Skip to content

Instantly share code, notes, and snippets.

@spalger
Created October 28, 2014 16:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save spalger/7130be5f9498f28b9554 to your computer and use it in GitHub Desktop.
Save spalger/7130be5f9498f28b9554 to your computer and use it in GitHub Desktop.
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "agent.raw",
"size": 2,
"order": "desc",
"row": true
}
},
"tables": [
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "agent.raw",
"size": 2,
"order": "desc",
"row": true
}
},
"key": "Mozilla/5.0 (X11; Linux x86_64; rv:6.0a1) Gecko/20110421 Firefox/6.0a1",
"tables": [
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "_type",
"size": 5,
"order": "desc",
"row": true
}
},
"tables": [
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "_type",
"size": 5,
"order": "desc",
"row": true
}
},
"key": "apache",
"rows": [
[
"php",
65,
3546,
9803
],
[
"jpg",
0,
5566.9646017699115,
9870
],
[
"gif",
0,
602.6190476190476,
979
],
[
"png",
0,
9996.896551724138,
19859
],
[
"css",
0,
6284.666666666667,
9919
]
],
"columns": [
{
"aggConfig": {
"type": "terms",
"schema": "bucket",
"params": {
"field": "extension",
"size": 5,
"order": "desc"
}
},
"title": "Top 5 extension"
},
{
"aggConfig": {
"type": "min",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Min bytes"
},
{
"aggConfig": {
"type": "avg",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Average bytes"
},
{
"aggConfig": {
"type": "max",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Max bytes"
}
],
"title": "Top 5 _type: apache"
},
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "_type",
"size": 5,
"order": "desc",
"row": true
}
},
"key": "nginx",
"rows": [
[
"png",
6063,
8597.4,
10562
],
[
"php",
4099,
6054,
8009
],
[
"css",
1542,
5972.090909090909,
9276
],
[
"gif",
440,
579.3333333333334,
777
],
[
"jpg",
0,
5776.787878787879,
9988
]
],
"columns": [
{
"aggConfig": {
"type": "terms",
"schema": "bucket",
"params": {
"field": "extension",
"size": 5,
"order": "desc"
}
},
"title": "Top 5 extension"
},
{
"aggConfig": {
"type": "min",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Min bytes"
},
{
"aggConfig": {
"type": "avg",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Average bytes"
},
{
"aggConfig": {
"type": "max",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Max bytes"
}
],
"title": "Top 5 _type: nginx"
}
],
"title": "Top 5 _type"
}
],
"title": "Top 2 agent.raw: Mozilla/5.0 (X11; Linux x86_64; rv:6.0a1) Gecko/20110421 Firefox/6.0a1"
},
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "agent.raw",
"size": 2,
"order": "desc",
"row": true
}
},
"key": "Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.50 Safari/534.24",
"tables": [
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "_type",
"size": 5,
"order": "desc",
"row": true
}
},
"tables": [
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "_type",
"size": 5,
"order": "desc",
"row": true
}
},
"key": "apache",
"rows": [
[
"css",
1729,
5393.875,
9932
],
[
"php",
50,
4276.888888888889,
9600
],
[
"gif",
10,
556.5,
994
],
[
"png",
0,
9257.227272727272,
17855
],
[
"jpg",
0,
5968.275862068966,
9745
]
],
"columns": [
{
"aggConfig": {
"type": "terms",
"schema": "bucket",
"params": {
"field": "extension",
"size": 5,
"order": "desc"
}
},
"title": "Top 5 extension"
},
{
"aggConfig": {
"type": "min",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Min bytes"
},
{
"aggConfig": {
"type": "avg",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Average bytes"
},
{
"aggConfig": {
"type": "max",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Max bytes"
}
],
"title": "Top 5 _type: apache"
},
{
"aggConfig": {
"type": "terms",
"schema": "split",
"params": {
"field": "_type",
"size": 5,
"order": "desc",
"row": true
}
},
"key": "nginx",
"rows": [
[
"png",
9786,
13366.5,
16947
],
[
"php",
4025,
4025,
4025
],
[
"jpg",
2071,
5302,
8137
],
[
"gif",
578,
702,
906
],
[
"css",
0,
3897.4545454545455,
8915
]
],
"columns": [
{
"aggConfig": {
"type": "terms",
"schema": "bucket",
"params": {
"field": "extension",
"size": 5,
"order": "desc"
}
},
"title": "Top 5 extension"
},
{
"aggConfig": {
"type": "min",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Min bytes"
},
{
"aggConfig": {
"type": "avg",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Average bytes"
},
{
"aggConfig": {
"type": "max",
"schema": "metric",
"params": {
"field": "bytes"
}
},
"title": "Max bytes"
}
],
"title": "Top 5 _type: nginx"
}
],
"title": "Top 5 _type"
}
],
"title": "Top 2 agent.raw: Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.50 Safari/534.24"
}
],
"title": "Top 2 agent.raw"
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment