},"sent_messages":{"type":"nested","include_in_parent":true,"dynamic":true,"properties":{"status":{"type":"keyword"},"reason":{"type":"text"},"request":{"type":"object","enabled":false},"response":{"type":"object","enabled":false},"to":{"type":"keyword"},"message":{"type":"object","dynamic":true,"properties":{"from":{"type":"text"},"icon":{"type":"keyword"},"text":{"type":"text"},"attachments":{"type":"nested","include_in_parent":true,"dynamic":true,"properties":{"color":{"type":"keyword"},"fields":{"properties":{"value":{"type":"text"}}}}}}}}}}},"pagerduty":{"type":"object","dynamic":true,"properties":{"account":{"type":"keyword"},"sent_event":{"type":"nested","include_in_parent":true,"dynamic":true,"properties":{"reason":{"type":"text"},"request":{"type":"object","enabled":false},"response":{"type":"object","enabled":false},"event":{"type":"object","dynamic":true,"properties":{"type":{"type":"keyword"},"client":{"type":"text"},"client_url":{"type":"keyword"},"account":{"type":"keyword"},"attach_payload":{"type":"boolean"},"incident_key":{"type":"keyword"},"description":{"type":"text"},"context":{"type":"nested","include_in_parent":true,"dynamic":true,"properties":{"type":{"type":"keyword"},"href":{"type":"keyword"},"src":{"type":"keyword"},"alt":{"type":"text"}}}}}}}}}}}}},"metadata":{"type":"object","dynamic":true}}}},"aliases":{}},"security_audit_log":{"order":1000,"index_patterns":[".security_audit_log*"],"settings":{},"mappings":{"doc":{"_meta":{"security-version":"6.6.1"},"dynamic":"strict","properties":{"@timestamp":{"type":"date","format":"date_time","doc_values":true},"node_name":{"type":"keyword"},"node_host_name":{"type":"keyword"},"node_host_address":{"type":"keyword"},"layer":{"type":"keyword"},"event_type":{"type":"keyword"},"origin_address":{"type":"keyword"},"origin_type":{"type":"keyword"},"principal":{"type":"keyword"},"roles":{"type":"keyword"},"run_by_principal":{"type":"keyword"},"run_as_principal":{"type":"keyword"},"action":{"type":"keyword"},"indices":{"type":"keyword"},"request":{"type":"keyword"},"request_body":{"type":"keyword","index":false,"doc_values":false},"uri":{"type":"keyword"},"realm":{"type":"keyword"},"run_by_realm":{"type":"keyword"},"run_as_realm":{"type":"keyword"},"transport_profile":{"type":"keyword"},"rule":{"type":"keyword"},"opaque_id":{"type":"keyword"}}}},"aliases":{}}}