Skip to content

Instantly share code, notes, and snippets.

@kierenj
Created October 29, 2018 14:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kierenj/a91df51630b1d06798a105e7a66eb5dd to your computer and use it in GitHub Desktop.
Save kierenj/a91df51630b1d06798a105e7a66eb5dd to your computer and use it in GitHub Desktop.
This file has been truncated, but you can view the full file.
{
"filebeat-rr-logs": {
"order": 1,
"index_patterns": [
"filebeat-rr-logs-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.3.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"mysql": {
"properties": {
"error": {
"properties": {
"thread_id": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"slowlog": {
"properties": {
"ip": {
"type": "keyword",
"ignore_above": 1024
},
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"rows_examined": {
"type": "long"
},
"timestamp": {
"type": "long"
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_sent": {
"type": "long"
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"user": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"type": "float"
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"input": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"meta": {
"properties": {
"cloud": {
"properties": {
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"ignore_above": 1024,
"type": "keyword"
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
},
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"stream": {
"type": "keyword",
"ignore_above": 1024
},
"beat": {
"properties": {
"version": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"kafka": {
"properties": {
"log": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"component": {
"ignore_above": 1024,
"type": "keyword"
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"class": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
},
"full": {
"type": "text",
"norms": false
}
}
}
}
}
}
},
"error": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"code": {
"type": "long"
}
}
},
"auditd": {
"properties": {
"log": {
"properties": {
"a0": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
},
"old_ses": {
"type": "keyword",
"ignore_above": 1024
},
"new_ses": {
"ignore_above": 1024,
"type": "keyword"
},
"sequence": {
"type": "long"
},
"acct": {
"type": "keyword",
"ignore_above": 1024
},
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"items": {
"type": "keyword",
"ignore_above": 1024
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"old_auid": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"osquery": {
"properties": {
"result": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"action": {
"type": "keyword",
"ignore_above": 1024
},
"host_identifier": {
"ignore_above": 1024,
"type": "keyword"
},
"unix_time": {
"type": "long"
},
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"traefik": {
"properties": {
"access": {
"properties": {
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"request_count": {
"type": "long"
},
"frontend_name": {
"type": "text",
"norms": false
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"ignore_above": 1024,
"type": "keyword"
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"backend_url": {
"type": "text",
"norms": false
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"ignore_above": 1024,
"type": "keyword"
},
"user_agent": {
"properties": {
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"fields": {
"type": "object"
},
"event": {
"properties": {
"severity": {
"type": "long"
}
}
},
"apache2": {
"properties": {
"access": {
"properties": {
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"error": {
"properties": {
"tid": {
"type": "long"
},
"module": {
"ignore_above": 1024,
"type": "keyword"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"client": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"thread": {
"norms": false,
"type": "text"
},
"log_event": {
"type": "object"
}
}
},
"slowlog": {
"properties": {
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"ignore_above": 1024,
"type": "keyword"
},
"thread": {
"type": "text",
"norms": false
},
"event": {
"type": "text",
"norms": false
},
"took_in_millis": {
"type": "long"
},
"took_in_nanos": {
"type": "long"
},
"plugin_params": {
"type": "text",
"norms": false
},
"plugin_params_object": {
"type": "object"
},
"message": {
"norms": false,
"type": "text"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_type": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"host": {
"properties": {
"architecture": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"properties": {
"platform": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"message": {
"type": "text",
"norms": false
},
"kubernetes": {
"properties": {
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
},
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"offset": {
"type": "long"
},
"read_timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"fileset": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"icinga": {
"properties": {
"debug": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"main": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
}
}
},
"startup": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"nginx": {
"properties": {
"error": {
"properties": {
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
}
}
},
"access": {
"properties": {
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"ignore_above": 1024,
"type": "keyword"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"ignore_above": 1024,
"type": "keyword"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"norms": false,
"type": "text"
},
"user_agent": {
"properties": {
"os_minor": {
"type": "long"
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"patch": {
"ignore_above": 1024,
"type": "keyword"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"ignore_above": 1024,
"type": "keyword"
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"docker": {
"properties": {
"container": {
"properties": {
"id": {
"ignore_above": 1024,
"type": "keyword"
},
"image": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
}
}
}
}
},
"process": {
"properties": {
"program": {
"ignore_above": 1024,
"type": "keyword"
},
"pid": {
"type": "long"
}
}
},
"mongodb": {
"properties": {
"log": {
"properties": {
"context": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"component": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"redis": {
"properties": {
"log": {
"properties": {
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
}
}
},
"slowlog": {
"properties": {
"args": {
"type": "keyword",
"ignore_above": 1024
},
"cmd": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"source": {
"type": "keyword",
"ignore_above": 1024
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"system": {
"properties": {
"auth": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"ssh": {
"properties": {
"event": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"dropped_ip": {
"type": "ip"
},
"port": {
"type": "long"
},
"signature": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
}
}
},
"sudo": {
"properties": {
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
},
"pwd": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"useradd": {
"properties": {
"shell": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "long"
},
"gid": {
"type": "long"
},
"home": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"groupadd": {
"properties": {
"gid": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"syslog": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"syslog": {
"properties": {
"priority": {
"type": "long"
},
"severity_label": {
"type": "keyword",
"ignore_above": 1024
},
"facility_label": {
"type": "keyword",
"ignore_above": 1024
},
"facility": {
"type": "long"
}
}
},
"iis": {
"properties": {
"access": {
"properties": {
"method": {
"type": "keyword",
"ignore_above": 1024
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"server_name": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"geoip": {
"properties": {
"continent_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
},
"win32_status": {
"type": "long"
},
"site_name": {
"type": "keyword",
"ignore_above": 1024
},
"cookie": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"device": {
"ignore_above": 1024,
"type": "keyword"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"server_ip": {
"type": "keyword",
"ignore_above": 1024
},
"query_string": {
"type": "keyword",
"ignore_above": 1024
},
"sub_status": {
"type": "long"
},
"request_time_ms": {
"type": "long"
},
"body_received": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"error": {
"properties": {
"reason_phrase": {
"type": "keyword",
"ignore_above": 1024
},
"queue_name": {
"type": "keyword",
"ignore_above": 1024
},
"remote_ip": {
"ignore_above": 1024,
"type": "keyword"
},
"remote_port": {
"type": "long"
},
"server_ip": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"server_port": {
"type": "long"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
}
}
}
}
}
}
}
},
"aliases": {}
},
".monitoring-logstash": {
"order": 0,
"version": 6020099,
"index_patterns": [
".monitoring-logstash-6-*"
],
"settings": {
"index": {
"format": "6",
"codec": "best_compression",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"dynamic": false,
"properties": {
"cluster_uuid": {
"type": "keyword"
},
"timestamp": {
"type": "date",
"format": "date_time"
},
"interval_ms": {
"type": "long"
},
"type": {
"type": "keyword"
},
"source_node": {
"properties": {
"uuid": {
"type": "keyword"
},
"host": {
"type": "keyword"
},
"transport_address": {
"type": "keyword"
},
"ip": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"timestamp": {
"type": "date",
"format": "date_time"
}
}
},
"logstash_stats": {
"type": "object",
"properties": {
"logstash": {
"properties": {
"uuid": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"ephemeral_id": {
"type": "keyword"
},
"host": {
"type": "keyword"
},
"http_address": {
"type": "keyword"
},
"version": {
"type": "keyword"
},
"snapshot": {
"type": "boolean"
},
"status": {
"type": "keyword"
},
"pipeline": {
"properties": {
"workers": {
"type": "short"
},
"batch_size": {
"type": "long"
}
}
}
}
},
"events": {
"properties": {
"filtered": {
"type": "long"
},
"in": {
"type": "long"
},
"out": {
"type": "long"
},
"duration_in_millis": {
"type": "long"
}
}
},
"timestamp": {
"type": "date"
},
"jvm": {
"properties": {
"uptime_in_millis": {
"type": "long"
},
"gc": {
"properties": {
"collectors": {
"properties": {
"old": {
"properties": {
"collection_count": {
"type": "long"
},
"collection_time_in_millis": {
"type": "long"
}
}
},
"young": {
"properties": {
"collection_count": {
"type": "long"
},
"collection_time_in_millis": {
"type": "long"
}
}
}
}
}
}
},
"mem": {
"properties": {
"heap_max_in_bytes": {
"type": "long"
},
"heap_used_in_bytes": {
"type": "long"
},
"heap_used_percent": {
"type": "long"
}
}
}
}
},
"os": {
"properties": {
"cpu": {
"properties": {
"load_average": {
"properties": {
"1m": {
"type": "half_float"
},
"5m": {
"type": "half_float"
},
"15m": {
"type": "half_float"
}
}
}
}
},
"cgroup": {
"properties": {
"cpuacct": {
"properties": {
"control_group": {
"type": "keyword"
},
"usage_nanos": {
"type": "long"
}
}
},
"cpu": {
"properties": {
"control_group": {
"type": "keyword"
},
"stat": {
"properties": {
"number_of_elapsed_periods": {
"type": "long"
},
"number_of_times_throttled": {
"type": "long"
},
"time_throttled_nanos": {
"type": "long"
}
}
}
}
}
}
}
}
},
"process": {
"properties": {
"cpu": {
"properties": {
"percent": {
"type": "long"
}
}
},
"max_file_descriptors": {
"type": "long"
},
"open_file_descriptors": {
"type": "long"
}
}
},
"reloads": {
"properties": {
"failures": {
"type": "long"
},
"successes": {
"type": "long"
}
}
},
"queue": {
"properties": {
"events_count": {
"type": "long"
},
"type": {
"type": "keyword"
}
}
},
"pipelines": {
"type": "nested",
"properties": {
"id": {
"type": "keyword"
},
"hash": {
"type": "keyword"
},
"ephemeral_id": {
"type": "keyword"
},
"events": {
"properties": {
"in": {
"type": "long"
},
"filtered": {
"type": "long"
},
"out": {
"type": "long"
},
"duration_in_millis": {
"type": "long"
},
"queue_push_duration_in_millis": {
"type": "long"
}
}
},
"queue": {
"properties": {
"events_count": {
"type": "long"
},
"type": {
"type": "keyword"
}
}
},
"vertices": {
"type": "nested",
"properties": {
"id": {
"type": "keyword"
},
"pipeline_ephemeral_id": {
"type": "keyword"
},
"events_in": {
"type": "long"
},
"events_out": {
"type": "long"
},
"duration_in_millis": {
"type": "long"
},
"queue_push_duration_in_millis": {
"type": "long"
},
"long_counters": {
"type": "nested",
"properties": {
"name": {
"type": "keyword"
},
"value": {
"type": "long"
}
}
},
"double_gauges": {
"type": "nested",
"properties": {
"name": {
"type": "keyword"
},
"value": {
"type": "double"
}
}
}
}
},
"reloads": {
"properties": {
"failures": {
"type": "long"
},
"successes": {
"type": "long"
}
}
}
}
},
"workers": {
"type": "short"
},
"batch_size": {
"type": "integer"
}
}
},
"logstash_state": {
"properties": {
"uuid": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"host": {
"type": "keyword"
},
"http_address": {
"type": "keyword"
},
"ephemeral_id": {
"type": "keyword"
},
"version": {
"type": "keyword"
},
"snapshot": {
"type": "boolean"
},
"status": {
"type": "keyword"
},
"pipeline": {
"properties": {
"id": {
"type": "keyword"
},
"hash": {
"type": "keyword"
},
"ephemeral_id": {
"type": "keyword"
},
"workers": {
"type": "short"
},
"batch_size": {
"type": "integer"
},
"format": {
"type": "keyword"
},
"version": {
"type": "keyword"
},
"representation": {
"enabled": false
}
}
}
}
}
}
}
},
"aliases": {}
},
".watches": {
"order": 2147483647,
"index_patterns": [
".watches*"
],
"settings": {
"index": {
"format": "6",
"number_of_shards": "1",
"priority": "800",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"dynamic": "strict",
"properties": {
"status": {
"type": "object",
"enabled": false,
"dynamic": true
},
"trigger": {
"type": "object",
"enabled": false,
"dynamic": true
},
"input": {
"type": "object",
"enabled": false,
"dynamic": true
},
"condition": {
"type": "object",
"enabled": false,
"dynamic": true
},
"throttle_period": {
"type": "keyword",
"index": false,
"doc_values": false
},
"throttle_period_in_millis": {
"type": "long",
"index": false,
"doc_values": false
},
"transform": {
"type": "object",
"enabled": false,
"dynamic": true
},
"actions": {
"type": "object",
"enabled": false,
"dynamic": true
},
"metadata": {
"type": "object",
"dynamic": true
}
}
}
},
"aliases": {}
},
".monitoring-kibana": {
"order": 0,
"version": 6020099,
"index_patterns": [
".monitoring-kibana-6-*"
],
"settings": {
"index": {
"format": "6",
"codec": "best_compression",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"dynamic": false,
"properties": {
"cluster_uuid": {
"type": "keyword"
},
"timestamp": {
"type": "date",
"format": "date_time"
},
"interval_ms": {
"type": "long"
},
"type": {
"type": "keyword"
},
"source_node": {
"properties": {
"uuid": {
"type": "keyword"
},
"host": {
"type": "keyword"
},
"transport_address": {
"type": "keyword"
},
"ip": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"timestamp": {
"type": "date",
"format": "date_time"
}
}
},
"kibana_stats": {
"properties": {
"kibana": {
"properties": {
"uuid": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"host": {
"type": "keyword"
},
"transport_address": {
"type": "keyword"
},
"version": {
"type": "keyword"
},
"snapshot": {
"type": "boolean"
},
"status": {
"type": "keyword"
},
"statuses": {
"properties": {
"name": {
"type": "keyword"
},
"state": {
"type": "keyword"
}
}
}
}
},
"cloud": {
"properties": {
"name": {
"type": "keyword"
},
"id": {
"type": "keyword"
},
"vm_type": {
"type": "keyword"
},
"region": {
"type": "keyword"
},
"zone": {
"type": "keyword"
},
"metadata": {
"type": "object"
}
}
},
"os": {
"properties": {
"load": {
"properties": {
"1m": {
"type": "half_float"
},
"5m": {
"type": "half_float"
},
"15m": {
"type": "half_float"
}
}
},
"memory": {
"properties": {
"total_in_bytes": {
"type": "float"
},
"free_in_bytes": {
"type": "float"
},
"used_in_bytes": {
"type": "float"
}
}
},
"uptime_in_millis": {
"type": "long"
}
}
},
"process": {
"properties": {
"memory": {
"properties": {
"heap": {
"properties": {
"total_in_bytes": {
"type": "float"
},
"used_in_bytes": {
"type": "float"
},
"size_limit": {
"type": "float"
}
}
},
"resident_set_size_in_bytes": {
"type": "float"
}
}
},
"event_loop_delay": {
"type": "float"
},
"uptime_in_millis": {
"type": "long"
}
}
},
"sockets": {
"properties": {
"http": {
"properties": {
"total": {
"type": "long"
}
}
},
"https": {
"properties": {
"total": {
"type": "long"
}
}
}
}
},
"timestamp": {
"type": "date"
},
"requests": {
"properties": {
"disconnects": {
"type": "long"
},
"total": {
"type": "long"
},
"status_codes": {
"type": "object"
}
}
},
"response_times": {
"properties": {
"average": {
"type": "float"
},
"max": {
"type": "float"
}
}
},
"concurrent_connections": {
"type": "long"
}
}
}
}
}
},
"aliases": {}
},
"filebeat": {
"order": 1,
"index_patterns": [
"filebeat-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "1"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.2.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"match_mapping_type": "string",
"path_match": "docker.container.labels.*",
"mapping": {
"type": "keyword"
}
}
},
{
"strings_as_keyword": {
"mapping": {
"type": "keyword",
"ignore_above": 1024
},
"match_mapping_type": "string"
}
}
],
"properties": {
"read_timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"fileset": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"redis": {
"properties": {
"log": {
"properties": {
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"cmd": {
"ignore_above": 1024,
"type": "keyword"
},
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
},
"args": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"error": {
"properties": {
"message": {
"norms": false,
"type": "text"
},
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"source": {
"type": "keyword",
"ignore_above": 1024
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"nginx": {
"properties": {
"access": {
"properties": {
"agent": {
"type": "text",
"norms": false
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"major": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"ignore_above": 1024,
"type": "keyword"
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"referrer": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"error": {
"properties": {
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
}
}
}
}
},
"auditd": {
"properties": {
"log": {
"properties": {
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"old_ses": {
"type": "keyword",
"ignore_above": 1024
},
"a0": {
"type": "keyword",
"ignore_above": 1024
},
"old_auid": {
"type": "keyword",
"ignore_above": 1024
},
"sequence": {
"type": "long"
},
"items": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"new_ses": {
"type": "keyword",
"ignore_above": 1024
},
"acct": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"system": {
"properties": {
"auth": {
"properties": {
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"ssh": {
"properties": {
"event": {
"ignore_above": 1024,
"type": "keyword"
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"dropped_ip": {
"type": "ip"
},
"port": {
"type": "long"
},
"signature": {
"ignore_above": 1024,
"type": "keyword"
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"ignore_above": 1024,
"type": "keyword"
},
"location": {
"type": "geo_point"
}
}
}
}
},
"sudo": {
"properties": {
"pwd": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"type": "keyword",
"ignore_above": 1024
},
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"groupadd": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"gid": {
"type": "long"
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "keyword",
"ignore_above": 1024
},
"useradd": {
"properties": {
"gid": {
"type": "long"
},
"home": {
"type": "keyword",
"ignore_above": 1024
},
"shell": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"uid": {
"type": "long"
}
}
},
"pid": {
"type": "long"
}
}
},
"syslog": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"offset": {
"type": "long"
},
"kafka": {
"properties": {
"log": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"class": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"full": {
"type": "text",
"norms": false
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"thread": {
"type": "text",
"norms": false
},
"log_event": {
"type": "object"
}
}
},
"slowlog": {
"properties": {
"took_in_nanos": {
"type": "long"
},
"plugin_params": {
"type": "text",
"norms": false
},
"plugin_params_object": {
"type": "object"
},
"message": {
"type": "text",
"norms": false
},
"thread": {
"type": "text",
"norms": false
},
"event": {
"type": "text",
"norms": false
},
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_type": {
"ignore_above": 1024,
"type": "keyword"
},
"took_in_millis": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"meta": {
"properties": {
"cloud": {
"properties": {
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"type": "keyword",
"ignore_above": 1024
},
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"type": "keyword",
"ignore_above": 1024
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"apache2": {
"properties": {
"access": {
"properties": {
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"error": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"client": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"traefik": {
"properties": {
"access": {
"properties": {
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"user_agent": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"ignore_above": 1024,
"type": "keyword"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"request_count": {
"type": "long"
},
"frontend_name": {
"type": "text",
"norms": false
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"remote_ip": {
"ignore_above": 1024,
"type": "keyword"
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"backend_url": {
"type": "text",
"norms": false
}
}
}
}
},
"beat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"ignore_above": 1024,
"type": "keyword"
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"docker": {
"properties": {
"container": {
"properties": {
"labels": {
"type": "object"
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"ignore_above": 1024,
"type": "keyword"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"stream": {
"type": "keyword",
"ignore_above": 1024
},
"mysql": {
"properties": {
"slowlog": {
"properties": {
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"timestamp": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"ignore_above": 1024,
"type": "keyword"
},
"rows_sent": {
"type": "long"
},
"rows_examined": {
"type": "long"
}
}
},
"error": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"osquery": {
"properties": {
"result": {
"properties": {
"unix_time": {
"type": "long"
},
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"action": {
"type": "keyword",
"ignore_above": 1024
},
"host_identifier": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"ignore_above": 1024,
"type": "keyword"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"type": "float"
},
"query": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"fields": {
"type": "object"
},
"kubernetes": {
"properties": {
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
},
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pod": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"message": {
"type": "text",
"norms": false
},
"icinga": {
"properties": {
"debug": {
"properties": {
"facility": {
"ignore_above": 1024,
"type": "keyword"
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"main": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
}
}
},
"startup": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
}
}
}
}
}
}
}
},
"aliases": {}
},
".ml-state": {
"order": 0,
"version": 6040299,
"index_patterns": [
".ml-state"
],
"settings": {
"index": {
"auto_expand_replicas": "0-1",
"unassigned": {
"node_left": {
"delayed_timeout": "1m"
}
}
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.4.2"
},
"enabled": false
}
},
"aliases": {}
},
"filebeat-rr-stats": {
"order": 1,
"index_patterns": [
"filebeat-rr-stats-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"apache2": {
"properties": {
"access": {
"properties": {
"geoip": {
"properties": {
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"ignore_above": 1024,
"type": "keyword"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"ignore_above": 1024,
"type": "keyword"
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
}
}
},
"error": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"client": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
}
}
}
}
},
"source": {
"type": "keyword",
"ignore_above": 1024
},
"read_timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"event": {
"properties": {
"severity": {
"type": "long"
}
}
},
"nginx": {
"properties": {
"access": {
"properties": {
"referrer": {
"ignore_above": 1024,
"type": "keyword"
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"ignore_above": 1024,
"type": "keyword"
},
"os_minor": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"patch": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"remote_ip": {
"ignore_above": 1024,
"type": "keyword"
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"response_code": {
"type": "long"
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"error": {
"properties": {
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
},
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"input": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"syslog": {
"properties": {
"severity_label": {
"type": "keyword",
"ignore_above": 1024
},
"facility_label": {
"type": "keyword",
"ignore_above": 1024
},
"facility": {
"type": "long"
},
"priority": {
"type": "long"
}
}
},
"process": {
"properties": {
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
}
}
},
"auditd": {
"properties": {
"log": {
"properties": {
"geoip": {
"properties": {
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"continent_name": {
"ignore_above": 1024,
"type": "keyword"
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"new_ses": {
"type": "keyword",
"ignore_above": 1024
},
"items": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"a0": {
"type": "keyword",
"ignore_above": 1024
},
"old_auid": {
"type": "keyword",
"ignore_above": 1024
},
"sequence": {
"type": "long"
},
"acct": {
"type": "keyword",
"ignore_above": 1024
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"old_ses": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"fields": {
"type": "object"
},
"meta": {
"properties": {
"cloud": {
"properties": {
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"ignore_above": 1024,
"type": "keyword"
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
},
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"stream": {
"type": "keyword",
"ignore_above": 1024
},
"fileset": {
"properties": {
"module": {
"ignore_above": 1024,
"type": "keyword"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"kafka": {
"properties": {
"log": {
"properties": {
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"full": {
"type": "text",
"norms": false
},
"class": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"database": {
"type": "keyword",
"ignore_above": 1024
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"level": {
"ignore_above": 1024,
"type": "keyword"
},
"duration": {
"type": "float"
},
"message": {
"type": "text",
"norms": false
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"system": {
"properties": {
"auth": {
"properties": {
"message": {
"norms": false,
"type": "text"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"ssh": {
"properties": {
"port": {
"type": "long"
},
"signature": {
"ignore_above": 1024,
"type": "keyword"
},
"geoip": {
"properties": {
"country_iso_code": {
"ignore_above": 1024,
"type": "keyword"
},
"location": {
"type": "geo_point"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"event": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"dropped_ip": {
"type": "ip"
}
}
},
"useradd": {
"properties": {
"home": {
"ignore_above": 1024,
"type": "keyword"
},
"shell": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "long"
},
"gid": {
"type": "long"
}
}
},
"groupadd": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"gid": {
"type": "long"
}
}
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"sudo": {
"properties": {
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
},
"pwd": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"syslog": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"error": {
"properties": {
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"host": {
"properties": {
"architecture": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"properties": {
"platform": {
"ignore_above": 1024,
"type": "keyword"
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"beat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"message": {
"norms": false,
"type": "text"
},
"redis": {
"properties": {
"log": {
"properties": {
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"cmd": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
},
"args": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"mongodb": {
"properties": {
"log": {
"properties": {
"context": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"component": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"docker": {
"properties": {
"container": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
}
}
}
}
},
"offset": {
"type": "long"
},
"iis": {
"properties": {
"access": {
"properties": {
"sub_status": {
"type": "long"
},
"win32_status": {
"type": "long"
},
"hostname": {
"ignore_above": 1024,
"type": "keyword"
},
"body_received": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"query_string": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"url": {
"ignore_above": 1024,
"type": "keyword"
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"cookie": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"server_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"request_time_ms": {
"type": "long"
},
"site_name": {
"ignore_above": 1024,
"type": "keyword"
},
"server_name": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"geoip": {
"properties": {
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"error": {
"properties": {
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"queue_name": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"ignore_above": 1024,
"type": "keyword"
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"remote_port": {
"type": "long"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"reason_phrase": {
"ignore_above": 1024,
"type": "keyword"
},
"server_ip": {
"type": "keyword",
"ignore_above": 1024
},
"server_port": {
"type": "long"
},
"response_code": {
"type": "long"
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"thread": {
"norms": false,
"type": "text"
},
"log_event": {
"type": "object"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"slowlog": {
"properties": {
"event": {
"type": "text",
"norms": false
},
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
},
"took_in_millis": {
"type": "long"
},
"took_in_nanos": {
"type": "long"
},
"plugin_params_object": {
"type": "object"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_type": {
"ignore_above": 1024,
"type": "keyword"
},
"plugin_params": {
"type": "text",
"norms": false
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"thread": {
"norms": false,
"type": "text"
}
}
}
}
},
"mysql": {
"properties": {
"error": {
"properties": {
"thread_id": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"slowlog": {
"properties": {
"id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_sent": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"ignore_above": 1024,
"type": "keyword"
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_examined": {
"type": "long"
},
"timestamp": {
"type": "long"
}
}
}
}
},
"osquery": {
"properties": {
"result": {
"properties": {
"host_identifier": {
"type": "keyword",
"ignore_above": 1024
},
"unix_time": {
"type": "long"
},
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"action": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"traefik": {
"properties": {
"access": {
"properties": {
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"geoip": {
"properties": {
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"ignore_above": 1024,
"type": "keyword"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"frontend_name": {
"type": "text",
"norms": false
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"minor": {
"type": "long"
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"request_count": {
"type": "long"
},
"backend_url": {
"type": "text",
"norms": false
}
}
}
}
},
"kubernetes": {
"properties": {
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
},
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"icinga": {
"properties": {
"debug": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"main": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"startup": {
"properties": {
"facility": {
"ignore_above": 1024,
"type": "keyword"
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
}
},
"_meta": {
"version": "6.3.2"
},
"date_detection": false
}
},
"aliases": {}
},
"kibana_index_template:.kibana": {
"order": 0,
"index_patterns": [
".kibana"
],
"settings": {
"index": {
"number_of_shards": "1",
"auto_expand_replicas": "0-1"
}
},
"mappings": {
"doc": {
"dynamic": "strict",
"properties": {
"type": {
"type": "keyword"
},
"updated_at": {
"type": "date"
},
"config": {
"dynamic": true,
"properties": {
"buildNum": {
"type": "keyword"
}
}
},
"timelion-sheet": {
"properties": {
"description": {
"type": "text"
},
"hits": {
"type": "integer"
},
"kibanaSavedObjectMeta": {
"properties": {
"searchSourceJSON": {
"type": "text"
}
}
},
"timelion_chart_height": {
"type": "integer"
},
"timelion_columns": {
"type": "integer"
},
"timelion_interval": {
"type": "keyword"
},
"timelion_other_interval": {
"type": "keyword"
},
"timelion_rows": {
"type": "integer"
},
"timelion_sheet": {
"type": "text"
},
"title": {
"type": "text"
},
"version": {
"type": "integer"
}
}
},
"graph-workspace": {
"properties": {
"description": {
"type": "text"
},
"kibanaSavedObjectMeta": {
"properties": {
"searchSourceJSON": {
"type": "text"
}
}
},
"numLinks": {
"type": "integer"
},
"numVertices": {
"type": "integer"
},
"title": {
"type": "text"
},
"version": {
"type": "integer"
},
"wsState": {
"type": "text"
}
}
},
"index-pattern": {
"properties": {
"fieldFormatMap": {
"type": "text"
},
"fields": {
"type": "text"
},
"intervalName": {
"type": "keyword"
},
"notExpandable": {
"type": "boolean"
},
"sourceFilters": {
"type": "text"
},
"timeFieldName": {
"type": "keyword"
},
"title": {
"type": "text"
}
}
},
"visualization": {
"properties": {
"description": {
"type": "text"
},
"kibanaSavedObjectMeta": {
"properties": {
"searchSourceJSON": {
"type": "text"
}
}
},
"savedSearchId": {
"type": "keyword"
},
"title": {
"type": "text"
},
"uiStateJSON": {
"type": "text"
},
"version": {
"type": "integer"
},
"visState": {
"type": "text"
}
}
},
"search": {
"properties": {
"columns": {
"type": "keyword"
},
"description": {
"type": "text"
},
"hits": {
"type": "integer"
},
"kibanaSavedObjectMeta": {
"properties": {
"searchSourceJSON": {
"type": "text"
}
}
},
"sort": {
"type": "keyword"
},
"title": {
"type": "text"
},
"version": {
"type": "integer"
}
}
},
"dashboard": {
"properties": {
"description": {
"type": "text"
},
"hits": {
"type": "integer"
},
"kibanaSavedObjectMeta": {
"properties": {
"searchSourceJSON": {
"type": "text"
}
}
},
"optionsJSON": {
"type": "text"
},
"panelsJSON": {
"type": "text"
},
"refreshInterval": {
"properties": {
"display": {
"type": "keyword"
},
"pause": {
"type": "boolean"
},
"section": {
"type": "integer"
},
"value": {
"type": "integer"
}
}
},
"timeFrom": {
"type": "keyword"
},
"timeRestore": {
"type": "boolean"
},
"timeTo": {
"type": "keyword"
},
"title": {
"type": "text"
},
"uiStateJSON": {
"type": "text"
},
"version": {
"type": "integer"
}
}
},
"url": {
"properties": {
"accessCount": {
"type": "long"
},
"accessDate": {
"type": "date"
},
"createDate": {
"type": "date"
},
"url": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 2048
}
}
}
}
},
"server": {
"properties": {
"uuid": {
"type": "keyword"
}
}
}
}
}
},
"aliases": {}
},
".ml-anomalies-": {
"order": 0,
"version": 6040299,
"index_patterns": [
".ml-anomalies-*"
],
"settings": {
"index": {
"unassigned": {
"node_left": {
"delayed_timeout": "1m"
}
},
"translog": {
"durability": "async"
},
"auto_expand_replicas": "0-1",
"query": {
"default_field": "all_field_values"
}
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.4.2"
},
"dynamic_templates": [
{
"strings_as_keywords": {
"match": "*",
"mapping": {
"type": "keyword"
}
}
}
],
"properties": {
"all_field_values": {
"type": "text",
"analyzer": "whitespace"
},
"job_id": {
"type": "keyword",
"copy_to": "all_field_values"
},
"timestamp": {
"type": "date"
},
"result_type": {
"type": "keyword"
},
"anomaly_score": {
"type": "double"
},
"raw_anomaly_score": {
"type": "double"
},
"initial_anomaly_score": {
"type": "double"
},
"is_interim": {
"type": "boolean"
},
"event_count": {
"type": "long"
},
"bucket_span": {
"type": "long"
},
"processing_time_ms": {
"type": "long"
},
"scheduled_events": {
"type": "keyword"
},
"partition_scores": {
"type": "nested",
"properties": {
"partition_field_name": {
"type": "keyword"
},
"partition_field_value": {
"type": "keyword"
},
"initial_anomaly_score": {
"type": "double"
},
"probability": {
"type": "double"
}
}
},
"bucket_influencers": {
"type": "nested",
"properties": {
"job_id": {
"type": "keyword"
},
"result_type": {
"type": "keyword"
},
"influencer_field_name": {
"type": "keyword"
},
"initial_anomaly_score": {
"type": "double"
},
"anomaly_score": {
"type": "double"
},
"raw_anomaly_score": {
"type": "double"
},
"probability": {
"type": "double"
},
"timestamp": {
"type": "date"
},
"bucket_span": {
"type": "long"
},
"is_interim": {
"type": "boolean"
}
}
},
"model_feature": {
"type": "keyword"
},
"model_lower": {
"type": "double"
},
"model_upper": {
"type": "double"
},
"model_median": {
"type": "double"
},
"forecast_lower": {
"type": "double"
},
"forecast_upper": {
"type": "double"
},
"forecast_prediction": {
"type": "double"
},
"forecast_id": {
"type": "keyword"
},
"forecast_start_timestamp": {
"type": "date"
},
"forecast_end_timestamp": {
"type": "date"
},
"forecast_create_timestamp": {
"type": "date"
},
"forecast_expiry_timestamp": {
"type": "date"
},
"forecast_messages": {
"type": "keyword"
},
"forecast_progress": {
"type": "double"
},
"forecast_status": {
"type": "keyword"
},
"forecast_memory_bytes": {
"type": "long"
},
"detector_index": {
"type": "integer"
},
"actual": {
"type": "double"
},
"typical": {
"type": "double"
},
"probability": {
"type": "double"
},
"function": {
"type": "keyword"
},
"function_description": {
"type": "keyword"
},
"by_field_name": {
"type": "keyword"
},
"by_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"field_name": {
"type": "keyword"
},
"partition_field_name": {
"type": "keyword"
},
"partition_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"over_field_name": {
"type": "keyword"
},
"over_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"record_score": {
"type": "double"
},
"initial_record_score": {
"type": "double"
},
"causes": {
"type": "nested",
"properties": {
"actual": {
"type": "double"
},
"typical": {
"type": "double"
},
"probability": {
"type": "double"
},
"function": {
"type": "keyword"
},
"function_description": {
"type": "keyword"
},
"by_field_name": {
"type": "keyword"
},
"by_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"correlated_by_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"field_name": {
"type": "keyword"
},
"partition_field_name": {
"type": "keyword"
},
"partition_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"over_field_name": {
"type": "keyword"
},
"over_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
}
}
},
"influencers": {
"type": "nested",
"properties": {
"influencer_field_name": {
"type": "keyword"
},
"influencer_field_values": {
"type": "keyword",
"copy_to": "all_field_values"
}
}
},
"influencer_score": {
"type": "double"
},
"initial_influencer_score": {
"type": "double"
},
"influencer_field_name": {
"type": "keyword"
},
"influencer_field_value": {
"type": "keyword",
"copy_to": "all_field_values"
},
"model_bytes": {
"type": "long"
},
"total_by_field_count": {
"type": "long"
},
"total_over_field_count": {
"type": "long"
},
"total_partition_field_count": {
"type": "long"
},
"bucket_allocation_failures_count": {
"type": "long"
},
"memory_status": {
"type": "keyword"
},
"log_time": {
"type": "date"
},
"category_id": {
"type": "long"
},
"terms": {
"type": "text"
},
"regex": {
"type": "keyword"
},
"max_matching_length": {
"type": "long"
},
"examples": {
"type": "text"
},
"processed_record_count": {
"type": "long"
},
"processed_field_count": {
"type": "long"
},
"input_bytes": {
"type": "long"
},
"input_record_count": {
"type": "long"
},
"input_field_count": {
"type": "long"
},
"invalid_date_count": {
"type": "long"
},
"missing_field_count": {
"type": "long"
},
"out_of_order_timestamp_count": {
"type": "long"
},
"empty_bucket_count": {
"type": "long"
},
"sparse_bucket_count": {
"type": "long"
},
"bucket_count": {
"type": "long"
},
"earliest_record_timestamp": {
"type": "date"
},
"latest_record_timestamp": {
"type": "date"
},
"latest_empty_bucket_timestamp": {
"type": "date"
},
"latest_sparse_bucket_timestamp": {
"type": "date"
},
"last_data_time": {
"type": "date"
},
"description": {
"type": "text"
},
"snapshot_id": {
"type": "keyword"
},
"snapshot_doc_count": {
"type": "integer"
},
"retain": {
"type": "boolean"
},
"model_size_stats": {
"properties": {
"job_id": {
"type": "keyword"
},
"result_type": {
"type": "keyword"
},
"timestamp": {
"type": "date"
},
"model_bytes": {
"type": "long"
},
"total_by_field_count": {
"type": "long"
},
"total_over_field_count": {
"type": "long"
},
"total_partition_field_count": {
"type": "long"
},
"bucket_allocation_failures_count": {
"type": "long"
},
"memory_status": {
"type": "keyword"
},
"log_time": {
"type": "date"
}
}
},
"quantiles": {
"enabled": false
},
"latest_record_time_stamp": {
"type": "date"
},
"latest_result_time_stamp": {
"type": "date"
}
}
}
},
"aliases": {}
},
"filebeat-rr-k8s-logs": {
"order": 1,
"index_patterns": [
"filebeat-rr-k8s-logs-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.3.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"event": {
"properties": {
"severity": {
"type": "long"
}
}
},
"mongodb": {
"properties": {
"log": {
"properties": {
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"context": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"fields": {
"type": "object"
},
"offset": {
"type": "long"
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"read_timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"beat": {
"properties": {
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"ignore_above": 1024,
"type": "keyword"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"docker": {
"properties": {
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"host": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"architecture": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"properties": {
"platform": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"message": {
"type": "text",
"norms": false
},
"iis": {
"properties": {
"error": {
"properties": {
"reason_phrase": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"remote_port": {
"type": "long"
},
"server_ip": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"ignore_above": 1024,
"type": "keyword"
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"server_port": {
"type": "long"
},
"response_code": {
"type": "long"
},
"queue_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"access": {
"properties": {
"response_code": {
"type": "long"
},
"server_name": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"request_time_ms": {
"type": "long"
},
"http_version": {
"ignore_above": 1024,
"type": "keyword"
},
"server_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"sub_status": {
"type": "long"
},
"win32_status": {
"type": "long"
},
"cookie": {
"type": "keyword",
"ignore_above": 1024
},
"query_string": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
},
"site_name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"body_received": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"ignore_above": 1024,
"type": "keyword"
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"url": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"osquery": {
"properties": {
"result": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"action": {
"type": "keyword",
"ignore_above": 1024
},
"host_identifier": {
"type": "keyword",
"ignore_above": 1024
},
"unix_time": {
"type": "long"
},
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"process": {
"properties": {
"program": {
"ignore_above": 1024,
"type": "keyword"
},
"pid": {
"type": "long"
}
}
},
"apache2": {
"properties": {
"access": {
"properties": {
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"error": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"client": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"thread": {
"type": "text",
"norms": false
},
"log_event": {
"type": "object"
}
}
},
"slowlog": {
"properties": {
"thread": {
"norms": false,
"type": "text"
},
"event": {
"type": "text",
"norms": false
},
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_type": {
"type": "keyword",
"ignore_above": 1024
},
"took_in_nanos": {
"type": "long"
},
"plugin_params_object": {
"type": "object"
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"took_in_millis": {
"type": "long"
},
"plugin_params": {
"type": "text",
"norms": false
},
"message": {
"norms": false,
"type": "text"
}
}
}
}
},
"mysql": {
"properties": {
"error": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"level": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"rows_examined": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_sent": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "keyword",
"ignore_above": 1024
},
"timestamp": {
"type": "long"
},
"id": {
"type": "long"
}
}
}
}
},
"error": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"kafka": {
"properties": {
"log": {
"properties": {
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"class": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"full": {
"type": "text",
"norms": false
}
}
}
}
}
}
},
"nginx": {
"properties": {
"access": {
"properties": {
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"ignore_above": 1024,
"type": "keyword"
},
"response_code": {
"type": "long"
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"geoip": {
"properties": {
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"error": {
"properties": {
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"thread_id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"duration": {
"type": "float"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"timezone": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"meta": {
"properties": {
"cloud": {
"properties": {
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"ignore_above": 1024,
"type": "keyword"
},
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"type": "keyword",
"ignore_above": 1024
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"fileset": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"icinga": {
"properties": {
"debug": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"main": {
"properties": {
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"startup": {
"properties": {
"facility": {
"ignore_above": 1024,
"type": "keyword"
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"stream": {
"type": "keyword",
"ignore_above": 1024
},
"input": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"redis": {
"properties": {
"log": {
"properties": {
"message": {
"norms": false,
"type": "text"
},
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"slowlog": {
"properties": {
"cmd": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
},
"args": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"kubernetes": {
"properties": {
"annotations": {
"type": "object"
},
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"labels": {
"type": "object"
}
}
},
"source": {
"type": "keyword",
"ignore_above": 1024
},
"syslog": {
"properties": {
"facility": {
"type": "long"
},
"priority": {
"type": "long"
},
"severity_label": {
"type": "keyword",
"ignore_above": 1024
},
"facility_label": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"auditd": {
"properties": {
"log": {
"properties": {
"old_auid": {
"type": "keyword",
"ignore_above": 1024
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
},
"a0": {
"ignore_above": 1024,
"type": "keyword"
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"old_ses": {
"type": "keyword",
"ignore_above": 1024
},
"sequence": {
"type": "long"
},
"pid": {
"ignore_above": 1024,
"type": "keyword"
},
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"items": {
"type": "keyword",
"ignore_above": 1024
},
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"new_ses": {
"type": "keyword",
"ignore_above": 1024
},
"acct": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"system": {
"properties": {
"auth": {
"properties": {
"program": {
"type": "keyword",
"ignore_above": 1024
},
"sudo": {
"properties": {
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
},
"pwd": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"message": {
"type": "text",
"norms": false
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"ssh": {
"properties": {
"dropped_ip": {
"type": "ip"
},
"port": {
"type": "long"
},
"signature": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"event": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"ignore_above": 1024,
"type": "keyword"
},
"ip": {
"type": "ip"
}
}
},
"useradd": {
"properties": {
"gid": {
"type": "long"
},
"home": {
"ignore_above": 1024,
"type": "keyword"
},
"shell": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "long"
}
}
},
"groupadd": {
"properties": {
"gid": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
}
}
},
"syslog": {
"properties": {
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"traefik": {
"properties": {
"access": {
"properties": {
"request_count": {
"type": "long"
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"frontend_name": {
"type": "text",
"norms": false
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"device": {
"ignore_above": 1024,
"type": "keyword"
},
"major": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_name": {
"ignore_above": 1024,
"type": "keyword"
},
"minor": {
"type": "long"
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
}
}
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"agent": {
"type": "text",
"norms": false
},
"backend_url": {
"norms": false,
"type": "text"
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
}
},
"aliases": {}
},
".ml-meta": {
"order": 0,
"version": 6040299,
"index_patterns": [
".ml-meta"
],
"settings": {
"index": {
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"unassigned": {
"node_left": {
"delayed_timeout": "1m"
}
}
}
},
"mappings": {
"doc": {
"dynamic_templates": [
{
"strings_as_keywords": {
"match": "*",
"mapping": {
"type": "keyword"
}
}
}
],
"properties": {
"calendar_id": {
"type": "keyword"
},
"job_ids": {
"type": "keyword"
},
"description": {
"type": "keyword"
},
"start_time": {
"type": "date"
},
"end_time": {
"type": "date"
}
}
}
},
"aliases": {}
},
"security-index-template": {
"order": 1000,
"index_patterns": [
".security-*"
],
"settings": {
"index": {
"format": "6",
"analysis": {
"filter": {
"email": {
"type": "pattern_capture",
"preserve_original": "true",
"patterns": [
"([^@]+)",
"(\\p{L}+)",
"(\\d+)",
"@(.+)"
]
}
},
"analyzer": {
"email": {
"filter": [
"email",
"lowercase",
"unique"
],
"tokenizer": "uax_url_email"
}
}
},
"number_of_shards": "1",
"priority": "1000",
"auto_expand_replicas": "0-all",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"_meta": {
"security-version": "6.4.2"
},
"dynamic": "strict",
"properties": {
"username": {
"type": "keyword"
},
"roles": {
"type": "keyword"
},
"password": {
"type": "keyword",
"index": false,
"doc_values": false
},
"full_name": {
"type": "text"
},
"email": {
"type": "text",
"analyzer": "email"
},
"metadata": {
"type": "object",
"dynamic": true
},
"enabled": {
"type": "boolean"
},
"cluster": {
"type": "keyword"
},
"indices": {
"type": "object",
"properties": {
"field_security": {
"properties": {
"grant": {
"type": "keyword"
},
"except": {
"type": "keyword"
}
}
},
"names": {
"type": "keyword"
},
"privileges": {
"type": "keyword"
},
"query": {
"type": "keyword"
}
}
},
"applications": {
"type": "object",
"properties": {
"application": {
"type": "keyword"
},
"privileges": {
"type": "keyword"
},
"resources": {
"type": "keyword"
}
}
},
"application": {
"type": "keyword"
},
"global": {
"type": "object",
"properties": {
"application": {
"type": "object",
"properties": {
"manage": {
"type": "object",
"properties": {
"applications": {
"type": "keyword"
}
}
}
}
}
}
},
"name": {
"type": "keyword"
},
"run_as": {
"type": "keyword"
},
"doc_type": {
"type": "keyword"
},
"type": {
"type": "keyword"
},
"actions": {
"type": "keyword"
},
"expiration_time": {
"type": "date",
"format": "epoch_millis"
},
"creation_time": {
"type": "date",
"format": "epoch_millis"
},
"rules": {
"type": "object",
"dynamic": true
},
"refresh_token": {
"type": "object",
"properties": {
"token": {
"type": "keyword"
},
"refreshed": {
"type": "boolean"
},
"invalidated": {
"type": "boolean"
},
"client": {
"type": "object",
"properties": {
"type": {
"type": "keyword"
},
"user": {
"type": "keyword"
},
"realm": {
"type": "keyword"
}
}
}
}
},
"access_token": {
"type": "object",
"properties": {
"user_token": {
"type": "object",
"properties": {
"id": {
"type": "keyword"
},
"expiration_time": {
"type": "date",
"format": "epoch_millis"
},
"version": {
"type": "integer"
},
"metadata": {
"type": "object",
"dynamic": true
},
"authentication": {
"type": "binary"
}
}
},
"invalidated": {
"type": "boolean"
},
"realm": {
"type": "keyword"
}
}
}
}
}
},
"aliases": {}
},
"logstash-index-template": {
"order": 0,
"index_patterns": [
".logstash"
],
"settings": {
"index": {
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"codec": "best_compression"
}
},
"mappings": {
"doc": {
"_meta": {
"logstash-version": "6.4.2"
},
"dynamic": "strict",
"properties": {
"description": {
"type": "text"
},
"last_modified": {
"type": "date"
},
"pipeline_metadata": {
"properties": {
"version": {
"type": "short"
},
"type": {
"type": "keyword"
}
}
},
"pipeline": {
"type": "text"
},
"pipeline_settings": {
"dynamic": false,
"type": "object"
},
"username": {
"type": "keyword"
},
"metadata": {
"type": "object",
"dynamic": false
}
}
}
},
"aliases": {}
},
"filebeat-6.2.3": {
"order": 1,
"index_patterns": [
"filebeat-6.2.3-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "3"
}
},
"mappings": {
"doc": {
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"match_mapping_type": "string",
"path_match": "docker.container.labels.*",
"mapping": {
"type": "keyword"
}
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"docker": {
"properties": {
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"kubernetes": {
"properties": {
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
},
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"fileset": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"nginx": {
"properties": {
"access": {
"properties": {
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"minor": {
"type": "long"
},
"patch": {
"ignore_above": 1024,
"type": "keyword"
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"geoip": {
"properties": {
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"error": {
"properties": {
"tid": {
"type": "long"
},
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"read_timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"apache2": {
"properties": {
"access": {
"properties": {
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
}
}
},
"error": {
"properties": {
"client": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"fields": {
"type": "object"
},
"stream": {
"type": "keyword",
"ignore_above": 1024
},
"kafka": {
"properties": {
"log": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"class": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"full": {
"norms": false,
"type": "text"
}
}
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"thread_id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"type": "float"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"ignore_above": 1024,
"type": "keyword"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"traefik": {
"properties": {
"access": {
"properties": {
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"frontend_name": {
"type": "text",
"norms": false
},
"remote_ip": {
"ignore_above": 1024,
"type": "keyword"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
}
}
},
"user_name": {
"ignore_above": 1024,
"type": "keyword"
},
"response_code": {
"type": "long"
},
"agent": {
"type": "text",
"norms": false
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"request_count": {
"type": "long"
},
"backend_url": {
"type": "text",
"norms": false
}
}
}
}
},
"error": {
"properties": {
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"system": {
"properties": {
"syslog": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"auth": {
"properties": {
"message": {
"type": "keyword",
"ignore_above": 1024
},
"sudo": {
"properties": {
"pwd": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"ignore_above": 1024,
"type": "keyword"
},
"command": {
"type": "keyword",
"ignore_above": 1024
},
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"useradd": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "long"
},
"gid": {
"type": "long"
},
"home": {
"ignore_above": 1024,
"type": "keyword"
},
"shell": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"groupadd": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"gid": {
"type": "long"
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"ssh": {
"properties": {
"method": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"dropped_ip": {
"type": "ip"
},
"port": {
"type": "long"
},
"signature": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"event": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
}
}
},
"icinga": {
"properties": {
"debug": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
}
}
},
"main": {
"properties": {
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"startup": {
"properties": {
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"mysql": {
"properties": {
"error": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_sent": {
"type": "long"
},
"timestamp": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "keyword",
"ignore_above": 1024
},
"rows_examined": {
"type": "long"
},
"id": {
"type": "long"
}
}
}
}
},
"redis": {
"properties": {
"log": {
"properties": {
"message": {
"norms": false,
"type": "text"
},
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"slowlog": {
"properties": {
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
},
"args": {
"type": "keyword",
"ignore_above": 1024
},
"cmd": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"osquery": {
"properties": {
"result": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"action": {
"type": "keyword",
"ignore_above": 1024
},
"host_identifier": {
"type": "keyword",
"ignore_above": 1024
},
"unix_time": {
"type": "long"
},
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"meta": {
"properties": {
"cloud": {
"properties": {
"region": {
"type": "keyword",
"ignore_above": 1024
},
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"type": "keyword",
"ignore_above": 1024
},
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"type": "keyword",
"ignore_above": 1024
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"source": {
"type": "keyword",
"ignore_above": 1024
},
"offset": {
"type": "long"
},
"beat": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"message": {
"type": "text",
"norms": false
},
"auditd": {
"properties": {
"log": {
"properties": {
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"old_auid": {
"type": "keyword",
"ignore_above": 1024
},
"old_ses": {
"ignore_above": 1024,
"type": "keyword"
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"location": {
"type": "geo_point"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"sequence": {
"type": "long"
},
"acct": {
"ignore_above": 1024,
"type": "keyword"
},
"new_ses": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
},
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"items": {
"ignore_above": 1024,
"type": "keyword"
},
"a0": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"ignore_above": 1024,
"type": "keyword"
},
"thread": {
"type": "text",
"norms": false
},
"log_event": {
"type": "object"
}
}
},
"slowlog": {
"properties": {
"thread": {
"type": "text",
"norms": false
},
"event": {
"type": "text",
"norms": false
},
"plugin_type": {
"type": "keyword",
"ignore_above": 1024
},
"took_in_millis": {
"type": "long"
},
"took_in_nanos": {
"type": "long"
},
"plugin_params": {
"type": "text",
"norms": false
},
"plugin_params_object": {
"type": "object"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
},
"_meta": {
"version": "6.2.3"
}
}
},
"aliases": {}
},
".monitoring-beats": {
"order": 0,
"version": 6020099,
"index_patterns": [
".monitoring-beats-6-*"
],
"settings": {
"index": {
"format": "6",
"codec": "best_compression",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"dynamic": false,
"properties": {
"beats_stats": {
"properties": {
"beat": {
"properties": {
"host": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"type": {
"type": "keyword"
},
"uuid": {
"type": "keyword"
},
"version": {
"type": "keyword"
}
}
},
"metrics": {
"properties": {
"beat": {
"properties": {
"cpu": {
"properties": {
"total": {
"properties": {
"norm": {
"properties": {
"pct": {
"type": "double"
}
}
},
"pct": {
"type": "double"
},
"value": {
"type": "double"
}
}
}
}
},
"info": {
"properties": {
"ephemeral_id": {
"type": "keyword"
},
"uptime": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"memstats": {
"properties": {
"gc_next": {
"type": "long"
},
"memory_alloc": {
"type": "long"
},
"memory_total": {
"type": "long"
},
"rss": {
"type": "long"
}
}
}
}
},
"libbeat": {
"properties": {
"config": {
"properties": {
"module": {
"properties": {
"running": {
"type": "long"
},
"starts": {
"type": "long"
},
"stops": {
"type": "long"
}
}
},
"reloads": {
"type": "long"
}
}
},
"output": {
"properties": {
"events": {
"properties": {
"acked": {
"type": "long"
},
"active": {
"type": "long"
},
"batches": {
"type": "long"
},
"dropped": {
"type": "long"
},
"duplicates": {
"type": "long"
},
"failed": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"read": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"type": {
"type": "keyword"
},
"write": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
}
}
},
"pipeline": {
"properties": {
"clients": {
"type": "long"
},
"events": {
"properties": {
"active": {
"type": "long"
},
"dropped": {
"type": "long"
},
"failed": {
"type": "long"
},
"filtered": {
"type": "long"
},
"published": {
"type": "long"
},
"retry": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"queue": {
"properties": {
"acked": {
"type": "long"
}
}
}
}
}
}
},
"system": {
"properties": {
"cpu": {
"properties": {
"cores": {
"type": "long"
},
"total": {
"properties": {
"norm": {
"properties": {
"pct": {
"type": "double"
}
}
},
"pct": {
"type": "double"
}
}
}
}
},
"load": {
"properties": {
"1": {
"type": "double"
},
"5": {
"type": "double"
},
"15": {
"type": "double"
},
"norm": {
"properties": {
"1": {
"type": "double"
},
"5": {
"type": "double"
},
"15": {
"type": "double"
}
}
}
}
}
}
}
}
},
"tags": {
"type": "keyword"
},
"timestamp": {
"format": "date_time",
"type": "date"
}
}
},
"cluster_uuid": {
"type": "keyword"
},
"interval_ms": {
"type": "long"
},
"source_node": {
"properties": {
"host": {
"type": "keyword"
},
"ip": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"transport_address": {
"type": "keyword"
},
"uuid": {
"type": "keyword"
}
}
},
"timestamp": {
"format": "date_time",
"type": "date"
},
"type": {
"type": "keyword"
}
}
}
},
"aliases": {}
},
"defaultshards": {
"order": 2,
"index_patterns": [
"*"
],
"settings": {
"index": {
"number_of_shards": "1",
"number_of_replicas": "0"
}
},
"mappings": {},
"aliases": {}
},
".ml-notifications": {
"order": 0,
"version": 6040299,
"index_patterns": [
".ml-notifications"
],
"settings": {
"index": {
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"unassigned": {
"node_left": {
"delayed_timeout": "1m"
}
}
}
},
"mappings": {
"audit_message": {
"properties": {
"job_id": {
"type": "keyword"
},
"level": {
"type": "keyword"
},
"message": {
"type": "text",
"fields": {
"raw": {
"type": "keyword"
}
}
},
"timestamp": {
"type": "date"
},
"node_name": {
"type": "keyword"
}
}
}
},
"aliases": {}
},
".watch-history-9": {
"order": 2147483647,
"index_patterns": [
".watcher-history-9*"
],
"settings": {
"index": {
"format": "6",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"_meta": {
"watcher-history-version": "9"
},
"dynamic_templates": [
{
"disabled_payload_fields": {
"path_match": """result\.(input(\..+)*|(transform(\..+)*)|(actions\.transform(\..+)*))\.payload""",
"match_pattern": "regex",
"mapping": {
"type": "object",
"enabled": false
}
}
},
{
"disabled_search_request_body_fields": {
"path_match": """result\.(input(\..+)*|(transform(\..+)*)|(actions\.transform(\..+)*))\.search\.request\.(body|template)""",
"match_pattern": "regex",
"mapping": {
"type": "object",
"enabled": false
}
}
},
{
"disabled_exception_fields": {
"path_match": """result\.(input(\..+)*|(transform(\..+)*)|(actions\.transform(\..+)*)|actions)\.error""",
"match_pattern": "regex",
"mapping": {
"type": "object",
"enabled": false
}
}
},
{
"disabled_jira_custom_fields": {
"path_match": "result.actions.jira.fields.customfield_*",
"mapping": {
"type": "object",
"enabled": false
}
}
}
],
"dynamic": false,
"properties": {
"watch_id": {
"type": "keyword"
},
"node": {
"type": "keyword"
},
"trigger_event": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"triggered_time": {
"type": "date"
},
"manual": {
"type": "object",
"dynamic": true,
"properties": {
"schedule": {
"type": "object",
"dynamic": true,
"properties": {
"scheduled_time": {
"type": "date"
}
}
}
}
},
"schedule": {
"type": "object",
"dynamic": true,
"properties": {
"scheduled_time": {
"type": "date"
}
}
}
}
},
"vars": {
"type": "object",
"enabled": false
},
"input": {
"type": "object",
"enabled": false
},
"condition": {
"type": "object",
"enabled": false
},
"state": {
"type": "keyword"
},
"status": {
"type": "object",
"enabled": false,
"dynamic": true
},
"messages": {
"type": "text"
},
"user": {
"type": "text"
},
"exception": {
"type": "object",
"enabled": false
},
"result": {
"type": "object",
"dynamic": true,
"properties": {
"execution_time": {
"type": "date"
},
"execution_duration": {
"type": "long"
},
"input": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"payload": {
"type": "object",
"enabled": false
},
"search": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"search_type": {
"type": "keyword"
},
"indices": {
"type": "keyword"
},
"types": {
"type": "keyword"
}
}
}
}
},
"http": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"path": {
"type": "keyword"
},
"host": {
"type": "keyword"
}
}
}
}
}
}
},
"condition": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"met": {
"type": "boolean"
},
"compare": {
"type": "object",
"enabled": false
},
"array_compare": {
"type": "object",
"enabled": false
},
"script": {
"type": "object",
"enabled": false
}
}
},
"transform": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"search": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"indices": {
"type": "keyword"
},
"types": {
"type": "keyword"
}
}
}
}
}
}
},
"actions": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"id": {
"type": "keyword"
},
"type": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"reason": {
"type": "keyword"
},
"email": {
"type": "object",
"dynamic": true,
"properties": {
"message": {
"type": "object",
"dynamic": true,
"properties": {
"id": {
"type": "keyword"
},
"from": {
"type": "keyword"
},
"reply_to": {
"type": "keyword"
},
"to": {
"type": "keyword"
},
"cc": {
"type": "keyword"
},
"bcc": {
"type": "keyword"
}
}
}
}
},
"webhook": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"path": {
"type": "keyword"
},
"host": {
"type": "keyword"
}
}
}
}
},
"index": {
"type": "object",
"dynamic": true,
"properties": {
"response": {
"type": "object",
"dynamic": true,
"properties": {
"index": {
"type": "keyword"
},
"type": {
"type": "keyword"
},
"id": {
"type": "keyword"
}
}
}
}
},
"hipchat": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"sent_messages": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"status": {
"type": "keyword"
},
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"room": {
"type": "keyword"
},
"user": {
"type": "keyword"
},
"message": {
"type": "object",
"dynamic": true,
"properties": {
"message_format": {
"type": "keyword"
},
"color": {
"type": "keyword"
},
"notify": {
"type": "boolean"
},
"message": {
"type": "text"
},
"from": {
"type": "text"
}
}
}
}
}
}
},
"jira": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"fields": {
"type": "object",
"dynamic": true,
"properties": {
"summary": {
"type": "text"
},
"description": {
"type": "text"
},
"labels": {
"type": "text"
},
"project": {
"type": "object",
"dynamic": true,
"properties": {
"key": {
"type": "keyword"
},
"id": {
"type": "keyword"
}
}
},
"issuetype": {
"type": "object",
"dynamic": true,
"properties": {
"name": {
"type": "keyword"
},
"id": {
"type": "keyword"
}
}
}
}
},
"result": {
"type": "object",
"dynamic": true,
"properties": {
"id": {
"type": "keyword"
},
"key": {
"type": "keyword"
},
"self": {
"type": "keyword"
}
}
}
}
},
"slack": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"sent_messages": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"status": {
"type": "keyword"
},
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"to": {
"type": "keyword"
},
"message": {
"type": "object",
"dynamic": true,
"properties": {
"from": {
"type": "text"
},
"icon": {
"type": "keyword"
},
"text": {
"type": "text"
},
"attachments": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"color": {
"type": "keyword"
},
"fields": {
"properties": {
"value": {
"type": "text"
}
}
}
}
}
}
}
}
}
}
},
"pagerduty": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"sent_event": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"event": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"client": {
"type": "text"
},
"client_url": {
"type": "keyword"
},
"account": {
"type": "keyword"
},
"attach_payload": {
"type": "boolean"
},
"incident_key": {
"type": "keyword"
},
"description": {
"type": "text"
},
"context": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"href": {
"type": "keyword"
},
"src": {
"type": "keyword"
},
"alt": {
"type": "text"
}
}
}
}
}
}
}
}
}
}
}
}
},
"metadata": {
"type": "object",
"dynamic": true
}
}
}
},
"aliases": {}
},
"filebeat-6.2.2": {
"order": 1,
"index_patterns": [
"filebeat-6.2.2-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "3"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.2.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"fields": {
"type": "object"
},
"kubernetes": {
"properties": {
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
}
}
},
"auditd": {
"properties": {
"log": {
"properties": {
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
},
"a0": {
"type": "keyword",
"ignore_above": 1024
},
"acct": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"ignore_above": 1024,
"type": "keyword"
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"ignore_above": 1024,
"type": "keyword"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
}
}
},
"old_auid": {
"type": "keyword",
"ignore_above": 1024
},
"old_ses": {
"ignore_above": 1024,
"type": "keyword"
},
"new_ses": {
"type": "keyword",
"ignore_above": 1024
},
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"sequence": {
"type": "long"
},
"items": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"mysql": {
"properties": {
"error": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"slowlog": {
"properties": {
"rows_examined": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"ignore_above": 1024,
"type": "keyword"
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_sent": {
"type": "long"
},
"timestamp": {
"type": "long"
},
"id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"traefik": {
"properties": {
"access": {
"properties": {
"url": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"frontend_name": {
"norms": false,
"type": "text"
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"backend_url": {
"type": "text",
"norms": false
},
"method": {
"ignore_above": 1024,
"type": "keyword"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
}
}
},
"request_count": {
"type": "long"
},
"response_code": {
"type": "long"
}
}
}
}
},
"tags": {
"ignore_above": 1024,
"type": "keyword"
},
"kafka": {
"properties": {
"log": {
"properties": {
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"class": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
},
"full": {
"type": "text",
"norms": false
}
}
}
}
}
}
},
"redis": {
"properties": {
"log": {
"properties": {
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"ignore_above": 1024,
"type": "keyword"
},
"message": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"args": {
"type": "keyword",
"ignore_above": 1024
},
"cmd": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"message": {
"norms": false,
"type": "text"
},
"nginx": {
"properties": {
"access": {
"properties": {
"url": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"device": {
"type": "keyword",
"ignore_above": 1024
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_minor": {
"type": "long"
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"error": {
"properties": {
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
}
}
}
}
},
"osquery": {
"properties": {
"result": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"action": {
"type": "keyword",
"ignore_above": 1024
},
"host_identifier": {
"type": "keyword",
"ignore_above": 1024
},
"unix_time": {
"type": "long"
},
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"source": {
"type": "keyword",
"ignore_above": 1024
},
"offset": {
"type": "long"
},
"error": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"meta": {
"properties": {
"cloud": {
"properties": {
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
},
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"type": "keyword",
"ignore_above": 1024
},
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"system": {
"properties": {
"auth": {
"properties": {
"user": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"message": {
"ignore_above": 1024,
"type": "keyword"
},
"ssh": {
"properties": {
"port": {
"type": "long"
},
"signature": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"event": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"dropped_ip": {
"type": "ip"
}
}
},
"sudo": {
"properties": {
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
},
"pwd": {
"ignore_above": 1024,
"type": "keyword"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"useradd": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "long"
},
"gid": {
"type": "long"
},
"home": {
"type": "keyword",
"ignore_above": 1024
},
"shell": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"groupadd": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"gid": {
"type": "long"
}
}
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"syslog": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"ignore_above": 1024,
"type": "keyword"
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"stream": {
"ignore_above": 1024,
"type": "keyword"
},
"apache2": {
"properties": {
"access": {
"properties": {
"url": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"user_agent": {
"properties": {
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"referrer": {
"ignore_above": 1024,
"type": "keyword"
},
"agent": {
"type": "text",
"norms": false
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"user_name": {
"ignore_above": 1024,
"type": "keyword"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"error": {
"properties": {
"client": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"thread": {
"type": "text",
"norms": false
},
"log_event": {
"type": "object"
}
}
},
"slowlog": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"thread": {
"type": "text",
"norms": false
},
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_type": {
"type": "keyword",
"ignore_above": 1024
},
"took_in_millis": {
"type": "long"
},
"took_in_nanos": {
"type": "long"
},
"plugin_params_object": {
"type": "object"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"ignore_above": 1024,
"type": "keyword"
},
"event": {
"type": "text",
"norms": false
},
"plugin_params": {
"type": "text",
"norms": false
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"duration": {
"type": "float"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"ignore_above": 1024,
"type": "keyword"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
}
}
}
}
},
"fileset": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"icinga": {
"properties": {
"debug": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"main": {
"properties": {
"facility": {
"ignore_above": 1024,
"type": "keyword"
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"startup": {
"properties": {
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"read_timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"beat": {
"properties": {
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"docker": {
"properties": {
"container": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
},
"aliases": {}
},
".monitoring-es": {
"order": 0,
"version": 6020099,
"index_patterns": [
".monitoring-es-6-*"
],
"settings": {
"index": {
"format": "6",
"codec": "best_compression",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"date_detection": false,
"dynamic": false,
"properties": {
"cluster_uuid": {
"type": "keyword"
},
"state_uuid": {
"type": "keyword"
},
"timestamp": {
"type": "date",
"format": "date_time"
},
"interval_ms": {
"type": "long"
},
"type": {
"type": "keyword"
},
"source_node": {
"properties": {
"uuid": {
"type": "keyword"
},
"host": {
"type": "keyword"
},
"transport_address": {
"type": "keyword"
},
"ip": {
"type": "keyword"
},
"name": {
"type": "keyword"
},
"timestamp": {
"type": "date",
"format": "date_time"
}
}
},
"indices_stats": {
"properties": {
"_all": {
"properties": {
"primaries": {
"properties": {
"docs": {
"properties": {
"count": {
"type": "long"
}
}
},
"indexing": {
"properties": {
"index_total": {
"type": "long"
},
"index_time_in_millis": {
"type": "long"
}
}
},
"search": {
"properties": {
"query_total": {
"type": "long"
},
"query_time_in_millis": {
"type": "long"
}
}
}
}
},
"total": {
"properties": {
"docs": {
"properties": {
"count": {
"type": "long"
}
}
},
"indexing": {
"properties": {
"index_total": {
"type": "long"
},
"index_time_in_millis": {
"type": "long"
}
}
},
"search": {
"properties": {
"query_total": {
"type": "long"
},
"query_time_in_millis": {
"type": "long"
}
}
}
}
}
}
}
}
},
"index_stats": {
"properties": {
"index": {
"type": "keyword"
},
"primaries": {
"properties": {
"docs": {
"properties": {
"count": {
"type": "long"
}
}
},
"fielddata": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
}
}
},
"store": {
"properties": {
"size_in_bytes": {
"type": "long"
}
}
},
"indexing": {
"properties": {
"index_total": {
"type": "long"
},
"index_time_in_millis": {
"type": "long"
},
"throttle_time_in_millis": {
"type": "long"
}
}
},
"merges": {
"properties": {
"total_size_in_bytes": {
"type": "long"
}
}
},
"query_cache": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
},
"hit_count": {
"type": "long"
},
"miss_count": {
"type": "long"
}
}
},
"request_cache": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
},
"hit_count": {
"type": "long"
},
"miss_count": {
"type": "long"
}
}
},
"search": {
"properties": {
"query_total": {
"type": "long"
},
"query_time_in_millis": {
"type": "long"
}
}
},
"segments": {
"properties": {
"count": {
"type": "integer"
},
"memory_in_bytes": {
"type": "long"
},
"terms_memory_in_bytes": {
"type": "long"
},
"points_memory_in_bytes": {
"type": "long"
},
"stored_fields_memory_in_bytes": {
"type": "long"
},
"term_vectors_memory_in_bytes": {
"type": "long"
},
"norms_memory_in_bytes": {
"type": "long"
},
"doc_values_memory_in_bytes": {
"type": "long"
},
"index_writer_memory_in_bytes": {
"type": "long"
},
"version_map_memory_in_bytes": {
"type": "long"
},
"fixed_bit_set_memory_in_bytes": {
"type": "long"
}
}
},
"refresh": {
"properties": {
"total_time_in_millis": {
"type": "long"
}
}
}
}
},
"total": {
"properties": {
"docs": {
"properties": {
"count": {
"type": "long"
}
}
},
"fielddata": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
}
}
},
"store": {
"properties": {
"size_in_bytes": {
"type": "long"
}
}
},
"indexing": {
"properties": {
"index_total": {
"type": "long"
},
"index_time_in_millis": {
"type": "long"
},
"throttle_time_in_millis": {
"type": "long"
}
}
},
"merges": {
"properties": {
"total_size_in_bytes": {
"type": "long"
}
}
},
"query_cache": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
},
"hit_count": {
"type": "long"
},
"miss_count": {
"type": "long"
}
}
},
"request_cache": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
},
"hit_count": {
"type": "long"
},
"miss_count": {
"type": "long"
}
}
},
"search": {
"properties": {
"query_total": {
"type": "long"
},
"query_time_in_millis": {
"type": "long"
}
}
},
"segments": {
"properties": {
"count": {
"type": "integer"
},
"memory_in_bytes": {
"type": "long"
},
"terms_memory_in_bytes": {
"type": "long"
},
"points_memory_in_bytes": {
"type": "long"
},
"stored_fields_memory_in_bytes": {
"type": "long"
},
"term_vectors_memory_in_bytes": {
"type": "long"
},
"norms_memory_in_bytes": {
"type": "long"
},
"doc_values_memory_in_bytes": {
"type": "long"
},
"index_writer_memory_in_bytes": {
"type": "long"
},
"version_map_memory_in_bytes": {
"type": "long"
},
"fixed_bit_set_memory_in_bytes": {
"type": "long"
}
}
},
"refresh": {
"properties": {
"total_time_in_millis": {
"type": "long"
}
}
}
}
}
}
},
"cluster_stats": {
"properties": {
"nodes": {
"type": "object"
},
"indices": {
"type": "object"
}
}
},
"cluster_state": {
"properties": {
"version": {
"type": "long"
},
"nodes_hash": {
"type": "integer"
},
"master_node": {
"type": "keyword"
},
"state_uuid": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"nodes": {
"type": "object"
},
"shards": {
"type": "object"
}
}
},
"node_stats": {
"properties": {
"node_id": {
"type": "keyword"
},
"node_master": {
"type": "boolean"
},
"mlockall": {
"type": "boolean"
},
"indices": {
"properties": {
"docs": {
"properties": {
"count": {
"type": "long"
}
}
},
"fielddata": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
}
}
},
"indexing": {
"properties": {
"index_time_in_millis": {
"type": "long"
},
"index_total": {
"type": "long"
},
"throttle_time_in_millis": {
"type": "long"
}
}
},
"query_cache": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
},
"hit_count": {
"type": "long"
},
"miss_count": {
"type": "long"
}
}
},
"request_cache": {
"properties": {
"memory_size_in_bytes": {
"type": "long"
},
"evictions": {
"type": "long"
},
"hit_count": {
"type": "long"
},
"miss_count": {
"type": "long"
}
}
},
"search": {
"properties": {
"query_time_in_millis": {
"type": "long"
},
"query_total": {
"type": "long"
}
}
},
"segments": {
"properties": {
"count": {
"type": "integer"
},
"memory_in_bytes": {
"type": "long"
},
"terms_memory_in_bytes": {
"type": "long"
},
"points_memory_in_bytes": {
"type": "long"
},
"stored_fields_memory_in_bytes": {
"type": "long"
},
"term_vectors_memory_in_bytes": {
"type": "long"
},
"norms_memory_in_bytes": {
"type": "long"
},
"doc_values_memory_in_bytes": {
"type": "long"
},
"index_writer_memory_in_bytes": {
"type": "long"
},
"version_map_memory_in_bytes": {
"type": "long"
},
"fixed_bit_set_memory_in_bytes": {
"type": "long"
}
}
},
"store": {
"properties": {
"size_in_bytes": {
"type": "long"
}
}
}
}
},
"fs": {
"properties": {
"total": {
"properties": {
"total_in_bytes": {
"type": "long"
},
"free_in_bytes": {
"type": "long"
},
"available_in_bytes": {
"type": "long"
}
}
},
"data": {
"properties": {
"spins": {
"type": "boolean"
}
}
},
"io_stats": {
"properties": {
"total": {
"properties": {
"operations": {
"type": "long"
},
"read_operations": {
"type": "long"
},
"write_operations": {
"type": "long"
},
"read_kilobytes": {
"type": "long"
},
"write_kilobytes": {
"type": "long"
}
}
}
}
}
}
},
"os": {
"properties": {
"cgroup": {
"properties": {
"cpuacct": {
"properties": {
"control_group": {
"type": "keyword"
},
"usage_nanos": {
"type": "long"
}
}
},
"cpu": {
"properties": {
"cfs_quota_micros": {
"type": "long"
},
"control_group": {
"type": "keyword"
},
"stat": {
"properties": {
"number_of_elapsed_periods": {
"type": "long"
},
"number_of_times_throttled": {
"type": "long"
},
"time_throttled_nanos": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"control_group": {
"type": "keyword"
},
"limit_in_bytes": {
"type": "keyword"
},
"usage_in_bytes": {
"type": "keyword"
}
}
}
}
},
"cpu": {
"properties": {
"load_average": {
"properties": {
"1m": {
"type": "half_float"
},
"5m": {
"type": "half_float"
},
"15m": {
"type": "half_float"
}
}
}
}
}
}
},
"process": {
"properties": {
"open_file_descriptors": {
"type": "long"
},
"max_file_descriptors": {
"type": "long"
},
"cpu": {
"properties": {
"percent": {
"type": "half_float"
}
}
}
}
},
"jvm": {
"properties": {
"mem": {
"properties": {
"heap_used_in_bytes": {
"type": "long"
},
"heap_used_percent": {
"type": "half_float"
},
"heap_max_in_bytes": {
"type": "long"
}
}
},
"gc": {
"properties": {
"collectors": {
"properties": {
"young": {
"properties": {
"collection_count": {
"type": "long"
},
"collection_time_in_millis": {
"type": "long"
}
}
},
"old": {
"properties": {
"collection_count": {
"type": "long"
},
"collection_time_in_millis": {
"type": "long"
}
}
}
}
}
}
}
}
},
"thread_pool": {
"properties": {
"bulk": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
},
"generic": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
},
"get": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
},
"index": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
},
"maanagement": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
},
"search": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
},
"watcher": {
"properties": {
"threads": {
"type": "integer"
},
"queue": {
"type": "integer"
},
"rejected": {
"type": "long"
}
}
}
}
}
}
},
"index_recovery": {
"type": "object"
},
"shard": {
"properties": {
"state": {
"type": "keyword"
},
"primary": {
"type": "boolean"
},
"index": {
"type": "keyword"
},
"relocating_node": {
"type": "keyword"
},
"shard": {
"type": "long"
},
"node": {
"type": "keyword"
}
}
},
"job_stats": {
"properties": {
"job_id": {
"type": "keyword"
},
"state": {
"type": "keyword"
},
"data_counts": {
"properties": {
"input_bytes": {
"type": "long"
},
"processed_record_count": {
"type": "long"
},
"empty_bucket_count": {
"type": "long"
},
"sparse_bucket_count": {
"type": "long"
},
"bucket_count": {
"type": "long"
},
"earliest_record_timestamp": {
"type": "date"
},
"latest_record_timestamp": {
"type": "date"
}
}
},
"model_size_stats": {
"properties": {
"model_bytes": {
"type": "long"
},
"bucket_allocation_failures_count": {
"type": "long"
}
}
},
"node": {
"properties": {
"id": {
"type": "keyword"
}
}
}
}
}
}
}
},
"aliases": {}
},
"metricbeat": {
"order": 1,
"index_patterns": [
"metricbeat-rr-stats-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.3.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"path_match": "docker.container.labels.*",
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string"
}
},
{
"docker.cpu.core.*.pct": {
"mapping": {
"type": "scaled_float",
"scaling_factor": 1000
},
"match_mapping_type": "*",
"path_match": "docker.cpu.core.*.pct"
}
},
{
"docker.cpu.core.*.ticks": {
"mapping": {
"type": "long"
},
"match_mapping_type": "long",
"path_match": "docker.cpu.core.*.ticks"
}
},
{
"docker.image.labels": {
"match_mapping_type": "string",
"path_match": "docker.image.labels.*",
"mapping": {
"type": "keyword"
}
}
},
{
"system.process.env": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "system.process.env.*"
}
},
{
"system.process.cgroup.cpuacct.percpu": {
"match_mapping_type": "long",
"path_match": "system.process.cgroup.cpuacct.percpu.*",
"mapping": {
"type": "long"
}
}
},
{
"vsphere.virtualmachine.custom_fields": {
"path_match": "vsphere.virtualmachine.custom_fields.*",
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string"
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"dropwizard": {
"properties": {}
},
"haproxy": {
"properties": {
"info": {
"properties": {
"ulimit_n": {
"type": "long"
},
"pipes": {
"properties": {
"used": {
"type": "long"
},
"free": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"ssl": {
"properties": {
"frontend": {
"properties": {
"key_rate": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"session_reuse": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"backend": {
"properties": {
"key_rate": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"cached_lookups": {
"type": "long"
},
"cache_misses": {
"type": "long"
},
"rate": {
"properties": {
"limit": {
"type": "long"
},
"max": {
"type": "long"
},
"value": {
"type": "long"
}
}
}
}
},
"idle": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"pid": {
"type": "long"
},
"tasks": {
"type": "long"
},
"uptime": {
"properties": {
"sec": {
"type": "long"
}
}
},
"memory": {
"properties": {
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"run_queue": {
"type": "long"
},
"connection": {
"properties": {
"ssl": {
"properties": {
"max": {
"type": "long"
},
"current": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"max": {
"type": "long"
},
"hard_max": {
"type": "long"
},
"rate": {
"properties": {
"value": {
"type": "long"
},
"limit": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"current": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"requests": {
"properties": {
"total": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"sockets": {
"properties": {
"max": {
"type": "long"
}
}
},
"process_num": {
"type": "long"
},
"processes": {
"type": "long"
},
"compress": {
"properties": {
"bps": {
"properties": {
"in": {
"type": "long"
},
"out": {
"type": "long"
},
"rate_limit": {
"type": "long"
}
}
}
}
},
"session": {
"properties": {
"rate": {
"properties": {
"value": {
"type": "long"
},
"limit": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"zlib_mem_usage": {
"properties": {
"max": {
"type": "long"
},
"value": {
"type": "long"
}
}
}
}
},
"stat": {
"properties": {
"in": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"last_change": {
"type": "long"
},
"session": {
"properties": {
"rate": {
"properties": {
"value": {
"type": "long"
},
"limit": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"current": {
"type": "long"
},
"max": {
"type": "long"
},
"limit": {
"type": "long"
}
}
},
"service_name": {
"type": "keyword",
"ignore_above": 1024
},
"tracked": {
"properties": {
"id": {
"type": "long"
}
}
},
"request": {
"properties": {
"errors": {
"type": "long"
},
"redispatched": {
"type": "long"
},
"connection": {
"properties": {
"errors": {
"type": "long"
}
}
},
"rate": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"total": {
"type": "long"
},
"denied": {
"type": "long"
},
"queued": {
"properties": {
"max": {
"type": "long"
},
"current": {
"type": "long"
}
}
}
}
},
"check": {
"properties": {
"failed": {
"type": "long"
},
"down": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"code": {
"type": "long"
},
"duration": {
"type": "long"
},
"health": {
"properties": {
"last": {
"type": "keyword",
"ignore_above": 1024
},
"fail": {
"type": "long"
}
}
},
"agent": {
"properties": {
"last": {
"type": "long"
}
}
}
}
},
"compressor": {
"properties": {
"in": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"bypassed": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"response": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"weight": {
"type": "long"
},
"process_id": {
"type": "long"
},
"throttle": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"selected": {
"properties": {
"total": {
"type": "long"
}
}
},
"server": {
"properties": {
"backup": {
"type": "long"
},
"id": {
"type": "long"
},
"aborted": {
"type": "long"
},
"active": {
"type": "long"
}
}
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"component_type": {
"type": "long"
},
"connection": {
"properties": {
"retried": {
"type": "long"
},
"time": {
"properties": {
"avg": {
"type": "long"
}
}
},
"total": {
"type": "long"
}
}
},
"response": {
"properties": {
"denied": {
"type": "long"
},
"http": {
"properties": {
"4xx": {
"type": "long"
},
"5xx": {
"type": "long"
},
"other": {
"type": "long"
},
"1xx": {
"type": "long"
},
"2xx": {
"type": "long"
},
"3xx": {
"type": "long"
}
}
},
"errors": {
"type": "long"
},
"time": {
"properties": {
"avg": {
"type": "long"
}
}
}
}
},
"client": {
"properties": {
"aborted": {
"type": "long"
}
}
},
"proxy": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"queue": {
"properties": {
"limit": {
"type": "long"
},
"time": {
"properties": {
"avg": {
"type": "long"
}
}
}
}
},
"downtime": {
"type": "long"
}
}
}
}
},
"vsphere": {
"properties": {
"datastore": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"fstype": {
"type": "keyword",
"ignore_above": 1024
},
"capacity": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "long"
}
}
}
}
}
}
},
"host": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"cpu": {
"properties": {
"used": {
"properties": {
"mhz": {
"type": "long"
}
}
},
"total": {
"properties": {
"mhz": {
"type": "long"
}
}
},
"free": {
"properties": {
"mhz": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"network_names": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"virtualmachine": {
"properties": {
"custom_fields": {
"type": "object"
},
"network_names": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"cpu": {
"properties": {
"used": {
"properties": {
"mhz": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"used": {
"properties": {
"guest": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"host": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"total": {
"properties": {
"guest": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"free": {
"properties": {
"guest": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
}
}
},
"ceph": {
"properties": {
"cluster_health": {
"properties": {
"overall_status": {
"type": "keyword",
"ignore_above": 1024
},
"timechecks": {
"properties": {
"epoch": {
"type": "long"
},
"round": {
"properties": {
"status": {
"type": "keyword",
"ignore_above": 1024
},
"value": {
"type": "long"
}
}
}
}
}
}
},
"cluster_status": {
"properties": {
"version": {
"type": "long"
},
"traffic": {
"properties": {
"read_bytes": {
"type": "long"
},
"write_bytes": {
"type": "long"
},
"read_op_per_sec": {
"type": "long"
},
"write_op_per_sec": {
"type": "long"
}
}
},
"misplace": {
"properties": {
"total": {
"type": "long"
},
"objects": {
"type": "long"
},
"ratio": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"degraded": {
"properties": {
"total": {
"type": "long"
},
"objects": {
"type": "long"
},
"ratio": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"pg": {
"properties": {
"data_bytes": {
"type": "long"
},
"avail_bytes": {
"type": "long"
},
"total_bytes": {
"type": "long"
},
"used_bytes": {
"type": "long"
}
}
},
"pg_state": {
"properties": {
"state_name": {
"type": "long"
},
"count": {
"type": "long"
},
"version": {
"type": "long"
}
}
},
"osd": {
"properties": {
"num_osds": {
"type": "long"
},
"num_up_osds": {
"type": "long"
},
"num_in_osds": {
"type": "long"
},
"num_remapped_pgs": {
"type": "long"
},
"epoch": {
"type": "long"
},
"full": {
"type": "boolean"
},
"nearfull": {
"type": "boolean"
}
}
}
}
},
"monitor_health": {
"properties": {
"store_stats": {
"properties": {
"log": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"misc": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"sst": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"last_updated": {
"type": "long"
}
}
},
"available": {
"properties": {
"pct": {
"type": "long"
},
"kb": {
"type": "long"
}
}
},
"health": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"properties": {
"kb": {
"type": "long"
}
}
},
"used": {
"properties": {
"kb": {
"type": "long"
}
}
},
"last_updated": {
"type": "date"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"osd_df": {
"properties": {
"used": {
"properties": {
"byte": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pg_num": {
"type": "long"
},
"id": {
"type": "long"
},
"name": {
"type": "text",
"norms": false
},
"device_class": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"properties": {
"byte": {
"type": "long"
}
}
}
}
},
"osd_tree": {
"properties": {
"status": {
"type": "keyword",
"ignore_above": 1024
},
"device_class": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "long"
},
"name": {
"type": "text",
"norms": false
},
"type_id": {
"type": "long"
},
"depth": {
"type": "long"
},
"exists": {
"type": "boolean"
},
"primary_affinity": {
"type": "float"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"children": {
"type": "text",
"norms": false
},
"crush_weight": {
"type": "float"
},
"reweight": {
"type": "long"
},
"father": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pool_disk": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"stats": {
"properties": {
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"objects": {
"type": "long"
},
"used": {
"properties": {
"kb": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"cluster_disk": {
"properties": {
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"etcd": {
"properties": {
"leader": {
"properties": {
"followers": {
"properties": {
"latency": {
"properties": {
"followers": {
"properties": {
"latency": {
"properties": {
"average": {
"type": "scaled_float",
"scaling_factor": 1000
},
"current": {
"type": "scaled_float",
"scaling_factor": 1000
},
"maximum": {
"type": "scaled_float",
"scaling_factor": 1000
},
"minimum": {
"type": "long"
}
}
}
}
},
"follower": {
"properties": {
"latency": {
"properties": {
"standardDeviation": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
}
}
},
"counts": {
"properties": {
"followers": {
"properties": {
"counts": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
}
}
}
}
}
}
},
"leader": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"self": {
"properties": {
"state": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"ignore_above": 1024,
"type": "keyword"
},
"leaderinfo": {
"properties": {
"leader": {
"type": "keyword",
"ignore_above": 1024
},
"starttime": {
"type": "keyword",
"ignore_above": 1024
},
"uptime": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"recv": {
"properties": {
"appendrequest": {
"properties": {
"count": {
"type": "long"
}
}
},
"bandwithrate": {
"type": "scaled_float",
"scaling_factor": 1000
},
"pkgrate": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"send": {
"properties": {
"appendrequest": {
"properties": {
"count": {
"type": "long"
}
}
},
"bandwithrate": {
"type": "scaled_float",
"scaling_factor": 1000
},
"pkgrate": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"starttime": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"store": {
"properties": {
"delete": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"compareanddelete": {
"properties": {
"fail": {
"type": "long"
},
"success": {
"type": "long"
}
}
},
"gets": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"sets": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"compareandswap": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"expire": {
"properties": {
"count": {
"type": "long"
}
}
},
"watchers": {
"type": "long"
},
"update": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"create": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
}
}
}
}
},
"mongodb": {
"properties": {
"collstats": {
"properties": {
"total": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"queries": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"update": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"remove": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"commands": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"db": {
"type": "keyword",
"ignore_above": 1024
},
"collection": {
"ignore_above": 1024,
"type": "keyword"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"lock": {
"properties": {
"read": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"write": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
}
}
},
"getmore": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"insert": {
"properties": {
"count": {
"type": "long"
},
"time": {
"properties": {
"us": {
"type": "long"
}
}
}
}
}
}
},
"dbstats": {
"properties": {
"ns_size_mb": {
"properties": {
"mb": {
"type": "long"
}
}
},
"data_file_version": {
"properties": {
"minor": {
"type": "long"
},
"major": {
"type": "long"
}
}
},
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"db": {
"type": "keyword",
"ignore_above": 1024
},
"file_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"index_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"indexes": {
"type": "long"
},
"extent_free_list": {
"properties": {
"size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"num": {
"type": "long"
}
}
},
"avg_obj_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"collections": {
"type": "long"
},
"num_extents": {
"type": "long"
},
"objects": {
"type": "long"
},
"storage_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"status": {
"properties": {
"uptime": {
"properties": {
"ms": {
"type": "long"
}
}
},
"local_time": {
"type": "date"
},
"background_flushing": {
"properties": {
"flushes": {
"type": "long"
},
"total": {
"properties": {
"ms": {
"type": "long"
}
}
},
"average": {
"properties": {
"ms": {
"type": "long"
}
}
},
"last": {
"properties": {
"ms": {
"type": "long"
}
}
},
"last_finished": {
"type": "date"
}
}
},
"write_backs_queued": {
"type": "boolean"
},
"storage_engine": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"wired_tiger": {
"properties": {
"concurrent_transactions": {
"properties": {
"write": {
"properties": {
"total_tickets": {
"type": "long"
},
"out": {
"type": "long"
},
"available": {
"type": "long"
}
}
},
"read": {
"properties": {
"available": {
"type": "long"
},
"total_tickets": {
"type": "long"
},
"out": {
"type": "long"
}
}
}
}
},
"cache": {
"properties": {
"pages": {
"properties": {
"read": {
"type": "long"
},
"write": {
"type": "long"
},
"evicted": {
"type": "long"
}
}
},
"maximum": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"dirty": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"log": {
"properties": {
"size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"write": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max_file_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"flushes": {
"type": "long"
},
"writes": {
"type": "long"
},
"scans": {
"type": "long"
},
"syncs": {
"type": "long"
}
}
}
}
},
"asserts": {
"properties": {
"regular": {
"type": "long"
},
"warning": {
"type": "long"
},
"msg": {
"type": "long"
},
"user": {
"type": "long"
},
"rollovers": {
"type": "long"
}
}
},
"connections": {
"properties": {
"current": {
"type": "long"
},
"available": {
"type": "long"
},
"total_created": {
"type": "long"
}
}
},
"extra_info": {
"properties": {
"heap_usage": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"page_faults": {
"type": "long"
}
}
},
"opcounters": {
"properties": {
"insert": {
"type": "long"
},
"query": {
"type": "long"
},
"update": {
"type": "long"
},
"delete": {
"type": "long"
},
"getmore": {
"type": "long"
},
"command": {
"type": "long"
}
}
},
"opcounters_replicated": {
"properties": {
"command": {
"type": "long"
},
"insert": {
"type": "long"
},
"query": {
"type": "long"
},
"update": {
"type": "long"
},
"delete": {
"type": "long"
},
"getmore": {
"type": "long"
}
}
},
"memory": {
"properties": {
"bits": {
"type": "long"
},
"resident": {
"properties": {
"mb": {
"type": "long"
}
}
},
"virtual": {
"properties": {
"mb": {
"type": "long"
}
}
},
"mapped": {
"properties": {
"mb": {
"type": "long"
}
}
},
"mapped_with_journal": {
"properties": {
"mb": {
"type": "long"
}
}
}
}
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"network": {
"properties": {
"in": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"requests": {
"type": "long"
}
}
},
"journaling": {
"properties": {
"journaled": {
"properties": {
"mb": {
"type": "long"
}
}
},
"write_to_data_files": {
"properties": {
"mb": {
"type": "long"
}
}
},
"compression": {
"type": "long"
},
"commits_in_write_lock": {
"type": "long"
},
"early_commits": {
"type": "long"
},
"times": {
"properties": {
"write_to_data_files": {
"properties": {
"ms": {
"type": "long"
}
}
},
"remap_private_view": {
"properties": {
"ms": {
"type": "long"
}
}
},
"commits": {
"properties": {
"ms": {
"type": "long"
}
}
},
"commits_in_write_lock": {
"properties": {
"ms": {
"type": "long"
}
}
},
"dt": {
"properties": {
"ms": {
"type": "long"
}
}
},
"prep_log_buffer": {
"properties": {
"ms": {
"type": "long"
}
}
},
"write_to_journal": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"commits": {
"type": "long"
}
}
}
}
}
}
},
"munin": {
"properties": {}
},
"redis": {
"properties": {
"info": {
"properties": {
"server": {
"properties": {
"version": {
"ignore_above": 1024,
"type": "keyword"
},
"gcc_version": {
"type": "keyword",
"ignore_above": 1024
},
"process_id": {
"type": "long"
},
"lru_clock": {
"type": "long"
},
"git_dirty": {
"type": "keyword",
"ignore_above": 1024
},
"run_id": {
"ignore_above": 1024,
"type": "keyword"
},
"uptime": {
"type": "long"
},
"config_file": {
"type": "keyword",
"ignore_above": 1024
},
"git_sha1": {
"type": "keyword",
"ignore_above": 1024
},
"build_id": {
"type": "keyword",
"ignore_above": 1024
},
"arch_bits": {
"type": "keyword",
"ignore_above": 1024
},
"mode": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"multiplexing_api": {
"type": "keyword",
"ignore_above": 1024
},
"tcp_port": {
"type": "long"
},
"hz": {
"type": "long"
}
}
},
"stats": {
"properties": {
"net": {
"properties": {
"input": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"output": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"pubsub": {
"properties": {
"channels": {
"type": "long"
},
"patterns": {
"type": "long"
}
}
},
"instantaneous": {
"properties": {
"ops_per_sec": {
"type": "long"
},
"input_kbps": {
"type": "scaled_float",
"scaling_factor": 1000
},
"output_kbps": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"sync": {
"properties": {
"full": {
"type": "long"
},
"partial": {
"properties": {
"ok": {
"type": "long"
},
"err": {
"type": "long"
}
}
}
}
},
"keys": {
"properties": {
"expired": {
"type": "long"
},
"evicted": {
"type": "long"
}
}
},
"keyspace": {
"properties": {
"hits": {
"type": "long"
},
"misses": {
"type": "long"
}
}
},
"latest_fork_usec": {
"type": "long"
},
"migrate_cached_sockets": {
"type": "long"
},
"connections": {
"properties": {
"received": {
"type": "long"
},
"rejected": {
"type": "long"
}
}
},
"commands_processed": {
"type": "long"
}
}
},
"clients": {
"properties": {
"connected": {
"type": "long"
},
"longest_output_list": {
"type": "long"
},
"biggest_input_buf": {
"type": "long"
},
"blocked": {
"type": "long"
}
}
},
"cluster": {
"properties": {
"enabled": {
"type": "boolean"
}
}
},
"cpu": {
"properties": {
"used": {
"properties": {
"sys": {
"type": "scaled_float",
"scaling_factor": 1000
},
"sys_children": {
"type": "scaled_float",
"scaling_factor": 1000
},
"user": {
"type": "scaled_float",
"scaling_factor": 1000
},
"user_children": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"memory": {
"properties": {
"used": {
"properties": {
"value": {
"type": "long"
},
"rss": {
"type": "long"
},
"peak": {
"type": "long"
},
"lua": {
"type": "long"
}
}
},
"allocator": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"persistence": {
"properties": {
"loading": {
"type": "boolean"
},
"rdb": {
"properties": {
"last_save": {
"properties": {
"changes_since": {
"type": "long"
},
"time": {
"type": "long"
}
}
},
"bgsave": {
"properties": {
"in_progress": {
"type": "boolean"
},
"last_status": {
"type": "keyword",
"ignore_above": 1024
},
"last_time": {
"properties": {
"sec": {
"type": "long"
}
}
},
"current_time": {
"properties": {
"sec": {
"type": "long"
}
}
}
}
}
}
},
"aof": {
"properties": {
"rewrite": {
"properties": {
"current_time": {
"properties": {
"sec": {
"type": "long"
}
}
},
"in_progress": {
"type": "boolean"
},
"scheduled": {
"type": "boolean"
},
"last_time": {
"properties": {
"sec": {
"type": "long"
}
}
}
}
},
"bgrewrite": {
"properties": {
"last_status": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"write": {
"properties": {
"last_status": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"enabled": {
"type": "boolean"
}
}
}
}
},
"replication": {
"properties": {
"role": {
"type": "keyword",
"ignore_above": 1024
},
"connected_slaves": {
"type": "long"
},
"master_offset": {
"type": "long"
},
"backlog": {
"properties": {
"size": {
"type": "long"
},
"first_byte_offset": {
"type": "long"
},
"histlen": {
"type": "long"
},
"active": {
"type": "long"
}
}
}
}
}
}
},
"keyspace": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"avg_ttl": {
"type": "long"
},
"keys": {
"type": "long"
},
"expires": {
"type": "long"
}
}
}
}
},
"uwsgi": {
"properties": {
"status": {
"properties": {
"core": {
"properties": {
"id": {
"type": "long"
},
"worker_pid": {
"type": "long"
},
"requests": {
"properties": {
"routed": {
"type": "long"
},
"offloaded": {
"type": "long"
},
"total": {
"type": "long"
},
"static": {
"type": "long"
}
}
},
"write_errors": {
"type": "long"
},
"read_errors": {
"type": "long"
}
}
},
"total": {
"properties": {
"read_errors": {
"type": "long"
},
"pid": {
"type": "long"
},
"requests": {
"type": "long"
},
"exceptions": {
"type": "long"
},
"write_errors": {
"type": "long"
}
}
},
"worker": {
"properties": {
"pid": {
"type": "long"
},
"accepting": {
"type": "long"
},
"signal_queue": {
"type": "long"
},
"running_time": {
"type": "long"
},
"respawn_count": {
"type": "long"
},
"id": {
"type": "long"
},
"signals": {
"type": "long"
},
"tx": {
"type": "long"
},
"exceptions": {
"type": "long"
},
"rss": {
"type": "keyword",
"ignore_above": 1024
},
"vsz": {
"type": "long"
},
"requests": {
"type": "long"
},
"delta_requests": {
"type": "long"
},
"harakiri_count": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"avg_rt": {
"type": "long"
}
}
}
}
}
}
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"aerospike": {
"properties": {
"namespace": {
"properties": {
"hwm_breached": {
"type": "boolean"
},
"memory": {
"properties": {
"free": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"used": {
"properties": {
"index": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"sindex": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"data": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"objects": {
"properties": {
"master": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"stop_writes": {
"type": "boolean"
},
"client": {
"properties": {
"read": {
"properties": {
"error": {
"type": "long"
},
"not_found": {
"type": "long"
},
"success": {
"type": "long"
},
"timeout": {
"type": "long"
}
}
},
"write": {
"properties": {
"error": {
"type": "long"
},
"success": {
"type": "long"
},
"timeout": {
"type": "long"
}
}
},
"delete": {
"properties": {
"not_found": {
"type": "long"
},
"success": {
"type": "long"
},
"timeout": {
"type": "long"
},
"error": {
"type": "long"
}
}
}
}
},
"device": {
"properties": {
"available": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"couchbase": {
"properties": {
"bucket": {
"properties": {
"memory": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"quota": {
"properties": {
"ram": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"use": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"ops_per_sec": {
"type": "long"
},
"item_count": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"data": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"disk": {
"properties": {
"fetches": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"cluster": {
"properties": {
"hdd": {
"properties": {
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"quota": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"by_data": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"max_bucket_count": {
"type": "long"
},
"quota": {
"properties": {
"index_memory": {
"properties": {
"mb": {
"type": "long"
}
}
},
"memory": {
"properties": {
"mb": {
"type": "long"
}
}
}
}
},
"ram": {
"properties": {
"quota": {
"properties": {
"total": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"per_node": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"used": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"per_node": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"by_data": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"node": {
"properties": {
"ep_bg_fetched": {
"type": "long"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"ops": {
"type": "long"
},
"uptime": {
"properties": {
"sec": {
"type": "long"
}
}
},
"mcd_memory": {
"properties": {
"reserved": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"allocated": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"swap": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"cmd_get": {
"type": "long"
},
"couch": {
"properties": {
"spatial": {
"properties": {
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"disk_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"views": {
"properties": {
"disk_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"docs": {
"properties": {
"disk_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"cpu_utilization_rate": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"current_items": {
"properties": {
"value": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"get_hits": {
"type": "long"
},
"vb_replica_curr_items": {
"type": "long"
}
}
}
}
},
"golang": {
"properties": {
"expvar": {
"properties": {
"cmdline": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"heap": {
"properties": {
"cmdline": {
"type": "keyword",
"ignore_above": 1024
},
"gc": {
"properties": {
"total_pause": {
"properties": {
"ns": {
"type": "long"
}
}
},
"total_count": {
"type": "long"
},
"next_gc_limit": {
"type": "long"
},
"cpu_fraction": {
"type": "long"
},
"pause": {
"properties": {
"count": {
"type": "long"
},
"sum": {
"properties": {
"ns": {
"type": "long"
}
}
},
"max": {
"properties": {
"ns": {
"type": "long"
}
}
},
"avg": {
"properties": {
"ns": {
"type": "long"
}
}
}
}
}
}
},
"system": {
"properties": {
"obtained": {
"type": "long"
},
"stack": {
"type": "long"
},
"released": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"allocations": {
"properties": {
"active": {
"type": "long"
},
"mallocs": {
"type": "long"
},
"frees": {
"type": "long"
},
"objects": {
"type": "long"
},
"total": {
"type": "long"
},
"allocated": {
"type": "long"
},
"idle": {
"type": "long"
}
}
}
}
}
}
},
"graphite": {
"properties": {
"server": {
"properties": {
"example": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"zookeeper": {
"properties": {
"mntr": {
"properties": {
"max_file_descriptor_count": {
"type": "long"
},
"open_file_descriptor_count": {
"type": "long"
},
"znode_count": {
"type": "long"
},
"pending_syncs": {
"type": "long"
},
"server_state": {
"type": "keyword",
"ignore_above": 1024
},
"synced_followers": {
"type": "long"
},
"version": {
"ignore_above": 1024,
"type": "keyword"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"approximate_data_size": {
"type": "long"
},
"latency": {
"properties": {
"max": {
"type": "long"
},
"min": {
"type": "long"
},
"avg": {
"type": "long"
}
}
},
"outstanding_requests": {
"type": "long"
},
"ephemerals_count": {
"type": "long"
},
"watch_count": {
"type": "long"
},
"followers": {
"type": "long"
},
"num_alive_connections": {
"type": "long"
},
"packets": {
"properties": {
"received": {
"type": "long"
},
"sent": {
"type": "long"
}
}
}
}
}
}
},
"beat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"ignore_above": 1024,
"type": "keyword"
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"logstash": {
"properties": {
"node": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"jvm": {
"properties": {
"version": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
}
}
},
"stats": {
"properties": {
"events": {
"properties": {
"in": {
"type": "long"
},
"out": {
"type": "long"
},
"filtered": {
"type": "long"
}
}
}
}
}
}
}
}
},
"prometheus": {
"properties": {
"stats": {
"properties": {
"notifications": {
"properties": {
"queue_length": {
"type": "long"
},
"dropped": {
"type": "long"
}
}
},
"processes": {
"properties": {
"open_fds": {
"type": "long"
}
}
},
"storage": {
"properties": {
"chunks_to_persist": {
"type": "long"
}
}
}
}
}
}
},
"system": {
"properties": {
"cpu": {
"properties": {
"cores": {
"type": "long"
},
"system": {
"properties": {
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"nice": {
"properties": {
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"idle": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"iowait": {
"properties": {
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"steal": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"total": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"value": {
"type": "long"
}
}
},
"user": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"irq": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"softirq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
}
}
},
"diskio": {
"properties": {
"serial_number": {
"type": "keyword",
"ignore_above": 1024
},
"read": {
"properties": {
"count": {
"type": "long"
},
"bytes": {
"type": "long"
},
"time": {
"type": "long"
}
}
},
"write": {
"properties": {
"count": {
"type": "long"
},
"bytes": {
"type": "long"
},
"time": {
"type": "long"
}
}
},
"io": {
"properties": {
"time": {
"type": "long"
}
}
},
"iostat": {
"properties": {
"read": {
"properties": {
"request": {
"properties": {
"merges_per_sec": {
"type": "float"
},
"per_sec": {
"type": "float"
}
}
},
"per_sec": {
"properties": {
"bytes": {
"type": "float"
}
}
}
}
},
"write": {
"properties": {
"request": {
"properties": {
"merges_per_sec": {
"type": "float"
},
"per_sec": {
"type": "float"
}
}
},
"per_sec": {
"properties": {
"bytes": {
"type": "float"
}
}
}
}
},
"request": {
"properties": {
"avg_size": {
"type": "float"
}
}
},
"queue": {
"properties": {
"avg_size": {
"type": "float"
}
}
},
"await": {
"type": "float"
},
"service_time": {
"type": "float"
},
"busy": {
"type": "float"
}
}
},
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"memory": {
"properties": {
"hugepages": {
"properties": {
"surplus": {
"type": "long"
},
"default_size": {
"type": "long"
},
"total": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "long"
}
}
},
"free": {
"type": "long"
},
"reserved": {
"type": "long"
}
}
},
"total": {
"type": "long"
},
"used": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"bytes": {
"type": "long"
}
}
},
"free": {
"type": "long"
},
"actual": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"type": "long"
}
}
},
"swap": {
"properties": {
"total": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"type": "long"
}
}
}
}
},
"network": {
"properties": {
"in": {
"properties": {
"packets": {
"type": "long"
},
"errors": {
"type": "long"
},
"dropped": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"out": {
"properties": {
"bytes": {
"type": "long"
},
"packets": {
"type": "long"
},
"errors": {
"type": "long"
},
"dropped": {
"type": "long"
}
}
}
}
},
"process": {
"properties": {
"env": {
"type": "object"
},
"memory": {
"properties": {
"size": {
"type": "long"
},
"rss": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"share": {
"type": "long"
}
}
},
"fd": {
"properties": {
"open": {
"type": "long"
},
"limit": {
"properties": {
"soft": {
"type": "long"
},
"hard": {
"type": "long"
}
}
}
}
},
"pid": {
"type": "long"
},
"ppid": {
"type": "long"
},
"username": {
"type": "keyword",
"ignore_above": 1024
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"pgid": {
"type": "long"
},
"cwd": {
"type": "keyword",
"ignore_above": 1024
},
"cpu": {
"properties": {
"user": {
"properties": {
"ticks": {
"type": "long"
}
}
},
"total": {
"properties": {
"value": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"system": {
"properties": {
"ticks": {
"type": "long"
}
}
},
"start_time": {
"type": "date"
}
}
},
"cgroup": {
"properties": {
"id": {
"ignore_above": 1024,
"type": "keyword"
},
"path": {
"type": "keyword",
"ignore_above": 1024
},
"cpu": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"type": "keyword",
"ignore_above": 1024
},
"cfs": {
"properties": {
"period": {
"properties": {
"us": {
"type": "long"
}
}
},
"quota": {
"properties": {
"us": {
"type": "long"
}
}
},
"shares": {
"type": "long"
}
}
},
"rt": {
"properties": {
"period": {
"properties": {
"us": {
"type": "long"
}
}
},
"runtime": {
"properties": {
"us": {
"type": "long"
}
}
}
}
},
"stats": {
"properties": {
"periods": {
"type": "long"
},
"throttled": {
"properties": {
"periods": {
"type": "long"
},
"ns": {
"type": "long"
}
}
}
}
}
}
},
"cpuacct": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"properties": {
"ns": {
"type": "long"
}
}
},
"stats": {
"properties": {
"system": {
"properties": {
"ns": {
"type": "long"
}
}
},
"user": {
"properties": {
"ns": {
"type": "long"
}
}
}
}
},
"percpu": {
"type": "object"
}
}
},
"memory": {
"properties": {
"path": {
"type": "keyword",
"ignore_above": 1024
},
"mem": {
"properties": {
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
},
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"memsw": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
},
"kmem": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
},
"kmem_tcp": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
},
"stats": {
"properties": {
"active_file": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"page_faults": {
"type": "long"
},
"swap": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"active_anon": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"hierarchical_memory_limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pages_in": {
"type": "long"
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inactive_anon": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"mapped_file": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"major_page_faults": {
"type": "long"
},
"rss_huge": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"cache": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"hierarchical_memsw_limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inactive_file": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pages_out": {
"type": "long"
},
"unevictable": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"blkio": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"properties": {
"bytes": {
"type": "long"
},
"ios": {
"type": "long"
}
}
}
}
}
}
},
"summary": {
"properties": {
"stopped": {
"type": "long"
},
"zombie": {
"type": "long"
},
"unknown": {
"type": "long"
},
"total": {
"type": "long"
},
"running": {
"type": "long"
},
"idle": {
"type": "long"
},
"sleeping": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"cmdline": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"uptime": {
"properties": {
"duration": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"core": {
"properties": {
"user": {
"properties": {
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"system": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
},
"nice": {
"properties": {
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"steal": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"idle": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
},
"iowait": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"irq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"softirq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
}
}
},
"filesystem": {
"properties": {
"files": {
"type": "long"
},
"free": {
"type": "long"
},
"total": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"available": {
"type": "long"
},
"device_name": {
"type": "keyword",
"ignore_above": 1024
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"mount_point": {
"type": "keyword",
"ignore_above": 1024
},
"free_files": {
"type": "long"
}
}
},
"fsstat": {
"properties": {
"total_size": {
"properties": {
"free": {
"type": "long"
},
"used": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"count": {
"type": "long"
},
"total_files": {
"type": "long"
}
}
},
"load": {
"properties": {
"1": {
"type": "scaled_float",
"scaling_factor": 100
},
"5": {
"type": "scaled_float",
"scaling_factor": 100
},
"15": {
"type": "scaled_float",
"scaling_factor": 100
},
"norm": {
"properties": {
"1": {
"scaling_factor": 100,
"type": "scaled_float"
},
"5": {
"type": "scaled_float",
"scaling_factor": 100
},
"15": {
"type": "scaled_float",
"scaling_factor": 100
}
}
},
"cores": {
"type": "long"
}
}
},
"raid": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"activity_state": {
"type": "keyword",
"ignore_above": 1024
},
"disks": {
"properties": {
"active": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"blocks": {
"properties": {
"total": {
"type": "long"
},
"synced": {
"type": "long"
}
}
}
}
},
"socket": {
"properties": {
"direction": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"ignore_above": 1024,
"type": "keyword"
},
"local": {
"properties": {
"ip": {
"type": "ip"
},
"port": {
"type": "long"
}
}
},
"remote": {
"properties": {
"ip": {
"type": "ip"
},
"port": {
"type": "long"
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"etld_plus_one": {
"type": "keyword",
"ignore_above": 1024
},
"host_error": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"process": {
"properties": {
"cmdline": {
"type": "keyword",
"ignore_above": 1024
},
"exe": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"command": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"user": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "long"
}
}
}
}
}
}
},
"error": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"http": {
"properties": {
"server": {
"properties": {}
},
"request": {
"properties": {
"header": {
"type": "object"
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"body": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"response": {
"properties": {
"header": {
"type": "object"
},
"code": {
"ignore_above": 1024,
"type": "keyword"
},
"phrase": {
"type": "keyword",
"ignore_above": 1024
},
"body": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"json": {
"properties": {}
}
}
},
"memcached": {
"properties": {
"stats": {
"properties": {
"items": {
"properties": {
"current": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"evictions": {
"type": "long"
},
"uptime": {
"properties": {
"sec": {
"type": "long"
}
}
},
"threads": {
"type": "long"
},
"connections": {
"properties": {
"current": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"cmd": {
"properties": {
"get": {
"type": "long"
},
"set": {
"type": "long"
}
}
},
"pid": {
"type": "long"
},
"get": {
"properties": {
"hits": {
"type": "long"
},
"misses": {
"type": "long"
}
}
},
"read": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"written": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"mysql": {
"properties": {
"status": {
"properties": {
"aborted": {
"properties": {
"clients": {
"type": "long"
},
"connects": {
"type": "long"
}
}
},
"bytes": {
"properties": {
"received": {
"type": "long"
},
"sent": {
"type": "long"
}
}
},
"connections": {
"type": "long"
},
"delayed": {
"properties": {
"errors": {
"type": "long"
},
"insert_threads": {
"type": "long"
},
"writes": {
"type": "long"
}
}
},
"flush_commands": {
"type": "long"
},
"max_used_connections": {
"type": "long"
},
"opened_tables": {
"type": "long"
},
"command": {
"properties": {
"delete": {
"type": "long"
},
"insert": {
"type": "long"
},
"select": {
"type": "long"
},
"update": {
"type": "long"
}
}
},
"binlog": {
"properties": {
"cache": {
"properties": {
"disk_use": {
"type": "long"
},
"use": {
"type": "long"
}
}
}
}
},
"threads": {
"properties": {
"created": {
"type": "long"
},
"connected": {
"type": "long"
},
"running": {
"type": "long"
},
"cached": {
"type": "long"
}
}
},
"created": {
"properties": {
"tmp": {
"properties": {
"tables": {
"type": "long"
},
"disk_tables": {
"type": "long"
},
"files": {
"type": "long"
}
}
}
}
},
"open": {
"properties": {
"files": {
"type": "long"
},
"streams": {
"type": "long"
},
"tables": {
"type": "long"
}
}
}
}
}
}
},
"postgresql": {
"properties": {
"activity": {
"properties": {
"backend_start": {
"type": "date"
},
"query_start": {
"type": "date"
},
"application_name": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"user": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"client": {
"properties": {
"address": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
}
}
},
"transaction_start": {
"type": "date"
},
"state_change": {
"type": "date"
},
"waiting": {
"type": "boolean"
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"properties": {
"oid": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"query": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"bgwriter": {
"properties": {
"buffers": {
"properties": {
"allocated": {
"type": "long"
},
"checkpoints": {
"type": "long"
},
"clean": {
"type": "long"
},
"clean_full": {
"type": "long"
},
"backend": {
"type": "long"
},
"backend_fsync": {
"type": "long"
}
}
},
"stats_reset": {
"type": "date"
},
"checkpoints": {
"properties": {
"scheduled": {
"type": "long"
},
"requested": {
"type": "long"
},
"times": {
"properties": {
"write": {
"properties": {
"ms": {
"type": "float"
}
}
},
"sync": {
"properties": {
"ms": {
"type": "float"
}
}
}
}
}
}
}
}
},
"database": {
"properties": {
"oid": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"number_of_backends": {
"type": "long"
},
"transactions": {
"properties": {
"commit": {
"type": "long"
},
"rollback": {
"type": "long"
}
}
},
"deadlocks": {
"type": "long"
},
"stats_reset": {
"type": "date"
},
"blocks": {
"properties": {
"time": {
"properties": {
"read": {
"properties": {
"ms": {
"type": "long"
}
}
},
"write": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"read": {
"type": "long"
},
"hit": {
"type": "long"
}
}
},
"rows": {
"properties": {
"returned": {
"type": "long"
},
"fetched": {
"type": "long"
},
"inserted": {
"type": "long"
},
"updated": {
"type": "long"
},
"deleted": {
"type": "long"
}
}
},
"conflicts": {
"type": "long"
},
"temporary": {
"properties": {
"files": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"fields": {
"type": "object"
},
"kubernetes": {
"properties": {
"container": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"status": {
"properties": {
"phase": {
"ignore_above": 1024,
"type": "keyword"
},
"ready": {
"type": "boolean"
},
"restarts": {
"type": "long"
}
}
},
"cpu": {
"properties": {
"request": {
"properties": {
"nanocores": {
"type": "long"
}
}
},
"usage": {
"properties": {
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"core": {
"properties": {
"ns": {
"type": "long"
}
}
},
"nanocores": {
"type": "long"
}
}
},
"limit": {
"properties": {
"nanocores": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"request": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"workingset": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pagefaults": {
"type": "long"
},
"majorpagefaults": {
"type": "long"
}
}
},
"start_time": {
"type": "date"
},
"logs": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"count": {
"type": "long"
},
"free": {
"type": "long"
},
"used": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"rootfs": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"used": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"deployment": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"paused": {
"type": "boolean"
},
"replicas": {
"properties": {
"desired": {
"type": "long"
},
"available": {
"type": "long"
},
"unavailable": {
"type": "long"
},
"updated": {
"type": "long"
}
}
}
}
},
"replicaset": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"replicas": {
"properties": {
"labeled": {
"type": "long"
},
"available": {
"type": "long"
},
"desired": {
"type": "long"
},
"ready": {
"type": "long"
},
"observed": {
"type": "long"
}
}
}
}
},
"statefulset": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"created": {
"type": "long"
},
"replicas": {
"properties": {
"observed": {
"type": "long"
},
"desired": {
"type": "long"
}
}
},
"generation": {
"properties": {
"observed": {
"type": "long"
},
"desired": {
"type": "long"
}
}
}
}
},
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
},
"node": {
"properties": {
"runtime": {
"properties": {
"imagefs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"cpu": {
"properties": {
"usage": {
"properties": {
"core": {
"properties": {
"ns": {
"type": "long"
}
}
},
"nanocores": {
"type": "long"
}
}
},
"allocatable": {
"properties": {
"cores": {
"type": "float"
}
}
},
"capacity": {
"properties": {
"cores": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"majorpagefaults": {
"type": "long"
},
"allocatable": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"usage": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"workingset": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pagefaults": {
"type": "long"
}
}
},
"network": {
"properties": {
"rx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"tx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
}
}
},
"fs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"free": {
"type": "long"
},
"used": {
"type": "long"
},
"count": {
"type": "long"
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"start_time": {
"type": "date"
},
"status": {
"properties": {
"ready": {
"type": "keyword",
"ignore_above": 1024
},
"unschedulable": {
"type": "boolean"
}
}
},
"pod": {
"properties": {
"allocatable": {
"properties": {
"total": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"total": {
"type": "long"
}
}
}
}
}
}
},
"event": {
"properties": {
"count": {
"type": "long"
},
"message": {
"type": "keyword",
"ignore_above": 1024
},
"reason": {
"type": "keyword",
"ignore_above": 1024
},
"type": {
"ignore_above": 1024,
"type": "keyword"
},
"metadata": {
"properties": {
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"resource_version": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "keyword",
"ignore_above": 1024
},
"self_link": {
"type": "keyword",
"ignore_above": 1024
},
"timestamp": {
"properties": {
"created": {
"type": "date"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"involved_object": {
"properties": {
"api_version": {
"type": "keyword",
"ignore_above": 1024
},
"kind": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"resource_version": {
"ignore_above": 1024,
"type": "keyword"
},
"uid": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"system": {
"properties": {
"container": {
"ignore_above": 1024,
"type": "keyword"
},
"start_time": {
"type": "date"
},
"cpu": {
"properties": {
"usage": {
"properties": {
"core": {
"properties": {
"ns": {
"type": "long"
}
}
},
"nanocores": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"workingset": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pagefaults": {
"type": "long"
},
"majorpagefaults": {
"type": "long"
},
"usage": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"volume": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"fs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"used": {
"type": "long"
},
"free": {
"type": "long"
},
"count": {
"type": "long"
}
}
}
}
}
}
},
"pod": {
"properties": {
"start_time": {
"type": "date"
},
"network": {
"properties": {
"rx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"tx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
}
}
},
"cpu": {
"properties": {
"usage": {
"properties": {
"nanocores": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
}
}
},
"memory": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
}
}
},
"ip": {
"type": "ip"
},
"host_ip": {
"type": "ip"
},
"status": {
"properties": {
"phase": {
"type": "keyword",
"ignore_above": 1024
},
"ready": {
"type": "keyword",
"ignore_above": 1024
},
"scheduled": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"metricset": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"rtt": {
"type": "long"
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"jolokia": {
"properties": {}
},
"kibana": {
"properties": {
"status": {
"properties": {
"status": {
"properties": {
"overall": {
"properties": {
"state": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"metrics": {
"properties": {
"concurrent_connections": {
"type": "long"
},
"requests": {
"properties": {
"disconnects": {
"type": "long"
},
"total": {
"type": "long"
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uuid": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"properties": {
"number": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
},
"php_fpm": {
"properties": {
"pool": {
"properties": {
"connections": {
"properties": {
"accepted": {
"type": "long"
},
"queued": {
"type": "long"
},
"max_listen_queue": {
"type": "long"
},
"listen_queue_len": {
"type": "long"
}
}
},
"processes": {
"properties": {
"idle": {
"type": "long"
},
"active": {
"type": "long"
},
"total": {
"type": "long"
},
"max_active": {
"type": "long"
},
"max_children_reached": {
"type": "long"
}
}
},
"slow_requests": {
"type": "long"
},
"start_since": {
"type": "long"
},
"start_time": {
"type": "date"
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"process_manager": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"architecture": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"properties": {
"platform": {
"ignore_above": 1024,
"type": "keyword"
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"apache": {
"properties": {
"status": {
"properties": {
"total_accesses": {
"type": "long"
},
"total_kbytes": {
"type": "long"
},
"load": {
"properties": {
"1": {
"type": "scaled_float",
"scaling_factor": 100
},
"5": {
"type": "scaled_float",
"scaling_factor": 100
},
"15": {
"scaling_factor": 100,
"type": "scaled_float"
}
}
},
"scoreboard": {
"properties": {
"closing_connection": {
"type": "long"
},
"gracefully_finishing": {
"type": "long"
},
"idle_cleanup": {
"type": "long"
},
"starting_up": {
"type": "long"
},
"reading_request": {
"type": "long"
},
"sending_reply": {
"type": "long"
},
"keepalive": {
"type": "long"
},
"dns_lookup": {
"type": "long"
},
"open_slot": {
"type": "long"
},
"logging": {
"type": "long"
},
"waiting_for_connection": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"bytes_per_sec": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"bytes_per_request": {
"type": "scaled_float",
"scaling_factor": 1000
},
"workers": {
"properties": {
"idle": {
"type": "long"
},
"busy": {
"type": "long"
}
}
},
"uptime": {
"properties": {
"server_uptime": {
"type": "long"
},
"uptime": {
"type": "long"
}
}
},
"cpu": {
"properties": {
"load": {
"type": "scaled_float",
"scaling_factor": 1000
},
"user": {
"type": "scaled_float",
"scaling_factor": 1000
},
"system": {
"type": "scaled_float",
"scaling_factor": 1000
},
"children_user": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"children_system": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"connections": {
"properties": {
"total": {
"type": "long"
},
"async": {
"properties": {
"writing": {
"type": "long"
},
"keep_alive": {
"type": "long"
},
"closing": {
"type": "long"
}
}
}
}
},
"requests_per_sec": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"rabbitmq": {
"properties": {
"connection": {
"properties": {
"vhost": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"type": "keyword",
"ignore_above": 1024
},
"channels": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"packet_count": {
"properties": {
"received": {
"type": "long"
},
"pending": {
"type": "long"
},
"sent": {
"type": "long"
}
}
},
"port": {
"type": "long"
},
"octet_count": {
"properties": {
"sent": {
"type": "long"
},
"received": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"ignore_above": 1024,
"type": "keyword"
},
"channel_max": {
"type": "long"
},
"frame_max": {
"type": "long"
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"peer": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
}
}
}
}
},
"node": {
"properties": {
"fd": {
"properties": {
"total": {
"type": "long"
},
"used": {
"type": "long"
}
}
},
"io": {
"properties": {
"file_handle": {
"properties": {
"open_attempt": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
}
}
},
"read": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"bytes": {
"type": "long"
},
"count": {
"type": "long"
}
}
},
"reopen": {
"properties": {
"count": {
"type": "long"
}
}
},
"seek": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"sync": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"write": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"bytes": {
"type": "long"
},
"count": {
"type": "long"
}
}
}
}
},
"queue": {
"properties": {
"index": {
"properties": {
"journal_write": {
"properties": {
"count": {
"type": "long"
}
}
},
"read": {
"properties": {
"count": {
"type": "long"
}
}
},
"write": {
"properties": {
"count": {
"type": "long"
}
}
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"uptime": {
"type": "long"
},
"mnesia": {
"properties": {
"disk": {
"properties": {
"tx": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"ram": {
"properties": {
"tx": {
"properties": {
"count": {
"type": "long"
}
}
}
}
}
}
},
"msg": {
"properties": {
"store_read": {
"properties": {
"count": {
"type": "long"
}
}
},
"store_write": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"run": {
"properties": {
"queue": {
"type": "long"
}
}
},
"disk": {
"properties": {
"free": {
"properties": {
"bytes": {
"type": "long"
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"gc": {
"properties": {
"num": {
"properties": {
"count": {
"type": "long"
}
}
},
"reclaimed": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"mem": {
"properties": {
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"proc": {
"properties": {
"total": {
"type": "long"
},
"used": {
"type": "long"
}
}
},
"processors": {
"type": "long"
},
"socket": {
"properties": {
"total": {
"type": "long"
},
"used": {
"type": "long"
}
}
}
}
},
"queue": {
"properties": {
"vhost": {
"type": "keyword",
"ignore_above": 1024
},
"exclusive": {
"type": "boolean"
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"arguments": {
"properties": {
"max_priority": {
"type": "long"
}
}
},
"consumers": {
"properties": {
"count": {
"type": "long"
},
"utilisation": {
"properties": {
"pct": {
"type": "long"
}
}
}
}
},
"messages": {
"properties": {
"persistent": {
"properties": {
"count": {
"type": "long"
}
}
},
"total": {
"properties": {
"count": {
"type": "long"
}
}
},
"ready": {
"properties": {
"count": {
"type": "long"
}
}
},
"unacknowledged": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"disk": {
"properties": {
"reads": {
"properties": {
"count": {
"type": "long"
}
}
},
"writes": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"auto_delete": {
"type": "boolean"
},
"node": {
"type": "keyword",
"ignore_above": 1024
},
"memory": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"durable": {
"type": "boolean"
}
}
}
}
},
"meta": {
"properties": {
"cloud": {
"properties": {
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"type": "keyword",
"ignore_above": 1024
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
},
"provider": {
"ignore_above": 1024,
"type": "keyword"
},
"instance_id": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"docker": {
"properties": {
"healthcheck": {
"properties": {
"failingstreak": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"event": {
"properties": {
"output": {
"type": "keyword",
"ignore_above": 1024
},
"exit_code": {
"type": "long"
},
"end_date": {
"type": "date"
},
"start_date": {
"type": "date"
}
}
}
}
},
"image": {
"properties": {
"created": {
"type": "date"
},
"size": {
"properties": {
"virtual": {
"type": "long"
},
"regular": {
"type": "long"
}
}
},
"labels": {
"type": "object"
},
"id": {
"properties": {
"current": {
"type": "keyword",
"ignore_above": 1024
},
"parent": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"info": {
"properties": {
"containers": {
"properties": {
"paused": {
"type": "long"
},
"running": {
"type": "long"
},
"stopped": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"images": {
"type": "long"
}
}
},
"memory": {
"properties": {
"fail": {
"properties": {
"count": {
"scaling_factor": 1000,
"type": "scaled_float"
}
}
},
"limit": {
"type": "long"
},
"rss": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"total": {
"type": "long"
}
}
},
"usage": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"total": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"network": {
"properties": {
"in": {
"properties": {
"bytes": {
"type": "long"
},
"dropped": {
"type": "scaled_float",
"scaling_factor": 1000
},
"errors": {
"type": "long"
},
"packets": {
"type": "long"
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
},
"dropped": {
"type": "scaled_float",
"scaling_factor": 1000
},
"errors": {
"type": "long"
},
"packets": {
"type": "long"
}
}
},
"inbound": {
"properties": {
"packets": {
"type": "long"
},
"bytes": {
"type": "long"
},
"dropped": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"outbound": {
"properties": {
"packets": {
"type": "long"
},
"bytes": {
"type": "long"
},
"dropped": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"interface": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"container": {
"properties": {
"image": {
"type": "keyword",
"ignore_above": 1024
},
"created": {
"type": "date"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"size": {
"properties": {
"root_fs": {
"type": "long"
},
"rw": {
"type": "long"
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
},
"command": {
"ignore_above": 1024,
"type": "keyword"
},
"ip_addresses": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"cpu": {
"properties": {
"kernel": {
"properties": {
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"system": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
},
"user": {
"properties": {
"ticks": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"total": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"core": {
"properties": {
"*": {
"properties": {
"pct": {
"type": "object"
},
"ticks": {
"type": "object"
}
}
}
}
}
}
},
"diskio": {
"properties": {
"read": {
"properties": {
"ops": {
"type": "long"
},
"bytes": {
"type": "long"
},
"rate": {
"type": "long"
}
}
},
"reads": {
"type": "scaled_float",
"scaling_factor": 1000
},
"write": {
"properties": {
"ops": {
"type": "long"
},
"bytes": {
"type": "long"
},
"rate": {
"type": "long"
}
}
},
"writes": {
"type": "scaled_float",
"scaling_factor": 1000
},
"summary": {
"properties": {
"rate": {
"type": "long"
},
"ops": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
},
"total": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"elasticsearch": {
"properties": {
"node": {
"properties": {
"jvm": {
"properties": {
"version": {
"type": "keyword",
"ignore_above": 1024
},
"memory": {
"properties": {
"nonheap": {
"properties": {
"init": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"heap": {
"properties": {
"init": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"process": {
"properties": {
"mlockall": {
"type": "boolean"
}
}
},
"stats": {
"properties": {
"indices": {
"properties": {
"docs": {
"properties": {
"count": {
"type": "long"
},
"deleted": {
"type": "long"
}
}
},
"segments": {
"properties": {
"count": {
"type": "long"
},
"memory": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"store": {
"properties": {
"size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"jvm": {
"properties": {
"mem": {
"properties": {
"pools": {
"properties": {
"old": {
"properties": {
"peak": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak_max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"young": {
"properties": {
"peak": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak_max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"survivor": {
"properties": {
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak_max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"gc": {
"properties": {
"collectors": {
"properties": {
"old": {
"properties": {
"collection": {
"properties": {
"count": {
"type": "long"
},
"ms": {
"type": "long"
}
}
}
}
},
"young": {
"properties": {
"collection": {
"properties": {
"count": {
"type": "long"
},
"ms": {
"type": "long"
}
}
}
}
}
}
}
}
}
}
},
"fs": {
"properties": {
"summary": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"cluster": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"kafka": {
"properties": {
"consumergroup": {
"properties": {
"error": {
"properties": {
"code": {
"type": "long"
}
}
},
"client": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"member_id": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"broker": {
"properties": {
"id": {
"type": "long"
},
"address": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"topic": {
"ignore_above": 1024,
"type": "keyword"
},
"partition": {
"type": "long"
},
"offset": {
"type": "long"
},
"meta": {
"type": "text",
"norms": false
}
}
},
"partition": {
"properties": {
"offset": {
"properties": {
"newest": {
"type": "long"
},
"oldest": {
"type": "long"
}
}
},
"partition": {
"properties": {
"error": {
"properties": {
"code": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"leader": {
"type": "long"
},
"replica": {
"type": "long"
},
"insync_replica": {
"type": "boolean"
}
}
},
"topic": {
"properties": {
"error": {
"properties": {
"code": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"broker": {
"properties": {
"id": {
"type": "long"
},
"address": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
},
"kvm": {
"properties": {
"dommemstat": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"stat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"value": {
"type": "long"
}
}
}
}
}
}
},
"nginx": {
"properties": {
"stubstatus": {
"properties": {
"dropped": {
"type": "long"
},
"requests": {
"type": "long"
},
"current": {
"type": "long"
},
"writing": {
"type": "long"
},
"accepts": {
"type": "long"
},
"active": {
"type": "long"
},
"handled": {
"type": "long"
},
"reading": {
"type": "long"
},
"waiting": {
"type": "long"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"windows": {
"properties": {
"service": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"display_name": {
"ignore_above": 1024,
"type": "keyword"
},
"start_type": {
"type": "keyword",
"ignore_above": 1024
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"exit_code": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"uptime": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
}
}
}
}
}
},
"aliases": {}
},
"filebeat-rr": {
"order": 1,
"index_patterns": [
"filebeat-rr-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "1"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.2.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"match_mapping_type": "string",
"path_match": "fields.*",
"mapping": {
"type": "keyword"
}
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"strings_as_keyword": {
"mapping": {
"ignore_above": 1024,
"type": "keyword"
},
"match_mapping_type": "string"
}
}
],
"properties": {
"meta": {
"properties": {
"cloud": {
"properties": {
"instance_id": {
"type": "keyword",
"ignore_above": 1024
},
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"type": "keyword",
"ignore_above": 1024
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
},
"provider": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"apache2": {
"properties": {
"access": {
"properties": {
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"ignore_above": 1024,
"type": "keyword"
},
"user_agent": {
"properties": {
"os_minor": {
"type": "long"
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"os_major": {
"type": "long"
},
"minor": {
"type": "long"
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"ignore_above": 1024,
"type": "keyword"
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"ignore_above": 1024,
"type": "keyword"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
}
}
},
"error": {
"properties": {
"level": {
"ignore_above": 1024,
"type": "keyword"
},
"client": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
},
"module": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"message": {
"type": "text",
"norms": false
},
"prospector": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"read_timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"icinga": {
"properties": {
"debug": {
"properties": {
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"main": {
"properties": {
"severity": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"facility": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"startup": {
"properties": {
"message": {
"type": "text",
"norms": false
},
"facility": {
"type": "keyword",
"ignore_above": 1024
},
"severity": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"logstash": {
"properties": {
"log": {
"properties": {
"log_event": {
"type": "object"
},
"message": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"ignore_above": 1024,
"type": "keyword"
},
"thread": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"plugin_name": {
"type": "keyword",
"ignore_above": 1024
},
"plugin_params_object": {
"type": "object"
},
"message": {
"type": "text",
"norms": false
},
"thread": {
"type": "text",
"norms": false
},
"event": {
"norms": false,
"type": "text"
},
"plugin_type": {
"type": "keyword",
"ignore_above": 1024
},
"took_in_millis": {
"type": "long"
},
"took_in_nanos": {
"type": "long"
},
"plugin_params": {
"type": "text",
"norms": false
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"module": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"docker": {
"properties": {
"container": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"image": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
}
}
}
}
},
"nginx": {
"properties": {
"access": {
"properties": {
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"user_agent": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"major": {
"type": "long"
},
"patch": {
"type": "keyword",
"ignore_above": 1024
},
"minor": {
"type": "long"
},
"os_minor": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"geoip": {
"properties": {
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"ignore_above": 1024,
"type": "keyword"
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"response_code": {
"type": "long"
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"error": {
"properties": {
"level": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"tid": {
"type": "long"
},
"connection_id": {
"type": "long"
},
"message": {
"type": "text",
"norms": false
}
}
}
}
},
"stream": {
"ignore_above": 1024,
"type": "keyword"
},
"fileset": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"kafka": {
"properties": {
"log": {
"properties": {
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"component": {
"type": "keyword",
"ignore_above": 1024
},
"class": {
"type": "text",
"norms": false
},
"trace": {
"properties": {
"class": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
},
"full": {
"type": "text",
"norms": false
}
}
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"offset": {
"type": "long"
},
"osquery": {
"properties": {
"result": {
"properties": {
"calendar_time": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"action": {
"type": "keyword",
"ignore_above": 1024
},
"host_identifier": {
"type": "keyword",
"ignore_above": 1024
},
"unix_time": {
"type": "long"
}
}
}
}
},
"postgresql": {
"properties": {
"log": {
"properties": {
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"database": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"type": "float"
},
"message": {
"type": "text",
"norms": false
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"query": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"traefik": {
"properties": {
"access": {
"properties": {
"user_name": {
"type": "keyword",
"ignore_above": 1024
},
"url": {
"type": "keyword",
"ignore_above": 1024
},
"body_sent": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"method": {
"ignore_above": 1024,
"type": "keyword"
},
"http_version": {
"type": "keyword",
"ignore_above": 1024
},
"user_agent": {
"properties": {
"os": {
"type": "keyword",
"ignore_above": 1024
},
"os_minor": {
"type": "long"
},
"major": {
"type": "long"
},
"minor": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"os_major": {
"type": "long"
},
"os_name": {
"type": "keyword",
"ignore_above": 1024
},
"device": {
"type": "keyword",
"ignore_above": 1024
},
"patch": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"frontend_name": {
"type": "text",
"norms": false
},
"response_code": {
"type": "long"
},
"geoip": {
"properties": {
"continent_name": {
"ignore_above": 1024,
"type": "keyword"
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"request_count": {
"type": "long"
},
"remote_ip": {
"type": "keyword",
"ignore_above": 1024
},
"referrer": {
"type": "keyword",
"ignore_above": 1024
},
"agent": {
"type": "text",
"norms": false
},
"backend_url": {
"type": "text",
"norms": false
}
}
}
}
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"error": {
"properties": {
"code": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"redis": {
"properties": {
"log": {
"properties": {
"pid": {
"type": "long"
},
"role": {
"type": "keyword",
"ignore_above": 1024
},
"level": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "text",
"norms": false
}
}
},
"slowlog": {
"properties": {
"args": {
"type": "keyword",
"ignore_above": 1024
},
"cmd": {
"type": "keyword",
"ignore_above": 1024
},
"duration": {
"properties": {
"us": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"key": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"kubernetes": {
"properties": {
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"labels": {
"type": "object"
},
"annotations": {
"type": "object"
},
"container": {
"properties": {
"image": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"beat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"system": {
"properties": {
"syslog": {
"properties": {
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"auth": {
"properties": {
"timestamp": {
"ignore_above": 1024,
"type": "keyword"
},
"pid": {
"type": "long"
},
"message": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"sudo": {
"properties": {
"user": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"type": "keyword",
"ignore_above": 1024
},
"error": {
"type": "keyword",
"ignore_above": 1024
},
"tty": {
"type": "keyword",
"ignore_above": 1024
},
"pwd": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"groupadd": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"gid": {
"type": "long"
}
}
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"program": {
"type": "keyword",
"ignore_above": 1024
},
"ssh": {
"properties": {
"event": {
"ignore_above": 1024,
"type": "keyword"
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"dropped_ip": {
"type": "ip"
},
"port": {
"type": "long"
},
"signature": {
"ignore_above": 1024,
"type": "keyword"
},
"geoip": {
"properties": {
"location": {
"type": "geo_point"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
},
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"useradd": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"uid": {
"type": "long"
},
"gid": {
"type": "long"
},
"home": {
"type": "keyword",
"ignore_above": 1024
},
"shell": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
},
"auditd": {
"properties": {
"log": {
"properties": {
"new_auid": {
"type": "keyword",
"ignore_above": 1024
},
"items": {
"ignore_above": 1024,
"type": "keyword"
},
"a0": {
"type": "keyword",
"ignore_above": 1024
},
"acct": {
"type": "keyword",
"ignore_above": 1024
},
"ppid": {
"type": "keyword",
"ignore_above": 1024
},
"record_type": {
"type": "keyword",
"ignore_above": 1024
},
"old_auid": {
"type": "keyword",
"ignore_above": 1024
},
"old_ses": {
"type": "keyword",
"ignore_above": 1024
},
"new_ses": {
"type": "keyword",
"ignore_above": 1024
},
"res": {
"type": "keyword",
"ignore_above": 1024
},
"geoip": {
"properties": {
"city_name": {
"type": "keyword",
"ignore_above": 1024
},
"region_name": {
"type": "keyword",
"ignore_above": 1024
},
"country_iso_code": {
"type": "keyword",
"ignore_above": 1024
},
"location": {
"type": "geo_point"
},
"continent_name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"sequence": {
"type": "long"
},
"pid": {
"type": "keyword",
"ignore_above": 1024
},
"item": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"mysql": {
"properties": {
"error": {
"properties": {
"message": {
"norms": false,
"type": "text"
},
"timestamp": {
"type": "keyword",
"ignore_above": 1024
},
"thread_id": {
"type": "long"
},
"level": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"slowlog": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "keyword",
"ignore_above": 1024
},
"lock_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"rows_sent": {
"type": "long"
},
"rows_examined": {
"type": "long"
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"query_time": {
"properties": {
"sec": {
"type": "float"
}
}
},
"timestamp": {
"type": "long"
},
"query": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "long"
}
}
}
}
},
"fields": {
"type": "object"
},
"source": {
"type": "keyword",
"ignore_above": 1024
}
}
}
},
"aliases": {}
},
".monitoring-alerts": {
"order": 0,
"version": 6020099,
"index_patterns": [
".monitoring-alerts-6"
],
"settings": {
"index": {
"format": "6",
"codec": "best_compression",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"dynamic": false,
"properties": {
"timestamp": {
"type": "date"
},
"update_timestamp": {
"type": "date"
},
"resolved_timestamp": {
"type": "date"
},
"prefix": {
"type": "text"
},
"message": {
"type": "text"
},
"suffix": {
"type": "text"
},
"metadata": {
"properties": {
"cluster_uuid": {
"type": "keyword"
},
"link": {
"type": "keyword"
},
"severity": {
"type": "short"
},
"type": {
"type": "keyword"
},
"version": {
"type": "keyword"
},
"watch": {
"type": "keyword"
}
}
}
}
}
},
"aliases": {}
},
"security_audit_log": {
"order": 1000,
"index_patterns": [
".security_audit_log*"
],
"settings": {},
"mappings": {
"doc": {
"_meta": {
"security-version": "6.4.2"
},
"dynamic": "strict",
"properties": {
"@timestamp": {
"type": "date",
"format": "date_time",
"doc_values": true
},
"node_name": {
"type": "keyword"
},
"node_host_name": {
"type": "keyword"
},
"node_host_address": {
"type": "keyword"
},
"layer": {
"type": "keyword"
},
"event_type": {
"type": "keyword"
},
"origin_address": {
"type": "keyword"
},
"origin_type": {
"type": "keyword"
},
"principal": {
"type": "keyword"
},
"roles": {
"type": "keyword"
},
"run_by_principal": {
"type": "keyword"
},
"run_as_principal": {
"type": "keyword"
},
"action": {
"type": "keyword"
},
"indices": {
"type": "keyword"
},
"request": {
"type": "keyword"
},
"request_body": {
"type": "keyword",
"index": false,
"doc_values": false
},
"uri": {
"type": "keyword"
},
"realm": {
"type": "keyword"
},
"run_by_realm": {
"type": "keyword"
},
"run_as_realm": {
"type": "keyword"
},
"transport_profile": {
"type": "keyword"
},
"rule": {
"type": "keyword"
}
}
}
},
"aliases": {}
},
".triggered_watches": {
"order": 2147483647,
"index_patterns": [
".triggered_watches*"
],
"settings": {
"index": {
"format": "6",
"refresh_interval": "-1",
"number_of_shards": "1",
"priority": "900",
"auto_expand_replicas": "0-1"
}
},
"mappings": {
"doc": {
"dynamic": "strict",
"properties": {
"trigger_event": {
"type": "object",
"dynamic": true,
"enabled": false,
"properties": {
"schedule": {
"type": "object",
"dynamic": true,
"properties": {
"triggered_time": {
"type": "date"
},
"scheduled_time": {
"type": "date"
}
}
}
}
},
"state": {
"type": "keyword"
}
}
}
},
"aliases": {}
},
"metricbeat-rr-stats": {
"order": 1,
"index_patterns": [
"metricbeat-rr-stats-*"
],
"settings": {
"index": {
"mapping": {
"total_fields": {
"limit": "10000"
}
},
"refresh_interval": "5s",
"number_of_routing_shards": "30",
"number_of_shards": "1",
"number_of_replicas": "0"
}
},
"mappings": {
"doc": {
"_meta": {
"version": "6.3.2"
},
"date_detection": false,
"dynamic_templates": [
{
"fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "fields.*"
}
},
{
"docker.container.labels": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "docker.container.labels.*"
}
},
{
"docker.cpu.core.*.pct": {
"mapping": {
"type": "scaled_float",
"scaling_factor": 1000
},
"match_mapping_type": "*",
"path_match": "docker.cpu.core.*.pct"
}
},
{
"docker.cpu.core.*.ticks": {
"match_mapping_type": "long",
"path_match": "docker.cpu.core.*.ticks",
"mapping": {
"type": "long"
}
}
},
{
"docker.image.labels": {
"match_mapping_type": "string",
"path_match": "docker.image.labels.*",
"mapping": {
"type": "keyword"
}
}
},
{
"system.process.env": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"path_match": "system.process.env.*"
}
},
{
"system.process.cgroup.cpuacct.percpu": {
"mapping": {
"type": "long"
},
"match_mapping_type": "long",
"path_match": "system.process.cgroup.cpuacct.percpu.*"
}
},
{
"vsphere.virtualmachine.custom_fields": {
"match_mapping_type": "string",
"path_match": "vsphere.virtualmachine.custom_fields.*",
"mapping": {
"type": "keyword"
}
}
},
{
"strings_as_keyword": {
"mapping": {
"type": "keyword",
"ignore_above": 1024
},
"match_mapping_type": "string"
}
}
],
"properties": {
"vsphere": {
"properties": {
"datastore": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"fstype": {
"type": "keyword",
"ignore_above": 1024
},
"capacity": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "long"
}
}
}
}
}
}
},
"host": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"cpu": {
"properties": {
"used": {
"properties": {
"mhz": {
"type": "long"
}
}
},
"total": {
"properties": {
"mhz": {
"type": "long"
}
}
},
"free": {
"properties": {
"mhz": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"network_names": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"virtualmachine": {
"properties": {
"network_names": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"cpu": {
"properties": {
"used": {
"properties": {
"mhz": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"free": {
"properties": {
"guest": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"used": {
"properties": {
"guest": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"host": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"total": {
"properties": {
"guest": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"custom_fields": {
"type": "object"
}
}
}
}
},
"dropwizard": {
"properties": {}
},
"elasticsearch": {
"properties": {
"cluster": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"node": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"jvm": {
"properties": {
"version": {
"type": "keyword",
"ignore_above": 1024
},
"memory": {
"properties": {
"heap": {
"properties": {
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"init": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"nonheap": {
"properties": {
"init": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"process": {
"properties": {
"mlockall": {
"type": "boolean"
}
}
},
"stats": {
"properties": {
"indices": {
"properties": {
"docs": {
"properties": {
"deleted": {
"type": "long"
},
"count": {
"type": "long"
}
}
},
"segments": {
"properties": {
"count": {
"type": "long"
},
"memory": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"store": {
"properties": {
"size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"jvm": {
"properties": {
"mem": {
"properties": {
"pools": {
"properties": {
"old": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak_max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"young": {
"properties": {
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak_max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"survivor": {
"properties": {
"peak": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"peak_max": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"gc": {
"properties": {
"collectors": {
"properties": {
"old": {
"properties": {
"collection": {
"properties": {
"count": {
"type": "long"
},
"ms": {
"type": "long"
}
}
}
}
},
"young": {
"properties": {
"collection": {
"properties": {
"count": {
"type": "long"
},
"ms": {
"type": "long"
}
}
}
}
}
}
}
}
}
}
},
"fs": {
"properties": {
"summary": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
}
}
}
}
},
"golang": {
"properties": {
"heap": {
"properties": {
"cmdline": {
"type": "keyword",
"ignore_above": 1024
},
"gc": {
"properties": {
"total_pause": {
"properties": {
"ns": {
"type": "long"
}
}
},
"total_count": {
"type": "long"
},
"next_gc_limit": {
"type": "long"
},
"cpu_fraction": {
"type": "long"
},
"pause": {
"properties": {
"max": {
"properties": {
"ns": {
"type": "long"
}
}
},
"avg": {
"properties": {
"ns": {
"type": "long"
}
}
},
"count": {
"type": "long"
},
"sum": {
"properties": {
"ns": {
"type": "long"
}
}
}
}
}
}
},
"system": {
"properties": {
"released": {
"type": "long"
},
"total": {
"type": "long"
},
"obtained": {
"type": "long"
},
"stack": {
"type": "long"
}
}
},
"allocations": {
"properties": {
"objects": {
"type": "long"
},
"total": {
"type": "long"
},
"allocated": {
"type": "long"
},
"idle": {
"type": "long"
},
"active": {
"type": "long"
},
"mallocs": {
"type": "long"
},
"frees": {
"type": "long"
}
}
}
}
},
"expvar": {
"properties": {
"cmdline": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"jolokia": {
"properties": {}
},
"rabbitmq": {
"properties": {
"connection": {
"properties": {
"channel_max": {
"type": "long"
},
"frame_max": {
"type": "long"
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"peer": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
}
}
},
"packet_count": {
"properties": {
"sent": {
"type": "long"
},
"received": {
"type": "long"
},
"pending": {
"type": "long"
}
}
},
"node": {
"ignore_above": 1024,
"type": "keyword"
},
"vhost": {
"type": "keyword",
"ignore_above": 1024
},
"user": {
"type": "keyword",
"ignore_above": 1024
},
"channels": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
},
"octet_count": {
"properties": {
"sent": {
"type": "long"
},
"received": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"node": {
"properties": {
"fd": {
"properties": {
"total": {
"type": "long"
},
"used": {
"type": "long"
}
}
},
"processors": {
"type": "long"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"io": {
"properties": {
"reopen": {
"properties": {
"count": {
"type": "long"
}
}
},
"seek": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"sync": {
"properties": {
"count": {
"type": "long"
},
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"write": {
"properties": {
"bytes": {
"type": "long"
},
"count": {
"type": "long"
},
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"file_handle": {
"properties": {
"open_attempt": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
}
}
},
"read": {
"properties": {
"avg": {
"properties": {
"ms": {
"type": "long"
}
}
},
"bytes": {
"type": "long"
},
"count": {
"type": "long"
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"queue": {
"properties": {
"index": {
"properties": {
"journal_write": {
"properties": {
"count": {
"type": "long"
}
}
},
"read": {
"properties": {
"count": {
"type": "long"
}
}
},
"write": {
"properties": {
"count": {
"type": "long"
}
}
}
}
}
}
},
"socket": {
"properties": {
"total": {
"type": "long"
},
"used": {
"type": "long"
}
}
},
"uptime": {
"type": "long"
},
"disk": {
"properties": {
"free": {
"properties": {
"bytes": {
"type": "long"
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"mnesia": {
"properties": {
"disk": {
"properties": {
"tx": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"ram": {
"properties": {
"tx": {
"properties": {
"count": {
"type": "long"
}
}
}
}
}
}
},
"run": {
"properties": {
"queue": {
"type": "long"
}
}
},
"gc": {
"properties": {
"num": {
"properties": {
"count": {
"type": "long"
}
}
},
"reclaimed": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"mem": {
"properties": {
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"msg": {
"properties": {
"store_read": {
"properties": {
"count": {
"type": "long"
}
}
},
"store_write": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"proc": {
"properties": {
"total": {
"type": "long"
},
"used": {
"type": "long"
}
}
}
}
},
"queue": {
"properties": {
"messages": {
"properties": {
"total": {
"properties": {
"count": {
"type": "long"
}
}
},
"ready": {
"properties": {
"count": {
"type": "long"
}
}
},
"unacknowledged": {
"properties": {
"count": {
"type": "long"
}
}
},
"persistent": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"auto_delete": {
"type": "boolean"
},
"exclusive": {
"type": "boolean"
},
"node": {
"type": "keyword",
"ignore_above": 1024
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"arguments": {
"properties": {
"max_priority": {
"type": "long"
}
}
},
"consumers": {
"properties": {
"count": {
"type": "long"
},
"utilisation": {
"properties": {
"pct": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"disk": {
"properties": {
"reads": {
"properties": {
"count": {
"type": "long"
}
}
},
"writes": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"vhost": {
"ignore_above": 1024,
"type": "keyword"
},
"durable": {
"type": "boolean"
}
}
}
}
},
"uwsgi": {
"properties": {
"status": {
"properties": {
"total": {
"properties": {
"requests": {
"type": "long"
},
"exceptions": {
"type": "long"
},
"write_errors": {
"type": "long"
},
"read_errors": {
"type": "long"
},
"pid": {
"type": "long"
}
}
},
"worker": {
"properties": {
"tx": {
"type": "long"
},
"signal_queue": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"vsz": {
"type": "long"
},
"harakiri_count": {
"type": "long"
},
"pid": {
"type": "long"
},
"accepting": {
"type": "long"
},
"requests": {
"type": "long"
},
"delta_requests": {
"type": "long"
},
"exceptions": {
"type": "long"
},
"rss": {
"ignore_above": 1024,
"type": "keyword"
},
"respawn_count": {
"type": "long"
},
"id": {
"type": "long"
},
"avg_rt": {
"type": "long"
},
"running_time": {
"type": "long"
},
"signals": {
"type": "long"
}
}
},
"core": {
"properties": {
"write_errors": {
"type": "long"
},
"read_errors": {
"type": "long"
},
"id": {
"type": "long"
},
"worker_pid": {
"type": "long"
},
"requests": {
"properties": {
"total": {
"type": "long"
},
"static": {
"type": "long"
},
"routed": {
"type": "long"
},
"offloaded": {
"type": "long"
}
}
}
}
}
}
}
}
},
"host": {
"properties": {
"os": {
"properties": {
"platform": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"architecture": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"kubernetes": {
"properties": {
"labels": {
"type": "object"
},
"container": {
"properties": {
"cpu": {
"properties": {
"request": {
"properties": {
"nanocores": {
"type": "long"
}
}
},
"usage": {
"properties": {
"core": {
"properties": {
"ns": {
"type": "long"
}
}
},
"nanocores": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"limit": {
"properties": {
"nanocores": {
"type": "long"
}
}
}
}
},
"rootfs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"used": {
"type": "long"
}
}
}
}
},
"start_time": {
"type": "date"
},
"image": {
"type": "keyword",
"ignore_above": 1024
},
"logs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"free": {
"type": "long"
},
"used": {
"type": "long"
},
"count": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"usage": {
"properties": {
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"bytes": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"workingset": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pagefaults": {
"type": "long"
},
"majorpagefaults": {
"type": "long"
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"request": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"status": {
"properties": {
"phase": {
"type": "keyword",
"ignore_above": 1024
},
"ready": {
"type": "boolean"
},
"restarts": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"volume": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"fs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"used": {
"type": "long"
},
"free": {
"type": "long"
},
"count": {
"type": "long"
}
}
}
}
}
}
},
"pod": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"start_time": {
"type": "date"
},
"network": {
"properties": {
"rx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"tx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
}
}
},
"cpu": {
"properties": {
"usage": {
"properties": {
"nanocores": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
}
}
},
"memory": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"node": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
}
}
},
"ip": {
"type": "ip"
},
"host_ip": {
"type": "ip"
},
"status": {
"properties": {
"phase": {
"ignore_above": 1024,
"type": "keyword"
},
"ready": {
"type": "keyword",
"ignore_above": 1024
},
"scheduled": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"cpu": {
"properties": {
"usage": {
"properties": {
"nanocores": {
"type": "long"
},
"core": {
"properties": {
"ns": {
"type": "long"
}
}
}
}
},
"allocatable": {
"properties": {
"cores": {
"type": "float"
}
}
},
"capacity": {
"properties": {
"cores": {
"type": "long"
}
}
}
}
},
"fs": {
"properties": {
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inodes": {
"properties": {
"count": {
"type": "long"
},
"free": {
"type": "long"
},
"used": {
"type": "long"
}
}
}
}
},
"runtime": {
"properties": {
"imagefs": {
"properties": {
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"start_time": {
"type": "date"
},
"memory": {
"properties": {
"pagefaults": {
"type": "long"
},
"majorpagefaults": {
"type": "long"
},
"allocatable": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"usage": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"workingset": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"network": {
"properties": {
"tx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
},
"rx": {
"properties": {
"bytes": {
"type": "long"
},
"errors": {
"type": "long"
}
}
}
}
},
"status": {
"properties": {
"ready": {
"type": "keyword",
"ignore_above": 1024
},
"unschedulable": {
"type": "boolean"
}
}
},
"pod": {
"properties": {
"allocatable": {
"properties": {
"total": {
"type": "long"
}
}
},
"capacity": {
"properties": {
"total": {
"type": "long"
}
}
}
}
}
}
},
"annotations": {
"type": "object"
},
"event": {
"properties": {
"reason": {
"type": "keyword",
"ignore_above": 1024
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"metadata": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
},
"resource_version": {
"type": "keyword",
"ignore_above": 1024
},
"uid": {
"type": "keyword",
"ignore_above": 1024
},
"self_link": {
"type": "keyword",
"ignore_above": 1024
},
"timestamp": {
"properties": {
"created": {
"type": "date"
}
}
}
}
},
"involved_object": {
"properties": {
"uid": {
"type": "keyword",
"ignore_above": 1024
},
"api_version": {
"ignore_above": 1024,
"type": "keyword"
},
"kind": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"resource_version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"count": {
"type": "long"
},
"message": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"deployment": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"paused": {
"type": "boolean"
},
"replicas": {
"properties": {
"desired": {
"type": "long"
},
"available": {
"type": "long"
},
"unavailable": {
"type": "long"
},
"updated": {
"type": "long"
}
}
}
}
},
"replicaset": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"replicas": {
"properties": {
"desired": {
"type": "long"
},
"ready": {
"type": "long"
},
"observed": {
"type": "long"
},
"labeled": {
"type": "long"
},
"available": {
"type": "long"
}
}
}
}
},
"statefulset": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"created": {
"type": "long"
},
"replicas": {
"properties": {
"observed": {
"type": "long"
},
"desired": {
"type": "long"
}
}
},
"generation": {
"properties": {
"observed": {
"type": "long"
},
"desired": {
"type": "long"
}
}
}
}
},
"system": {
"properties": {
"memory": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"workingset": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pagefaults": {
"type": "long"
},
"majorpagefaults": {
"type": "long"
}
}
},
"container": {
"type": "keyword",
"ignore_above": 1024
},
"start_time": {
"type": "date"
},
"cpu": {
"properties": {
"usage": {
"properties": {
"core": {
"properties": {
"ns": {
"type": "long"
}
}
},
"nanocores": {
"type": "long"
}
}
}
}
}
}
}
}
},
"metricset": {
"properties": {
"module": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"rtt": {
"type": "long"
},
"namespace": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"ceph": {
"properties": {
"cluster_health": {
"properties": {
"overall_status": {
"type": "keyword",
"ignore_above": 1024
},
"timechecks": {
"properties": {
"epoch": {
"type": "long"
},
"round": {
"properties": {
"value": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
},
"cluster_status": {
"properties": {
"degraded": {
"properties": {
"ratio": {
"type": "scaled_float",
"scaling_factor": 1000
},
"total": {
"type": "long"
},
"objects": {
"type": "long"
}
}
},
"pg": {
"properties": {
"data_bytes": {
"type": "long"
},
"avail_bytes": {
"type": "long"
},
"total_bytes": {
"type": "long"
},
"used_bytes": {
"type": "long"
}
}
},
"pg_state": {
"properties": {
"state_name": {
"type": "long"
},
"count": {
"type": "long"
},
"version": {
"type": "long"
}
}
},
"osd": {
"properties": {
"full": {
"type": "boolean"
},
"nearfull": {
"type": "boolean"
},
"num_osds": {
"type": "long"
},
"num_up_osds": {
"type": "long"
},
"num_in_osds": {
"type": "long"
},
"num_remapped_pgs": {
"type": "long"
},
"epoch": {
"type": "long"
}
}
},
"version": {
"type": "long"
},
"traffic": {
"properties": {
"read_bytes": {
"type": "long"
},
"write_bytes": {
"type": "long"
},
"read_op_per_sec": {
"type": "long"
},
"write_op_per_sec": {
"type": "long"
}
}
},
"misplace": {
"properties": {
"total": {
"type": "long"
},
"objects": {
"type": "long"
},
"ratio": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"monitor_health": {
"properties": {
"available": {
"properties": {
"pct": {
"type": "long"
},
"kb": {
"type": "long"
}
}
},
"health": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"properties": {
"kb": {
"type": "long"
}
}
},
"used": {
"properties": {
"kb": {
"type": "long"
}
}
},
"last_updated": {
"type": "date"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"store_stats": {
"properties": {
"log": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"misc": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"sst": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"last_updated": {
"type": "long"
}
}
}
}
},
"osd_df": {
"properties": {
"total": {
"properties": {
"byte": {
"type": "long"
}
}
},
"used": {
"properties": {
"byte": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pg_num": {
"type": "long"
},
"id": {
"type": "long"
},
"name": {
"type": "text",
"norms": false
},
"device_class": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"osd_tree": {
"properties": {
"father": {
"type": "keyword",
"ignore_above": 1024
},
"children": {
"type": "text",
"norms": false
},
"crush_weight": {
"type": "float"
},
"primary_affinity": {
"type": "float"
},
"type_id": {
"type": "long"
},
"depth": {
"type": "long"
},
"exists": {
"type": "boolean"
},
"reweight": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "long"
},
"name": {
"type": "text",
"norms": false
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"device_class": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"pool_disk": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"stats": {
"properties": {
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"objects": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"kb": {
"type": "long"
}
}
}
}
}
}
},
"cluster_disk": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"available": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"kafka": {
"properties": {
"consumergroup": {
"properties": {
"client": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"host": {
"type": "keyword",
"ignore_above": 1024
},
"member_id": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"broker": {
"properties": {
"id": {
"type": "long"
},
"address": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"topic": {
"type": "keyword",
"ignore_above": 1024
},
"partition": {
"type": "long"
},
"offset": {
"type": "long"
},
"meta": {
"norms": false,
"type": "text"
},
"error": {
"properties": {
"code": {
"type": "long"
}
}
}
}
},
"partition": {
"properties": {
"partition": {
"properties": {
"id": {
"type": "long"
},
"leader": {
"type": "long"
},
"replica": {
"type": "long"
},
"insync_replica": {
"type": "boolean"
},
"error": {
"properties": {
"code": {
"type": "long"
}
}
}
}
},
"topic": {
"properties": {
"error": {
"properties": {
"code": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"broker": {
"properties": {
"id": {
"type": "long"
},
"address": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"offset": {
"properties": {
"newest": {
"type": "long"
},
"oldest": {
"type": "long"
}
}
}
}
}
}
},
"postgresql": {
"properties": {
"activity": {
"properties": {
"client": {
"properties": {
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"port": {
"type": "long"
},
"address": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"query_start": {
"type": "date"
},
"state_change": {
"type": "date"
},
"database": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"oid": {
"type": "long"
}
}
},
"pid": {
"type": "long"
},
"user": {
"properties": {
"id": {
"type": "long"
},
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"application_name": {
"type": "keyword",
"ignore_above": 1024
},
"backend_start": {
"type": "date"
},
"transaction_start": {
"type": "date"
},
"waiting": {
"type": "boolean"
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"query": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"bgwriter": {
"properties": {
"checkpoints": {
"properties": {
"times": {
"properties": {
"write": {
"properties": {
"ms": {
"type": "float"
}
}
},
"sync": {
"properties": {
"ms": {
"type": "float"
}
}
}
}
},
"scheduled": {
"type": "long"
},
"requested": {
"type": "long"
}
}
},
"buffers": {
"properties": {
"backend_fsync": {
"type": "long"
},
"allocated": {
"type": "long"
},
"checkpoints": {
"type": "long"
},
"clean": {
"type": "long"
},
"clean_full": {
"type": "long"
},
"backend": {
"type": "long"
}
}
},
"stats_reset": {
"type": "date"
}
}
},
"database": {
"properties": {
"rows": {
"properties": {
"returned": {
"type": "long"
},
"fetched": {
"type": "long"
},
"inserted": {
"type": "long"
},
"updated": {
"type": "long"
},
"deleted": {
"type": "long"
}
}
},
"temporary": {
"properties": {
"files": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
},
"oid": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"number_of_backends": {
"type": "long"
},
"transactions": {
"properties": {
"rollback": {
"type": "long"
},
"commit": {
"type": "long"
}
}
},
"blocks": {
"properties": {
"read": {
"type": "long"
},
"hit": {
"type": "long"
},
"time": {
"properties": {
"read": {
"properties": {
"ms": {
"type": "long"
}
}
},
"write": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
}
}
},
"conflicts": {
"type": "long"
},
"deadlocks": {
"type": "long"
},
"stats_reset": {
"type": "date"
}
}
}
}
},
"system": {
"properties": {
"process": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"cmdline": {
"type": "keyword",
"ignore_above": 1024
},
"cpu": {
"properties": {
"user": {
"properties": {
"ticks": {
"type": "long"
}
}
},
"total": {
"properties": {
"value": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"system": {
"properties": {
"ticks": {
"type": "long"
}
}
},
"start_time": {
"type": "date"
}
}
},
"pid": {
"type": "long"
},
"username": {
"type": "keyword",
"ignore_above": 1024
},
"cwd": {
"type": "keyword",
"ignore_above": 1024
},
"summary": {
"properties": {
"unknown": {
"type": "long"
},
"total": {
"type": "long"
},
"running": {
"type": "long"
},
"idle": {
"type": "long"
},
"sleeping": {
"type": "long"
},
"stopped": {
"type": "long"
},
"zombie": {
"type": "long"
}
}
},
"ppid": {
"type": "long"
},
"env": {
"type": "object"
},
"memory": {
"properties": {
"size": {
"type": "long"
},
"rss": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"bytes": {
"type": "long"
}
}
},
"share": {
"type": "long"
}
}
},
"fd": {
"properties": {
"open": {
"type": "long"
},
"limit": {
"properties": {
"soft": {
"type": "long"
},
"hard": {
"type": "long"
}
}
}
}
},
"cgroup": {
"properties": {
"blkio": {
"properties": {
"total": {
"properties": {
"ios": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"ignore_above": 1024,
"type": "keyword"
},
"cpu": {
"properties": {
"stats": {
"properties": {
"periods": {
"type": "long"
},
"throttled": {
"properties": {
"periods": {
"type": "long"
},
"ns": {
"type": "long"
}
}
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"type": "keyword",
"ignore_above": 1024
},
"cfs": {
"properties": {
"shares": {
"type": "long"
},
"period": {
"properties": {
"us": {
"type": "long"
}
}
},
"quota": {
"properties": {
"us": {
"type": "long"
}
}
}
}
},
"rt": {
"properties": {
"runtime": {
"properties": {
"us": {
"type": "long"
}
}
},
"period": {
"properties": {
"us": {
"type": "long"
}
}
}
}
}
}
},
"cpuacct": {
"properties": {
"total": {
"properties": {
"ns": {
"type": "long"
}
}
},
"stats": {
"properties": {
"user": {
"properties": {
"ns": {
"type": "long"
}
}
},
"system": {
"properties": {
"ns": {
"type": "long"
}
}
}
}
},
"percpu": {
"type": "object"
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"memory": {
"properties": {
"memsw": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
},
"kmem": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
},
"kmem_tcp": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
},
"stats": {
"properties": {
"active_file": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pages_out": {
"type": "long"
},
"hierarchical_memory_limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inactive_anon": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"mapped_file": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"major_page_faults": {
"type": "long"
},
"rss": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"unevictable": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"hierarchical_memsw_limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"page_faults": {
"type": "long"
},
"pages_in": {
"type": "long"
},
"rss_huge": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"swap": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"active_anon": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"cache": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"inactive_file": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"path": {
"ignore_above": 1024,
"type": "keyword"
},
"mem": {
"properties": {
"usage": {
"properties": {
"bytes": {
"type": "long"
},
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"limit": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"failures": {
"type": "long"
}
}
}
}
}
}
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"pgid": {
"type": "long"
}
}
},
"raid": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"activity_state": {
"type": "keyword",
"ignore_above": 1024
},
"disks": {
"properties": {
"total": {
"type": "long"
},
"active": {
"type": "long"
}
}
},
"blocks": {
"properties": {
"synced": {
"type": "long"
},
"total": {
"type": "long"
}
}
}
}
},
"socket": {
"properties": {
"direction": {
"type": "keyword",
"ignore_above": 1024
},
"family": {
"type": "keyword",
"ignore_above": 1024
},
"local": {
"properties": {
"ip": {
"type": "ip"
},
"port": {
"type": "long"
}
}
},
"remote": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"etld_plus_one": {
"ignore_above": 1024,
"type": "keyword"
},
"host_error": {
"type": "keyword",
"ignore_above": 1024
},
"ip": {
"type": "ip"
},
"port": {
"type": "long"
}
}
},
"process": {
"properties": {
"pid": {
"type": "long"
},
"command": {
"type": "keyword",
"ignore_above": 1024
},
"cmdline": {
"type": "keyword",
"ignore_above": 1024
},
"exe": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"user": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"core": {
"properties": {
"irq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"softirq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"steal": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"id": {
"type": "long"
},
"iowait": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
},
"nice": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"idle": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
},
"user": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"system": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
}
}
},
"cpu": {
"properties": {
"cores": {
"type": "long"
},
"user": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"system": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"softirq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"total": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"value": {
"type": "long"
}
}
},
"nice": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"idle": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"iowait": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
}
}
},
"ticks": {
"type": "long"
}
}
},
"irq": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"ticks": {
"type": "long"
}
}
},
"steal": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"norm": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
}
}
},
"ticks": {
"type": "long"
}
}
}
}
},
"filesystem": {
"properties": {
"mount_point": {
"type": "keyword",
"ignore_above": 1024
},
"files": {
"type": "long"
},
"free": {
"type": "long"
},
"free_files": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"available": {
"type": "long"
},
"device_name": {
"ignore_above": 1024,
"type": "keyword"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"type": "long"
}
}
},
"load": {
"properties": {
"1": {
"scaling_factor": 100,
"type": "scaled_float"
},
"5": {
"type": "scaled_float",
"scaling_factor": 100
},
"15": {
"type": "scaled_float",
"scaling_factor": 100
},
"norm": {
"properties": {
"1": {
"type": "scaled_float",
"scaling_factor": 100
},
"5": {
"type": "scaled_float",
"scaling_factor": 100
},
"15": {
"type": "scaled_float",
"scaling_factor": 100
}
}
},
"cores": {
"type": "long"
}
}
},
"uptime": {
"properties": {
"duration": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"diskio": {
"properties": {
"io": {
"properties": {
"time": {
"type": "long"
}
}
},
"iostat": {
"properties": {
"request": {
"properties": {
"avg_size": {
"type": "float"
}
}
},
"queue": {
"properties": {
"avg_size": {
"type": "float"
}
}
},
"await": {
"type": "float"
},
"service_time": {
"type": "float"
},
"busy": {
"type": "float"
},
"read": {
"properties": {
"request": {
"properties": {
"per_sec": {
"type": "float"
},
"merges_per_sec": {
"type": "float"
}
}
},
"per_sec": {
"properties": {
"bytes": {
"type": "float"
}
}
}
}
},
"write": {
"properties": {
"request": {
"properties": {
"merges_per_sec": {
"type": "float"
},
"per_sec": {
"type": "float"
}
}
},
"per_sec": {
"properties": {
"bytes": {
"type": "float"
}
}
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"serial_number": {
"type": "keyword",
"ignore_above": 1024
},
"read": {
"properties": {
"bytes": {
"type": "long"
},
"time": {
"type": "long"
},
"count": {
"type": "long"
}
}
},
"write": {
"properties": {
"count": {
"type": "long"
},
"bytes": {
"type": "long"
},
"time": {
"type": "long"
}
}
}
}
},
"fsstat": {
"properties": {
"total_files": {
"type": "long"
},
"total_size": {
"properties": {
"free": {
"type": "long"
},
"used": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"memory": {
"properties": {
"actual": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"type": "long"
}
}
},
"swap": {
"properties": {
"total": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"type": "long"
}
}
},
"hugepages": {
"properties": {
"free": {
"type": "long"
},
"reserved": {
"type": "long"
},
"surplus": {
"type": "long"
},
"default_size": {
"type": "long"
},
"total": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "long"
}
}
}
}
},
"total": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"type": "long"
}
}
},
"network": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"out": {
"properties": {
"errors": {
"type": "long"
},
"dropped": {
"type": "long"
},
"bytes": {
"type": "long"
},
"packets": {
"type": "long"
}
}
},
"in": {
"properties": {
"bytes": {
"type": "long"
},
"packets": {
"type": "long"
},
"errors": {
"type": "long"
},
"dropped": {
"type": "long"
}
}
}
}
}
}
},
"fields": {
"type": "object"
},
"type": {
"type": "keyword",
"ignore_above": 1024
},
"haproxy": {
"properties": {
"info": {
"properties": {
"idle": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"pid": {
"type": "long"
},
"memory": {
"properties": {
"max": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"connection": {
"properties": {
"hard_max": {
"type": "long"
},
"rate": {
"properties": {
"max": {
"type": "long"
},
"value": {
"type": "long"
},
"limit": {
"type": "long"
}
}
},
"current": {
"type": "long"
},
"total": {
"type": "long"
},
"ssl": {
"properties": {
"current": {
"type": "long"
},
"total": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"max": {
"type": "long"
}
}
},
"session": {
"properties": {
"rate": {
"properties": {
"value": {
"type": "long"
},
"limit": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"ssl": {
"properties": {
"frontend": {
"properties": {
"key_rate": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"session_reuse": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"backend": {
"properties": {
"key_rate": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"cached_lookups": {
"type": "long"
},
"cache_misses": {
"type": "long"
},
"rate": {
"properties": {
"limit": {
"type": "long"
},
"max": {
"type": "long"
},
"value": {
"type": "long"
}
}
}
}
},
"tasks": {
"type": "long"
},
"uptime": {
"properties": {
"sec": {
"type": "long"
}
}
},
"processes": {
"type": "long"
},
"run_queue": {
"type": "long"
},
"requests": {
"properties": {
"max": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"pipes": {
"properties": {
"used": {
"type": "long"
},
"free": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"process_num": {
"type": "long"
},
"ulimit_n": {
"type": "long"
},
"compress": {
"properties": {
"bps": {
"properties": {
"in": {
"type": "long"
},
"out": {
"type": "long"
},
"rate_limit": {
"type": "long"
}
}
}
}
},
"sockets": {
"properties": {
"max": {
"type": "long"
}
}
},
"zlib_mem_usage": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"stat": {
"properties": {
"service_name": {
"ignore_above": 1024,
"type": "keyword"
},
"tracked": {
"properties": {
"id": {
"type": "long"
}
}
},
"session": {
"properties": {
"current": {
"type": "long"
},
"max": {
"type": "long"
},
"limit": {
"type": "long"
},
"rate": {
"properties": {
"value": {
"type": "long"
},
"limit": {
"type": "long"
},
"max": {
"type": "long"
}
}
}
}
},
"queue": {
"properties": {
"limit": {
"type": "long"
},
"time": {
"properties": {
"avg": {
"type": "long"
}
}
}
}
},
"component_type": {
"type": "long"
},
"throttle": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"connection": {
"properties": {
"time": {
"properties": {
"avg": {
"type": "long"
}
}
},
"total": {
"type": "long"
},
"retried": {
"type": "long"
}
}
},
"request": {
"properties": {
"queued": {
"properties": {
"current": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"errors": {
"type": "long"
},
"redispatched": {
"type": "long"
},
"connection": {
"properties": {
"errors": {
"type": "long"
}
}
},
"rate": {
"properties": {
"value": {
"type": "long"
},
"max": {
"type": "long"
}
}
},
"total": {
"type": "long"
},
"denied": {
"type": "long"
}
}
},
"check": {
"properties": {
"down": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"code": {
"type": "long"
},
"duration": {
"type": "long"
},
"health": {
"properties": {
"last": {
"type": "keyword",
"ignore_above": 1024
},
"fail": {
"type": "long"
}
}
},
"agent": {
"properties": {
"last": {
"type": "long"
}
}
},
"failed": {
"type": "long"
}
}
},
"proxy": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"weight": {
"type": "long"
},
"downtime": {
"type": "long"
},
"in": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"selected": {
"properties": {
"total": {
"type": "long"
}
}
},
"response": {
"properties": {
"errors": {
"type": "long"
},
"time": {
"properties": {
"avg": {
"type": "long"
}
}
},
"denied": {
"type": "long"
},
"http": {
"properties": {
"other": {
"type": "long"
},
"1xx": {
"type": "long"
},
"2xx": {
"type": "long"
},
"3xx": {
"type": "long"
},
"4xx": {
"type": "long"
},
"5xx": {
"type": "long"
}
}
}
}
},
"client": {
"properties": {
"aborted": {
"type": "long"
}
}
},
"process_id": {
"type": "long"
},
"last_change": {
"type": "long"
},
"server": {
"properties": {
"id": {
"type": "long"
},
"aborted": {
"type": "long"
},
"active": {
"type": "long"
},
"backup": {
"type": "long"
}
}
},
"compressor": {
"properties": {
"in": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"bypassed": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"response": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"kibana": {
"properties": {
"status": {
"properties": {
"metrics": {
"properties": {
"concurrent_connections": {
"type": "long"
},
"requests": {
"properties": {
"disconnects": {
"type": "long"
},
"total": {
"type": "long"
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"uuid": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"properties": {
"number": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"status": {
"properties": {
"overall": {
"properties": {
"state": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
}
}
}
}
},
"logstash": {
"properties": {
"node": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"ignore_above": 1024,
"type": "keyword"
},
"jvm": {
"properties": {
"version": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
}
}
},
"stats": {
"properties": {
"events": {
"properties": {
"in": {
"type": "long"
},
"out": {
"type": "long"
},
"filtered": {
"type": "long"
}
}
}
}
}
}
}
}
},
"aerospike": {
"properties": {
"namespace": {
"properties": {
"hwm_breached": {
"type": "boolean"
},
"memory": {
"properties": {
"free": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"used": {
"properties": {
"sindex": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"data": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"index": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"node": {
"properties": {
"host": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"objects": {
"properties": {
"master": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"stop_writes": {
"type": "boolean"
},
"client": {
"properties": {
"delete": {
"properties": {
"timeout": {
"type": "long"
},
"error": {
"type": "long"
},
"not_found": {
"type": "long"
},
"success": {
"type": "long"
}
}
},
"read": {
"properties": {
"error": {
"type": "long"
},
"not_found": {
"type": "long"
},
"success": {
"type": "long"
},
"timeout": {
"type": "long"
}
}
},
"write": {
"properties": {
"error": {
"type": "long"
},
"success": {
"type": "long"
},
"timeout": {
"type": "long"
}
}
}
}
},
"device": {
"properties": {
"available": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"free": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"couchbase": {
"properties": {
"bucket": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
},
"data": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"disk": {
"properties": {
"fetches": {
"type": "long"
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"quota": {
"properties": {
"ram": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"use": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"ops_per_sec": {
"type": "long"
},
"item_count": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"cluster": {
"properties": {
"max_bucket_count": {
"type": "long"
},
"quota": {
"properties": {
"memory": {
"properties": {
"mb": {
"type": "long"
}
}
},
"index_memory": {
"properties": {
"mb": {
"type": "long"
}
}
}
}
},
"ram": {
"properties": {
"quota": {
"properties": {
"total": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"per_node": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"used": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"per_node": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"by_data": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"hdd": {
"properties": {
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"quota": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"value": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"by_data": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
}
}
},
"node": {
"properties": {
"uptime": {
"properties": {
"sec": {
"type": "long"
}
}
},
"vb_replica_curr_items": {
"type": "long"
},
"couch": {
"properties": {
"docs": {
"properties": {
"disk_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"spatial": {
"properties": {
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"disk_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"views": {
"properties": {
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"disk_size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"cpu_utilization_rate": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"get_hits": {
"type": "long"
},
"ops": {
"type": "long"
},
"mcd_memory": {
"properties": {
"allocated": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"reserved": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"memory": {
"properties": {
"free": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"swap": {
"properties": {
"total": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"cmd_get": {
"type": "long"
},
"current_items": {
"properties": {
"value": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"ep_bg_fetched": {
"type": "long"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"munin": {
"properties": {}
},
"mysql": {
"properties": {
"status": {
"properties": {
"aborted": {
"properties": {
"clients": {
"type": "long"
},
"connects": {
"type": "long"
}
}
},
"binlog": {
"properties": {
"cache": {
"properties": {
"disk_use": {
"type": "long"
},
"use": {
"type": "long"
}
}
}
}
},
"bytes": {
"properties": {
"received": {
"type": "long"
},
"sent": {
"type": "long"
}
}
},
"connections": {
"type": "long"
},
"created": {
"properties": {
"tmp": {
"properties": {
"files": {
"type": "long"
},
"tables": {
"type": "long"
},
"disk_tables": {
"type": "long"
}
}
}
}
},
"delayed": {
"properties": {
"errors": {
"type": "long"
},
"insert_threads": {
"type": "long"
},
"writes": {
"type": "long"
}
}
},
"max_used_connections": {
"type": "long"
},
"threads": {
"properties": {
"cached": {
"type": "long"
},
"created": {
"type": "long"
},
"connected": {
"type": "long"
},
"running": {
"type": "long"
}
}
},
"flush_commands": {
"type": "long"
},
"open": {
"properties": {
"files": {
"type": "long"
},
"streams": {
"type": "long"
},
"tables": {
"type": "long"
}
}
},
"opened_tables": {
"type": "long"
},
"command": {
"properties": {
"select": {
"type": "long"
},
"update": {
"type": "long"
},
"delete": {
"type": "long"
},
"insert": {
"type": "long"
}
}
}
}
}
}
},
"redis": {
"properties": {
"info": {
"properties": {
"server": {
"properties": {
"git_sha1": {
"type": "keyword",
"ignore_above": 1024
},
"hz": {
"type": "long"
},
"config_file": {
"ignore_above": 1024,
"type": "keyword"
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"mode": {
"type": "keyword",
"ignore_above": 1024
},
"os": {
"type": "keyword",
"ignore_above": 1024
},
"multiplexing_api": {
"type": "keyword",
"ignore_above": 1024
},
"uptime": {
"type": "long"
},
"git_dirty": {
"type": "keyword",
"ignore_above": 1024
},
"build_id": {
"type": "keyword",
"ignore_above": 1024
},
"arch_bits": {
"type": "keyword",
"ignore_above": 1024
},
"gcc_version": {
"type": "keyword",
"ignore_above": 1024
},
"process_id": {
"type": "long"
},
"run_id": {
"type": "keyword",
"ignore_above": 1024
},
"tcp_port": {
"type": "long"
},
"lru_clock": {
"type": "long"
}
}
},
"stats": {
"properties": {
"keys": {
"properties": {
"expired": {
"type": "long"
},
"evicted": {
"type": "long"
}
}
},
"pubsub": {
"properties": {
"channels": {
"type": "long"
},
"patterns": {
"type": "long"
}
}
},
"latest_fork_usec": {
"type": "long"
},
"net": {
"properties": {
"input": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"output": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"sync": {
"properties": {
"full": {
"type": "long"
},
"partial": {
"properties": {
"ok": {
"type": "long"
},
"err": {
"type": "long"
}
}
}
}
},
"instantaneous": {
"properties": {
"ops_per_sec": {
"type": "long"
},
"input_kbps": {
"type": "scaled_float",
"scaling_factor": 1000
},
"output_kbps": {
"scaling_factor": 1000,
"type": "scaled_float"
}
}
},
"keyspace": {
"properties": {
"hits": {
"type": "long"
},
"misses": {
"type": "long"
}
}
},
"migrate_cached_sockets": {
"type": "long"
},
"connections": {
"properties": {
"received": {
"type": "long"
},
"rejected": {
"type": "long"
}
}
},
"commands_processed": {
"type": "long"
}
}
},
"clients": {
"properties": {
"connected": {
"type": "long"
},
"longest_output_list": {
"type": "long"
},
"biggest_input_buf": {
"type": "long"
},
"blocked": {
"type": "long"
}
}
},
"cluster": {
"properties": {
"enabled": {
"type": "boolean"
}
}
},
"cpu": {
"properties": {
"used": {
"properties": {
"sys": {
"type": "scaled_float",
"scaling_factor": 1000
},
"sys_children": {
"type": "scaled_float",
"scaling_factor": 1000
},
"user": {
"type": "scaled_float",
"scaling_factor": 1000
},
"user_children": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"memory": {
"properties": {
"used": {
"properties": {
"value": {
"type": "long"
},
"rss": {
"type": "long"
},
"peak": {
"type": "long"
},
"lua": {
"type": "long"
}
}
},
"allocator": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"persistence": {
"properties": {
"loading": {
"type": "boolean"
},
"rdb": {
"properties": {
"last_save": {
"properties": {
"changes_since": {
"type": "long"
},
"time": {
"type": "long"
}
}
},
"bgsave": {
"properties": {
"in_progress": {
"type": "boolean"
},
"last_status": {
"ignore_above": 1024,
"type": "keyword"
},
"last_time": {
"properties": {
"sec": {
"type": "long"
}
}
},
"current_time": {
"properties": {
"sec": {
"type": "long"
}
}
}
}
}
}
},
"aof": {
"properties": {
"enabled": {
"type": "boolean"
},
"rewrite": {
"properties": {
"in_progress": {
"type": "boolean"
},
"scheduled": {
"type": "boolean"
},
"last_time": {
"properties": {
"sec": {
"type": "long"
}
}
},
"current_time": {
"properties": {
"sec": {
"type": "long"
}
}
}
}
},
"bgrewrite": {
"properties": {
"last_status": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"write": {
"properties": {
"last_status": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
}
}
},
"replication": {
"properties": {
"backlog": {
"properties": {
"active": {
"type": "long"
},
"size": {
"type": "long"
},
"first_byte_offset": {
"type": "long"
},
"histlen": {
"type": "long"
}
}
},
"role": {
"ignore_above": 1024,
"type": "keyword"
},
"connected_slaves": {
"type": "long"
},
"master_offset": {
"type": "long"
}
}
}
}
},
"keyspace": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"avg_ttl": {
"type": "long"
},
"keys": {
"type": "long"
},
"expires": {
"type": "long"
}
}
}
}
},
"beat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"timezone": {
"type": "keyword",
"ignore_above": 1024
},
"version": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"docker": {
"properties": {
"memory": {
"properties": {
"fail": {
"properties": {
"count": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"limit": {
"type": "long"
},
"rss": {
"properties": {
"total": {
"type": "long"
},
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
}
}
},
"usage": {
"properties": {
"max": {
"type": "long"
},
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"total": {
"type": "long"
}
}
}
}
},
"network": {
"properties": {
"out": {
"properties": {
"dropped": {
"type": "scaled_float",
"scaling_factor": 1000
},
"errors": {
"type": "long"
},
"packets": {
"type": "long"
},
"bytes": {
"type": "long"
}
}
},
"inbound": {
"properties": {
"bytes": {
"type": "long"
},
"dropped": {
"type": "long"
},
"errors": {
"type": "long"
},
"packets": {
"type": "long"
}
}
},
"outbound": {
"properties": {
"bytes": {
"type": "long"
},
"dropped": {
"type": "long"
},
"errors": {
"type": "long"
},
"packets": {
"type": "long"
}
}
},
"interface": {
"type": "keyword",
"ignore_above": 1024
},
"in": {
"properties": {
"bytes": {
"type": "long"
},
"dropped": {
"type": "scaled_float",
"scaling_factor": 1000
},
"errors": {
"type": "long"
},
"packets": {
"type": "long"
}
}
}
}
},
"container": {
"properties": {
"size": {
"properties": {
"root_fs": {
"type": "long"
},
"rw": {
"type": "long"
}
}
},
"image": {
"type": "keyword",
"ignore_above": 1024
},
"labels": {
"type": "object"
},
"created": {
"type": "date"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"ip_addresses": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"command": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"cpu": {
"properties": {
"kernel": {
"properties": {
"pct": {
"scaling_factor": 1000,
"type": "scaled_float"
},
"ticks": {
"type": "long"
}
}
},
"system": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"user": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
},
"ticks": {
"type": "long"
}
}
},
"total": {
"properties": {
"pct": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"core": {
"properties": {
"*": {
"properties": {
"pct": {
"type": "object"
},
"ticks": {
"type": "object"
}
}
}
}
}
}
},
"diskio": {
"properties": {
"read": {
"properties": {
"ops": {
"type": "long"
},
"bytes": {
"type": "long"
},
"rate": {
"type": "long"
}
}
},
"reads": {
"type": "scaled_float",
"scaling_factor": 1000
},
"write": {
"properties": {
"ops": {
"type": "long"
},
"bytes": {
"type": "long"
},
"rate": {
"type": "long"
}
}
},
"writes": {
"type": "scaled_float",
"scaling_factor": 1000
},
"summary": {
"properties": {
"ops": {
"type": "long"
},
"bytes": {
"type": "long"
},
"rate": {
"type": "long"
}
}
},
"total": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"healthcheck": {
"properties": {
"failingstreak": {
"type": "long"
},
"status": {
"type": "keyword",
"ignore_above": 1024
},
"event": {
"properties": {
"end_date": {
"type": "date"
},
"start_date": {
"type": "date"
},
"output": {
"type": "keyword",
"ignore_above": 1024
},
"exit_code": {
"type": "long"
}
}
}
}
},
"image": {
"properties": {
"id": {
"properties": {
"current": {
"type": "keyword",
"ignore_above": 1024
},
"parent": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"created": {
"type": "date"
},
"size": {
"properties": {
"virtual": {
"type": "long"
},
"regular": {
"type": "long"
}
}
},
"labels": {
"type": "object"
}
}
},
"info": {
"properties": {
"containers": {
"properties": {
"total": {
"type": "long"
},
"paused": {
"type": "long"
},
"running": {
"type": "long"
},
"stopped": {
"type": "long"
}
}
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"images": {
"type": "long"
}
}
}
}
},
"kvm": {
"properties": {
"dommemstat": {
"properties": {
"id": {
"type": "long"
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"stat": {
"properties": {
"name": {
"type": "keyword",
"ignore_above": 1024
},
"value": {
"type": "long"
}
}
}
}
}
}
},
"memcached": {
"properties": {
"stats": {
"properties": {
"pid": {
"type": "long"
},
"cmd": {
"properties": {
"get": {
"type": "long"
},
"set": {
"type": "long"
}
}
},
"read": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"items": {
"properties": {
"current": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"evictions": {
"type": "long"
},
"uptime": {
"properties": {
"sec": {
"type": "long"
}
}
},
"threads": {
"type": "long"
},
"connections": {
"properties": {
"current": {
"type": "long"
},
"total": {
"type": "long"
}
}
},
"get": {
"properties": {
"hits": {
"type": "long"
},
"misses": {
"type": "long"
}
}
},
"written": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"prometheus": {
"properties": {
"stats": {
"properties": {
"notifications": {
"properties": {
"queue_length": {
"type": "long"
},
"dropped": {
"type": "long"
}
}
},
"processes": {
"properties": {
"open_fds": {
"type": "long"
}
}
},
"storage": {
"properties": {
"chunks_to_persist": {
"type": "long"
}
}
}
}
}
}
},
"tags": {
"type": "keyword",
"ignore_above": 1024
},
"graphite": {
"properties": {
"server": {
"properties": {
"example": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"zookeeper": {
"properties": {
"mntr": {
"properties": {
"approximate_data_size": {
"type": "long"
},
"followers": {
"type": "long"
},
"outstanding_requests": {
"type": "long"
},
"synced_followers": {
"type": "long"
},
"watch_count": {
"type": "long"
},
"hostname": {
"ignore_above": 1024,
"type": "keyword"
},
"latency": {
"properties": {
"avg": {
"type": "long"
},
"max": {
"type": "long"
},
"min": {
"type": "long"
}
}
},
"packets": {
"properties": {
"sent": {
"type": "long"
},
"received": {
"type": "long"
}
}
},
"pending_syncs": {
"type": "long"
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"max_file_descriptor_count": {
"type": "long"
},
"znode_count": {
"type": "long"
},
"ephemerals_count": {
"type": "long"
},
"num_alive_connections": {
"type": "long"
},
"open_file_descriptor_count": {
"type": "long"
},
"server_state": {
"ignore_above": 1024,
"type": "keyword"
}
}
}
}
},
"apache": {
"properties": {
"status": {
"properties": {
"total_accesses": {
"type": "long"
},
"requests_per_sec": {
"type": "scaled_float",
"scaling_factor": 1000
},
"bytes_per_sec": {
"type": "scaled_float",
"scaling_factor": 1000
},
"workers": {
"properties": {
"busy": {
"type": "long"
},
"idle": {
"type": "long"
}
}
},
"cpu": {
"properties": {
"user": {
"type": "scaled_float",
"scaling_factor": 1000
},
"system": {
"type": "scaled_float",
"scaling_factor": 1000
},
"children_user": {
"type": "scaled_float",
"scaling_factor": 1000
},
"children_system": {
"type": "scaled_float",
"scaling_factor": 1000
},
"load": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
},
"connections": {
"properties": {
"total": {
"type": "long"
},
"async": {
"properties": {
"writing": {
"type": "long"
},
"keep_alive": {
"type": "long"
},
"closing": {
"type": "long"
}
}
}
}
},
"hostname": {
"ignore_above": 1024,
"type": "keyword"
},
"total_kbytes": {
"type": "long"
},
"bytes_per_request": {
"type": "scaled_float",
"scaling_factor": 1000
},
"uptime": {
"properties": {
"server_uptime": {
"type": "long"
},
"uptime": {
"type": "long"
}
}
},
"load": {
"properties": {
"1": {
"type": "scaled_float",
"scaling_factor": 100
},
"5": {
"type": "scaled_float",
"scaling_factor": 100
},
"15": {
"type": "scaled_float",
"scaling_factor": 100
}
}
},
"scoreboard": {
"properties": {
"keepalive": {
"type": "long"
},
"dns_lookup": {
"type": "long"
},
"gracefully_finishing": {
"type": "long"
},
"waiting_for_connection": {
"type": "long"
},
"reading_request": {
"type": "long"
},
"sending_reply": {
"type": "long"
},
"closing_connection": {
"type": "long"
},
"logging": {
"type": "long"
},
"idle_cleanup": {
"type": "long"
},
"open_slot": {
"type": "long"
},
"total": {
"type": "long"
},
"starting_up": {
"type": "long"
}
}
}
}
}
}
},
"etcd": {
"properties": {
"leader": {
"properties": {
"followers": {
"properties": {
"counts": {
"properties": {
"followers": {
"properties": {
"counts": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
}
}
}
}
},
"latency": {
"properties": {
"followers": {
"properties": {
"latency": {
"properties": {
"average": {
"type": "scaled_float",
"scaling_factor": 1000
},
"current": {
"type": "scaled_float",
"scaling_factor": 1000
},
"maximum": {
"type": "scaled_float",
"scaling_factor": 1000
},
"minimum": {
"type": "long"
}
}
}
}
},
"follower": {
"properties": {
"latency": {
"properties": {
"standardDeviation": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
}
}
}
}
},
"leader": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"self": {
"properties": {
"send": {
"properties": {
"bandwithrate": {
"type": "scaled_float",
"scaling_factor": 1000
},
"pkgrate": {
"type": "scaled_float",
"scaling_factor": 1000
},
"appendrequest": {
"properties": {
"count": {
"type": "long"
}
}
}
}
},
"starttime": {
"type": "keyword",
"ignore_above": 1024
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"id": {
"type": "keyword",
"ignore_above": 1024
},
"leaderinfo": {
"properties": {
"leader": {
"type": "keyword",
"ignore_above": 1024
},
"starttime": {
"type": "keyword",
"ignore_above": 1024
},
"uptime": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"recv": {
"properties": {
"appendrequest": {
"properties": {
"count": {
"type": "long"
}
}
},
"bandwithrate": {
"type": "scaled_float",
"scaling_factor": 1000
},
"pkgrate": {
"type": "scaled_float",
"scaling_factor": 1000
}
}
}
}
},
"store": {
"properties": {
"compareandswap": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"expire": {
"properties": {
"count": {
"type": "long"
}
}
},
"delete": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"update": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"create": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"watchers": {
"type": "long"
},
"gets": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"sets": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
},
"compareanddelete": {
"properties": {
"success": {
"type": "long"
},
"fail": {
"type": "long"
}
}
}
}
}
}
},
"mongodb": {
"properties": {
"collstats": {
"properties": {
"db": {
"type": "keyword",
"ignore_above": 1024
},
"collection": {
"type": "keyword",
"ignore_above": 1024
},
"total": {
"properties": {
"count": {
"type": "long"
},
"time": {
"properties": {
"us": {
"type": "long"
}
}
}
}
},
"remove": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"lock": {
"properties": {
"read": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"write": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
}
}
},
"queries": {
"properties": {
"count": {
"type": "long"
},
"time": {
"properties": {
"us": {
"type": "long"
}
}
}
}
},
"getmore": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"insert": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"update": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
},
"commands": {
"properties": {
"time": {
"properties": {
"us": {
"type": "long"
}
}
},
"count": {
"type": "long"
}
}
}
}
},
"dbstats": {
"properties": {
"avg_obj_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"index_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"num_extents": {
"type": "long"
},
"storage_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"ns_size_mb": {
"properties": {
"mb": {
"type": "long"
}
}
},
"extent_free_list": {
"properties": {
"num": {
"type": "long"
},
"size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"data_file_version": {
"properties": {
"major": {
"type": "long"
},
"minor": {
"type": "long"
}
}
},
"collections": {
"type": "long"
},
"data_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"db": {
"type": "keyword",
"ignore_above": 1024
},
"file_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"indexes": {
"type": "long"
},
"objects": {
"type": "long"
}
}
},
"status": {
"properties": {
"wired_tiger": {
"properties": {
"concurrent_transactions": {
"properties": {
"write": {
"properties": {
"total_tickets": {
"type": "long"
},
"out": {
"type": "long"
},
"available": {
"type": "long"
}
}
},
"read": {
"properties": {
"out": {
"type": "long"
},
"available": {
"type": "long"
},
"total_tickets": {
"type": "long"
}
}
}
}
},
"cache": {
"properties": {
"dirty": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"pages": {
"properties": {
"evicted": {
"type": "long"
},
"read": {
"type": "long"
},
"write": {
"type": "long"
}
}
},
"maximum": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"used": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
},
"log": {
"properties": {
"write": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"max_file_size": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"flushes": {
"type": "long"
},
"writes": {
"type": "long"
},
"scans": {
"type": "long"
},
"syncs": {
"type": "long"
},
"size": {
"properties": {
"bytes": {
"type": "long"
}
}
}
}
}
}
},
"uptime": {
"properties": {
"ms": {
"type": "long"
}
}
},
"local_time": {
"type": "date"
},
"background_flushing": {
"properties": {
"average": {
"properties": {
"ms": {
"type": "long"
}
}
},
"last": {
"properties": {
"ms": {
"type": "long"
}
}
},
"last_finished": {
"type": "date"
},
"flushes": {
"type": "long"
},
"total": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"opcounters": {
"properties": {
"insert": {
"type": "long"
},
"query": {
"type": "long"
},
"update": {
"type": "long"
},
"delete": {
"type": "long"
},
"getmore": {
"type": "long"
},
"command": {
"type": "long"
}
}
},
"memory": {
"properties": {
"bits": {
"type": "long"
},
"resident": {
"properties": {
"mb": {
"type": "long"
}
}
},
"virtual": {
"properties": {
"mb": {
"type": "long"
}
}
},
"mapped": {
"properties": {
"mb": {
"type": "long"
}
}
},
"mapped_with_journal": {
"properties": {
"mb": {
"type": "long"
}
}
}
}
},
"asserts": {
"properties": {
"regular": {
"type": "long"
},
"warning": {
"type": "long"
},
"msg": {
"type": "long"
},
"user": {
"type": "long"
},
"rollovers": {
"type": "long"
}
}
},
"connections": {
"properties": {
"available": {
"type": "long"
},
"total_created": {
"type": "long"
},
"current": {
"type": "long"
}
}
},
"network": {
"properties": {
"in": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"out": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"requests": {
"type": "long"
}
}
},
"opcounters_replicated": {
"properties": {
"insert": {
"type": "long"
},
"query": {
"type": "long"
},
"update": {
"type": "long"
},
"delete": {
"type": "long"
},
"getmore": {
"type": "long"
},
"command": {
"type": "long"
}
}
},
"write_backs_queued": {
"type": "boolean"
},
"storage_engine": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
}
}
},
"version": {
"type": "keyword",
"ignore_above": 1024
},
"journaling": {
"properties": {
"journaled": {
"properties": {
"mb": {
"type": "long"
}
}
},
"write_to_data_files": {
"properties": {
"mb": {
"type": "long"
}
}
},
"compression": {
"type": "long"
},
"commits_in_write_lock": {
"type": "long"
},
"early_commits": {
"type": "long"
},
"times": {
"properties": {
"commits": {
"properties": {
"ms": {
"type": "long"
}
}
},
"commits_in_write_lock": {
"properties": {
"ms": {
"type": "long"
}
}
},
"dt": {
"properties": {
"ms": {
"type": "long"
}
}
},
"prep_log_buffer": {
"properties": {
"ms": {
"type": "long"
}
}
},
"write_to_journal": {
"properties": {
"ms": {
"type": "long"
}
}
},
"write_to_data_files": {
"properties": {
"ms": {
"type": "long"
}
}
},
"remap_private_view": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
},
"commits": {
"type": "long"
}
}
},
"extra_info": {
"properties": {
"heap_usage": {
"properties": {
"bytes": {
"type": "long"
}
}
},
"page_faults": {
"type": "long"
}
}
}
}
}
}
},
"php_fpm": {
"properties": {
"pool": {
"properties": {
"name": {
"ignore_above": 1024,
"type": "keyword"
},
"process_manager": {
"type": "keyword",
"ignore_above": 1024
},
"connections": {
"properties": {
"accepted": {
"type": "long"
},
"queued": {
"type": "long"
},
"max_listen_queue": {
"type": "long"
},
"listen_queue_len": {
"type": "long"
}
}
},
"processes": {
"properties": {
"total": {
"type": "long"
},
"max_active": {
"type": "long"
},
"max_children_reached": {
"type": "long"
},
"idle": {
"type": "long"
},
"active": {
"type": "long"
}
}
},
"slow_requests": {
"type": "long"
},
"start_since": {
"type": "long"
},
"start_time": {
"type": "date"
}
}
}
}
},
"windows": {
"properties": {
"service": {
"properties": {
"id": {
"type": "keyword",
"ignore_above": 1024
},
"name": {
"type": "keyword",
"ignore_above": 1024
},
"display_name": {
"type": "keyword",
"ignore_above": 1024
},
"start_type": {
"type": "keyword",
"ignore_above": 1024
},
"state": {
"type": "keyword",
"ignore_above": 1024
},
"exit_code": {
"type": "keyword",
"ignore_above": 1024
},
"pid": {
"type": "long"
},
"uptime": {
"properties": {
"ms": {
"type": "long"
}
}
}
}
}
}
},
"@timestamp": {
"type": "date"
},
"error": {
"properties": {
"type": {
"type": "keyword",
"ignore_above": 1024
},
"message": {
"norms": false,
"type": "text"
},
"code": {
"type": "long"
}
}
},
"meta": {
"properties": {
"cloud": {
"properties": {
"provider": {
"type": "keyword",
"ignore_above": 1024
},
"instance_id": {
"type": "keyword",
"ignore_above": 1024
},
"instance_name": {
"type": "keyword",
"ignore_above": 1024
},
"machine_type": {
"type": "keyword",
"ignore_above": 1024
},
"availability_zone": {
"type": "keyword",
"ignore_above": 1024
},
"project_id": {
"type": "keyword",
"ignore_above": 1024
},
"region": {
"type": "keyword",
"ignore_above": 1024
}
}
}
}
},
"http": {
"properties": {
"request": {
"properties": {
"header": {
"type": "object"
},
"method": {
"type": "keyword",
"ignore_above": 1024
},
"body": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"response": {
"properties": {
"header": {
"type": "object"
},
"code": {
"type": "keyword",
"ignore_above": 1024
},
"phrase": {
"type": "keyword",
"ignore_above": 1024
},
"body": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"json": {
"properties": {}
},
"server": {
"properties": {}
}
}
},
"nginx": {
"properties": {
"stubstatus": {
"properties": {
"current": {
"type": "long"
},
"hostname": {
"type": "keyword",
"ignore_above": 1024
},
"handled": {
"type": "long"
},
"dropped": {
"type": "long"
},
"requests": {
"type": "long"
},
"reading": {
"type": "long"
},
"writing": {
"type": "long"
},
"waiting": {
"type": "long"
},
"active": {
"type": "long"
},
"accepts": {
"type": "long"
}
}
}
}
}
}
}
},
"aliases": {}
},
".watch-history-7": {
"order": 2147483647,
"index_patterns": [
".watcher-history-7*"
],
"settings": {
"index": {
"format": "6",
"number_of_shards": "1",
"auto_expand_replicas": "0-1",
"number_of_replicas": "0",
"xpack": {
"watcher": {
"template": {
"version": "7"
}
}
}
}
},
"mappings": {
"doc": {
"dynamic_templates": [
{
"disabled_payload_fields": {
"path_match": """result\.(input(\..+)*|(transform(\..+)*)|(actions\.transform(\..+)*))\.payload""",
"match_pattern": "regex",
"mapping": {
"type": "object",
"enabled": false
}
}
},
{
"disabled_search_request_body_fields": {
"path_match": """result\.(input(\..+)*|(transform(\..+)*)|(actions\.transform(\..+)*))\.search\.request\.(body|template)""",
"match_pattern": "regex",
"mapping": {
"type": "object",
"enabled": false
}
}
},
{
"disabled_exception_fields": {
"path_match": """result\.(input(\..+)*|(transform(\..+)*)|(actions\.transform(\..+)*)|actions)\.error""",
"match_pattern": "regex",
"mapping": {
"type": "object",
"enabled": false
}
}
},
{
"disabled_jira_custom_fields": {
"path_match": "result.actions.jira.fields.customfield_*",
"mapping": {
"type": "object",
"enabled": false
}
}
}
],
"dynamic": false,
"properties": {
"watch_id": {
"type": "keyword"
},
"node": {
"type": "keyword"
},
"trigger_event": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"triggered_time": {
"type": "date"
},
"manual": {
"type": "object",
"dynamic": true,
"properties": {
"schedule": {
"type": "object",
"dynamic": true,
"properties": {
"scheduled_time": {
"type": "date"
}
}
}
}
},
"schedule": {
"type": "object",
"dynamic": true,
"properties": {
"scheduled_time": {
"type": "date"
}
}
}
}
},
"vars": {
"type": "object",
"enabled": false
},
"input": {
"type": "object",
"enabled": false
},
"condition": {
"type": "object",
"enabled": false
},
"state": {
"type": "keyword"
},
"status": {
"type": "object",
"enabled": false,
"dynamic": true
},
"messages": {
"type": "text"
},
"exception": {
"type": "object",
"enabled": false
},
"result": {
"type": "object",
"dynamic": true,
"properties": {
"execution_time": {
"type": "date"
},
"execution_duration": {
"type": "long"
},
"input": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"payload": {
"type": "object",
"enabled": false
},
"search": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"search_type": {
"type": "keyword"
},
"indices": {
"type": "keyword"
},
"types": {
"type": "keyword"
}
}
}
}
},
"http": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"path": {
"type": "keyword"
},
"host": {
"type": "keyword"
}
}
}
}
}
}
},
"condition": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"met": {
"type": "boolean"
},
"compare": {
"type": "object",
"enabled": false
},
"array_compare": {
"type": "object",
"enabled": false
},
"script": {
"type": "object",
"enabled": false
}
}
},
"transform": {
"type": "object",
"dynamic": true,
"properties": {
"type": {
"type": "keyword"
},
"search": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"indices": {
"type": "keyword"
},
"types": {
"type": "keyword"
}
}
}
}
}
}
},
"actions": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"id": {
"type": "keyword"
},
"type": {
"type": "keyword"
},
"status": {
"type": "keyword"
},
"reason": {
"type": "keyword"
},
"email": {
"type": "object",
"dynamic": true,
"properties": {
"message": {
"type": "object",
"dynamic": true,
"properties": {
"id": {
"type": "keyword"
},
"from": {
"type": "keyword"
},
"reply_to": {
"type": "keyword"
},
"to": {
"type": "keyword"
},
"cc": {
"type": "keyword"
},
"bcc": {
"type": "keyword"
}
}
}
}
},
"webhook": {
"type": "object",
"dynamic": true,
"properties": {
"request": {
"type": "object",
"dynamic": true,
"properties": {
"path": {
"type": "keyword"
},
"host": {
"type": "keyword"
}
}
}
}
},
"index": {
"type": "object",
"dynamic": true,
"properties": {
"response": {
"type": "object",
"dynamic": true,
"properties": {
"index": {
"type": "keyword"
},
"type": {
"type": "keyword"
},
"id": {
"type": "keyword"
}
}
}
}
},
"hipchat": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"sent_messages": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"status": {
"type": "keyword"
},
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"room": {
"type": "keyword"
},
"user": {
"type": "keyword"
},
"message": {
"type": "object",
"dynamic": true,
"properties": {
"message_format": {
"type": "keyword"
},
"color": {
"type": "keyword"
},
"notify": {
"type": "boolean"
},
"message": {
"type": "text"
},
"from": {
"type": "text"
}
}
}
}
}
}
},
"jira": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"fields": {
"type": "object",
"dynamic": true,
"properties": {
"summary": {
"type": "text"
},
"description": {
"type": "text"
},
"labels": {
"type": "text"
},
"project": {
"type": "object",
"dynamic": true,
"properties": {
"key": {
"type": "keyword"
},
"id": {
"type": "keyword"
}
}
},
"issuetype": {
"type": "object",
"dynamic": true,
"properties": {
"name": {
"type": "keyword"
},
"id": {
"type": "keyword"
}
}
}
}
},
"result": {
"type": "object",
"dynamic": true,
"properties": {
"id": {
"type": "keyword"
},
"key": {
"type": "keyword"
},
"self": {
"type": "keyword"
}
}
}
}
},
"slack": {
"type": "object",
"dynamic": true,
"properties": {
"account": {
"type": "keyword"
},
"sent_messages": {
"type": "nested",
"include_in_parent": true,
"dynamic": true,
"properties": {
"status": {
"type": "keyword"
},
"reason": {
"type": "text"
},
"request": {
"type": "object",
"enabled": false
},
"response": {
"type": "object",
"enabled": false
},
"to": {
"type": "keyword"
},
"message": {
"type": "object",
"dynamic": true,
"properties": {
"from": {
"type": "text"
},
"icon": {
"type": "keyword"
},
"text": {
"type": "text"
},
"attachments": {
"type": "nested",
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment