Elasticsearch Shard List in YAML (Example)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.02.19-000017" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.02.19-000017" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.15-000015" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "746234" | |
| store: "113.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.15-000015" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "746234" | |
| store: "113.8mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-windows.service-default-2021.03.16-000041" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "720709" | |
| store: "137mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-windows.service-default-2021.03.16-000041" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "720709" | |
| store: "136.8mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".watcher-history-13-2020.12.16" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2020.12.16" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-endpoint.policy-default-2021.03.17-000002" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2879" | |
| store: "1.1mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-metrics-endpoint.policy-default-2021.03.17-000002" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2879" | |
| store: "1.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-endpoint.metadata-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2384" | |
| store: "589.9kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-endpoint.metadata-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2384" | |
| store: "648.9kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".kibana-event-log-7.10.1-000003" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".kibana-event-log-7.10.1-000003" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.9.3-000007" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.9.3-000007" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".monitoring-es-7-2021.03.14" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1507363" | |
| store: "523.9mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".monitoring-es-7-2021.03.14" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1507363" | |
| store: "523.9mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.13-000013" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1944" | |
| store: "425.5kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.13-000013" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1944" | |
| store: "425.5kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.security-default-2021.03.12-000023" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1542574" | |
| store: "573.9mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.security-default-2021.03.12-000023" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1542574" | |
| store: "570.3mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".monitoring-kibana-7-2021.03.12" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "33264" | |
| store: "5.3mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".monitoring-kibana-7-2021.03.12" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "33264" | |
| store: "5.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "filebeat-7.11.1-2021.03.09-000003" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "14733337" | |
| store: "14.9gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.09-000003" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "14733337" | |
| store: "14.9gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.09-000036" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "162558" | |
| store: "31.1mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.09-000036" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "162558" | |
| store: "31.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".monitoring-kibana-7-2021.03.14" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "13224" | |
| store: "2.4mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".monitoring-kibana-7-2021.03.14" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "13224" | |
| store: "2.4mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1246" | |
| store: "3.3mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1246" | |
| store: "3.4mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-000005" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-000005" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.09-000003" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.09-000003" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.15-000009" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3678557" | |
| store: "680mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.15-000009" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3678557" | |
| store: "680mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".watcher-history-13-2021.03.11" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2021.03.11" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".watcher-history-13-2021.03.20" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2021.03.20" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.access-default-2021.03.12-000039" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4173" | |
| store: "776.5kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.12-000039" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4173" | |
| store: "776.5kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.11.1-2021.03.19-000015" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "7121611" | |
| store: "6gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.19-000015" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "7121611" | |
| store: "6gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".monitoring-es-7-2021.03.13" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5821681" | |
| store: "2.1gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".monitoring-es-7-2021.03.13" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5821681" | |
| store: "2.1gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.09-000036" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3083069" | |
| store: "717.4mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.09-000036" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3083069" | |
| store: "713.7mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.10.0-2021.03.08-000051" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3431687" | |
| store: "3.4gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.08-000051" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3431687" | |
| store: "3.4gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".items-default-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "448490" | |
| store: "75mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".items-default-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "448490" | |
| store: "73.7mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.security-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1834859" | |
| store: "671.3mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.security-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1834859" | |
| store: "671.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ml-anomalies-shared" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ml-anomalies-shared" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.library-default-000032" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1304182" | |
| store: "250.7mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.library-default-000032" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1304182" | |
| store: "250.7mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.access-default-000032" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "11346" | |
| store: "2mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-000032" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "11346" | |
| store: "2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-system.filesystem-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "223" | |
| store: "146.2kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.filesystem-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "223" | |
| store: "179.7kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "filebeat-7.11.1-2021.03.20-000020" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "7586041" | |
| store: "6gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.20-000020" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "7586041" | |
| store: "6gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.09-000020" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "150" | |
| store: "829.7kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.09-000020" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "150" | |
| store: "829.7kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.10.0-2021.03.14-000056" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4337" | |
| store: "4.8mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.14-000056" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4337" | |
| store: "4.8mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "filebeat-7.11.1-2021.03.14-000008" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "11359694" | |
| store: "10.2gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.14-000008" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "11359694" | |
| store: "10.2gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.16-000041" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1369583" | |
| store: "359.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.16-000041" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1369593" | |
| store: "609.2mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".reporting-2020-11-15" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "232b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".reporting-2020-11-15" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "232b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.alerts-default-2021.03.13-000039" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.alerts-default-2021.03.13-000039" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.10.1-000005" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.10.1-000005" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.15-000016" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "589060" | |
| store: "112mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.15-000016" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "589060" | |
| store: "112mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "454339" | |
| store: "186.2mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "454339" | |
| store: "186.2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".slm-history-3-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".slm-history-3-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.13-000013" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "132313" | |
| store: "47.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.13-000013" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "132313" | |
| store: "47.8mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.security-default-000017" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "6843895" | |
| store: "2.3gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.security-default-000017" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "6843895" | |
| store: "2.3gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.02.26-000018" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "582" | |
| store: "2.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.02.26-000018" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "582" | |
| store: "2.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".siem-signals-default-000008" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "7331" | |
| store: "9.1mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".siem-signals-default-000008" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "7331" | |
| store: "9.1mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.02.25-000033" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "13722666" | |
| store: "1.7gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.02.25-000033" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "13722666" | |
| store: "1.7gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.13-000014" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "474677" | |
| store: "111.7mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.13-000014" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "474677" | |
| store: "111.7mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.12-000038" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "387076" | |
| store: "95.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.12-000038" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "387076" | |
| store: "95.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.11-000038" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "142374" | |
| store: "28.5mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.11-000038" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "142374" | |
| store: "28.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.10.1-000002" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "261b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".kibana-event-log-7.10.1-000002" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "261b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.12-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "443196" | |
| store: "112.1mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.12-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "443196" | |
| store: "112.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.16-000042" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1073254" | |
| store: "287.8mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.16-000042" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1073257" | |
| store: "336mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-ilm-history-5-2021.02.19-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-ilm-history-5-2021.02.19-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.security-default-2021.02.28-000019" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "10056799" | |
| store: "3.4gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.security-default-2021.02.28-000019" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "10056799" | |
| store: "3.4gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.error-default-000031" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "13835" | |
| store: "2mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.error-default-000031" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "13835" | |
| store: "2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.error-default-2021.03.13-000040" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1317" | |
| store: "180kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.error-default-2021.03.13-000040" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1317" | |
| store: "180kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.11.1-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "515380" | |
| store: "48.2mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.11.1-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "515380" | |
| store: "48.2mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".slm-history-3-000005" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".slm-history-3-000005" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".transform-notifications-000002" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "486" | |
| store: "198.3kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".transform-notifications-000002" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "486" | |
| store: "198.3kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "ilm-history-2-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "ilm-history-2-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ml-state-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ml-state-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.15-000042" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "97426" | |
| store: "18.8mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.15-000042" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "97426" | |
| store: "18.8mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".slm-history-3-000002" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".slm-history-3-000002" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.11.1-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "458775" | |
| store: "43.3mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.11.1-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "458775" | |
| store: "43.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.16-000027" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3572972" | |
| store: "1.9gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.16-000027" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3572972" | |
| store: "2gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "696149" | |
| store: "416.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "696149" | |
| store: "416.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana_3" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "60548" | |
| store: "134.9mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana_3" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "60548" | |
| store: "199.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "filebeat-7.10.0-2021.03.16-000058" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5845" | |
| store: "6.1mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.16-000058" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5845" | |
| store: "6.1mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.11-000011" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1159" | |
| store: "311.9kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.11-000011" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1159" | |
| store: "311.9kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.9.3-000009" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.9.3-000009" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".kibana_task_manager_1" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "433" | |
| store: "818.1kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana_task_manager_1" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "433" | |
| store: "7.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.13-000040" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3488769" | |
| store: "781.6mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.13-000040" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3488769" | |
| store: "781.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".async-search" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "3.3kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".async-search" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "3.3kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.alerts-default-2021.03.10-000036" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.alerts-default-2021.03.10-000036" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.09-000035" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2599226" | |
| store: "329.3mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.09-000035" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2599226" | |
| store: "328.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-iis.webserver-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "137" | |
| store: "289kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-iis.webserver-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "137" | |
| store: "289kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "ilm-history-3-000003" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "ilm-history-3-000003" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.14-000040" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2508146" | |
| store: "330.5mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.14-000040" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2508146" | |
| store: "330.5mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.11-000005" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "7378697" | |
| store: "3gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.11-000005" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "7378697" | |
| store: "3gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.10.0-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".kibana-event-log-7.10.0-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.13-000039" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1263193" | |
| store: "183.3mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.13-000039" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1263193" | |
| store: "183.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.04-000034" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3715732" | |
| store: "932.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.04-000034" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3715732" | |
| store: "932.6mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.09-000020" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "786179" | |
| store: "484.2mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.09-000020" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "786179" | |
| store: "484.2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.access-default-2021.03.05-000035" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "165655" | |
| store: "27.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.05-000035" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "165655" | |
| store: "27.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.14-000041" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "193078" | |
| store: "36.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.14-000041" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "193078" | |
| store: "36.8mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.access-default-2021.03.11-000038" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1718513" | |
| store: "275.1mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.11-000038" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1718513" | |
| store: "275.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.registry-default-2021.03.13-000039" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "589862" | |
| store: "126.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.registry-default-2021.03.13-000039" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "589862" | |
| store: "127.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-system.process-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1103" | |
| store: "639.4kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.process-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1103" | |
| store: "919.2kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.02.24-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "239327" | |
| store: "45.2mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.02.24-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "239327" | |
| store: "45.2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.15-000026" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "245141" | |
| store: "135.4mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.15-000026" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "245141" | |
| store: "135.4mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "filebeat-7.11.1-2021.03.15-000009" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9429914" | |
| store: "8gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.15-000009" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9429914" | |
| store: "8gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.10-000010" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "15384829" | |
| store: "3.7gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.10-000010" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "15384829" | |
| store: "3.7gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.11-000012" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "451894" | |
| store: "136.5mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.11-000012" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "451894" | |
| store: "136.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.access-default-2021.03.09-000036" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2777" | |
| store: "641.9kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.09-000036" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2777" | |
| store: "641.9kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "168236" | |
| store: "97.1mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.13-000024" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "168236" | |
| store: "97.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "476606" | |
| store: "276.4mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "476606" | |
| store: "276.4mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".watcher-history-13-2021.03.17" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2021.03.17" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.11.1-000002" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1289051" | |
| store: "114.4mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.11.1-000002" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1289051" | |
| store: "114.4mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.12-000039" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2597697" | |
| store: "602.6mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.12-000039" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2597697" | |
| store: "602.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-system.diskio-default-2021.03.11-000015" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "126522" | |
| store: "28mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.diskio-default-2021.03.11-000015" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "126522" | |
| store: "28mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.13-000038" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1299556" | |
| store: "285.3mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.13-000038" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1299556" | |
| store: "286.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.10.0-2021.03.17-000059" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9403" | |
| store: "10.1mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.17-000059" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9403" | |
| store: "10.2mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.05-000019" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "766" | |
| store: "3mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.05-000019" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "766" | |
| store: "3mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.14-000025" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "931076" | |
| store: "575.9mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.14-000025" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "931076" | |
| store: "575.9mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".slm-history-2-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".slm-history-2-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.11.1-2021.03.18-000012" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9539126" | |
| store: "7.1gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.18-000012" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9539126" | |
| store: "7.1gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.12-000039" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "142056" | |
| store: "28.5mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.12-000039" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "142056" | |
| store: "28.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.security-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5547669" | |
| store: "2gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.security-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5547669" | |
| store: "2gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.12-000013" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "334971" | |
| store: "87mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.12-000013" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "334971" | |
| store: "87mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.11.1-2021.03.12-000006" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "6185116" | |
| store: "7.8gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.12-000006" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "6185116" | |
| store: "7.8gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.access-default-2021.03.14-000041" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "18643" | |
| store: "2.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.14-000041" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "18643" | |
| store: "2.6mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.02.25-000018" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "166" | |
| store: "178.9kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.02.25-000018" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "166" | |
| store: "178.9kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent-default-000005" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "8484" | |
| store: "1003.5kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent-default-000005" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "8484" | |
| store: "1003.5kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".siem-signals-default-000007" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "52" | |
| store: "198kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".siem-signals-default-000007" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "52" | |
| store: "198kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".kibana_1" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5060" | |
| store: "15.6mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana_1" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5060" | |
| store: "15.6mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".monitoring-kibana-7-2021.03.13" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "34520" | |
| store: "5.6mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".monitoring-kibana-7-2021.03.13" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "34520" | |
| store: "5.6mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.14-000025" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "468315" | |
| store: "263.7mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.14-000025" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "468315" | |
| store: "263.7mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ml-config" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "34" | |
| store: "136kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ml-config" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "34" | |
| store: "136kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".slm-history-3-000003" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".slm-history-3-000003" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ml-notifications-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ml-notifications-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.14-000015" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "618827" | |
| store: "142mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.metricbeat-default-2021.03.14-000015" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "618827" | |
| store: "142mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-endpoint.policy-default-2021.03.16-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "199" | |
| store: "128.8kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-endpoint.policy-default-2021.03.16-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "199" | |
| store: "128.8kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-windows.service-default-2021.03.12-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "6057907" | |
| store: "1gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-windows.service-default-2021.03.12-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "6057907" | |
| store: "1gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "404910" | |
| store: "102.1mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.file-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "404910" | |
| store: "102.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.10.0-2021.03.13-000055" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.13-000055" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "230b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".lists-default-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5" | |
| store: "35.1kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".lists-default-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5" | |
| store: "35.1kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.16-000027" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1062764" | |
| store: "663.3mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.16-000027" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1062764" | |
| store: "663.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.10-000021" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "975" | |
| store: "4.7mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.10-000021" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "975" | |
| store: "4.7mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".slm-history-2-000005" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".slm-history-2-000005" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.11.1-2021.03.16-000010" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "12042337" | |
| store: "10.3gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.11.1-2021.03.16-000010" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "12042337" | |
| store: "10.3gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".watcher-history-13-2020.12.13" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2020.12.13" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.10-000021" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "809691" | |
| store: "423.4mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell-default-2021.03.10-000021" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "809691" | |
| store: "423.4mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.12-000023" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "257873" | |
| store: "178.5mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.12-000023" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "257873" | |
| store: "178.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.08-000009" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "52804136" | |
| store: "13.6gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.08-000009" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "52804136" | |
| store: "13.6gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.14-000014" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "252631" | |
| store: "73.6mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.14-000014" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "252631" | |
| store: "73.6mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-elastic_agent-default-2021.03.16-000016" | |
| shard: "1" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4500" | |
| store: "1.2mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-elastic_agent-default-2021.03.16-000016" | |
| shard: "1" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4500" | |
| store: "1.2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-elastic_agent-default-2021.03.16-000016" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4499" | |
| store: "1.2mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-elastic_agent-default-2021.03.16-000016" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4499" | |
| store: "1.2mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-system.cpu-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "137" | |
| store: "246.4kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.cpu-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "137" | |
| store: "263.3kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.registry-default-2021.02.26-000033" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1388169" | |
| store: "335mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.registry-default-2021.02.26-000033" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1388169" | |
| store: "335mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-iis.website-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "150" | |
| store: "264.4kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-iis.website-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "150" | |
| store: "264.3kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".kibana_security_session_1" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana_security_session_1" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.error-default-000032" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1260" | |
| store: "302.6kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.error-default-000032" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1260" | |
| store: "302.6kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.10.0-2021.03.01-000050" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "6906968" | |
| store: "6.8gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.01-000050" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "6906968" | |
| store: "6.8gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.12-000006" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "13446380" | |
| store: "5.6gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.12-000006" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "13446380" | |
| store: "5.6gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.12-000012" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1180" | |
| store: "313.6kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.12-000012" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1180" | |
| store: "313.6kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.15-000026" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "159" | |
| store: "722.5kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.15-000026" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "159" | |
| store: "722.5kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.file-default-000032" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4122841" | |
| store: "1020mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.file-default-000032" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4122841" | |
| store: "1020mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "230b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "230b" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.14-000008" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4400800" | |
| store: "944.7mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.14-000008" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4400800" | |
| store: "944.7mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.13-000007" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1869540" | |
| store: "338mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.13-000007" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1869540" | |
| store: "338mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.network-default-000033" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "23376273" | |
| store: "5.2gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.network-default-000033" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "23376273" | |
| store: "5.2gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.access-default-2021.03.10-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "7221773" | |
| store: "1.1gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.10-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "7221773" | |
| store: "1.1gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.02.25-000032" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9108719" | |
| store: "2.9gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.02.25-000032" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9108719" | |
| store: "2.9gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".slm-history-2-000002" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".slm-history-2-000002" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "filebeat-7.10.0-2021.03.15-000057" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "12902" | |
| store: "13.3mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.15-000057" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "12902" | |
| store: "13.3mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-system.diskio-default-000008" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1152767" | |
| store: "263.4mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-metrics-system.diskio-default-000008" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1152767" | |
| store: "263.4mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".watcher-history-13-2020.11.12" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2020.11.12" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".watcher-history-13-2021.03.21" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2021.03.21" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.access-default-2021.03.15-000042" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2825" | |
| store: "564.2kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.access-default-2021.03.15-000042" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2825" | |
| store: "564.2kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.error-default-2021.03.11-000038" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "981631" | |
| store: "108.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.error-default-2021.03.11-000038" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "981631" | |
| store: "108.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".security-7" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "366" | |
| store: "263.3kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".security-7" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "366" | |
| store: "256.5kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.11-000036" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "447470" | |
| store: "114.5mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.process-default-2021.03.11-000036" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "447470" | |
| store: "114.5mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-iis.access-default-000031" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "30539" | |
| store: "5.5mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-iis.access-default-000031" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "30539" | |
| store: "5.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.12-000012" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "70757" | |
| store: "33.5mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.filebeat-default-2021.03.12-000012" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "70757" | |
| store: "33.5mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-system.diskio-default-2021.02.26-000011" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "926655" | |
| store: "208.3mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.diskio-default-2021.02.26-000011" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "926655" | |
| store: "208.3mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".kibana-event-log-7.10.1-000006" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.10.1-000006" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".monitoring-es-7-2021.03.12" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5246864" | |
| store: "1.9gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".monitoring-es-7-2021.03.12" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5246864" | |
| store: "1.9gb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-system.fsstat-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "138" | |
| store: "102.5kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-metrics-system.fsstat-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "138" | |
| store: "102.3kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-iis.application_pool-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "21" | |
| store: "135.1kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-iis.application_pool-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "21" | |
| store: "135.1kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.alerts-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.alerts-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-system.memory-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "137" | |
| store: "148.8kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.memory-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "137" | |
| store: "130kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.16-000043" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "7337233" | |
| store: "1.6gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.network-default-2021.03.16-000043" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "7337228" | |
| store: "1.6gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.process-default-000031" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9262990" | |
| store: "2.9gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.process-default-000031" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9262990" | |
| store: "2.9gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.error-default-2021.02.26-000034" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "330534" | |
| store: "52.8mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-iis.error-default-2021.02.26-000034" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "330534" | |
| store: "52.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1539417" | |
| store: "208.2mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-endpoint.events.security-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1539417" | |
| store: "208.2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.10-000021" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1476232" | |
| store: "823.9mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.10-000021" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1476232" | |
| store: "823.9mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".tasks" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2" | |
| store: "13kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".tasks" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2" | |
| store: "13kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ml-anomalies-custom-packetbeat_dns_tunneling" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ml-anomalies-custom-packetbeat_dns_tunneling" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.registry-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "175492" | |
| store: "43mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.registry-default-2021.03.11-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "175492" | |
| store: "43mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "filebeat-7.10.0-2021.03.12-000054" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "61" | |
| store: "182.1kb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "filebeat-7.10.0-2021.03.12-000054" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "61" | |
| store: "182.8kb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".reporting-2021-01-03" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "228b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".reporting-2021-01-03" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "228b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ml-anomalies-custom-packetbeat_rare_urls" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ml-anomalies-custom-packetbeat_rare_urls" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".kibana-event-log-7.9.3-000006" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".kibana-event-log-7.9.3-000006" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "208b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-metrics-endpoint.metrics-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2379" | |
| store: "2.1mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-endpoint.metrics-default-2021.03.17-000001" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2379" | |
| store: "3.2mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-elastic_agent.endpoint_security-default-2021.03.16-000010" | |
| shard: "1" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4353923" | |
| store: "874.9mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-elastic_agent.endpoint_security-default-2021.03.16-000010" | |
| shard: "1" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4354125" | |
| store: "863.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-elastic_agent.endpoint_security-default-2021.03.16-000010" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "4366882" | |
| store: "876.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-elastic_agent.endpoint_security-default-2021.03.16-000010" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "4366882" | |
| store: "918.5mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.02.26-000034" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "2298046" | |
| store: "429.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.02.26-000034" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "2298046" | |
| store: "429.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.13-000040" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "732920" | |
| store: "123.8mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.13-000040" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "732920" | |
| store: "123.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".watcher-history-13-2021.03.22" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2021.03.22" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-windows.service-default-2021.03.15-000040" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5245915" | |
| store: "974.8mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-windows.service-default-2021.03.15-000040" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5245915" | |
| store: "974.8mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".management-beats" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5" | |
| store: "32.7kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".management-beats" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5" | |
| store: "32.7kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ml-annotations-6" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ml-annotations-6" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".reporting-2021-01-31" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "228b" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".reporting-2021-01-31" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "0" | |
| store: "228b" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.10-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "5948839" | |
| store: "1.2gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent.endpoint_security-default-2021.03.10-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "5948839" | |
| store: "1.2gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.powershell-default-000015" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "3793461" | |
| store: "2gb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-logs-windows.powershell-default-000015" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "3793461" | |
| store: "2gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ml-anomalies-custom-packetbeat_rare_user_agent" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ml-anomalies-custom-packetbeat_rare_user_agent" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-metrics-system.diskio-default-2021.03.15-000019" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "111138" | |
| store: "24.6mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".ds-metrics-system.diskio-default-2021.03.15-000019" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "111138" | |
| store: "24.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.04-000019" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "1860862" | |
| store: "1.1gb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.sysmon_operational-default-2021.03.04-000019" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "1860862" | |
| store: "1.1gb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: "shrink-.ds-logs-elastic_agent-default-000004" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9546" | |
| store: "1.1mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: "shrink-.ds-logs-elastic_agent-default-000004" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9546" | |
| store: "1.1mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-iis.error-default-2021.02.19-000033" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "118504" | |
| store: "14.9mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-iis.error-default-2021.02.19-000033" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "118504" | |
| store: "14.9mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "146" | |
| store: "816.6kb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-windows.powershell_operational-default-2021.03.11-000022" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "146" | |
| store: "816.6kb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.10-000037" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "146394" | |
| store: "30.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".ds-logs-endpoint.events.library-default-2021.03.10-000037" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "146394" | |
| store: "30.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".reporting-2021-02-28" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "9" | |
| store: "2.9mb" | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".reporting-2021-02-28" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "9" | |
| store: "2.9mb" | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: ".watcher-history-13-2020.12.19" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: ".watcher-history-13-2020.12.19" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".watcher-history-13-2020.12.10" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.166" | |
| node: "instance-0000000006" | |
| - index: ".watcher-history-13-2020.12.10" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: null | |
| store: null | |
| ip: "10.46.8.132" | |
| node: "instance-0000000010" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.05-000008" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "144856" | |
| store: "27.6mb" | |
| ip: "10.46.8.56" | |
| node: "instance-0000000009" | |
| - index: "shrink-.ds-logs-elastic_agent-default-2021.03.05-000008" | |
| shard: "0" | |
| prirep: "p" | |
| state: "STARTED" | |
| docs: "144856" | |
| store: "27.6mb" | |
| ip: "10.46.8.45" | |
| node: "instance-0000000008" | |
| - index: ".ds-logs-windows.security-default-000016" | |
| shard: "0" | |
| prirep: "r" | |
| state: "STARTED" | |
| docs: "12074550" |