1365 lines
37 KiB
JSON
1365 lines
37 KiB
JSON
{
|
|
"mappings": {
|
|
"_default_": {
|
|
"_all": {
|
|
"norms": false
|
|
},
|
|
"_meta": {
|
|
"version": "6.0.0-alpha1"
|
|
},
|
|
"dynamic_templates": [
|
|
{
|
|
"strings_as_keyword": {
|
|
"mapping": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"match_mapping_type": "string"
|
|
}
|
|
}
|
|
],
|
|
"properties": {
|
|
"@timestamp": {
|
|
"type": "date"
|
|
},
|
|
"amqp": {
|
|
"properties": {
|
|
"app-id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"auto-delete": {
|
|
"type": "boolean"
|
|
},
|
|
"class-id": {
|
|
"type": "long"
|
|
},
|
|
"consumer-count": {
|
|
"type": "long"
|
|
},
|
|
"consumer-tag": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"content-encoding": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"content-type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"correlation-id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"delivery-mode": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"delivery-tag": {
|
|
"type": "long"
|
|
},
|
|
"durable": {
|
|
"type": "boolean"
|
|
},
|
|
"exchange": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"exchange-type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"exclusive": {
|
|
"type": "boolean"
|
|
},
|
|
"expiration": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"if-empty": {
|
|
"type": "boolean"
|
|
},
|
|
"if-unused": {
|
|
"type": "boolean"
|
|
},
|
|
"immediate": {
|
|
"type": "boolean"
|
|
},
|
|
"mandatory": {
|
|
"type": "boolean"
|
|
},
|
|
"message-count": {
|
|
"type": "long"
|
|
},
|
|
"message-id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"method-id": {
|
|
"type": "long"
|
|
},
|
|
"multiple": {
|
|
"type": "boolean"
|
|
},
|
|
"no-ack": {
|
|
"type": "boolean"
|
|
},
|
|
"no-local": {
|
|
"type": "boolean"
|
|
},
|
|
"no-wait": {
|
|
"type": "boolean"
|
|
},
|
|
"passive": {
|
|
"type": "boolean"
|
|
},
|
|
"priority": {
|
|
"type": "long"
|
|
},
|
|
"queue": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"redelivered": {
|
|
"type": "boolean"
|
|
},
|
|
"reply-code": {
|
|
"type": "long"
|
|
},
|
|
"reply-text": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"reply-to": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"routing-key": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"timestamp": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"user-id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"beat": {
|
|
"properties": {
|
|
"hostname": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"bytes_in": {
|
|
"type": "long"
|
|
},
|
|
"bytes_out": {
|
|
"type": "long"
|
|
},
|
|
"cassandra": {
|
|
"properties": {
|
|
"request": {
|
|
"properties": {
|
|
"headers": {
|
|
"properties": {
|
|
"flags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"length": {
|
|
"type": "long"
|
|
},
|
|
"op": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"stream": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"query": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"response": {
|
|
"properties": {
|
|
"authentication": {
|
|
"properties": {
|
|
"class": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"error": {
|
|
"properties": {
|
|
"code": {
|
|
"type": "long"
|
|
},
|
|
"details": {
|
|
"properties": {
|
|
"alive": {
|
|
"type": "long"
|
|
},
|
|
"arg_types": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"blockfor": {
|
|
"type": "long"
|
|
},
|
|
"data_present": {
|
|
"type": "boolean"
|
|
},
|
|
"function": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"num_failures": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"read_consistency": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"received": {
|
|
"type": "long"
|
|
},
|
|
"required": {
|
|
"type": "long"
|
|
},
|
|
"stmt_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"table": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"write_type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"msg": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"event": {
|
|
"properties": {
|
|
"change": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"host": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"port": {
|
|
"type": "long"
|
|
},
|
|
"schema_change": {
|
|
"properties": {
|
|
"args": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"change": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"object": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"table": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"target": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"headers": {
|
|
"properties": {
|
|
"flags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"length": {
|
|
"type": "long"
|
|
},
|
|
"op": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"stream": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"result": {
|
|
"properties": {
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"prepared": {
|
|
"properties": {
|
|
"prepared_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"req_meta": {
|
|
"properties": {
|
|
"col_count": {
|
|
"type": "long"
|
|
},
|
|
"flags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"paging_state": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"pkey_columns": {
|
|
"type": "long"
|
|
},
|
|
"table": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"resp_meta": {
|
|
"properties": {
|
|
"col_count": {
|
|
"type": "long"
|
|
},
|
|
"flags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"paging_state": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"pkey_columns": {
|
|
"type": "long"
|
|
},
|
|
"table": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"rows": {
|
|
"properties": {
|
|
"meta": {
|
|
"properties": {
|
|
"col_count": {
|
|
"type": "long"
|
|
},
|
|
"flags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"paging_state": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"pkey_columns": {
|
|
"type": "long"
|
|
},
|
|
"table": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"num_rows": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"schema_change": {
|
|
"properties": {
|
|
"args": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"change": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"keyspace": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"object": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"table": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"target": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"warnings": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"client_geoip": {
|
|
"properties": {
|
|
"location": {
|
|
"type": "geo_point"
|
|
}
|
|
}
|
|
},
|
|
"client_ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"client_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"client_port": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"client_proc": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"client_server": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"client_service": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"connection_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"connecttime": {
|
|
"type": "long"
|
|
},
|
|
"cpu_time": {
|
|
"type": "long"
|
|
},
|
|
"dest": {
|
|
"properties": {
|
|
"ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ip_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"ipv6": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ipv6_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"mac": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_ip_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"outer_ipv6": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_ipv6_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"port": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"stats": {
|
|
"properties": {
|
|
"net_bytes_total": {
|
|
"type": "long"
|
|
},
|
|
"net_packets_total": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"direction": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"dns": {
|
|
"properties": {
|
|
"additionals": {
|
|
"properties": {
|
|
"class": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"data": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ttl": {
|
|
"type": "long"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"additionals_count": {
|
|
"type": "long"
|
|
},
|
|
"answers": {
|
|
"properties": {
|
|
"class": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"data": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ttl": {
|
|
"type": "long"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"answers_count": {
|
|
"type": "long"
|
|
},
|
|
"authorities": {
|
|
"properties": {
|
|
"class": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"authorities_count": {
|
|
"type": "long"
|
|
},
|
|
"flags": {
|
|
"properties": {
|
|
"authentic_data": {
|
|
"type": "boolean"
|
|
},
|
|
"authoritative": {
|
|
"type": "boolean"
|
|
},
|
|
"checking_disabled": {
|
|
"type": "boolean"
|
|
},
|
|
"recursion_available": {
|
|
"type": "boolean"
|
|
},
|
|
"recursion_desired": {
|
|
"type": "boolean"
|
|
},
|
|
"truncated_response": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
},
|
|
"id": {
|
|
"type": "long"
|
|
},
|
|
"op_code": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"opt": {
|
|
"properties": {
|
|
"do": {
|
|
"type": "boolean"
|
|
},
|
|
"ext_rcode": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"udp_size": {
|
|
"type": "long"
|
|
},
|
|
"version": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"question": {
|
|
"properties": {
|
|
"class": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"etld_plus_one": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"name": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"response_code": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"dnstime": {
|
|
"type": "long"
|
|
},
|
|
"domloadtime": {
|
|
"type": "long"
|
|
},
|
|
"final": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"flow_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"http": {
|
|
"properties": {
|
|
"request": {
|
|
"properties": {
|
|
"body": {
|
|
"norms": false,
|
|
"type": "text"
|
|
},
|
|
"params": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"response": {
|
|
"properties": {
|
|
"body": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"code": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"phrase": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"icmp": {
|
|
"properties": {
|
|
"request": {
|
|
"properties": {
|
|
"code": {
|
|
"type": "long"
|
|
},
|
|
"message": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"response": {
|
|
"properties": {
|
|
"code": {
|
|
"type": "long"
|
|
},
|
|
"message": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"version": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"icmp_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"last_time": {
|
|
"type": "date"
|
|
},
|
|
"loadtime": {
|
|
"type": "long"
|
|
},
|
|
"memcache": {
|
|
"properties": {
|
|
"protocol_type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"request": {
|
|
"properties": {
|
|
"automove": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"bytes": {
|
|
"type": "long"
|
|
},
|
|
"cas_unique": {
|
|
"type": "long"
|
|
},
|
|
"command": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"count_values": {
|
|
"type": "long"
|
|
},
|
|
"delta": {
|
|
"type": "long"
|
|
},
|
|
"dest_class": {
|
|
"type": "long"
|
|
},
|
|
"exptime": {
|
|
"type": "long"
|
|
},
|
|
"flags": {
|
|
"type": "long"
|
|
},
|
|
"initial": {
|
|
"type": "long"
|
|
},
|
|
"line": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"noreply": {
|
|
"type": "boolean"
|
|
},
|
|
"opaque": {
|
|
"type": "long"
|
|
},
|
|
"opcode": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"opcode_value": {
|
|
"type": "long"
|
|
},
|
|
"quiet": {
|
|
"type": "boolean"
|
|
},
|
|
"raw_args": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"sleep_us": {
|
|
"type": "long"
|
|
},
|
|
"source_class": {
|
|
"type": "long"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"vbucket": {
|
|
"type": "long"
|
|
},
|
|
"verbosity": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"response": {
|
|
"properties": {
|
|
"bytes": {
|
|
"type": "long"
|
|
},
|
|
"cas_unique": {
|
|
"type": "long"
|
|
},
|
|
"command": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"count_values": {
|
|
"type": "long"
|
|
},
|
|
"error_msg": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"flags": {
|
|
"type": "long"
|
|
},
|
|
"opaque": {
|
|
"type": "long"
|
|
},
|
|
"opcode": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"opcode_value": {
|
|
"type": "long"
|
|
},
|
|
"status": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"status_code": {
|
|
"type": "long"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"value": {
|
|
"type": "long"
|
|
},
|
|
"version": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"meta": {
|
|
"properties": {
|
|
"cloud": {
|
|
"properties": {
|
|
"availability_zone": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"instance_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"machine_type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"project_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"provider": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"region": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"method": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"mongodb": {
|
|
"properties": {
|
|
"cursorId": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"error": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"fullCollectionName": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"numberReturned": {
|
|
"type": "long"
|
|
},
|
|
"numberToReturn": {
|
|
"type": "long"
|
|
},
|
|
"numberToSkip": {
|
|
"type": "long"
|
|
},
|
|
"query": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"returnFieldsSelector": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"selector": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"startingFrom": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"update": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"mysql": {
|
|
"properties": {
|
|
"affected_rows": {
|
|
"type": "long"
|
|
},
|
|
"error_code": {
|
|
"type": "long"
|
|
},
|
|
"error_message": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"insert_id": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"iserror": {
|
|
"type": "boolean"
|
|
},
|
|
"num_fields": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"num_rows": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"query": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"nfs": {
|
|
"properties": {
|
|
"minor_version": {
|
|
"type": "long"
|
|
},
|
|
"opcode": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"status": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"tag": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"version": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"notes": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_vlan": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"params": {
|
|
"norms": false,
|
|
"type": "text"
|
|
},
|
|
"path": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"pgsql": {
|
|
"properties": {
|
|
"error_code": {
|
|
"type": "long"
|
|
},
|
|
"error_message": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"error_severity": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"iserror": {
|
|
"type": "boolean"
|
|
},
|
|
"num_fields": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"num_rows": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"query": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"port": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"proc": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"query": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"real_ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"redis": {
|
|
"properties": {
|
|
"error": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"return_value": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"release": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"request": {
|
|
"norms": false,
|
|
"type": "text"
|
|
},
|
|
"resource": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"response": {
|
|
"norms": false,
|
|
"type": "text"
|
|
},
|
|
"responsetime": {
|
|
"type": "long"
|
|
},
|
|
"rpc": {
|
|
"properties": {
|
|
"auth_flavor": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"call_size": {
|
|
"type": "long"
|
|
},
|
|
"cred": {
|
|
"properties": {
|
|
"gid": {
|
|
"type": "long"
|
|
},
|
|
"gids": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"machinename": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"stamp": {
|
|
"type": "long"
|
|
},
|
|
"uid": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
},
|
|
"reply_size": {
|
|
"type": "long"
|
|
},
|
|
"status": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"time": {
|
|
"type": "long"
|
|
},
|
|
"time_str": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"xid": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"server": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"service": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"source": {
|
|
"properties": {
|
|
"ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ip_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"ipv6": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"ipv6_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"mac": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_ip": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_ip_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"outer_ipv6": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"outer_ipv6_location": {
|
|
"type": "geo_point"
|
|
},
|
|
"port": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"stats": {
|
|
"properties": {
|
|
"net_bytes_total": {
|
|
"type": "long"
|
|
},
|
|
"net_packets_total": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"start_time": {
|
|
"type": "date"
|
|
},
|
|
"status": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"tags": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"thrift": {
|
|
"properties": {
|
|
"exceptions": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"params": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"return_value": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"service": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
},
|
|
"transport": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"type": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
},
|
|
"vlan": {
|
|
"ignore_above": 1024,
|
|
"type": "keyword"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"order": 0,
|
|
"settings": {
|
|
"index.refresh_interval": "5s"
|
|
},
|
|
"template": "packetbeat-*"
|
|
} |