Last active
January 30, 2018 10:13
-
-
Save avdhoot/b8363fe8ef67842db55d7e0a9db6c36b to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"closed" : { | |
"indices" : [ "graylog_512" ], | |
"total" : 1 | |
}, | |
"reopened" : { | |
"indices" : [ ], | |
"total" : 0 | |
}, | |
"all" : { | |
"indices" : { | |
"graylog_521" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1012, | |
"time_seconds" : 541 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 324853, | |
"time_seconds" : 19929 | |
}, | |
"search_query" : { | |
"total" : 47555663, | |
"time_seconds" : 119283 | |
}, | |
"search_fetch" : { | |
"total" : 688747, | |
"time_seconds" : 2990 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 306429246730, | |
"segments" : 4, | |
"documents" : { | |
"count" : 760231124, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2024, | |
"time_seconds" : 1073 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 649658, | |
"time_seconds" : 39854 | |
}, | |
"search_query" : { | |
"total" : 95113056, | |
"time_seconds" : 232201 | |
}, | |
"search_fetch" : { | |
"total" : 1377867, | |
"time_seconds" : 5971 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 612911374948, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1520462248, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_543" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 840, | |
"time_seconds" : 464 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 325948, | |
"time_seconds" : 18768 | |
}, | |
"search_query" : { | |
"total" : 2649722, | |
"time_seconds" : 22000 | |
}, | |
"search_fetch" : { | |
"total" : 1028717, | |
"time_seconds" : 908 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 267079231703, | |
"segments" : 4, | |
"documents" : { | |
"count" : 625031497, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1680, | |
"time_seconds" : 927 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 651909, | |
"time_seconds" : 37462 | |
}, | |
"search_query" : { | |
"total" : 5380511, | |
"time_seconds" : 43609 | |
}, | |
"search_fetch" : { | |
"total" : 2051006, | |
"time_seconds" : 1907 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 534200375963, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1250062994, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_522" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 896, | |
"time_seconds" : 464 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 324602, | |
"time_seconds" : 19614 | |
}, | |
"search_query" : { | |
"total" : 45301716, | |
"time_seconds" : 105107 | |
}, | |
"search_fetch" : { | |
"total" : 846702, | |
"time_seconds" : 2937 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 281546735837, | |
"segments" : 4, | |
"documents" : { | |
"count" : 664974271, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1792, | |
"time_seconds" : 934 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 649233, | |
"time_seconds" : 39232 | |
}, | |
"search_query" : { | |
"total" : 90686510, | |
"time_seconds" : 207192 | |
}, | |
"search_fetch" : { | |
"total" : 1688783, | |
"time_seconds" : 5842 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 563139216349, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1329948542, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_544" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 320, | |
"time_seconds" : 177 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 128351, | |
"time_seconds" : 7325 | |
}, | |
"search_query" : { | |
"total" : 827798, | |
"time_seconds" : 2718 | |
}, | |
"search_fetch" : { | |
"total" : 385946, | |
"time_seconds" : 332 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 105119620302, | |
"segments" : 176, | |
"documents" : { | |
"count" : 242205676, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 640, | |
"time_seconds" : 352 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 256662, | |
"time_seconds" : 14686 | |
}, | |
"search_query" : { | |
"total" : 1655596, | |
"time_seconds" : 5469 | |
}, | |
"search_fetch" : { | |
"total" : 784462, | |
"time_seconds" : 660 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 209422116161, | |
"segments" : 325, | |
"documents" : { | |
"count" : 484409254, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_541" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1079, | |
"time_seconds" : 576 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 323974, | |
"time_seconds" : 19242 | |
}, | |
"search_query" : { | |
"total" : 4141015, | |
"time_seconds" : 31798 | |
}, | |
"search_fetch" : { | |
"total" : 634123, | |
"time_seconds" : 862 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 322085766453, | |
"segments" : 4, | |
"documents" : { | |
"count" : 816383907, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2157, | |
"time_seconds" : 1162 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 647884, | |
"time_seconds" : 38481 | |
}, | |
"search_query" : { | |
"total" : 8329204, | |
"time_seconds" : 61775 | |
}, | |
"search_fetch" : { | |
"total" : 1276490, | |
"time_seconds" : 1711 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 644218955313, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1632767814, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_520" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 948, | |
"time_seconds" : 485 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 322872, | |
"time_seconds" : 18399 | |
}, | |
"search_query" : { | |
"total" : 49950880, | |
"time_seconds" : 111259 | |
}, | |
"search_fetch" : { | |
"total" : 626093, | |
"time_seconds" : 2570 | |
}, | |
"open_search_contexts" : 3, | |
"store_size_bytes" : 283753789066, | |
"segments" : 4, | |
"documents" : { | |
"count" : 711966969, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1896, | |
"time_seconds" : 981 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 645744, | |
"time_seconds" : 36786 | |
}, | |
"search_query" : { | |
"total" : 100253660, | |
"time_seconds" : 216682 | |
}, | |
"search_fetch" : { | |
"total" : 1253884, | |
"time_seconds" : 5191 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 567594879357, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1423933938, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_542" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1280, | |
"time_seconds" : 748 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 322670, | |
"time_seconds" : 22335 | |
}, | |
"search_query" : { | |
"total" : 2840868, | |
"time_seconds" : 20381 | |
}, | |
"search_fetch" : { | |
"total" : 116792, | |
"time_seconds" : 183 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 376845936425, | |
"segments" : 4, | |
"documents" : { | |
"count" : 978345552, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2561, | |
"time_seconds" : 1488 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 645429, | |
"time_seconds" : 44651 | |
}, | |
"search_query" : { | |
"total" : 5736094, | |
"time_seconds" : 36644 | |
}, | |
"search_fetch" : { | |
"total" : 236999, | |
"time_seconds" : 397 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 753724443227, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1956691104, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_540" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 876, | |
"time_seconds" : 446 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 327529, | |
"time_seconds" : 17577 | |
}, | |
"search_query" : { | |
"total" : 2168595, | |
"time_seconds" : 18415 | |
}, | |
"search_fetch" : { | |
"total" : 1011392, | |
"time_seconds" : 893 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 278763281447, | |
"segments" : 4, | |
"documents" : { | |
"count" : 647408478, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1752, | |
"time_seconds" : 891 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 655031, | |
"time_seconds" : 35174 | |
}, | |
"search_query" : { | |
"total" : 4397738, | |
"time_seconds" : 39645 | |
}, | |
"search_fetch" : { | |
"total" : 2048986, | |
"time_seconds" : 1899 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 557606897669, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1294816956, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_529" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1032, | |
"time_seconds" : 576 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 324475, | |
"time_seconds" : 20509 | |
}, | |
"search_query" : { | |
"total" : 29551657, | |
"time_seconds" : 74239 | |
}, | |
"search_fetch" : { | |
"total" : 491616, | |
"time_seconds" : 2270 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 314793299681, | |
"segments" : 4, | |
"documents" : { | |
"count" : 772400972, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2064, | |
"time_seconds" : 1144 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 648862, | |
"time_seconds" : 41084 | |
}, | |
"search_query" : { | |
"total" : 59331290, | |
"time_seconds" : 144549 | |
}, | |
"search_fetch" : { | |
"total" : 997458, | |
"time_seconds" : 4567 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 629659100295, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1544801944, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_527" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 857, | |
"time_seconds" : 411 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 327634, | |
"time_seconds" : 16918 | |
}, | |
"search_query" : { | |
"total" : 31888895, | |
"time_seconds" : 68681 | |
}, | |
"search_fetch" : { | |
"total" : 435423, | |
"time_seconds" : 1691 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 264667847919, | |
"segments" : 4, | |
"documents" : { | |
"count" : 637440819, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1715, | |
"time_seconds" : 830 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 655253, | |
"time_seconds" : 33859 | |
}, | |
"search_query" : { | |
"total" : 63811708, | |
"time_seconds" : 133694 | |
}, | |
"search_fetch" : { | |
"total" : 851488, | |
"time_seconds" : 3354 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 529426714300, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1274881638, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_528" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1008, | |
"time_seconds" : 502 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 326291, | |
"time_seconds" : 18733 | |
}, | |
"search_query" : { | |
"total" : 29667500, | |
"time_seconds" : 66345 | |
}, | |
"search_fetch" : { | |
"total" : 390964, | |
"time_seconds" : 2059 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 297721278376, | |
"segments" : 4, | |
"documents" : { | |
"count" : 757555723, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2016, | |
"time_seconds" : 1013 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 652568, | |
"time_seconds" : 37505 | |
}, | |
"search_query" : { | |
"total" : 59340010, | |
"time_seconds" : 134474 | |
}, | |
"search_fetch" : { | |
"total" : 776799, | |
"time_seconds" : 4054 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 595512136652, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1515111446, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_525" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 948, | |
"time_seconds" : 544 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 323215, | |
"time_seconds" : 21127 | |
}, | |
"search_query" : { | |
"total" : 37597286, | |
"time_seconds" : 79949 | |
}, | |
"search_fetch" : { | |
"total" : 882649, | |
"time_seconds" : 3208 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 303095065241, | |
"segments" : 4, | |
"documents" : { | |
"count" : 702819194, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1896, | |
"time_seconds" : 1089 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 646422, | |
"time_seconds" : 42274 | |
}, | |
"search_query" : { | |
"total" : 75270427, | |
"time_seconds" : 156120 | |
}, | |
"search_fetch" : { | |
"total" : 1755658, | |
"time_seconds" : 6456 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 606247730084, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1405638388, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_526" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 896, | |
"time_seconds" : 476 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 325133, | |
"time_seconds" : 19440 | |
}, | |
"search_query" : { | |
"total" : 34658459, | |
"time_seconds" : 71402 | |
}, | |
"search_fetch" : { | |
"total" : 747703, | |
"time_seconds" : 2519 | |
}, | |
"open_search_contexts" : 3, | |
"store_size_bytes" : 286608337146, | |
"segments" : 4, | |
"documents" : { | |
"count" : 661686778, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1792, | |
"time_seconds" : 940 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 650281, | |
"time_seconds" : 38876 | |
}, | |
"search_query" : { | |
"total" : 69607893, | |
"time_seconds" : 144786 | |
}, | |
"search_fetch" : { | |
"total" : 1473716, | |
"time_seconds" : 4991 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 573317413041, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1323373556, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_523" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 903, | |
"time_seconds" : 489 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 322826, | |
"time_seconds" : 20875 | |
}, | |
"search_query" : { | |
"total" : 43011496, | |
"time_seconds" : 85135 | |
}, | |
"search_fetch" : { | |
"total" : 818077, | |
"time_seconds" : 2976 | |
}, | |
"open_search_contexts" : 3, | |
"store_size_bytes" : 286710195370, | |
"segments" : 4, | |
"documents" : { | |
"count" : 668524497, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1807, | |
"time_seconds" : 997 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 645544, | |
"time_seconds" : 41819 | |
}, | |
"search_query" : { | |
"total" : 85962235, | |
"time_seconds" : 174604 | |
}, | |
"search_fetch" : { | |
"total" : 1663249, | |
"time_seconds" : 6078 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 573482449745, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1337048994, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_524" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1100, | |
"time_seconds" : 675 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 319180, | |
"time_seconds" : 23689 | |
}, | |
"search_query" : { | |
"total" : 40275882, | |
"time_seconds" : 95323 | |
}, | |
"search_fetch" : { | |
"total" : 867719, | |
"time_seconds" : 3568 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 345446922809, | |
"segments" : 4, | |
"documents" : { | |
"count" : 826984366, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2200, | |
"time_seconds" : 1348 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 638327, | |
"time_seconds" : 47404 | |
}, | |
"search_query" : { | |
"total" : 80791589, | |
"time_seconds" : 189620 | |
}, | |
"search_fetch" : { | |
"total" : 1735757, | |
"time_seconds" : 7175 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 690938634813, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1653968732, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_532" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 932, | |
"time_seconds" : 553 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 322683, | |
"time_seconds" : 22329 | |
}, | |
"search_query" : { | |
"total" : 26949165, | |
"time_seconds" : 56778 | |
}, | |
"search_fetch" : { | |
"total" : 596480, | |
"time_seconds" : 2011 | |
}, | |
"open_search_contexts" : 3, | |
"store_size_bytes" : 294637390080, | |
"segments" : 4, | |
"documents" : { | |
"count" : 693682289, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1864, | |
"time_seconds" : 1085 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 645368, | |
"time_seconds" : 44658 | |
}, | |
"search_query" : { | |
"total" : 53589182, | |
"time_seconds" : 113961 | |
}, | |
"search_fetch" : { | |
"total" : 1207706, | |
"time_seconds" : 4029 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 589353104717, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1387364578, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_533" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 868, | |
"time_seconds" : 474 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 326174, | |
"time_seconds" : 18908 | |
}, | |
"search_query" : { | |
"total" : 22257627, | |
"time_seconds" : 42329 | |
}, | |
"search_fetch" : { | |
"total" : 677271, | |
"time_seconds" : 1891 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 276037641513, | |
"segments" : 4, | |
"documents" : { | |
"count" : 640245357, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1736, | |
"time_seconds" : 933 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 652293, | |
"time_seconds" : 37825 | |
}, | |
"search_query" : { | |
"total" : 44403862, | |
"time_seconds" : 83626 | |
}, | |
"search_fetch" : { | |
"total" : 1356938, | |
"time_seconds" : 3739 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 552152358282, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1280490714, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_530" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 824, | |
"time_seconds" : 447 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 327533, | |
"time_seconds" : 17432 | |
}, | |
"search_query" : { | |
"total" : 29606586, | |
"time_seconds" : 61977 | |
}, | |
"search_fetch" : { | |
"total" : 521618, | |
"time_seconds" : 1829 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 264354038044, | |
"segments" : 4, | |
"documents" : { | |
"count" : 604348051, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1648, | |
"time_seconds" : 876 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 655070, | |
"time_seconds" : 34872 | |
}, | |
"search_query" : { | |
"total" : 59313914, | |
"time_seconds" : 122783 | |
}, | |
"search_fetch" : { | |
"total" : 1028388, | |
"time_seconds" : 3646 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 528814905820, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1208696102, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_531" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 980, | |
"time_seconds" : 551 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 324129, | |
"time_seconds" : 20701 | |
}, | |
"search_query" : { | |
"total" : 29602969, | |
"time_seconds" : 78662 | |
}, | |
"search_fetch" : { | |
"total" : 578484, | |
"time_seconds" : 2190 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 308524537935, | |
"segments" : 4, | |
"documents" : { | |
"count" : 734571736, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1960, | |
"time_seconds" : 1102 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 648279, | |
"time_seconds" : 41387 | |
}, | |
"search_query" : { | |
"total" : 59302641, | |
"time_seconds" : 152941 | |
}, | |
"search_fetch" : { | |
"total" : 1168873, | |
"time_seconds" : 4385 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 617132796203, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1469143472, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_518" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 768, | |
"time_seconds" : 364 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 327618, | |
"time_seconds" : 16862 | |
}, | |
"search_query" : { | |
"total" : 55786082, | |
"time_seconds" : 100827 | |
}, | |
"search_fetch" : { | |
"total" : 908892, | |
"time_seconds" : 2299 | |
}, | |
"open_search_contexts" : 3, | |
"store_size_bytes" : 241498256603, | |
"segments" : 4, | |
"documents" : { | |
"count" : 562822922, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1536, | |
"time_seconds" : 722 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 655246, | |
"time_seconds" : 33725 | |
}, | |
"search_query" : { | |
"total" : 111960936, | |
"time_seconds" : 198436 | |
}, | |
"search_fetch" : { | |
"total" : 1855916, | |
"time_seconds" : 4553 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 483068142796, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1125645844, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_519" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 796, | |
"time_seconds" : 402 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 327747, | |
"time_seconds" : 17157 | |
}, | |
"search_query" : { | |
"total" : 53019279, | |
"time_seconds" : 99805 | |
}, | |
"search_fetch" : { | |
"total" : 849497, | |
"time_seconds" : 2358 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 250877991365, | |
"segments" : 4, | |
"documents" : { | |
"count" : 585723344, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1591, | |
"time_seconds" : 792 | |
}, | |
"get" : { | |
"total" : 1, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 655465, | |
"time_seconds" : 34344 | |
}, | |
"search_query" : { | |
"total" : 106142359, | |
"time_seconds" : 199631 | |
}, | |
"search_fetch" : { | |
"total" : 1680561, | |
"time_seconds" : 4817 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 501815337061, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1171446688, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_516" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 404, | |
"time_seconds" : 367 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 170523, | |
"time_seconds" : 9344 | |
}, | |
"search_query" : { | |
"total" : 59126035, | |
"time_seconds" : 67890 | |
}, | |
"search_fetch" : { | |
"total" : 508893, | |
"time_seconds" : 1214 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 159924324073, | |
"segments" : 4, | |
"documents" : { | |
"count" : 368825029, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 904, | |
"time_seconds" : 694 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 388596, | |
"time_seconds" : 20139 | |
}, | |
"search_query" : { | |
"total" : 118624930, | |
"time_seconds" : 134806 | |
}, | |
"search_fetch" : { | |
"total" : 1084168, | |
"time_seconds" : 2492 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 319824803000, | |
"segments" : 8, | |
"documents" : { | |
"count" : 737650058, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_538" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 924, | |
"time_seconds" : 505 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 326115, | |
"time_seconds" : 18945 | |
}, | |
"search_query" : { | |
"total" : 10381662, | |
"time_seconds" : 33741 | |
}, | |
"search_fetch" : { | |
"total" : 931721, | |
"time_seconds" : 1248 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 293372265856, | |
"segments" : 4, | |
"documents" : { | |
"count" : 686093862, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1848, | |
"time_seconds" : 1000 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 652220, | |
"time_seconds" : 37896 | |
}, | |
"search_query" : { | |
"total" : 20706630, | |
"time_seconds" : 72280 | |
}, | |
"search_fetch" : { | |
"total" : 2037382, | |
"time_seconds" : 2393 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 586844934632, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1372187724, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_517" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 768, | |
"time_seconds" : 362 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 329471, | |
"time_seconds" : 15701 | |
}, | |
"search_query" : { | |
"total" : 58785389, | |
"time_seconds" : 100418 | |
}, | |
"search_fetch" : { | |
"total" : 953159, | |
"time_seconds" : 1964 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 245420370740, | |
"segments" : 4, | |
"documents" : { | |
"count" : 561021093, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1536, | |
"time_seconds" : 714 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 658985, | |
"time_seconds" : 31370 | |
}, | |
"search_query" : { | |
"total" : 117323327, | |
"time_seconds" : 202493 | |
}, | |
"search_fetch" : { | |
"total" : 1905533, | |
"time_seconds" : 4004 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 490904370362, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1122042186, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_539" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 897, | |
"time_seconds" : 472 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 326603, | |
"time_seconds" : 18375 | |
}, | |
"search_query" : { | |
"total" : 2215247, | |
"time_seconds" : 24365 | |
}, | |
"search_fetch" : { | |
"total" : 1011380, | |
"time_seconds" : 1084 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 285777049609, | |
"segments" : 4, | |
"documents" : { | |
"count" : 663068124, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1795, | |
"time_seconds" : 947 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 653212, | |
"time_seconds" : 36743 | |
}, | |
"search_query" : { | |
"total" : 4536564, | |
"time_seconds" : 45691 | |
}, | |
"search_fetch" : { | |
"total" : 2075163, | |
"time_seconds" : 2367 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 571612575710, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1326136248, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_514" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 650, | |
"time_seconds" : 373 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 159788, | |
"time_seconds" : 11488 | |
}, | |
"search_query" : { | |
"total" : 60755318, | |
"time_seconds" : 203084 | |
}, | |
"search_fetch" : { | |
"total" : 59415, | |
"time_seconds" : 447 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 375086396667, | |
"segments" : 187, | |
"documents" : { | |
"count" : 997411049, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1618, | |
"time_seconds" : 874 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 399442, | |
"time_seconds" : 27167 | |
}, | |
"search_query" : { | |
"total" : 120853959, | |
"time_seconds" : 415616 | |
}, | |
"search_fetch" : { | |
"total" : 129952, | |
"time_seconds" : 849 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 745252183343, | |
"segments" : 392, | |
"documents" : { | |
"count" : 1994822098, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_536" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1028, | |
"time_seconds" : 568 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 324796, | |
"time_seconds" : 20046 | |
}, | |
"search_query" : { | |
"total" : 14356629, | |
"time_seconds" : 49243 | |
}, | |
"search_fetch" : { | |
"total" : 1007290, | |
"time_seconds" : 992 | |
}, | |
"open_search_contexts" : 3, | |
"store_size_bytes" : 320305209922, | |
"segments" : 4, | |
"documents" : { | |
"count" : 772142337, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2056, | |
"time_seconds" : 1139 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 649575, | |
"time_seconds" : 40098 | |
}, | |
"search_query" : { | |
"total" : 28665090, | |
"time_seconds" : 99101 | |
}, | |
"search_fetch" : { | |
"total" : 1999639, | |
"time_seconds" : 2123 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 640722119870, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1544284674, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_515" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 566, | |
"time_seconds" : 302 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 214075, | |
"time_seconds" : 10544 | |
}, | |
"search_query" : { | |
"total" : 60316978, | |
"time_seconds" : 196025 | |
}, | |
"search_fetch" : { | |
"total" : 639161, | |
"time_seconds" : 2419 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 358623642596, | |
"segments" : 183, | |
"documents" : { | |
"count" : 833994083, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1410, | |
"time_seconds" : 724 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 533479, | |
"time_seconds" : 26187 | |
}, | |
"search_query" : { | |
"total" : 120931363, | |
"time_seconds" : 381077 | |
}, | |
"search_fetch" : { | |
"total" : 1318042, | |
"time_seconds" : 4847 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 721286067563, | |
"segments" : 349, | |
"documents" : { | |
"count" : 1667988166, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_537" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 923, | |
"time_seconds" : 488 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 326357, | |
"time_seconds" : 18673 | |
}, | |
"search_query" : { | |
"total" : 12406550, | |
"time_seconds" : 41059 | |
}, | |
"search_fetch" : { | |
"total" : 1087651, | |
"time_seconds" : 1015 | |
}, | |
"open_search_contexts" : 1, | |
"store_size_bytes" : 292294452471, | |
"segments" : 4, | |
"documents" : { | |
"count" : 685334777, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 1844, | |
"time_seconds" : 982 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 652671, | |
"time_seconds" : 37370 | |
}, | |
"search_query" : { | |
"total" : 24888410, | |
"time_seconds" : 79298 | |
}, | |
"search_fetch" : { | |
"total" : 2160238, | |
"time_seconds" : 2161 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 584693975944, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1370669554, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_534" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1032, | |
"time_seconds" : 545 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 322074, | |
"time_seconds" : 18577 | |
}, | |
"search_query" : { | |
"total" : 16605775, | |
"time_seconds" : 36053 | |
}, | |
"search_fetch" : { | |
"total" : 611468, | |
"time_seconds" : 1053 | |
}, | |
"open_search_contexts" : 2, | |
"store_size_bytes" : 306096875286, | |
"segments" : 4, | |
"documents" : { | |
"count" : 772575306, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2064, | |
"time_seconds" : 1088 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 644023, | |
"time_seconds" : 37170 | |
}, | |
"search_query" : { | |
"total" : 33181513, | |
"time_seconds" : 74473 | |
}, | |
"search_fetch" : { | |
"total" : 1228311, | |
"time_seconds" : 2104 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 612257056547, | |
"segments" : 8, | |
"documents" : { | |
"count" : 1545150612, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
}, | |
"graylog_513" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 2, | |
"time_seconds" : 0 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 2, | |
"time_seconds" : 0 | |
}, | |
"search_query" : { | |
"total" : 51410912, | |
"time_seconds" : 88167 | |
}, | |
"search_fetch" : { | |
"total" : 794, | |
"time_seconds" : 2 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 125565992839, | |
"segments" : 103, | |
"documents" : { | |
"count" : 298525967, | |
"deleted" : 40035 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2, | |
"time_seconds" : 0 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 2, | |
"time_seconds" : 0 | |
}, | |
"search_query" : { | |
"total" : 102000658, | |
"time_seconds" : 178305 | |
}, | |
"search_fetch" : { | |
"total" : 1493, | |
"time_seconds" : 4 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 251131985674, | |
"segments" : 206, | |
"documents" : { | |
"count" : 597051934, | |
"deleted" : 80070 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : true | |
}, | |
"graylog_535" : { | |
"primary_shards" : { | |
"flush" : { | |
"total" : 1307, | |
"time_seconds" : 741 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 322690, | |
"time_seconds" : 22352 | |
}, | |
"search_query" : { | |
"total" : 15060845, | |
"time_seconds" : 45285 | |
}, | |
"search_fetch" : { | |
"total" : 345019, | |
"time_seconds" : 808 | |
}, | |
"open_search_contexts" : 0, | |
"store_size_bytes" : 384573352333, | |
"segments" : 4, | |
"documents" : { | |
"count" : 1000285691, | |
"deleted" : 0 | |
} | |
}, | |
"all_shards" : { | |
"flush" : { | |
"total" : 2612, | |
"time_seconds" : 1473 | |
}, | |
"get" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"index" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"merge" : { | |
"total" : 0, | |
"time_seconds" : 0 | |
}, | |
"refresh" : { | |
"total" : 645366, | |
"time_seconds" : 44729 | |
}, | |
"search_query" : { | |
"total" : 30304964, | |
"time_seconds" : 88804 | |
}, | |
"search_fetch" : { | |
"total" : 691678, | |
"time_seconds" : 1668 | |
}, | |
"open_search_contexts" : 4, | |
"store_size_bytes" : 769200062775, | |
"segments" : 8, | |
"documents" : { | |
"count" : 2000571382, | |
"deleted" : 0 | |
} | |
}, | |
"routing" : [ { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 0, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "u9mHsUGOT72-e2tvEkjx3w", | |
"node_name" : "e2", | |
"node_hostname" : "172.19.38.36", | |
"relocating_to" : null | |
}, { | |
"id" : 1, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "hbUpdefDSVSBrRkkpAXjHg", | |
"node_name" : "e1", | |
"node_hostname" : "172.19.37.247", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 2, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : false, | |
"node_id" : "0ztAoux4Rq-bx4vkJgQAEw", | |
"node_name" : "e3", | |
"node_hostname" : "172.19.15.166", | |
"relocating_to" : null | |
}, { | |
"id" : 3, | |
"state" : "started", | |
"active" : true, | |
"primary" : true, | |
"node_id" : "xxKE2H3fRgGP7piUJsHLUg", | |
"node_name" : "e4", | |
"node_hostname" : "172.19.104.193", | |
"relocating_to" : null | |
} ], | |
"reopened" : false | |
} | |
} | |
} | |
} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"graylog_543" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_521" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_522" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_544" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_541" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_520" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_542" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_540" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"elastalert_status" : { | |
"mappings" : { | |
"elastalert_error" : { | |
"properties" : { | |
"@timestamp" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
}, | |
"data" : { | |
"type" : "object", | |
"enabled" : false | |
}, | |
"message" : { | |
"type" : "string" | |
}, | |
"traceback" : { | |
"type" : "string" | |
} | |
} | |
}, | |
"elastalert" : { | |
"properties" : { | |
"@timestamp" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
}, | |
"aggregate_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"alert_time" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
}, | |
"match_body" : { | |
"type" : "object", | |
"enabled" : false | |
}, | |
"rule_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
}, | |
"past_elastalert" : { | |
"properties" : { | |
"@timestamp" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
}, | |
"aggregate_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"match_body" : { | |
"type" : "object", | |
"enabled" : false | |
}, | |
"rule_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
}, | |
"silence" : { | |
"properties" : { | |
"@timestamp" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
}, | |
"rule_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"until" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
} | |
} | |
}, | |
"elastalert_status" : { | |
"properties" : { | |
"@timestamp" : { | |
"type" : "date", | |
"format" : "dateOptionalTime" | |
}, | |
"rule_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_529" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_527" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_528" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_525" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_526" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_523" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_524" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_532" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_533" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_530" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_531" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_518" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_519" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_516" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_538" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_517" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_539" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_536" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_514" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_515" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_537" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_534" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"device" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"instanceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"volumeId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_535" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
}, | |
"graylog_513" : { | |
"mappings" : { | |
"message" : { | |
"dynamic_templates" : [ { | |
"internal_fields" : { | |
"mapping" : { | |
"index" : "not_analyzed", | |
"type" : "string" | |
}, | |
"match" : "gl2_*" | |
} | |
}, { | |
"store_generic" : { | |
"mapping" : { | |
"index" : "not_analyzed" | |
}, | |
"match" : "*" | |
} | |
} ], | |
"properties" : { | |
"application_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_region" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"aws_source" : { | |
"type" : "boolean" | |
}, | |
"consoleLogin" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"database" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"dir_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"errorMessage" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_source" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"event_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"facility" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"full_message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"gl2_remote_ip" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_remote_port" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_input" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"gl2_source_node" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"index" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"level" : { | |
"type" : "long" | |
}, | |
"lock_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"message" : { | |
"type" : "string", | |
"analyzer" : "standard" | |
}, | |
"process_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"query" : { | |
"type" : "string", | |
"index" : "no" | |
}, | |
"query_time" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"recipient_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"request_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"returnValue" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"rows_examined" : { | |
"type" : "long" | |
}, | |
"rows_sent" : { | |
"type" : "long" | |
}, | |
"sequenceId" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"session_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"source" : { | |
"type" : "string", | |
"analyzer" : "analyzer_keyword" | |
}, | |
"source_address" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"status" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"streams" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"timestamp" : { | |
"type" : "date", | |
"format" : "yyyy-MM-dd HH:mm:ss.SSS" | |
}, | |
"user" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_access_key_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_account_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_agent" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_name" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_arn" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_principal_id" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_creation_date" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
}, | |
"user_session_mfa_authenticated" : { | |
"type" : "boolean" | |
}, | |
"user_type" : { | |
"type" : "string", | |
"index" : "not_analyzed" | |
} | |
} | |
} | |
} | |
} | |
} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"total" : 32, | |
"ranges" : [ { | |
"index_name" : "graylog_514", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2017-12-31T00:09:30.173Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_515", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-01T00:00:17.817Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_517", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-03T00:00:02.277Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_518", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-04T00:00:01.883Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_519", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-05T00:00:01.944Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_520", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-06T00:00:01.880Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_521", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-07T00:00:02.005Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_522", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-08T00:00:01.972Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_524", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-10T00:00:02.101Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_525", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-11T00:00:02.359Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_528", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-14T00:00:04.168Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_529", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-15T00:00:04.310Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_530", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-16T00:00:04.193Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_531", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-17T00:00:04.182Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_532", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-18T00:00:04.242Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_534", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-20T00:00:04.251Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_535", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-21T00:00:04.218Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_536", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-22T00:00:04.822Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_537", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-23T00:00:04.182Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_538", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-24T00:00:04.259Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_541", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-27T00:00:04.212Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_542", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-28T00:00:04.215Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_543", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-29T00:00:04.192Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_544", | |
"begin" : "1970-01-01T00:00:00.000Z", | |
"end" : "1970-01-01T00:00:00.000Z", | |
"calculated_at" : "2018-01-30T00:00:04.246Z", | |
"took_ms" : 0 | |
}, { | |
"index_name" : "graylog_513", | |
"begin" : "2017-03-14T12:53:16.000Z", | |
"end" : "2018-01-24T12:56:22.000Z", | |
"calculated_at" : "2018-01-29T11:44:53.938Z", | |
"took_ms" : 58491 | |
}, { | |
"index_name" : "graylog_539", | |
"begin" : "2017-12-06T23:54:22.000Z", | |
"end" : "2018-01-26T00:01:54.000Z", | |
"calculated_at" : "2018-01-26T00:00:34.676Z", | |
"took_ms" : 55394 | |
}, { | |
"index_name" : "graylog_540", | |
"begin" : "2017-12-02T03:01:02.000Z", | |
"end" : "2018-01-27T00:00:19.763Z", | |
"calculated_at" : "2018-01-27T00:00:35.344Z", | |
"took_ms" : 46813 | |
}, { | |
"index_name" : "graylog_526", | |
"begin" : "2017-12-01T01:56:43.000Z", | |
"end" : "2018-11-30T09:43:43.000Z", | |
"calculated_at" : "2018-01-13T00:00:35.261Z", | |
"took_ms" : 47133 | |
}, { | |
"index_name" : "graylog_533", | |
"begin" : "2017-12-01T01:30:34.000Z", | |
"end" : "2018-11-30T18:14:43.000Z", | |
"calculated_at" : "2018-01-20T00:00:35.005Z", | |
"took_ms" : 56416 | |
}, { | |
"index_name" : "graylog_523", | |
"begin" : "2017-12-01T05:43:42.000Z", | |
"end" : "2018-11-30T21:30:22.000Z", | |
"calculated_at" : "2018-01-10T00:00:32.953Z", | |
"took_ms" : 54505 | |
}, { | |
"index_name" : "graylog_527", | |
"begin" : "2017-12-01T00:08:35.000Z", | |
"end" : "2018-11-30T22:26:42.000Z", | |
"calculated_at" : "2018-01-14T00:00:34.815Z", | |
"took_ms" : 48463 | |
}, { | |
"index_name" : "graylog_516", | |
"begin" : "2017-12-01T00:09:53.000Z", | |
"end" : "2018-11-30T23:59:53.000Z", | |
"calculated_at" : "2018-01-03T00:00:41.633Z", | |
"took_ms" : 31484 | |
} ] | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment