a.json

{
  "_index": "metricbeat-6.4.2-2018.11.27",
  "_type": "doc",
  "_id": "INMUV2cBTN3LCK5Y9Inv",
  "_score": 1,
  "_source": {
    "tags": [
      "beats_input_raw_event"
    ],
    "metricset": {
      "name": "activity",
      "module": "postgresql",
      "rtt": 17015,
      "host": "192.168.144.9:5432"
    },
    "@timestamp": "2018-11-27T21:30:49.791Z",
    "@version": "1",
    "postgresql": {
      "activity": {
        "database": {
          "name": "sentry_production",
          "oid": 16384
        },
        "application_name": "",
        "state": "idle",
        "client": {
          "port": 56022,
          "hostname": "",
          "address": "192.168.144.12"
        },
        "query": "SELECT \"sentry_option\".\"id\", \"sentry_option\".\"key\", \"sentry_option\".\"value\", \"sentry_option\".\"last_updated\" FROM \"sentry_option\" WHERE \"sentry_option\".\"key\" = 'github.apps-install-url' ",
        "query_start": "2018-11-27T19:03:13.925Z",
        "state_change": "2018-11-27T19:03:13.926Z",
        "backend_start": "2018-11-27T19:03:13.257Z",
        "user": {
          "name": "postgres",
          "id": 10
        },
        "pid": 72
      }
    },
    "docker": {
      "container": {
        "name": "20181127190024_sentry-postgres_1",
        "image": "postgres:10.5-alpine",
        "id": "a94223ca73fa218febddee31643d90163b8d11e69691a05cb071adb072c6e8d6",
        "labels": {
          "container_group": "sentry",
          "com": {
            "docker": {
              "compose": {
                "container-number": "1",
                "service": "sentry-postgres",
                "project": "20181127190024",
                "version": "1.22.0",
                "oneoff": "False",
                "config-hash": "27deab6f5cadcfefe37f45ad94e81f123db30bf268be8bb1756681fcd8d31807"
              }
            }
          }
        }
      }
    },
    "host": {
      "name": "59e35ad644a3"
    },
    "type": "beats",
    "beat": {
      "timezone": "+00:00",
      "name": "59e35ad644a3",
      "hostname": "59e35ad644a3",
      "version": "6.4.2"
    }
  },
  "fields": {
    "@timestamp": [
      "2018-11-27T21:30:49.791Z"
    ],
    "postgresql.activity.query_start": [
      "2018-11-27T19:03:13.925Z"
    ],
    "postgresql.activity.backend_start": [
      "2018-11-27T19:03:13.257Z"
    ],
    "postgresql.activity.state_change": [
      "2018-11-27T19:03:13.926Z"
    ]
  }
}

b.json

{
  "_index": "metricbeat-6.4.2-2018.11.27",
  "_type": "doc",
  "_id": "XdMUV2cBTN3LCK5Y_Ykk",
  "_score": 1,
  "_source": {
    "tags": [
      "beats_input_raw_event"
    ],
    "metricset": {
      "name": "container",
      "module": "docker",
      "rtt": 24825,
      "host": "/var/run/docker.sock"
    },
    "@timestamp": "2018-11-27T21:30:51.573Z",
    "@version": "1",
    "docker": {
      "container": {
        "command": "/run.sh",
        "created": "2018-11-27T19:02:35.000Z",
        "ip_addresses": [
          "192.168.144.5"
        ],
        "status": "Up 2 hours",
        "name": "20181127190024_grafana_1",
        "size": {
          "rw": 0,
          "root_fs": 0
        },
        "image": "grafana/grafana:5.3.1",
        "id": "d5d4318b913836c0b1e4022b1679e1ac2bc8ad03dcbccaf56b2ca6e0670ff5b2",
        "labels": {
          "com_docker_compose_config-hash": "db6349188d084d7ffc61147577d6256df4eacbcb90e8a573eb05c970e0b56c42",
          "com_docker_compose_service": "grafana",
          "com_docker_compose_version": "1.22.0",
          "com_docker_compose_oneoff": "False",
          "container_group": "monitoring",
          "com_docker_compose_container-number": "1",
          "com_docker_compose_project": "20181127190024"
        }
      }
    },
    "host": {
      "name": "59e35ad644a3"
    },
    "type": "beats",
    "beat": {
      "name": "59e35ad644a3",
      "timezone": "+00:00",
      "hostname": "59e35ad644a3",
      "version": "6.4.2"
    }
  },
  "fields": {
    "docker.container.created": [
      "2018-11-27T19:02:35.000Z"
    ],
    "@timestamp": [
      "2018-11-27T21:30:51.573Z"
    ]
  }
}