diff --git a/packages/netflow/changelog.yml b/packages/netflow/changelog.yml index ef135a2a090f..c02c40d53cb3 100644 --- a/packages/netflow/changelog.yml +++ b/packages/netflow/changelog.yml @@ -1,6 +1,9 @@ # newer versions go on top - version: "0.1.0" changes: + - description: Change field type of `netflow.application_category_nam` and `netflow.application_sub_category_name` to keyword to ensure there are no type conflicts between vendors. + type: enhancement + link: https://github.com/elastic/integrations/pull/697 - description: initial release type: enhancement # can be one of: enhancement, bugfix, breaking-change link: https://github.com/elastic/integrations/pull/23 diff --git a/packages/netflow/data_stream/log/fields/package-fields.yml b/packages/netflow/data_stream/log/fields/package-fields.yml index df1080f362f8..1915b6a75d03 100644 --- a/packages/netflow/data_stream/log/fields/package-fields.yml +++ b/packages/netflow/data_stream/log/fields/package-fields.yml @@ -55,1489 +55,1197 @@ description: > NetFlow version used. - - name: octet_delta_count + - name: absolute_error + type: double + - name: address_pool_high_threshold type: long - - name: packet_delta_count + - name: address_pool_low_threshold type: long - - name: delta_flow_count + - name: address_port_mapping_high_threshold type: long - - name: protocol_identifier - type: short - - name: ip_class_of_service - type: short - - name: tcp_control_bits + - name: address_port_mapping_low_threshold + type: long + - name: address_port_mapping_per_user_high_threshold + type: long + - name: afc_protocol type: integer - - name: source_transport_port + - name: afc_protocol_name + type: keyword + - name: anonymization_flags type: integer - - name: source_ipv4_address - type: ip - - name: source_ipv4_prefix_length - type: short - - name: ingress_interface - type: long - - name: destination_transport_port + - name: anonymization_technique type: integer - - name: destination_ipv4_address - type: ip - - name: destination_ipv4_prefix_length + - name: application_business-relevance + type: long + - name: application_category_name + type: keyword + - name: application_description + type: keyword + - name: application_group_name + type: keyword + - name: application_http_uri_statistics type: short - - name: egress_interface + - name: application_http_user-agent + type: short + - name: application_id + type: short + - name: application_name + type: keyword + - name: application_sub_category_name + type: keyword + - name: application_traffic-class type: long - - name: ip_next_hop_ipv4_address - type: ip - - name: bgp_source_as_number + - name: art_client_network_time_maximum type: long - - name: bgp_destination_as_number + - name: art_client_network_time_minimum type: long - - name: bgp_next_hop_ipv4_address - type: ip - - name: post_mcast_packet_delta_count + - name: art_client_network_time_sum type: long - - name: post_mcast_octet_delta_count + - name: art_clientpackets type: long - - name: flow_end_sys_up_time + - name: art_count_late_responses type: long - - name: flow_start_sys_up_time + - name: art_count_new_connections type: long - - name: post_octet_delta_count + - name: art_count_responses type: long - - name: post_packet_delta_count + - name: art_count_responses_histogram_bucket1 type: long - - name: minimum_ip_total_length + - name: art_count_responses_histogram_bucket2 type: long - - name: maximum_ip_total_length + - name: art_count_responses_histogram_bucket3 type: long - - name: source_ipv6_address - type: ip - - name: destination_ipv6_address - type: ip - - name: source_ipv6_prefix_length - type: short - - name: destination_ipv6_prefix_length - type: short - - name: flow_label_ipv6 + - name: art_count_responses_histogram_bucket4 type: long - - name: icmp_type_code_ipv4 - type: integer - - name: igmp_type - type: short - - name: sampling_interval + - name: art_count_responses_histogram_bucket5 type: long - - name: sampling_algorithm - type: short - - name: flow_active_timeout - type: integer - - name: flow_idle_timeout - type: integer - - name: engine_type - type: short - - name: engine_id - type: short - - name: exported_octet_total_count + - name: art_count_responses_histogram_bucket6 type: long - - name: exported_message_total_count + - name: art_count_responses_histogram_bucket7 type: long - - name: exported_flow_record_total_count + - name: art_count_retransmissions type: long - - name: ipv4_router_sc - type: ip - - name: source_ipv4_prefix - type: ip - - name: destination_ipv4_prefix - type: ip - - name: mpls_top_label_type - type: short - - name: mpls_top_label_ipv4_address - type: ip - - name: sampler_id - type: short - - name: sampler_mode - type: short - - name: sampler_random_interval + - name: art_count_transactions type: long - - name: class_id + - name: art_network_time_maximum type: long - - name: minimum_ttl - type: short - - name: maximum_ttl - type: short - - name: fragment_identification + - name: art_network_time_minimum type: long - - name: post_ip_class_of_service - type: short - - name: source_mac_address - type: keyword - - name: post_destination_mac_address - type: keyword - - name: vlan_id - type: integer - - name: post_vlan_id - type: integer - - name: ip_version - type: short - - name: flow_direction - type: short - - name: ip_next_hop_ipv6_address - type: ip - - name: bgp_next_hop_ipv6_address - type: ip - - name: ipv6_extension_headers + - name: art_network_time_sum type: long - - name: mpls_top_label_stack_section - type: short - - name: mpls_label_stack_section2 - type: short - - name: mpls_label_stack_section3 - type: short - - name: mpls_label_stack_section4 - type: short - - name: mpls_label_stack_section5 - type: short - - name: mpls_label_stack_section6 - type: short - - name: mpls_label_stack_section7 - type: short - - name: mpls_label_stack_section8 - type: short - - name: mpls_label_stack_section9 - type: short - - name: mpls_label_stack_section10 - type: short - - name: destination_mac_address - type: keyword - - name: post_source_mac_address - type: keyword - - name: interface_name - type: keyword - - name: interface_description - type: keyword - - name: sampler_name - type: keyword - - name: octet_total_count + - name: art_response_time_maximum type: long - - name: packet_total_count + - name: art_response_time_minimum type: long - - name: flags_and_sampler_id + - name: art_response_time_sum type: long - - name: fragment_offset - type: integer - - name: forwarding_status - type: short - - name: mpls_vpn_route_distinguisher - type: short - - name: mpls_top_label_prefix_length - type: short - - name: src_traffic_index + - name: art_server_network_time_maximum type: long - - name: dst_traffic_index + - name: art_server_network_time_minimum type: long - - name: application_description - type: keyword - - name: application_id - type: short - - name: application_name - type: keyword - - name: post_ip_diff_serv_code_point - type: short - - name: multicast_replication_factor + - name: art_server_network_time_sum type: long - - name: class_name - type: keyword - - name: classification_engine_id - type: short - - name: layer2packet_section_offset - type: integer - - name: layer2packet_section_size - type: integer - - name: layer2packet_section_data - type: short - - name: bgp_next_adjacent_as_number + - name: art_server_response_time_maximum type: long - - name: bgp_prev_adjacent_as_number + - name: art_server_response_time_minimum type: long - - name: exporter_ipv4_address - type: ip - - name: exporter_ipv6_address - type: ip - - name: dropped_octet_delta_count + - name: art_server_response_time_sum type: long - - name: dropped_packet_delta_count + - name: art_serverpackets type: long - - name: dropped_octet_total_count + - name: art_total_response_time_maximum type: long - - name: dropped_packet_total_count + - name: art_total_response_time_minimum type: long - - name: flow_end_reason - type: short - - name: common_properties_id + - name: art_total_response_time_sum type: long - - name: observation_point_id + - name: art_total_transaction_time_maximum type: long - - name: icmp_type_code_ipv6 - type: integer - - name: mpls_top_label_ipv6_address - type: ip - - name: line_card_id + - name: art_total_transaction_time_minimum type: long - - name: port_id + - name: art_total_transaction_time_sum type: long - - name: metering_process_id + - name: assembled_fragment_count type: long - - name: exporting_process_id + - name: audit_counter type: long - - name: template_id - type: integer - - name: wlan_channel_id - type: short - - name: wlan_ssid - type: keyword - - name: flow_id - type: long - - name: observation_domain_id - type: long - - name: flow_start_seconds - type: date - - name: flow_end_seconds - type: date - - name: flow_start_milliseconds - type: date - - name: flow_end_milliseconds - type: date - - name: flow_start_microseconds - type: date - - name: flow_end_microseconds - type: date - - name: flow_start_nanoseconds - type: date - - name: flow_end_nanoseconds - type: date - - name: flow_start_delta_microseconds - type: long - - name: flow_end_delta_microseconds - type: long - - name: system_init_time_milliseconds - type: date - - name: flow_duration_milliseconds - type: long - - name: flow_duration_microseconds - type: long - - name: observed_flow_total_count - type: long - - name: ignored_packet_total_count - type: long - - name: ignored_octet_total_count - type: long - - name: not_sent_flow_total_count + - name: average_interarrival_time type: long - - name: not_sent_packet_total_count + - name: bgp_destination_as_number type: long - - name: not_sent_octet_total_count + - name: bgp_next_adjacent_as_number type: long - - name: destination_ipv6_prefix + - name: bgp_next_hop_ipv4_address type: ip - - name: source_ipv6_prefix + - name: bgp_next_hop_ipv6_address type: ip - - name: post_octet_total_count - type: long - - name: post_packet_total_count - type: long - - name: flow_key_indicator - type: long - - name: post_mcast_packet_total_count + - name: bgp_prev_adjacent_as_number type: long - - name: post_mcast_octet_total_count + - name: bgp_source_as_number type: long - - name: icmp_type_ipv4 - type: short - - name: icmp_code_ipv4 - type: short - - name: icmp_type_ipv6 + - name: bgp_validity_state type: short - - name: icmp_code_ipv6 + - name: biflow_direction type: short - - name: udp_source_port - type: integer - - name: udp_destination_port - type: integer - - name: tcp_source_port - type: integer - - name: tcp_destination_port + - name: bind_ipv4_address + type: ip + - name: bind_transport_port type: integer - - name: tcp_sequence_number - type: long - - name: tcp_acknowledgement_number + - name: class_id type: long - - name: tcp_window_size - type: integer - - name: tcp_urgent_pointer - type: integer - - name: tcp_header_length + - name: class_name + type: keyword + - name: classification_engine_id type: short - - name: ip_header_length + - name: collection_time_milliseconds + type: date + - name: collector_certificate type: short - - name: total_length_ipv4 - type: integer - - name: payload_length_ipv6 + - name: collector_ipv4_address + type: ip + - name: collector_ipv6_address + type: ip + - name: collector_transport_port type: integer - - name: ip_ttl - type: short - - name: next_header_ipv6 - type: short - - name: mpls_payload_length + - name: common_properties_id type: long - - name: ip_diff_serv_code_point - type: short - - name: ip_precedence - type: short - - name: fragment_flags - type: short - - name: octet_delta_sum_of_squares + - name: confidence_level + type: double + - name: conn_ipv4_address + type: ip + - name: conn_transport_port + type: integer + - name: connection_sum_duration_seconds type: long - - name: octet_total_sum_of_squares + - name: connection_transaction_id type: long - - name: mpls_top_label_ttl - type: short - - name: mpls_label_stack_length + - name: conntrack_id type: long - - name: mpls_label_stack_depth + - name: data_byte_count type: long - - name: mpls_top_label_exp + - name: data_link_frame_section type: short - - name: ip_payload_length - type: long - - name: udp_message_length + - name: data_link_frame_size type: integer - - name: is_multicast - type: short - - name: ipv4_ihl - type: short - - name: ipv4_options - type: long - - name: tcp_options + - name: data_link_frame_type + type: integer + - name: data_records_reliability + type: boolean + - name: delta_flow_count type: long - - name: padding_octets - type: short - - name: collector_ipv4_address + - name: destination_ipv4_address type: ip - - name: collector_ipv6_address + - name: destination_ipv4_prefix type: ip - - name: export_interface - type: long - - name: export_protocol_version + - name: destination_ipv4_prefix_length type: short - - name: export_transport_protocol + - name: destination_ipv6_address + type: ip + - name: destination_ipv6_prefix + type: ip + - name: destination_ipv6_prefix_length type: short - - name: collector_transport_port - type: integer - - name: exporter_transport_port + - name: destination_mac_address + type: keyword + - name: destination_transport_port type: integer - - name: tcp_syn_total_count + - name: digest_hash_value type: long - - name: tcp_fin_total_count + - name: distinct_count_of_destination_ip_address type: long - - name: tcp_rst_total_count + - name: distinct_count_of_destination_ipv4_address type: long - - name: tcp_psh_total_count + - name: distinct_count_of_destination_ipv6_address type: long - - name: tcp_ack_total_count + - name: distinct_count_of_source_ip_address type: long - - name: tcp_urg_total_count + - name: distinct_count_of_source_ipv4_address type: long - - name: ip_total_length + - name: distinct_count_of_source_ipv6_address type: long - - name: post_nat_source_ipv4_address - type: ip - - name: post_nat_destination_ipv4_address - type: ip - - name: post_napt_source_transport_port + - name: dns_authoritative + type: short + - name: dns_cname + type: keyword + - name: dns_id type: integer - - name: post_napt_destination_transport_port + - name: dns_mx_exchange + type: keyword + - name: dns_mx_preference type: integer - - name: nat_originating_address_realm + - name: dns_nsd_name + type: keyword + - name: dns_nx_domain type: short - - name: nat_event + - name: dns_ptrd_name + type: keyword + - name: dns_qname + type: keyword + - name: dns_qr_type + type: integer + - name: dns_query_response type: short - - name: initiator_octets + - name: dns_rr_section + type: short + - name: dns_soa_expire type: long - - name: responder_octets + - name: dns_soa_minimum type: long - - name: firewall_event - type: short - - name: ingress_vrfid + - name: dns_soa_refresh type: long - - name: egress_vrfid + - name: dns_soa_retry type: long - - name: vr_fname + - name: dns_soa_serial + type: long + - name: dns_soam_name type: keyword - - name: post_mpls_top_label_exp - type: short - - name: tcp_window_scale - type: integer - - name: biflow_direction - type: short - - name: ethernet_header_length - type: short - - name: ethernet_payload_length + - name: dns_soar_name + type: keyword + - name: dns_srv_port type: integer - - name: ethernet_total_length + - name: dns_srv_priority type: integer - - name: dot1q_vlan_id + - name: dns_srv_target type: integer - - name: dot1q_priority - type: short - - name: dot1q_customer_vlan_id + - name: dns_srv_weight type: integer + - name: dns_ttl + type: long + - name: dns_txt_data + type: keyword + - name: dot1q_customer_dei + type: boolean + - name: dot1q_customer_destination_mac_address + type: keyword - name: dot1q_customer_priority type: short - - name: metro_evc_id + - name: dot1q_customer_source_mac_address type: keyword - - name: metro_evc_type + - name: dot1q_customer_vlan_id + type: integer + - name: dot1q_dei + type: boolean + - name: dot1q_priority type: short - - name: pseudo_wire_id + - name: dot1q_service_instance_id type: long - - name: pseudo_wire_type + - name: dot1q_service_instance_priority + type: short + - name: dot1q_service_instance_tag + type: short + - name: dot1q_vlan_id type: integer - - name: pseudo_wire_control_word + - name: dropped_layer2_octet_delta_count type: long - - name: ingress_physical_interface + - name: dropped_layer2_octet_total_count + type: long + - name: dropped_octet_delta_count + type: long + - name: dropped_octet_total_count + type: long + - name: dropped_packet_delta_count + type: long + - name: dropped_packet_total_count + type: long + - name: dst_traffic_index + type: long + - name: egress_broadcast_packet_total_count + type: long + - name: egress_interface + type: long + - name: egress_interface_type type: long - name: egress_physical_interface type: long - - name: post_dot1q_vlan_id + - name: egress_unicast_packet_total_count + type: long + - name: egress_vrfid + type: long + - name: encrypted_technology + type: keyword + - name: engine_id + type: short + - name: engine_type + type: short + - name: ethernet_header_length + type: short + - name: ethernet_payload_length type: integer - - name: post_dot1q_customer_vlan_id + - name: ethernet_total_length type: integer - name: ethernet_type type: integer - - name: post_ip_precedence + - name: expired_fragment_count + type: long + - name: export_interface + type: long + - name: export_protocol_version type: short - - name: collection_time_milliseconds - type: date - name: export_sctp_stream_id type: integer - - name: max_export_seconds - type: date - - name: max_flow_end_seconds - type: date - - name: message_md5_checksum - type: short - - name: message_scope - type: short - - name: min_export_seconds - type: date - - name: min_flow_start_seconds - type: date - - name: opaque_octets - type: short - - name: session_scope - type: short - - name: max_flow_end_microseconds - type: date - - name: max_flow_end_milliseconds - type: date - - name: max_flow_end_nanoseconds - type: date - - name: min_flow_start_microseconds - type: date - - name: min_flow_start_milliseconds - type: date - - name: min_flow_start_nanoseconds - type: date - - name: collector_certificate - type: short - - name: exporter_certificate - type: short - - name: data_records_reliability - type: boolean - - name: observation_point_type + - name: export_transport_protocol type: short - - name: new_connection_delta_count + - name: exported_flow_record_total_count type: long - - name: connection_sum_duration_seconds + - name: exported_message_total_count type: long - - name: connection_transaction_id + - name: exported_octet_total_count type: long - - name: post_nat_source_ipv6_address + - name: exporter_certificate + type: short + - name: exporter_ipv4_address type: ip - - name: post_nat_destination_ipv6_address + - name: exporter_ipv6_address type: ip - - name: nat_pool_id + - name: exporter_transport_port + type: integer + - name: exporting_process_id type: long - - name: nat_pool_name - type: keyword - - name: anonymization_flags + - name: external_address_realm + type: short + - name: firewall_event + type: short + - name: first_eight_non_empty_packet_directions + type: short + - name: first_non_empty_packet_size type: integer - - name: anonymization_technique + - name: first_packet_banner + type: keyword + - name: flags_and_sampler_id + type: long + - name: flow_active_timeout type: integer - - name: information_element_index + - name: flow_attributes type: integer - - name: p2p_technology - type: keyword - - name: tunnel_technology - type: keyword - - name: encrypted_technology - type: keyword - - name: bgp_validity_state + - name: flow_direction type: short - - name: ip_sec_spi - type: long - - name: gre_key + - name: flow_duration_microseconds type: long - - name: nat_type - type: short - - name: initiator_packets + - name: flow_duration_milliseconds type: long - - name: responder_packets + - name: flow_end_delta_microseconds type: long - - name: observation_domain_name - type: keyword - - name: selection_sequence_id + - name: flow_end_microseconds + type: date + - name: flow_end_milliseconds + type: date + - name: flow_end_nanoseconds + type: date + - name: flow_end_reason + type: short + - name: flow_end_seconds + type: date + - name: flow_end_sys_up_time type: long - - name: selector_id + - name: flow_id type: long - - name: information_element_id - type: integer - - name: selector_algorithm + - name: flow_idle_timeout type: integer - - name: sampling_packet_interval + - name: flow_key_indicator type: long - - name: sampling_packet_space + - name: flow_label_ipv6 type: long - - name: sampling_time_interval + - name: flow_sampling_time_interval type: long - - name: sampling_time_space + - name: flow_sampling_time_spacing type: long - - name: sampling_size + - name: flow_selected_flow_delta_count type: long - - name: sampling_population + - name: flow_selected_octet_delta_count type: long - - name: sampling_probability - type: double - - name: data_link_frame_size - type: integer - - name: ip_header_packet_section - type: short - - name: ip_payload_packet_section - type: short - - name: data_link_frame_section - type: short - - name: mpls_label_stack_section - type: short - - name: mpls_payload_packet_section - type: short - - name: selector_id_total_pkts_observed + - name: flow_selected_packet_delta_count type: long - - name: selector_id_total_pkts_selected + - name: flow_selector_algorithm + type: integer + - name: flow_start_delta_microseconds type: long - - name: absolute_error - type: double - - name: relative_error - type: double - - name: observation_time_seconds + - name: flow_start_microseconds type: date - - name: observation_time_milliseconds + - name: flow_start_milliseconds type: date - - name: observation_time_microseconds + - name: flow_start_nanoseconds type: date - - name: observation_time_nanoseconds + - name: flow_start_seconds type: date - - name: digest_hash_value - type: long - - name: hash_ip_payload_offset + - name: flow_start_sys_up_time type: long - - name: hash_ip_payload_size + - name: flow_table_flush_event_count type: long - - name: hash_output_range_min + - name: flow_table_peak_count type: long - - name: hash_output_range_max + - name: forwarding_status + type: short + - name: fragment_flags + type: short + - name: fragment_identification type: long - - name: hash_selected_range_min + - name: fragment_offset + type: integer + - name: fw_blackout_secs type: long - - name: hash_selected_range_max + - name: fw_configured_value type: long - - name: hash_digest_output - type: boolean - - name: hash_initialiser_value + - name: fw_cts_src_sgt type: long - - name: selector_name - type: keyword - - name: upper_ci_limit - type: double - - name: lower_ci_limit - type: double - - name: confidence_level - type: double - - name: information_element_data_type - type: short - - name: information_element_description - type: keyword - - name: information_element_name - type: keyword - - name: information_element_range_begin + - name: fw_event_level type: long - - name: information_element_range_end + - name: fw_event_level_id type: long - - name: information_element_semantics - type: short - - name: information_element_units + - name: fw_ext_event type: integer - - name: private_enterprise_number + - name: fw_ext_event_alt type: long - - name: virtual_station_interface_id - type: short - - name: virtual_station_interface_name - type: keyword - - name: virtual_station_uuid - type: short - - name: virtual_station_name + - name: fw_ext_event_desc type: keyword - - name: layer2_segment_id - type: long - - name: layer2_octet_delta_count - type: long - - name: layer2_octet_total_count - type: long - - name: ingress_unicast_packet_total_count - type: long - - name: ingress_multicast_packet_total_count - type: long - - name: ingress_broadcast_packet_total_count - type: long - - name: egress_unicast_packet_total_count + - name: fw_half_open_count type: long - - name: egress_broadcast_packet_total_count + - name: fw_half_open_high type: long - - name: monitoring_interval_start_milli_seconds - type: date - - name: monitoring_interval_end_milli_seconds - type: date - - name: port_range_start - type: integer - - name: port_range_end - type: integer - - name: port_range_step_size - type: integer - - name: port_range_num_ports - type: integer - - name: sta_mac_address - type: keyword - - name: sta_ipv4_address - type: ip - - name: wtp_mac_address - type: keyword - - name: ingress_interface_type + - name: fw_half_open_rate type: long - - name: egress_interface_type + - name: fw_max_sessions type: long - - name: rtp_sequence_number - type: integer - - name: user_name - type: keyword - - name: application_category_name - type: keyword - - name: application_sub_category_name - type: keyword - - name: application_group_name + - name: fw_rule type: keyword - - name: original_flows_present - type: long - - name: original_flows_initiated - type: long - - name: original_flows_completed - type: long - - name: distinct_count_of_source_ip_address - type: long - - name: distinct_count_of_destination_ip_address - type: long - - name: distinct_count_of_source_ipv4_address - type: long - - name: distinct_count_of_destination_ipv4_address - type: long - - name: distinct_count_of_source_ipv6_address + - name: fw_summary_pkt_count type: long - - name: distinct_count_of_destination_ipv6_address + - name: fw_zone_pair_id type: long - - name: value_distribution_method - type: short - - name: rfc3550_jitter_milliseconds + - name: fw_zone_pair_name type: long - - name: rfc3550_jitter_microseconds + - name: global_address_mapping_high_threshold type: long - - name: rfc3550_jitter_nanoseconds + - name: gre_key type: long - - name: dot1q_dei - type: boolean - - name: dot1q_customer_dei + - name: hash_digest_output type: boolean - - name: flow_selector_algorithm + - name: hash_flow_domain type: integer - - name: flow_selected_octet_delta_count - type: long - - name: flow_selected_packet_delta_count - type: long - - name: flow_selected_flow_delta_count + - name: hash_initialiser_value type: long - - name: selector_id_total_flows_observed + - name: hash_ip_payload_offset type: long - - name: selector_id_total_flows_selected + - name: hash_ip_payload_size type: long - - name: sampling_flow_interval + - name: hash_output_range_max type: long - - name: sampling_flow_spacing + - name: hash_output_range_min type: long - - name: flow_sampling_time_interval + - name: hash_selected_range_max type: long - - name: flow_sampling_time_spacing + - name: hash_selected_range_min type: long - - name: hash_flow_domain + - name: http_content_type + type: keyword + - name: http_message_version + type: keyword + - name: http_reason_phrase + type: keyword + - name: http_request_host + type: keyword + - name: http_request_method + type: keyword + - name: http_request_target + type: keyword + - name: http_status_code type: integer - - name: transport_octet_delta_count - type: long - - name: transport_packet_delta_count + - name: http_user_agent + type: keyword + - name: icmp_code_ipv4 + type: short + - name: icmp_code_ipv6 + type: short + - name: icmp_type_code_ipv4 + type: integer + - name: icmp_type_code_ipv6 + type: integer + - name: icmp_type_ipv4 + type: short + - name: icmp_type_ipv6 + type: short + - name: igmp_type + type: short + - name: ignored_data_record_total_count type: long - - name: original_exporter_ipv4_address - type: ip - - name: original_exporter_ipv6_address - type: ip - - name: original_observation_domain_id + - name: ignored_layer2_frame_total_count type: long - - name: intermediate_process_id + - name: ignored_layer2_octet_total_count type: long - - name: ignored_data_record_total_count + - name: ignored_octet_total_count type: long - - name: data_link_frame_type - type: integer - - name: section_offset - type: integer - - name: section_exported_octets - type: integer - - name: dot1q_service_instance_tag - type: short - - name: dot1q_service_instance_id + - name: ignored_packet_total_count type: long - - name: dot1q_service_instance_priority + - name: information_element_data_type type: short - - name: dot1q_customer_source_mac_address + - name: information_element_description type: keyword - - name: dot1q_customer_destination_mac_address + - name: information_element_id + type: integer + - name: information_element_index + type: integer + - name: information_element_name type: keyword - - name: post_layer2_octet_delta_count - type: long - - name: post_mcast_layer2_octet_delta_count - type: long - - name: post_layer2_octet_total_count - type: long - - name: post_mcast_layer2_octet_total_count + - name: information_element_range_begin type: long - - name: minimum_layer2_total_length + - name: information_element_range_end type: long - - name: maximum_layer2_total_length + - name: information_element_semantics + type: short + - name: information_element_units + type: integer + - name: ingress_broadcast_packet_total_count type: long - - name: dropped_layer2_octet_delta_count + - name: ingress_interface type: long - - name: dropped_layer2_octet_total_count + - name: ingress_interface_type type: long - - name: ignored_layer2_octet_total_count + - name: ingress_multicast_packet_total_count type: long - - name: not_sent_layer2_octet_total_count + - name: ingress_physical_interface type: long - - name: layer2_octet_delta_sum_of_squares + - name: ingress_unicast_packet_total_count type: long - - name: layer2_octet_total_sum_of_squares + - name: ingress_vrfid type: long - - name: layer2_frame_delta_count + - name: initial_tcp_flags + type: short + - name: initiator_octets type: long - - name: layer2_frame_total_count + - name: initiator_packets type: long - - name: pseudo_wire_destination_ipv4_address - type: ip - - name: ignored_layer2_frame_total_count + - name: interface_description + type: keyword + - name: interface_name + type: keyword + - name: intermediate_process_id type: long - - name: mib_object_value_integer - type: integer - - name: mib_object_value_octet_string + - name: internal_address_realm type: short - - name: mib_object_value_oid + - name: ip_class_of_service type: short - - name: mib_object_value_bits + - name: ip_diff_serv_code_point type: short - - name: mib_object_value_ip_address + - name: ip_header_length + type: short + - name: ip_header_packet_section + type: short + - name: ip_next_hop_ipv4_address type: ip - - name: mib_object_value_counter - type: long - - name: mib_object_value_gauge + - name: ip_next_hop_ipv6_address + type: ip + - name: ip_payload_length type: long - - name: mib_object_value_time_ticks + - name: ip_payload_packet_section + type: short + - name: ip_precedence + type: short + - name: ip_sec_spi type: long - - name: mib_object_value_unsigned + - name: ip_total_length type: long - - name: mib_object_identifier + - name: ip_ttl type: short - - name: mib_sub_identifier + - name: ip_version + type: short + - name: ipv4_ihl + type: short + - name: ipv4_options type: long - - name: mib_index_indicator + - name: ipv4_router_sc + type: ip + - name: ipv6_extension_headers type: long - - name: mib_capture_time_semantics + - name: is_multicast type: short - - name: mib_context_engine_id + - name: ixia_browser_id type: short - - name: mib_context_name + - name: ixia_browser_name type: keyword - - name: mib_object_name + - name: ixia_device_id + type: short + - name: ixia_device_name type: keyword - - name: mib_object_description + - name: ixia_dns_answer type: keyword - - name: mib_object_syntax + - name: ixia_dns_classes type: keyword - - name: mib_module_name + - name: ixia_dns_query type: keyword - - name: mobile_imsi + - name: ixia_dns_record_txt type: keyword - - name: mobile_msisdn + - name: ixia_dst_as_name type: keyword - - name: http_status_code - type: integer - - name: source_transport_ports_limit + - name: ixia_dst_city_name + type: keyword + - name: ixia_dst_country_code + type: keyword + - name: ixia_dst_country_name + type: keyword + - name: ixia_dst_latitude + type: float + - name: ixia_dst_longitude + type: float + - name: ixia_dst_region_code + type: keyword + - name: ixia_dst_region_node + type: keyword + - name: ixia_encrypt_cipher + type: keyword + - name: ixia_encrypt_key_length type: integer - - name: http_request_method + - name: ixia_encrypt_type type: keyword - - name: http_request_host + - name: ixia_http_host_name type: keyword - - name: http_request_target + - name: ixia_http_uri type: keyword - - name: http_message_version + - name: ixia_http_user_agent type: keyword - - name: nat_instance_id + - name: ixia_imsi_subscriber + type: keyword + - name: ixia_l7_app_id type: long - - name: internal_address_realm - type: short - - name: external_address_realm - type: short - - name: nat_quota_exceeded_event + - name: ixia_l7_app_name + type: keyword + - name: ixia_latency type: long - - name: nat_threshold_event + - name: ixia_rev_octet_delta_count type: long - - name: http_user_agent + - name: ixia_rev_packet_delta_count + type: long + - name: ixia_src_as_name type: keyword - - name: http_content_type + - name: ixia_src_city_name type: keyword - - name: http_reason_phrase + - name: ixia_src_country_code type: keyword - - name: max_session_entries + - name: ixia_src_country_name + type: keyword + - name: ixia_src_latitude + type: float + - name: ixia_src_longitude + type: float + - name: ixia_src_region_code + type: keyword + - name: ixia_src_region_name + type: keyword + - name: ixia_threat_ipv4 + type: ip + - name: ixia_threat_ipv6 + type: ip + - name: ixia_threat_type + type: keyword + - name: large_packet_count type: long - - name: max_bib_entries + - name: layer2_frame_delta_count type: long - - name: max_entries_per_user + - name: layer2_frame_total_count type: long - - name: max_subscribers + - name: layer2_octet_delta_count type: long - - name: max_fragments_pending_reassembly + - name: layer2_octet_delta_sum_of_squares type: long - - name: address_pool_high_threshold + - name: layer2_octet_total_count type: long - - name: address_pool_low_threshold + - name: layer2_octet_total_sum_of_squares type: long - - name: address_port_mapping_high_threshold + - name: layer2_segment_id type: long - - name: address_port_mapping_low_threshold + - name: layer2packet_section_data + type: short + - name: layer2packet_section_offset + type: integer + - name: layer2packet_section_size + type: integer + - name: line_card_id type: long - - name: address_port_mapping_per_user_high_threshold + - name: log_op + type: short + - name: lower_ci_limit + type: double + - name: mark type: long - - name: global_address_mapping_high_threshold + - name: max_bib_entries type: long - - name: vpn_identifier - type: short - - name: initial_tcp_flags - type: short - - name: union_tcp_flags - type: short - - name: payload - type: keyword - - name: reverse_flow_delta_milliseconds + - name: max_entries_per_user type: long - - name: silk_app_label - type: integer - - name: payload_entropy - type: short - - name: os_name - type: keyword - - name: os_version - type: keyword - - name: first_packet_banner - type: keyword - - name: second_packet_banner - type: keyword - - name: flow_attributes + - name: max_export_seconds + type: date + - name: max_flow_end_microseconds + type: date + - name: max_flow_end_milliseconds + type: date + - name: max_flow_end_nanoseconds + type: date + - name: max_flow_end_seconds + type: date + - name: max_fragments_pending_reassembly + type: long + - name: max_packet_size type: integer - - name: expired_fragment_count + - name: max_session_entries type: long - - name: assembled_fragment_count + - name: max_subscribers + type: long + - name: maximum_ip_total_length + type: long + - name: maximum_layer2_total_length type: long + - name: maximum_ttl + type: short - name: mean_flow_rate type: long - name: mean_packet_rate type: long - - name: flow_table_flush_event_count - type: long - - name: flow_table_peak_count + - name: message_md5_checksum + type: short + - name: message_scope + type: short + - name: metering_process_id type: long - - name: os_finger_print - type: keyword - - name: tftp_filename - type: keyword - - name: tftp_mode + - name: metro_evc_id type: keyword - - name: dns_query_response - type: short - - name: dns_qr_type - type: integer - - name: dns_authoritative + - name: metro_evc_type type: short - - name: dns_nx_domain + - name: mib_capture_time_semantics type: short - - name: dns_rr_section + - name: mib_context_engine_id type: short - - name: dns_qname - type: keyword - - name: dns_cname + - name: mib_context_name type: keyword - - name: dns_mx_preference - type: integer - - name: dns_mx_exchange + - name: mib_index_indicator + type: long + - name: mib_module_name type: keyword - - name: dns_nsd_name + - name: mib_object_description type: keyword - - name: dns_ptrd_name + - name: mib_object_identifier + type: short + - name: mib_object_name type: keyword - - name: ssl_cipher + - name: mib_object_syntax type: keyword - - name: ssl_client_version + - name: mib_object_value_bits type: short - - name: ssl_server_cipher + - name: mib_object_value_counter type: long - - name: ssl_compression_method + - name: mib_object_value_gauge + type: long + - name: mib_object_value_integer + type: integer + - name: mib_object_value_ip_address + type: ip + - name: mib_object_value_octet_string type: short - - name: ssl_cert_version + - name: mib_object_value_oid type: short - - name: ssl_cert_signature - type: keyword - - name: dns_ttl - type: long - - name: dns_txt_data - type: keyword - - name: dns_soa_serial + - name: mib_object_value_time_ticks type: long - - name: dns_soa_refresh + - name: mib_object_value_unsigned type: long - - name: dns_soa_retry + - name: mib_sub_identifier type: long - - name: dns_soa_expire + - name: min_export_seconds + type: date + - name: min_flow_start_microseconds + type: date + - name: min_flow_start_milliseconds + type: date + - name: min_flow_start_nanoseconds + type: date + - name: min_flow_start_seconds + type: date + - name: minimum_ip_total_length type: long - - name: dns_soa_minimum + - name: minimum_layer2_total_length type: long - - name: dns_soam_name + - name: minimum_ttl + type: short + - name: mobile_imsi type: keyword - - name: dns_soar_name + - name: mobile_msisdn type: keyword - - name: dns_srv_priority - type: integer - - name: dns_srv_weight - type: integer - - name: dns_srv_port - type: integer - - name: dns_srv_target - type: integer - - name: tcp_urg_total_count + - name: monitoring_interval_end_milli_seconds + type: date + - name: monitoring_interval_start_milli_seconds + type: date + - name: mpls_label_stack_depth type: long - - name: dns_id - type: integer - - name: ssl_cert_serial_number - type: keyword - - name: ssl_object_type - type: keyword - - name: ssl_object_value - type: keyword - - name: ssl_cert_validity_not_before - type: keyword - - name: ssl_cert_validity_not_after - type: keyword - - name: ssl_public_key_algorithm - type: keyword - - name: ssl_public_key_length - type: keyword - - name: rtp_payload_type + - name: mpls_label_stack_length + type: long + - name: mpls_label_stack_section type: short - - name: reverse_rtp_payload_type + - name: mpls_label_stack_section10 type: short - - name: mptcp_initial_data_sequence_number - type: long - - name: mptcp_receiver_token + - name: mpls_label_stack_section2 + type: short + - name: mpls_label_stack_section3 + type: short + - name: mpls_label_stack_section4 + type: short + - name: mpls_label_stack_section5 + type: short + - name: mpls_label_stack_section6 + type: short + - name: mpls_label_stack_section7 + type: short + - name: mpls_label_stack_section8 + type: short + - name: mpls_label_stack_section9 + type: short + - name: mpls_payload_length type: long - - name: mptcp_maximum_segment_size - type: integer + - name: mpls_payload_packet_section + type: short + - name: mpls_top_label_exp + type: short + - name: mpls_top_label_ipv4_address + type: ip + - name: mpls_top_label_ipv6_address + type: ip + - name: mpls_top_label_prefix_length + type: short + - name: mpls_top_label_stack_section + type: short + - name: mpls_top_label_ttl + type: short + - name: mpls_top_label_type + type: short + - name: mpls_vpn_route_distinguisher + type: short - name: mptcp_address_id type: short - name: mptcp_flags type: short - - name: ssl_server_name - type: keyword - - name: ssl_certificate_hash - type: keyword - - name: small_packet_count - type: long - - name: non_empty_packet_count - type: long - - name: data_byte_count + - name: mptcp_initial_data_sequence_number type: long - - name: average_interarrival_time + - name: mptcp_maximum_segment_size + type: integer + - name: mptcp_receiver_token type: long - - name: standard_deviation_interarrival_time + - name: multicast_replication_factor type: long - - name: first_non_empty_packet_size - type: integer - - name: max_packet_size - type: integer - - name: first_eight_non_empty_packet_directions - type: short - - name: standard_deviation_payload_length + - name: nat_event type: short - - name: large_packet_count + - name: nat_inside_svcid + type: integer + - name: nat_instance_id type: long - - name: reverse_initial_tcp_flags - type: short - - name: reverse_union_tcp_flags + - name: nat_originating_address_realm type: short - - name: reverse_payload + - name: nat_outside_svcid + type: integer + - name: nat_pool_id + type: long + - name: nat_pool_name type: keyword - - name: reverse_payload_entropy - type: short - - name: reverse_os_name + - name: nat_quota_exceeded_event + type: long + - name: nat_sub_string type: keyword - - name: reverse_os_version + - name: nat_threshold_event + type: long + - name: nat_type + type: short + - name: netscale_ica_client_version type: keyword - - name: reverse_first_packet_banner + - name: netscaler_aaa_username type: keyword - - name: reverse_second_packet_banner + - name: netscaler_app_name type: keyword - - name: reverse_flow_attributes - type: integer - - name: reverse_os_finger_print + - name: netscaler_app_name_app_id + type: long + - name: netscaler_app_name_incarnation_number + type: long + - name: netscaler_app_template_name type: keyword - - name: reverse_rtp_payload_type - type: short - - name: reverse_small_packet_count + - name: netscaler_app_unit_name_app_id type: long - - name: reverse_non_empty_packet_count + - name: netscaler_application_startup_duration type: long - - name: reverse_data_byte_count + - name: netscaler_application_startup_time type: long - - name: reverse_average_interarrival_time + - name: netscaler_cache_redir_client_connection_core_id type: long - - name: reverse_standard_deviation_interarrival_time + - name: netscaler_cache_redir_client_connection_transaction_id type: long - - name: reverse_first_non_empty_packet_size - type: integer - - name: reverse_max_packet_size - type: integer - - name: reverse_standard_deviation_payload_length - type: integer - - name: reverse_large_packet_count + - name: netscaler_client_rtt type: long - - name: policy_qos_classification_hierarchy + - name: netscaler_connection_chain_hop_count type: long - - name: waasoptimization_segment + - name: netscaler_connection_chain_id type: short - - name: art_clientpackets + - name: netscaler_connection_id type: long - - name: art_serverpackets + - name: netscaler_current_license_consumed type: long - - name: art_count_retransmissions + - name: netscaler_db_clt_host_name + type: keyword + - name: netscaler_db_database_name + type: keyword + - name: netscaler_db_login_flags type: long - - name: art_count_transactions + - name: netscaler_db_protocol_name + type: short + - name: netscaler_db_req_string + type: keyword + - name: netscaler_db_req_type + type: short + - name: netscaler_db_resp_length type: long - - name: art_total_transaction_time_sum + - name: netscaler_db_resp_status type: long - - name: art_total_transaction_time_maximum + - name: netscaler_db_resp_status_string + type: keyword + - name: netscaler_db_user_name + type: keyword + - name: netscaler_flow_flags type: long - - name: art_total_transaction_time_minimum + - name: netscaler_http_client_interaction_end_time + type: keyword + - name: netscaler_http_client_interaction_start_time + type: keyword + - name: netscaler_http_client_render_end_time + type: keyword + - name: netscaler_http_client_render_start_time + type: keyword + - name: netscaler_http_content_type + type: keyword + - name: netscaler_http_domain_name + type: keyword + - name: netscaler_http_req_authorization + type: keyword + - name: netscaler_http_req_cookie + type: keyword + - name: netscaler_http_req_forw_fb type: long - - name: art_count_new_connections + - name: netscaler_http_req_forw_lb type: long - - name: art_count_responses + - name: netscaler_http_req_host + type: keyword + - name: netscaler_http_req_method + type: keyword + - name: netscaler_http_req_rcv_fb type: long - - name: art_count_responses_histogram_bucket1 + - name: netscaler_http_req_rcv_lb type: long - - name: art_count_responses_histogram_bucket2 + - name: netscaler_http_req_referer + type: keyword + - name: netscaler_http_req_url + type: keyword + - name: netscaler_http_req_user_agent + type: keyword + - name: netscaler_http_req_via + type: keyword + - name: netscaler_http_req_xforwarded_for + type: keyword + - name: netscaler_http_res_forw_fb type: long - - name: art_count_responses_histogram_bucket3 + - name: netscaler_http_res_forw_lb type: long - - name: art_count_responses_histogram_bucket4 + - name: netscaler_http_res_location + type: keyword + - name: netscaler_http_res_rcv_fb type: long - - name: art_count_responses_histogram_bucket5 + - name: netscaler_http_res_rcv_lb type: long - - name: art_count_responses_histogram_bucket6 + - name: netscaler_http_res_set_cookie + type: keyword + - name: netscaler_http_res_set_cookie2 + type: keyword + - name: netscaler_http_rsp_len type: long - - name: art_count_responses_histogram_bucket7 + - name: netscaler_http_rsp_status + type: integer + - name: netscaler_ica_app_module_path + type: keyword + - name: netscaler_ica_app_process_id type: long - - name: art_count_late_responses + - name: netscaler_ica_application_name + type: keyword + - name: netscaler_ica_application_termination_time type: long - - name: art_response_time_sum + - name: netscaler_ica_application_termination_type + type: integer + - name: netscaler_ica_channel_id1 type: long - - name: art_response_time_maximum + - name: netscaler_ica_channel_id1_bytes type: long - - name: art_response_time_minimum + - name: netscaler_ica_channel_id2 type: long - - name: art_server_response_time_sum + - name: netscaler_ica_channel_id2_bytes type: long - - name: art_server_response_time_maximum + - name: netscaler_ica_channel_id3 type: long - - name: art_server_response_time_minimum + - name: netscaler_ica_channel_id3_bytes type: long - - name: art_total_response_time_sum + - name: netscaler_ica_channel_id4 type: long - - name: art_total_response_time_maximum + - name: netscaler_ica_channel_id4_bytes type: long - - name: art_total_response_time_minimum + - name: netscaler_ica_channel_id5 type: long - - name: art_network_time_sum + - name: netscaler_ica_channel_id5_bytes type: long - - name: art_network_time_maximum + - name: netscaler_ica_client_host_name + type: keyword + - name: netscaler_ica_client_ip + type: ip + - name: netscaler_ica_client_launcher + type: integer + - name: netscaler_ica_client_side_rto_count + type: integer + - name: netscaler_ica_client_side_window_size + type: integer + - name: netscaler_ica_client_type + type: integer + - name: netscaler_ica_clientside_delay type: long - - name: art_network_time_minimum + - name: netscaler_ica_clientside_jitter type: long - - name: art_client_network_time_sum + - name: netscaler_ica_clientside_packets_retransmit + type: integer + - name: netscaler_ica_clientside_rtt type: long - - name: art_client_network_time_maximum + - name: netscaler_ica_clientside_rx_bytes type: long - - name: art_client_network_time_minimum + - name: netscaler_ica_clientside_srtt type: long - - name: art_server_network_time_sum + - name: netscaler_ica_clientside_tx_bytes type: long - - name: art_server_network_time_maximum + - name: netscaler_ica_connection_priority + type: integer + - name: netscaler_ica_device_serial_no type: long - - name: art_server_network_time_minimum + - name: netscaler_ica_domain_name + type: keyword + - name: netscaler_ica_flags type: long - - name: application_http_uri_statistics - type: short - - name: policy_qos_queueindex + - name: netscaler_ica_host_delay type: long - - name: policy_qos_queue_index + - name: netscaler_ica_l7_client_latency type: long - - name: policy_qos_queuedrops + - name: netscaler_ica_l7_server_latency type: long - - name: application_category_name + - name: netscaler_ica_launch_mechanism + type: integer + - name: netscaler_ica_network_update_end_time type: long - - name: application_sub_category_name + - name: netscaler_ica_network_update_start_time type: long - - name: application_group_name + - name: netscaler_ica_rtt type: long - - name: application_http_user-agent - type: short - - name: application_traffic-class + - name: netscaler_ica_server_name + type: keyword + - name: netscaler_ica_server_side_rto_count + type: integer + - name: netscaler_ica_server_side_window_size + type: integer + - name: netscaler_ica_serverside_delay type: long - - name: application_business-relevance + - name: netscaler_ica_serverside_jitter type: long - - name: timestamp_absolute_monitoring-interval + - name: netscaler_ica_serverside_packets_retransmit + type: integer + - name: netscaler_ica_serverside_rtt type: long - - name: netscaler_round_trip_time + - name: netscaler_ica_serverside_srtt type: long - - name: netscaler_transaction_id + - name: netscaler_ica_session_end_time type: long - - name: netscaler_http_req_url - type: keyword - - name: netscaler_http_req_cookie - type: keyword - - name: netscaler_flow_flags + - name: netscaler_ica_session_guid + type: short + - name: netscaler_ica_session_reconnects + type: short + - name: netscaler_ica_session_setup_time type: long - - name: netscaler_connection_id + - name: netscaler_ica_session_update_begin_sec type: long - - name: netscaler_syslog_priority - type: short - - name: netscaler_syslog_message - type: keyword - - name: netscaler_syslog_timestamp + - name: netscaler_ica_session_update_end_sec type: long - - name: netscaler_http_req_referer - type: keyword - - name: netscaler_http_req_method - type: keyword - - name: netscaler_http_req_host - type: keyword - - name: netscaler_http_req_user_agent + - name: netscaler_ica_username type: keyword - - name: netscaler_http_rsp_status - type: integer - - name: netscaler_http_rsp_len + - name: netscaler_license_type + type: short + - name: netscaler_main_page_core_id type: long - - name: netscaler_server_ttfb + - name: netscaler_main_page_id type: long - - name: netscaler_server_ttlb + - name: netscaler_max_license_count type: long - - name: netscaler_app_name_incarnation_number + - name: netscaler_msi_client_cookie + type: short + - name: netscaler_round_trip_time type: long - - name: netscaler_app_name_app_id + - name: netscaler_server_ttfb type: long - - name: netscaler_app_name + - name: netscaler_server_ttlb + type: long + - name: netscaler_syslog_message type: keyword - - name: netscaler_http_req_rcv_fb + - name: netscaler_syslog_priority + type: short + - name: netscaler_syslog_timestamp type: long - - name: netscaler_http_req_forw_fb + - name: netscaler_transaction_id type: long - - name: netscaler_http_res_rcv_fb + - name: netscaler_unknown270 type: long - - name: netscaler_http_res_forw_fb + - name: netscaler_unknown271 type: long - - name: netscaler_http_req_rcv_lb + - name: netscaler_unknown272 type: long - - name: netscaler_http_req_forw_lb + - name: netscaler_unknown273 type: long - - name: netscaler_main_page_id + - name: netscaler_unknown274 type: long - - name: netscaler_main_page_core_id + - name: netscaler_unknown275 type: long - - name: netscaler_http_client_interaction_start_time - type: keyword - - name: netscaler_http_client_render_end_time - type: keyword - - name: netscaler_http_client_render_start_time - type: keyword - - name: netscaler_app_template_name - type: keyword - - name: netscaler_http_client_interaction_end_time - type: keyword - - name: netscaler_http_res_rcv_lb + - name: netscaler_unknown276 type: long - - name: netscaler_http_res_forw_lb + - name: netscaler_unknown277 type: long - - name: netscaler_app_unit_name_app_id + - name: netscaler_unknown278 type: long - - name: netscaler_db_login_flags + - name: netscaler_unknown279 type: long - - name: netscaler_db_req_type - type: short - - name: netscaler_db_protocol_name - type: short - - name: netscaler_db_user_name - type: keyword - - name: netscaler_db_database_name - type: keyword - - name: netscaler_db_clt_host_name - type: keyword - - name: netscaler_db_req_string - type: keyword - - name: netscaler_db_resp_status_string - type: keyword - - name: netscaler_db_resp_status + - name: netscaler_unknown280 type: long - - name: netscaler_db_resp_length + - name: netscaler_unknown281 type: long - - name: netscaler_client_rtt + - name: netscaler_unknown282 type: long - - name: netscaler_http_content_type - type: keyword - - name: netscaler_http_req_authorization - type: keyword - - name: netscaler_http_req_via - type: keyword - - name: netscaler_http_res_location - type: keyword - - name: netscaler_http_res_set_cookie - type: keyword - - name: netscaler_http_res_set_cookie2 - type: keyword - - name: netscaler_http_req_xforwarded_for - type: keyword - - name: netscaler_connection_chain_id - type: short - - name: netscaler_connection_chain_hop_count + - name: netscaler_unknown283 type: long - - name: netscaler_ica_session_guid - type: short - - name: netscale_ica_client_version - type: keyword - - name: netscaler_ica_client_type - type: integer - - name: netscaler_ica_client_ip - type: ip - - name: netscaler_ica_client_host_name - type: keyword - - name: netscaler_aaa_username - type: keyword - - name: netscaler_ica_domain_name - type: keyword - - name: netscaler_ica_client_launcher - type: integer - - name: netscaler_ica_session_setup_time + - name: netscaler_unknown284 type: long - - name: netscaler_ica_server_name - type: keyword - - name: netscaler_ica_session_reconnects - type: short - - name: netscaler_ica_rtt + - name: netscaler_unknown285 type: long - - name: netscaler_ica_clientside_rx_bytes + - name: netscaler_unknown286 type: long - - name: netscaler_ica_clientside_tx_bytes + - name: netscaler_unknown287 type: long - - name: netscaler_ica_clientside_packets_retransmit - type: integer - - name: netscaler_ica_serverside_packets_retransmit - type: integer - - name: netscaler_ica_clientside_rtt + - name: netscaler_unknown288 type: long - - name: netscaler_ica_serverside_rtt + - name: netscaler_unknown289 type: long - - name: netscaler_ica_session_update_begin_sec + - name: netscaler_unknown290 type: long - - name: netscaler_ica_session_update_end_sec + - name: netscaler_unknown291 type: long - - name: netscaler_ica_channel_id1 + - name: netscaler_unknown292 type: long - - name: netscaler_ica_channel_id1_bytes + - name: netscaler_unknown293 type: long - - name: netscaler_ica_channel_id2 + - name: netscaler_unknown294 type: long - - name: netscaler_ica_channel_id2_bytes + - name: netscaler_unknown295 type: long - - name: netscaler_ica_channel_id3 + - name: netscaler_unknown296 type: long - - name: netscaler_ica_channel_id3_bytes + - name: netscaler_unknown297 type: long - - name: netscaler_ica_channel_id4 - type: long - - name: netscaler_ica_channel_id4_bytes - type: long - - name: netscaler_ica_channel_id5 - type: long - - name: netscaler_ica_channel_id5_bytes - type: long - - name: netscaler_ica_connection_priority - type: integer - - name: netscaler_application_startup_duration - type: long - - name: netscaler_ica_launch_mechanism - type: integer - - name: netscaler_ica_application_name - type: keyword - - name: netscaler_application_startup_time - type: long - - name: netscaler_ica_application_termination_type - type: integer - - name: netscaler_ica_application_termination_time - type: long - - name: netscaler_ica_session_end_time - type: long - - name: netscaler_ica_clientside_jitter - type: long - - name: netscaler_ica_serverside_jitter - type: long - - name: netscaler_ica_app_process_id - type: long - - name: netscaler_ica_app_module_path - type: keyword - - name: netscaler_ica_device_serial_no - type: long - - name: netscaler_msi_client_cookie - type: short - - name: netscaler_ica_flags - type: long - - name: netscaler_ica_username - type: keyword - - name: netscaler_license_type - type: short - - name: netscaler_max_license_count - type: long - - name: netscaler_current_license_consumed - type: long - - name: netscaler_ica_network_update_start_time - type: long - - name: netscaler_ica_network_update_end_time - type: long - - name: netscaler_ica_clientside_srtt - type: long - - name: netscaler_ica_serverside_srtt - type: long - - name: netscaler_ica_clientside_delay - type: long - - name: netscaler_ica_serverside_delay - type: long - - name: netscaler_ica_host_delay - type: long - - name: netscaler_ica_client_side_window_size - type: integer - - name: netscaler_ica_server_side_window_size - type: integer - - name: netscaler_ica_client_side_rto_count - type: integer - - name: netscaler_ica_server_side_rto_count - type: integer - - name: netscaler_ica_l7_client_latency - type: long - - name: netscaler_ica_l7_server_latency - type: long - - name: netscaler_http_domain_name - type: keyword - - name: netscaler_cache_redir_client_connection_core_id - type: long - - name: netscaler_cache_redir_client_connection_transaction_id - type: long - - name: netscaler_unknown270 - type: long - - name: netscaler_unknown271 - type: long - - name: netscaler_unknown272 - type: long - - name: netscaler_unknown273 - type: long - - name: netscaler_unknown274 - type: long - - name: netscaler_unknown275 - type: long - - name: netscaler_unknown276 - type: long - - name: netscaler_unknown277 - type: long - - name: netscaler_unknown278 - type: long - - name: netscaler_unknown279 - type: long - - name: netscaler_unknown280 - type: long - - name: netscaler_unknown281 - type: long - - name: netscaler_unknown282 - type: long - - name: netscaler_unknown283 - type: long - - name: netscaler_unknown284 - type: long - - name: netscaler_unknown285 - type: long - - name: netscaler_unknown286 - type: long - - name: netscaler_unknown287 - type: long - - name: netscaler_unknown288 - type: long - - name: netscaler_unknown289 - type: long - - name: netscaler_unknown290 - type: long - - name: netscaler_unknown291 - type: long - - name: netscaler_unknown292 - type: long - - name: netscaler_unknown293 - type: long - - name: netscaler_unknown294 - type: long - - name: netscaler_unknown295 - type: long - - name: netscaler_unknown296 - type: long - - name: netscaler_unknown297 - type: long - - name: netscaler_unknown298 + - name: netscaler_unknown298 type: long - name: netscaler_unknown299 type: long @@ -1681,423 +1389,695 @@ type: long - name: netscaler_unknown465 type: long - - name: fw_ext_event - type: integer - - name: fw_event_level + - name: new_connection_delta_count type: long - - name: fw_event_level_id + - name: next_header_ipv6 + type: short + - name: non_empty_packet_count type: long - - name: fw_configured_value + - name: not_sent_flow_total_count type: long - - name: fw_cts_src_sgt + - name: not_sent_layer2_octet_total_count type: long - - name: fw_ext_event_alt + - name: not_sent_octet_total_count type: long - - name: fw_blackout_secs + - name: not_sent_packet_total_count type: long - - name: fw_half_open_high + - name: observation_domain_id type: long - - name: fw_half_open_rate + - name: observation_domain_name + type: keyword + - name: observation_point_id type: long - - name: fw_zone_pair_id + - name: observation_point_type + type: short + - name: observation_time_microseconds + type: date + - name: observation_time_milliseconds + type: date + - name: observation_time_nanoseconds + type: date + - name: observation_time_seconds + type: date + - name: observed_flow_total_count type: long - - name: fw_max_sessions + - name: octet_delta_count type: long - - name: fw_zone_pair_name + - name: octet_delta_sum_of_squares type: long - - name: fw_ext_event_desc - type: keyword - - name: fw_summary_pkt_count + - name: octet_total_count type: long - - name: fw_half_open_count + - name: octet_total_sum_of_squares type: long - - name: username - type: keyword - - name: xlate_source_address_ip_v4 + - name: opaque_octets + type: short + - name: original_exporter_ipv4_address type: ip - - name: xlate_destination_address_ip_v4 + - name: original_exporter_ipv6_address type: ip - - name: xlate_source_port - type: integer - - name: xlate_destination_port - type: integer - - name: firewall_event - type: short - - name: nat_inside_svcid - type: integer - - name: nat_outside_svcid - type: integer - - name: nat_sub_string - type: keyword - - name: ixia_l7_app_id + - name: original_flows_completed type: long - - name: ixia_l7_app_name - type: keyword - - name: ixia_src_country_code - type: keyword - - name: ixia_src_country_name - type: keyword - - name: ixia_src_region_code - type: keyword - - name: ixia_src_region_name - type: keyword - - name: ixia_src_city_name - type: keyword - - name: ixia_src_latitude - type: float - - name: ixia_src_longitude - type: float - - name: ixia_dst_country_code - type: keyword - - name: ixia_dst_country_name + - name: original_flows_initiated + type: long + - name: original_flows_present + type: long + - name: original_observation_domain_id + type: long + - name: os_finger_print type: keyword - - name: ixia_dst_region_code + - name: os_name type: keyword - - name: ixia_dst_region_node + - name: os_version type: keyword - - name: ixia_dst_city_name + - name: p2p_technology type: keyword - - name: ixia_dst_latitude - type: float - - name: ixia_dst_longitude - type: float - - name: ixia_device_id + - name: packet_delta_count + type: long + - name: packet_total_count + type: long + - name: padding_octets type: short - - name: ixia_device_name + - name: payload type: keyword - - name: ixia_browser_id + - name: payload_entropy type: short - - name: ixia_browser_name - type: keyword - - name: ixia_rev_octet_delta_count + - name: payload_length_ipv6 + type: integer + - name: policy_qos_classification_hierarchy type: long - - name: ixia_rev_packet_delta_count + - name: policy_qos_queue_index type: long - - name: ixia_encrypt_type - type: keyword - - name: ixia_encrypt_cipher - type: keyword - - name: ixia_encrypt_key_length - type: integer - - name: ixia_imsi_subscriber - type: keyword - - name: ixia_http_user_agent - type: keyword - - name: ixia_http_host_name - type: keyword - - name: ixia_http_uri - type: keyword - - name: ixia_dns_record_txt - type: keyword - - name: ixia_src_as_name - type: keyword - - name: ixia_dst_as_name - type: keyword - - name: ixia_latency + - name: policy_qos_queuedrops type: long - - name: ixia_dns_query - type: keyword - - name: ixia_dns_answer - type: keyword - - name: ixia_dns_classes - type: keyword - - name: ixia_threat_type - type: keyword - - name: ixia_threat_ipv4 - type: ip - - name: ixia_threat_ipv6 - type: ip - - name: vmware_tenant_protocol - type: short - - name: vmware_tenant_source_ipv4 - type: ip - - name: vmware_tenant_dest_ipv4 - type: ip - - name: vmware_tenant_source_ipv6 - type: ip - - name: vmware_tenant_dest_ipv6 - type: ip - - name: vmware_tenant_source_port - type: integer - - name: vmware_tenant_dest_port + - name: policy_qos_queueindex + type: long + - name: port_id + type: long + - name: port_range_end type: integer - - name: vmware_egress_interface_attr + - name: port_range_num_ports type: integer - - name: vmware_vxlan_export_role - type: short - - name: vmware_ingress_interface_attr + - name: port_range_start type: integer - - name: afc_protocol + - name: port_range_step_size type: integer - - name: afc_protocol_name + - name: post_destination_mac_address type: keyword - - name: flow_direction + - name: post_dot1q_customer_vlan_id + type: integer + - name: post_dot1q_vlan_id + type: integer + - name: post_ip_class_of_service type: short - - name: timestamp - type: long - - name: log_op + - name: post_ip_diff_serv_code_point type: short - - name: traffic_type + - name: post_ip_precedence type: short - - name: fw_rule - type: keyword - - name: service_name - type: keyword - - name: reason - type: long - - name: reason_text - type: keyword - - name: bind_ipv4_address - type: ip - - name: bind_transport_port - type: integer - - name: conn_ipv4_address - type: ip - - name: conn_transport_port - type: integer - - name: audit_counter + - name: post_layer2_octet_delta_count type: long - - name: timestamp + - name: post_layer2_octet_total_count type: long - - name: log_op - type: short - - name: traffic_type - type: short - - name: fw_rule - type: keyword - - name: service_name - type: keyword - - name: reason + - name: post_mcast_layer2_octet_delta_count type: long - - name: reason_text - type: keyword - - name: bind_ipv4_address - type: ip - - name: bind_transport_port - type: integer - - name: conn_ipv4_address - type: ip - - name: conn_transport_port - type: integer - - name: audit_counter + - name: post_mcast_layer2_octet_total_count type: long - - name: procera_service - type: keyword - - name: procera_base_service - type: keyword - - name: procera_incoming_octets + - name: post_mcast_octet_delta_count type: long - - name: procera_outgoing_octets + - name: post_mcast_octet_total_count type: long - - name: procera_incoming_packets + - name: post_mcast_packet_delta_count type: long - - name: procera_outgoing_packets + - name: post_mcast_packet_total_count type: long - - name: procera_incoming_shaping_latency + - name: post_mpls_top_label_exp + type: short + - name: post_napt_destination_transport_port type: integer - - name: procera_outgoing_shaping_latency + - name: post_napt_source_transport_port type: integer - - name: procera_incoming_shaping_drops + - name: post_nat_destination_ipv4_address + type: ip + - name: post_nat_destination_ipv6_address + type: ip + - name: post_nat_source_ipv4_address + type: ip + - name: post_nat_source_ipv6_address + type: ip + - name: post_octet_delta_count type: long - - name: procera_outgoing_shaping_drops + - name: post_octet_total_count type: long - - name: procera_internal_rtt + - name: post_packet_delta_count + type: long + - name: post_packet_total_count + type: long + - name: post_source_mac_address + type: keyword + - name: post_vlan_id type: integer + - name: private_enterprise_number + type: long + - name: procera_apn + type: keyword + - name: procera_base_service + type: keyword + - name: procera_content_categories + type: keyword + - name: procera_device_id + type: long - name: procera_external_rtt type: integer - name: procera_flow_behavior type: keyword - - name: procera_content_categories - type: keyword - - name: procera_property + - name: procera_ggsn type: keyword - - name: procera_server_hostname + - name: procera_http_content_type type: keyword - - name: procera_http_request_method + - name: procera_http_file_length + type: long + - name: procera_http_language type: keyword - - name: procera_http_user_agent + - name: procera_http_location type: keyword - - name: procera_http_content_type + - name: procera_http_referer type: keyword - - name: procera_http_url + - name: procera_http_request_method type: keyword - - name: procera_http_referer + - name: procera_http_request_version type: keyword - name: procera_http_response_status type: integer - - name: procera_http_file_length - type: long - - name: procera_http_location - type: keyword - - name: procera_http_language + - name: procera_http_url type: keyword - - name: procera_subscriber_identifier + - name: procera_http_user_agent type: keyword + - name: procera_imsi + type: long + - name: procera_incoming_octets + type: long + - name: procera_incoming_packets + type: long + - name: procera_incoming_shaping_drops + type: long + - name: procera_incoming_shaping_latency + type: integer + - name: procera_internal_rtt + type: integer + - name: procera_local_ipv4_host + type: ip + - name: procera_local_ipv6_host + type: ip - name: procera_msisdn type: long - - name: procera_imsi + - name: procera_outgoing_octets type: long - - name: procera_rat - type: keyword - - name: procera_device_id + - name: procera_outgoing_packets type: long - - name: procera_sgsn - type: keyword - - name: procera_rnc + - name: procera_outgoing_shaping_drops + type: long + - name: procera_outgoing_shaping_latency type: integer - - name: procera_apn - type: keyword - - name: procera_user_location_information - type: keyword - - name: procera_ggsn + - name: procera_property type: keyword - - name: procera_qoe_incoming_internal - type: float - name: procera_qoe_incoming_external type: float - - name: procera_qoe_outgoing_internal + - name: procera_qoe_incoming_internal type: float - name: procera_qoe_outgoing_external type: float - - name: procera_local_ipv4_host - type: ip - - name: procera_local_ipv6_host - type: ip + - name: procera_qoe_outgoing_internal + type: float + - name: procera_rat + type: keyword - name: procera_remote_ipv4_host type: ip - name: procera_remote_ipv6_host type: ip - - name: procera_http_request_version + - name: procera_rnc + type: integer + - name: procera_server_hostname + type: keyword + - name: procera_service + type: keyword + - name: procera_sgsn + type: keyword + - name: procera_subscriber_identifier type: keyword - name: procera_template_name type: keyword - - name: mark - type: long - - name: conntrack_id + - name: procera_user_location_information + type: keyword + - name: protocol_identifier + type: short + - name: pseudo_wire_control_word type: long - - name: reverse_octet_delta_count + - name: pseudo_wire_destination_ipv4_address + type: ip + - name: pseudo_wire_id type: long - - name: reverse_packet_delta_count + - name: pseudo_wire_type + type: integer + - name: reason + type: long + - name: reason_text + type: keyword + - name: relative_error + type: double + - name: responder_octets + type: long + - name: responder_packets + type: long + - name: reverse_absolute_error + type: double + - name: reverse_anonymization_flags + type: integer + - name: reverse_anonymization_technique + type: integer + - name: reverse_application_category_name + type: keyword + - name: reverse_application_description + type: keyword + - name: reverse_application_group_name + type: keyword + - name: reverse_application_id + type: keyword + - name: reverse_application_name + type: keyword + - name: reverse_application_sub_category_name + type: keyword + - name: reverse_average_interarrival_time + type: long + - name: reverse_bgp_destination_as_number + type: long + - name: reverse_bgp_next_adjacent_as_number + type: long + - name: reverse_bgp_next_hop_ipv4_address + type: ip + - name: reverse_bgp_next_hop_ipv6_address + type: ip + - name: reverse_bgp_prev_adjacent_as_number + type: long + - name: reverse_bgp_source_as_number + type: long + - name: reverse_bgp_validity_state + type: short + - name: reverse_class_id + type: short + - name: reverse_class_name + type: keyword + - name: reverse_classification_engine_id + type: short + - name: reverse_collection_time_milliseconds + type: long + - name: reverse_collector_certificate + type: keyword + - name: reverse_confidence_level + type: double + - name: reverse_connection_sum_duration_seconds + type: long + - name: reverse_connection_transaction_id + type: long + - name: reverse_data_byte_count + type: long + - name: reverse_data_link_frame_section + type: keyword + - name: reverse_data_link_frame_size + type: integer + - name: reverse_data_link_frame_type + type: integer + - name: reverse_data_records_reliability + type: short + - name: reverse_delta_flow_count + type: long + - name: reverse_destination_ipv4_address + type: ip + - name: reverse_destination_ipv4_prefix + type: ip + - name: reverse_destination_ipv4_prefix_length + type: short + - name: reverse_destination_ipv6_address + type: ip + - name: reverse_destination_ipv6_prefix + type: ip + - name: reverse_destination_ipv6_prefix_length + type: short + - name: reverse_destination_mac_address + type: keyword + - name: reverse_destination_transport_port + type: integer + - name: reverse_digest_hash_value + type: long + - name: reverse_distinct_count_of_destination_ip_address + type: long + - name: reverse_distinct_count_of_destination_ipv4_address + type: long + - name: reverse_distinct_count_of_destination_ipv6_address + type: long + - name: reverse_distinct_count_of_source_ip_address + type: long + - name: reverse_distinct_count_of_source_ipv4_address + type: long + - name: reverse_distinct_count_of_source_ipv6_address + type: long + - name: reverse_dot1q_customer_dei + type: short + - name: reverse_dot1q_customer_destination_mac_address + type: keyword + - name: reverse_dot1q_customer_priority + type: short + - name: reverse_dot1q_customer_source_mac_address + type: keyword + - name: reverse_dot1q_customer_vlan_id + type: integer + - name: reverse_dot1q_dei + type: short + - name: reverse_dot1q_priority + type: short + - name: reverse_dot1q_service_instance_id + type: long + - name: reverse_dot1q_service_instance_priority + type: short + - name: reverse_dot1q_service_instance_tag + type: keyword + - name: reverse_dot1q_vlan_id + type: integer + - name: reverse_dropped_layer2_octet_delta_count + type: long + - name: reverse_dropped_layer2_octet_total_count + type: long + - name: reverse_dropped_octet_delta_count + type: long + - name: reverse_dropped_octet_total_count + type: long + - name: reverse_dropped_packet_delta_count + type: long + - name: reverse_dropped_packet_total_count + type: long + - name: reverse_dst_traffic_index + type: long + - name: reverse_egress_broadcast_packet_total_count + type: long + - name: reverse_egress_interface + type: long + - name: reverse_egress_interface_type + type: long + - name: reverse_egress_physical_interface + type: long + - name: reverse_egress_unicast_packet_total_count + type: long + - name: reverse_egress_vrfid + type: long + - name: reverse_encrypted_technology + type: keyword + - name: reverse_engine_id + type: short + - name: reverse_engine_type + type: short + - name: reverse_ethernet_header_length + type: short + - name: reverse_ethernet_payload_length + type: integer + - name: reverse_ethernet_total_length + type: integer + - name: reverse_ethernet_type + type: integer + - name: reverse_export_sctp_stream_id + type: integer + - name: reverse_exporter_certificate + type: keyword + - name: reverse_exporting_process_id + type: long + - name: reverse_firewall_event + type: short + - name: reverse_first_non_empty_packet_size + type: integer + - name: reverse_first_packet_banner + type: keyword + - name: reverse_flags_and_sampler_id + type: long + - name: reverse_flow_active_timeout + type: integer + - name: reverse_flow_attributes + type: integer + - name: reverse_flow_delta_milliseconds + type: long + - name: reverse_flow_direction + type: short + - name: reverse_flow_duration_microseconds + type: long + - name: reverse_flow_duration_milliseconds + type: long + - name: reverse_flow_end_delta_microseconds + type: long + - name: reverse_flow_end_microseconds + type: long + - name: reverse_flow_end_milliseconds + type: long + - name: reverse_flow_end_nanoseconds + type: long + - name: reverse_flow_end_reason + type: short + - name: reverse_flow_end_seconds + type: long + - name: reverse_flow_end_sys_up_time + type: long + - name: reverse_flow_idle_timeout + type: integer + - name: reverse_flow_label_ipv6 + type: long + - name: reverse_flow_sampling_time_interval + type: long + - name: reverse_flow_sampling_time_spacing + type: long + - name: reverse_flow_selected_flow_delta_count + type: long + - name: reverse_flow_selected_octet_delta_count + type: long + - name: reverse_flow_selected_packet_delta_count + type: long + - name: reverse_flow_selector_algorithm + type: integer + - name: reverse_flow_start_delta_microseconds + type: long + - name: reverse_flow_start_microseconds + type: long + - name: reverse_flow_start_milliseconds + type: long + - name: reverse_flow_start_nanoseconds + type: long + - name: reverse_flow_start_seconds + type: long + - name: reverse_flow_start_sys_up_time + type: long + - name: reverse_forwarding_status + type: long + - name: reverse_fragment_flags + type: short + - name: reverse_fragment_identification + type: long + - name: reverse_fragment_offset + type: integer + - name: reverse_gre_key + type: long + - name: reverse_hash_digest_output + type: short + - name: reverse_hash_flow_domain + type: integer + - name: reverse_hash_initialiser_value + type: long + - name: reverse_hash_ip_payload_offset + type: long + - name: reverse_hash_ip_payload_size + type: long + - name: reverse_hash_output_range_max + type: long + - name: reverse_hash_output_range_min + type: long + - name: reverse_hash_selected_range_max + type: long + - name: reverse_hash_selected_range_min + type: long + - name: reverse_icmp_code_ipv4 + type: short + - name: reverse_icmp_code_ipv6 + type: short + - name: reverse_icmp_type_code_ipv4 + type: integer + - name: reverse_icmp_type_code_ipv6 + type: integer + - name: reverse_icmp_type_ipv4 + type: short + - name: reverse_icmp_type_ipv6 + type: short + - name: reverse_igmp_type + type: short + - name: reverse_ignored_data_record_total_count + type: long + - name: reverse_ignored_layer2_frame_total_count + type: long + - name: reverse_ignored_layer2_octet_total_count + type: long + - name: reverse_information_element_data_type + type: short + - name: reverse_information_element_description + type: keyword + - name: reverse_information_element_id + type: integer + - name: reverse_information_element_index + type: integer + - name: reverse_information_element_name + type: keyword + - name: reverse_information_element_range_begin + type: long + - name: reverse_information_element_range_end + type: long + - name: reverse_information_element_semantics + type: short + - name: reverse_information_element_units + type: integer + - name: reverse_ingress_broadcast_packet_total_count + type: long + - name: reverse_ingress_interface + type: long + - name: reverse_ingress_interface_type + type: long + - name: reverse_ingress_multicast_packet_total_count + type: long + - name: reverse_ingress_physical_interface + type: long + - name: reverse_ingress_unicast_packet_total_count + type: long + - name: reverse_ingress_vrfid + type: long + - name: reverse_initial_tcp_flags + type: short + - name: reverse_initiator_octets + type: long + - name: reverse_initiator_packets + type: long + - name: reverse_interface_description + type: keyword + - name: reverse_interface_name + type: keyword + - name: reverse_intermediate_process_id + type: long + - name: reverse_ip_class_of_service + type: short + - name: reverse_ip_diff_serv_code_point + type: short + - name: reverse_ip_header_length + type: short + - name: reverse_ip_header_packet_section + type: keyword + - name: reverse_ip_next_hop_ipv4_address + type: ip + - name: reverse_ip_next_hop_ipv6_address + type: ip + - name: reverse_ip_payload_length + type: long + - name: reverse_ip_payload_packet_section + type: keyword + - name: reverse_ip_precedence + type: short + - name: reverse_ip_sec_spi type: long - - name: reverse_delta_flow_count + - name: reverse_ip_total_length type: long - - name: reverse_protocol_identifier + - name: reverse_ip_ttl type: short - - name: reverse_ip_class_of_service + - name: reverse_ip_version type: short - - name: reverse_tcp_control_bits - type: integer - - name: reverse_source_transport_port - type: integer - - name: reverse_source_ipv4_address - type: ip - - name: reverse_source_ipv4_prefix_length + - name: reverse_ipv4_ihl type: short - - name: reverse_ingress_interface + - name: reverse_ipv4_options type: long - - name: reverse_destination_transport_port - type: integer - - name: reverse_destination_ipv4_address + - name: reverse_ipv4_router_sc type: ip - - name: reverse_destination_ipv4_prefix_length + - name: reverse_ipv6_extension_headers + type: long + - name: reverse_is_multicast type: short - - name: reverse_egress_interface + - name: reverse_large_packet_count type: long - - name: reverse_ip_next_hop_ipv4_address - type: ip - - name: reverse_bgp_source_as_number + - name: reverse_layer2_frame_delta_count type: long - - name: reverse_bgp_destination_as_number + - name: reverse_layer2_frame_total_count type: long - - name: reverse_bgp_next_hop_ipv4_address - type: ip - - name: reverse_post_mcast_packet_delta_count + - name: reverse_layer2_octet_delta_count type: long - - name: reverse_post_mcast_octet_delta_count + - name: reverse_layer2_octet_delta_sum_of_squares type: long - - name: reverse_flow_end_sys_up_time + - name: reverse_layer2_octet_total_count type: long - - name: reverse_flow_start_sys_up_time + - name: reverse_layer2_octet_total_sum_of_squares type: long - - name: reverse_post_octet_delta_count + - name: reverse_layer2_segment_id type: long - - name: reverse_post_packet_delta_count + - name: reverse_layer2packet_section_data + type: keyword + - name: reverse_layer2packet_section_offset + type: integer + - name: reverse_layer2packet_section_size + type: integer + - name: reverse_line_card_id type: long - - name: reverse_minimum_ip_total_length + - name: reverse_lower_ci_limit + type: double + - name: reverse_max_export_seconds type: long - - name: reverse_maximum_ip_total_length + - name: reverse_max_flow_end_microseconds type: long - - name: reverse_source_ipv6_address - type: ip - - name: reverse_destination_ipv6_address - type: ip - - name: reverse_source_ipv6_prefix_length - type: short - - name: reverse_destination_ipv6_prefix_length - type: short - - name: reverse_flow_label_ipv6 + - name: reverse_max_flow_end_milliseconds type: long - - name: reverse_icmp_type_code_ipv4 - type: integer - - name: reverse_igmp_type - type: short - - name: reverse_sampling_interval + - name: reverse_max_flow_end_nanoseconds type: long - - name: reverse_sampling_algorithm - type: short - - name: reverse_flow_active_timeout - type: integer - - name: reverse_flow_idle_timeout + - name: reverse_max_flow_end_seconds + type: long + - name: reverse_max_packet_size type: integer - - name: reverse_engine_type - type: short - - name: reverse_engine_id - type: short - - name: reverse_ipv4_router_sc - type: ip - - name: reverse_source_ipv4_prefix - type: ip - - name: reverse_destination_ipv4_prefix - type: ip - - name: reverse_mpls_top_label_type - type: short - - name: reverse_mpls_top_label_ipv4_address - type: ip - - name: reverse_sampler_id - type: short - - name: reverse_sampler_mode - type: short - - name: reverse_sampler_random_interval + - name: reverse_maximum_ip_total_length type: long - - name: reverse_class_id - type: short - - name: reverse_minimum_ttl - type: short - - name: reverse_maximum_ttl - type: short - - name: reverse_fragment_identification + - name: reverse_maximum_layer2_total_length type: long - - name: reverse_post_ip_class_of_service + - name: reverse_maximum_ttl type: short - - name: reverse_source_mac_address + - name: reverse_message_md5_checksum type: keyword - - name: reverse_post_destination_mac_address + - name: reverse_message_scope + type: short + - name: reverse_metering_process_id + type: long + - name: reverse_metro_evc_id type: keyword - - name: reverse_vlan_id - type: integer - - name: reverse_post_vlan_id - type: integer - - name: reverse_ip_version + - name: reverse_metro_evc_type type: short - - name: reverse_flow_direction + - name: reverse_min_export_seconds + type: long + - name: reverse_min_flow_start_microseconds + type: long + - name: reverse_min_flow_start_milliseconds + type: long + - name: reverse_min_flow_start_nanoseconds + type: long + - name: reverse_min_flow_start_seconds + type: long + - name: reverse_minimum_ip_total_length + type: long + - name: reverse_minimum_layer2_total_length + type: long + - name: reverse_minimum_ttl type: short - - name: reverse_ip_next_hop_ipv6_address - type: ip - - name: reverse_bgp_next_hop_ipv6_address - type: ip - - name: reverse_ipv6_extension_headers + - name: reverse_monitoring_interval_end_milli_seconds type: long - - name: reverse_mpls_top_label_stack_section + - name: reverse_monitoring_interval_start_milli_seconds + type: long + - name: reverse_mpls_label_stack_depth + type: long + - name: reverse_mpls_label_stack_length + type: long + - name: reverse_mpls_label_stack_section + type: keyword + - name: reverse_mpls_label_stack_section10 type: keyword - name: reverse_mpls_label_stack_section2 type: keyword @@ -2115,613 +2095,595 @@ type: keyword - name: reverse_mpls_label_stack_section9 type: keyword - - name: reverse_mpls_label_stack_section10 - type: keyword - - name: reverse_destination_mac_address - type: keyword - - name: reverse_post_source_mac_address - type: keyword - - name: reverse_interface_name - type: keyword - - name: reverse_interface_description - type: keyword - - name: reverse_sampler_name - type: keyword - - name: reverse_octet_total_count - type: long - - name: reverse_packet_total_count - type: long - - name: reverse_flags_and_sampler_id - type: long - - name: reverse_fragment_offset - type: integer - - name: reverse_forwarding_status + - name: reverse_mpls_payload_length type: long - - name: reverse_mpls_vpn_route_distinguisher + - name: reverse_mpls_payload_packet_section type: keyword + - name: reverse_mpls_top_label_exp + type: short + - name: reverse_mpls_top_label_ipv4_address + type: ip + - name: reverse_mpls_top_label_ipv6_address + type: ip - name: reverse_mpls_top_label_prefix_length type: short - - name: reverse_src_traffic_index - type: long - - name: reverse_dst_traffic_index - type: long - - name: reverse_application_description - type: keyword - - name: reverse_application_id - type: keyword - - name: reverse_application_name + - name: reverse_mpls_top_label_stack_section type: keyword - - name: reverse_post_ip_diff_serv_code_point + - name: reverse_mpls_top_label_ttl type: short + - name: reverse_mpls_top_label_type + type: short + - name: reverse_mpls_vpn_route_distinguisher + type: keyword - name: reverse_multicast_replication_factor type: long - - name: reverse_class_name - type: keyword - - name: reverse_classification_engine_id + - name: reverse_nat_event type: short - - name: reverse_layer2packet_section_offset - type: integer - - name: reverse_layer2packet_section_size - type: integer - - name: reverse_layer2packet_section_data + - name: reverse_nat_originating_address_realm + type: short + - name: reverse_nat_pool_id + type: long + - name: reverse_nat_pool_name type: keyword - - name: reverse_bgp_next_adjacent_as_number + - name: reverse_nat_type + type: short + - name: reverse_new_connection_delta_count type: long - - name: reverse_bgp_prev_adjacent_as_number + - name: reverse_next_header_ipv6 + type: short + - name: reverse_non_empty_packet_count type: long - - name: reverse_dropped_octet_delta_count + - name: reverse_not_sent_layer2_octet_total_count type: long - - name: reverse_dropped_packet_delta_count + - name: reverse_observation_domain_name + type: keyword + - name: reverse_observation_point_id type: long - - name: reverse_dropped_octet_total_count + - name: reverse_observation_point_type + type: short + - name: reverse_observation_time_microseconds type: long - - name: reverse_dropped_packet_total_count + - name: reverse_observation_time_milliseconds type: long - - name: reverse_flow_end_reason - type: short - - name: reverse_observation_point_id + - name: reverse_observation_time_nanoseconds type: long - - name: reverse_icmp_type_code_ipv6 - type: integer - - name: reverse_mpls_top_label_ipv6_address - type: ip - - name: reverse_line_card_id + - name: reverse_observation_time_seconds type: long - - name: reverse_port_id + - name: reverse_octet_delta_count + type: long + - name: reverse_octet_delta_sum_of_squares type: long - - name: reverse_metering_process_id + - name: reverse_octet_total_count type: long - - name: reverse_exporting_process_id + - name: reverse_octet_total_sum_of_squares type: long - - name: reverse_wlan_channel_id - type: short - - name: reverse_wlan_ssid + - name: reverse_opaque_octets type: keyword - - name: reverse_flow_start_seconds - type: long - - name: reverse_flow_end_seconds + - name: reverse_original_exporter_ipv4_address + type: ip + - name: reverse_original_exporter_ipv6_address + type: ip + - name: reverse_original_flows_completed type: long - - name: reverse_flow_start_milliseconds + - name: reverse_original_flows_initiated type: long - - name: reverse_flow_end_milliseconds + - name: reverse_original_flows_present type: long - - name: reverse_flow_start_microseconds + - name: reverse_original_observation_domain_id type: long - - name: reverse_flow_end_microseconds + - name: reverse_os_finger_print + type: keyword + - name: reverse_os_name + type: keyword + - name: reverse_os_version + type: keyword + - name: reverse_p2p_technology + type: keyword + - name: reverse_packet_delta_count type: long - - name: reverse_flow_start_nanoseconds + - name: reverse_packet_total_count type: long - - name: reverse_flow_end_nanoseconds + - name: reverse_payload + type: keyword + - name: reverse_payload_entropy + type: short + - name: reverse_payload_length_ipv6 + type: integer + - name: reverse_port_id type: long - - name: reverse_flow_start_delta_microseconds + - name: reverse_port_range_end + type: integer + - name: reverse_port_range_num_ports + type: integer + - name: reverse_port_range_start + type: integer + - name: reverse_port_range_step_size + type: integer + - name: reverse_post_destination_mac_address + type: keyword + - name: reverse_post_dot1q_customer_vlan_id + type: integer + - name: reverse_post_dot1q_vlan_id + type: integer + - name: reverse_post_ip_class_of_service + type: short + - name: reverse_post_ip_diff_serv_code_point + type: short + - name: reverse_post_ip_precedence + type: short + - name: reverse_post_layer2_octet_delta_count type: long - - name: reverse_flow_end_delta_microseconds + - name: reverse_post_layer2_octet_total_count type: long - - name: reverse_system_init_time_milliseconds + - name: reverse_post_mcast_layer2_octet_delta_count type: long - - name: reverse_flow_duration_milliseconds + - name: reverse_post_mcast_layer2_octet_total_count type: long - - name: reverse_flow_duration_microseconds + - name: reverse_post_mcast_octet_delta_count type: long - - name: reverse_destination_ipv6_prefix - type: ip - - name: reverse_source_ipv6_prefix - type: ip - - name: reverse_post_octet_total_count + - name: reverse_post_mcast_octet_total_count type: long - - name: reverse_post_packet_total_count + - name: reverse_post_mcast_packet_delta_count type: long - name: reverse_post_mcast_packet_total_count type: long - - name: reverse_post_mcast_octet_total_count - type: long - - name: reverse_icmp_type_ipv4 - type: short - - name: reverse_icmp_code_ipv4 - type: short - - name: reverse_icmp_type_ipv6 - type: short - - name: reverse_icmp_code_ipv6 + - name: reverse_post_mpls_top_label_exp type: short - - name: reverse_udp_source_port - type: integer - - name: reverse_udp_destination_port - type: integer - - name: reverse_tcp_source_port + - name: reverse_post_napt_destination_transport_port type: integer - - name: reverse_tcp_destination_port + - name: reverse_post_napt_source_transport_port type: integer - - name: reverse_tcp_sequence_number + - name: reverse_post_nat_destination_ipv4_address + type: ip + - name: reverse_post_nat_destination_ipv6_address + type: ip + - name: reverse_post_nat_source_ipv4_address + type: ip + - name: reverse_post_nat_source_ipv6_address + type: ip + - name: reverse_post_octet_delta_count type: long - - name: reverse_tcp_acknowledgement_number + - name: reverse_post_octet_total_count type: long - - name: reverse_tcp_window_size - type: integer - - name: reverse_tcp_urgent_pointer + - name: reverse_post_packet_delta_count + type: long + - name: reverse_post_packet_total_count + type: long + - name: reverse_post_source_mac_address + type: keyword + - name: reverse_post_vlan_id type: integer - - name: reverse_tcp_header_length - type: short - - name: reverse_ip_header_length + - name: reverse_private_enterprise_number + type: long + - name: reverse_protocol_identifier type: short - - name: reverse_total_length_ipv4 - type: integer - - name: reverse_payload_length_ipv6 + - name: reverse_pseudo_wire_control_word + type: long + - name: reverse_pseudo_wire_destination_ipv4_address + type: ip + - name: reverse_pseudo_wire_id + type: long + - name: reverse_pseudo_wire_type type: integer - - name: reverse_ip_ttl - type: short - - name: reverse_next_header_ipv6 - type: short - - name: reverse_mpls_payload_length + - name: reverse_relative_error + type: double + - name: reverse_responder_octets type: long - - name: reverse_ip_diff_serv_code_point - type: short - - name: reverse_ip_precedence - type: short - - name: reverse_fragment_flags - type: short - - name: reverse_octet_delta_sum_of_squares + - name: reverse_responder_packets type: long - - name: reverse_octet_total_sum_of_squares + - name: reverse_rfc3550_jitter_microseconds type: long - - name: reverse_mpls_top_label_ttl - type: short - - name: reverse_mpls_label_stack_length + - name: reverse_rfc3550_jitter_milliseconds type: long - - name: reverse_mpls_label_stack_depth + - name: reverse_rfc3550_jitter_nanoseconds type: long - - name: reverse_mpls_top_label_exp + - name: reverse_rtp_payload_type type: short - - name: reverse_ip_payload_length - type: long - - name: reverse_udp_message_length + - name: reverse_rtp_sequence_number type: integer - - name: reverse_is_multicast + - name: reverse_sampler_id type: short - - name: reverse_ipv4_ihl + - name: reverse_sampler_mode type: short - - name: reverse_ipv4_options + - name: reverse_sampler_name + type: keyword + - name: reverse_sampler_random_interval type: long - - name: reverse_tcp_options + - name: reverse_sampling_algorithm + type: short + - name: reverse_sampling_flow_interval type: long - - name: reverse_tcp_syn_total_count + - name: reverse_sampling_flow_spacing type: long - - name: reverse_tcp_fin_total_count + - name: reverse_sampling_interval type: long - - name: reverse_tcp_rst_total_count + - name: reverse_sampling_packet_interval type: long - - name: reverse_tcp_psh_total_count + - name: reverse_sampling_packet_space type: long - - name: reverse_tcp_ack_total_count + - name: reverse_sampling_population type: long - - name: reverse_tcp_urg_total_count + - name: reverse_sampling_probability + type: double + - name: reverse_sampling_size type: long - - name: reverse_ip_total_length + - name: reverse_sampling_time_interval type: long - - name: reverse_post_nat_source_ipv4_address - type: ip - - name: reverse_post_nat_destination_ipv4_address - type: ip - - name: reverse_post_napt_source_transport_port + - name: reverse_sampling_time_space + type: long + - name: reverse_second_packet_banner + type: keyword + - name: reverse_section_exported_octets type: integer - - name: reverse_post_napt_destination_transport_port + - name: reverse_section_offset type: integer - - name: reverse_nat_originating_address_realm - type: short - - name: reverse_nat_event - type: short - - name: reverse_initiator_octets + - name: reverse_selection_sequence_id type: long - - name: reverse_responder_octets + - name: reverse_selector_algorithm + type: integer + - name: reverse_selector_id type: long - - name: reverse_firewall_event - type: short - - name: reverse_ingress_vrfid + - name: reverse_selector_id_total_flows_observed type: long - - name: reverse_egress_vrfid + - name: reverse_selector_id_total_flows_selected type: long - - name: reverse_vr_fname + - name: reverse_selector_id_total_pkts_observed + type: long + - name: reverse_selector_id_total_pkts_selected + type: long + - name: reverse_selector_name type: keyword - - name: reverse_post_mpls_top_label_exp - type: short - - name: reverse_tcp_window_scale - type: integer - - name: reverse_ethernet_header_length + - name: reverse_session_scope type: short - - name: reverse_ethernet_payload_length - type: integer - - name: reverse_ethernet_total_length - type: integer - - name: reverse_dot1q_vlan_id - type: integer - - name: reverse_dot1q_priority + - name: reverse_small_packet_count + type: long + - name: reverse_source_ipv4_address + type: ip + - name: reverse_source_ipv4_prefix + type: ip + - name: reverse_source_ipv4_prefix_length type: short - - name: reverse_dot1q_customer_vlan_id - type: integer - - name: reverse_dot1q_customer_priority + - name: reverse_source_ipv6_address + type: ip + - name: reverse_source_ipv6_prefix + type: ip + - name: reverse_source_ipv6_prefix_length type: short - - name: reverse_metro_evc_id + - name: reverse_source_mac_address type: keyword - - name: reverse_metro_evc_type - type: short - - name: reverse_pseudo_wire_id - type: long - - name: reverse_pseudo_wire_type + - name: reverse_source_transport_port type: integer - - name: reverse_pseudo_wire_control_word - type: long - - name: reverse_ingress_physical_interface - type: long - - name: reverse_egress_physical_interface + - name: reverse_src_traffic_index type: long - - name: reverse_post_dot1q_vlan_id - type: integer - - name: reverse_post_dot1q_customer_vlan_id - type: integer - - name: reverse_ethernet_type - type: integer - - name: reverse_post_ip_precedence - type: short - - name: reverse_collection_time_milliseconds + - name: reverse_sta_ipv4_address + type: ip + - name: reverse_sta_mac_address + type: keyword + - name: reverse_standard_deviation_interarrival_time type: long - - name: reverse_export_sctp_stream_id + - name: reverse_standard_deviation_payload_length type: integer - - name: reverse_max_export_seconds + - name: reverse_system_init_time_milliseconds type: long - - name: reverse_max_flow_end_seconds + - name: reverse_tcp_ack_total_count type: long - - name: reverse_message_md5_checksum - type: keyword - - name: reverse_message_scope - type: short - - name: reverse_min_export_seconds + - name: reverse_tcp_acknowledgement_number type: long - - name: reverse_min_flow_start_seconds + - name: reverse_tcp_control_bits + type: integer + - name: reverse_tcp_destination_port + type: integer + - name: reverse_tcp_fin_total_count type: long - - name: reverse_opaque_octets - type: keyword - - name: reverse_session_scope + - name: reverse_tcp_header_length type: short - - name: reverse_max_flow_end_microseconds - type: long - - name: reverse_max_flow_end_milliseconds - type: long - - name: reverse_max_flow_end_nanoseconds + - name: reverse_tcp_options type: long - - name: reverse_min_flow_start_microseconds + - name: reverse_tcp_psh_total_count type: long - - name: reverse_min_flow_start_milliseconds + - name: reverse_tcp_rst_total_count type: long - - name: reverse_min_flow_start_nanoseconds + - name: reverse_tcp_sequence_number type: long - - name: reverse_collector_certificate - type: keyword - - name: reverse_exporter_certificate - type: keyword - - name: reverse_data_records_reliability - type: short - - name: reverse_observation_point_type - type: short - - name: reverse_new_connection_delta_count + - name: reverse_tcp_source_port + type: integer + - name: reverse_tcp_syn_total_count type: long - - name: reverse_connection_sum_duration_seconds + - name: reverse_tcp_urg_total_count type: long - - name: reverse_connection_transaction_id + - name: reverse_tcp_urgent_pointer + type: integer + - name: reverse_tcp_window_scale + type: integer + - name: reverse_tcp_window_size + type: integer + - name: reverse_total_length_ipv4 + type: integer + - name: reverse_transport_octet_delta_count type: long - - name: reverse_post_nat_source_ipv6_address - type: ip - - name: reverse_post_nat_destination_ipv6_address - type: ip - - name: reverse_nat_pool_id + - name: reverse_transport_packet_delta_count type: long - - name: reverse_nat_pool_name + - name: reverse_tunnel_technology type: keyword - - name: reverse_anonymization_flags + - name: reverse_udp_destination_port type: integer - - name: reverse_anonymization_technique + - name: reverse_udp_message_length type: integer - - name: reverse_information_element_index + - name: reverse_udp_source_port type: integer - - name: reverse_p2p_technology + - name: reverse_union_tcp_flags + type: short + - name: reverse_upper_ci_limit + type: double + - name: reverse_user_name type: keyword - - name: reverse_tunnel_technology + - name: reverse_value_distribution_method + type: short + - name: reverse_virtual_station_interface_id type: keyword - - name: reverse_encrypted_technology + - name: reverse_virtual_station_interface_name type: keyword - - name: reverse_bgp_validity_state - type: short - - name: reverse_ip_sec_spi - type: long - - name: reverse_gre_key - type: long - - name: reverse_nat_type + - name: reverse_virtual_station_name + type: keyword + - name: reverse_virtual_station_uuid + type: keyword + - name: reverse_vlan_id + type: integer + - name: reverse_vr_fname + type: keyword + - name: reverse_wlan_channel_id type: short - - name: reverse_initiator_packets - type: long - - name: reverse_responder_packets - type: long - - name: reverse_observation_domain_name + - name: reverse_wlan_ssid type: keyword - - name: reverse_selection_sequence_id + - name: reverse_wtp_mac_address + type: keyword + - name: rfc3550_jitter_microseconds type: long - - name: reverse_selector_id + - name: rfc3550_jitter_milliseconds type: long - - name: reverse_information_element_id - type: integer - - name: reverse_selector_algorithm - type: integer - - name: reverse_sampling_packet_interval + - name: rfc3550_jitter_nanoseconds type: long - - name: reverse_sampling_packet_space + - name: rtp_payload_type + type: short + - name: rtp_sequence_number + type: integer + - name: sampler_id + type: short + - name: sampler_mode + type: short + - name: sampler_name + type: keyword + - name: sampler_random_interval type: long - - name: reverse_sampling_time_interval + - name: sampling_algorithm + type: short + - name: sampling_flow_interval type: long - - name: reverse_sampling_time_space + - name: sampling_flow_spacing type: long - - name: reverse_sampling_size + - name: sampling_interval type: long - - name: reverse_sampling_population + - name: sampling_packet_interval type: long - - name: reverse_sampling_probability - type: double - - name: reverse_data_link_frame_size - type: integer - - name: reverse_ip_header_packet_section - type: keyword - - name: reverse_ip_payload_packet_section - type: keyword - - name: reverse_data_link_frame_section - type: keyword - - name: reverse_mpls_label_stack_section - type: keyword - - name: reverse_mpls_payload_packet_section - type: keyword - - name: reverse_selector_id_total_pkts_observed + - name: sampling_packet_space type: long - - name: reverse_selector_id_total_pkts_selected + - name: sampling_population type: long - - name: reverse_absolute_error - type: double - - name: reverse_relative_error + - name: sampling_probability type: double - - name: reverse_observation_time_seconds - type: long - - name: reverse_observation_time_milliseconds + - name: sampling_size type: long - - name: reverse_observation_time_microseconds + - name: sampling_time_interval type: long - - name: reverse_observation_time_nanoseconds + - name: sampling_time_space type: long - - name: reverse_digest_hash_value + - name: second_packet_banner + type: keyword + - name: section_exported_octets + type: integer + - name: section_offset + type: integer + - name: selection_sequence_id type: long - - name: reverse_hash_ip_payload_offset + - name: selector_algorithm + type: integer + - name: selector_id type: long - - name: reverse_hash_ip_payload_size + - name: selector_id_total_flows_observed type: long - - name: reverse_hash_output_range_min + - name: selector_id_total_flows_selected type: long - - name: reverse_hash_output_range_max + - name: selector_id_total_pkts_observed type: long - - name: reverse_hash_selected_range_min + - name: selector_id_total_pkts_selected type: long - - name: reverse_hash_selected_range_max + - name: selector_name + type: keyword + - name: service_name + type: keyword + - name: session_scope + type: short + - name: silk_app_label + type: integer + - name: small_packet_count type: long - - name: reverse_hash_digest_output + - name: source_ipv4_address + type: ip + - name: source_ipv4_prefix + type: ip + - name: source_ipv4_prefix_length type: short - - name: reverse_hash_initialiser_value + - name: source_ipv6_address + type: ip + - name: source_ipv6_prefix + type: ip + - name: source_ipv6_prefix_length + type: short + - name: source_mac_address + type: keyword + - name: source_transport_port + type: integer + - name: source_transport_ports_limit + type: integer + - name: src_traffic_index type: long - - name: reverse_selector_name + - name: ssl_cert_serial_number + type: keyword + - name: ssl_cert_signature + type: keyword + - name: ssl_cert_validity_not_after + type: keyword + - name: ssl_cert_validity_not_before type: keyword - - name: reverse_upper_ci_limit - type: double - - name: reverse_lower_ci_limit - type: double - - name: reverse_confidence_level - type: double - - name: reverse_information_element_data_type + - name: ssl_cert_version type: short - - name: reverse_information_element_description + - name: ssl_certificate_hash type: keyword - - name: reverse_information_element_name + - name: ssl_cipher type: keyword - - name: reverse_information_element_range_begin - type: long - - name: reverse_information_element_range_end - type: long - - name: reverse_information_element_semantics + - name: ssl_client_version type: short - - name: reverse_information_element_units - type: integer - - name: reverse_private_enterprise_number - type: long - - name: reverse_virtual_station_interface_id + - name: ssl_compression_method + type: short + - name: ssl_object_type type: keyword - - name: reverse_virtual_station_interface_name + - name: ssl_object_value type: keyword - - name: reverse_virtual_station_uuid + - name: ssl_public_key_algorithm type: keyword - - name: reverse_virtual_station_name + - name: ssl_public_key_length type: keyword - - name: reverse_layer2_segment_id + - name: ssl_server_cipher type: long - - name: reverse_layer2_octet_delta_count + - name: ssl_server_name + type: keyword + - name: sta_ipv4_address + type: ip + - name: sta_mac_address + type: keyword + - name: standard_deviation_interarrival_time type: long - - name: reverse_layer2_octet_total_count + - name: standard_deviation_payload_length + type: short + - name: system_init_time_milliseconds + type: date + - name: tcp_ack_total_count type: long - - name: reverse_ingress_unicast_packet_total_count + - name: tcp_acknowledgement_number type: long - - name: reverse_ingress_multicast_packet_total_count + - name: tcp_control_bits + type: integer + - name: tcp_destination_port + type: integer + - name: tcp_fin_total_count type: long - - name: reverse_ingress_broadcast_packet_total_count + - name: tcp_header_length + type: short + - name: tcp_options type: long - - name: reverse_egress_unicast_packet_total_count + - name: tcp_psh_total_count type: long - - name: reverse_egress_broadcast_packet_total_count + - name: tcp_rst_total_count type: long - - name: reverse_monitoring_interval_start_milli_seconds + - name: tcp_sequence_number type: long - - name: reverse_monitoring_interval_end_milli_seconds + - name: tcp_source_port + type: integer + - name: tcp_syn_total_count type: long - - name: reverse_port_range_start + - name: tcp_urg_total_count + type: long + - name: tcp_urgent_pointer type: integer - - name: reverse_port_range_end + - name: tcp_window_scale type: integer - - name: reverse_port_range_step_size + - name: tcp_window_size type: integer - - name: reverse_port_range_num_ports + - name: template_id type: integer - - name: reverse_sta_mac_address + - name: tftp_filename type: keyword - - name: reverse_sta_ipv4_address - type: ip - - name: reverse_wtp_mac_address + - name: tftp_mode type: keyword - - name: reverse_ingress_interface_type + - name: timestamp type: long - - name: reverse_egress_interface_type + - name: timestamp_absolute_monitoring-interval type: long - - name: reverse_rtp_sequence_number + - name: total_length_ipv4 type: integer - - name: reverse_user_name - type: keyword - - name: reverse_application_category_name + - name: traffic_type + type: short + - name: transport_octet_delta_count + type: long + - name: transport_packet_delta_count + type: long + - name: tunnel_technology type: keyword - - name: reverse_application_sub_category_name + - name: udp_destination_port + type: integer + - name: udp_message_length + type: integer + - name: udp_source_port + type: integer + - name: union_tcp_flags + type: short + - name: upper_ci_limit + type: double + - name: user_name type: keyword - - name: reverse_application_group_name + - name: username type: keyword - - name: reverse_original_flows_present - type: long - - name: reverse_original_flows_initiated - type: long - - name: reverse_original_flows_completed - type: long - - name: reverse_distinct_count_of_source_ip_address - type: long - - name: reverse_distinct_count_of_destination_ip_address - type: long - - name: reverse_distinct_count_of_source_ipv4_address - type: long - - name: reverse_distinct_count_of_destination_ipv4_address - type: long - - name: reverse_distinct_count_of_source_ipv6_address - type: long - - name: reverse_distinct_count_of_destination_ipv6_address - type: long - - name: reverse_value_distribution_method + - name: value_distribution_method type: short - - name: reverse_rfc3550_jitter_milliseconds - type: long - - name: reverse_rfc3550_jitter_microseconds - type: long - - name: reverse_rfc3550_jitter_nanoseconds + - name: viptela_vpn_id type: long - - name: reverse_dot1q_dei + - name: virtual_station_interface_id type: short - - name: reverse_dot1q_customer_dei + - name: virtual_station_interface_name + type: keyword + - name: virtual_station_name + type: keyword + - name: virtual_station_uuid type: short - - name: reverse_flow_selector_algorithm + - name: vlan_id type: integer - - name: reverse_flow_selected_octet_delta_count - type: long - - name: reverse_flow_selected_packet_delta_count - type: long - - name: reverse_flow_selected_flow_delta_count - type: long - - name: reverse_selector_id_total_flows_observed - type: long - - name: reverse_selector_id_total_flows_selected - type: long - - name: reverse_sampling_flow_interval - type: long - - name: reverse_sampling_flow_spacing - type: long - - name: reverse_flow_sampling_time_interval - type: long - - name: reverse_flow_sampling_time_spacing - type: long - - name: reverse_hash_flow_domain + - name: vmware_egress_interface_attr type: integer - - name: reverse_transport_octet_delta_count - type: long - - name: reverse_transport_packet_delta_count - type: long - - name: reverse_original_exporter_ipv4_address + - name: vmware_ingress_interface_attr + type: integer + - name: vmware_tenant_dest_ipv4 type: ip - - name: reverse_original_exporter_ipv6_address + - name: vmware_tenant_dest_ipv6 type: ip - - name: reverse_original_observation_domain_id - type: long - - name: reverse_intermediate_process_id - type: long - - name: reverse_ignored_data_record_total_count - type: long - - name: reverse_data_link_frame_type - type: integer - - name: reverse_section_offset + - name: vmware_tenant_dest_port type: integer - - name: reverse_section_exported_octets + - name: vmware_tenant_protocol + type: short + - name: vmware_tenant_source_ipv4 + type: ip + - name: vmware_tenant_source_ipv6 + type: ip + - name: vmware_tenant_source_port type: integer - - name: reverse_dot1q_service_instance_tag + - name: vmware_vxlan_export_role + type: short + - name: vpn_identifier + type: short + - name: vr_fname type: keyword - - name: reverse_dot1q_service_instance_id - type: long - - name: reverse_dot1q_service_instance_priority + - name: waasoptimization_segment type: short - - name: reverse_dot1q_customer_source_mac_address + - name: wlan_channel_id + type: short + - name: wlan_ssid type: keyword - - name: reverse_dot1q_customer_destination_mac_address + - name: wtp_mac_address type: keyword - - name: reverse_post_layer2_octet_delta_count - type: long - - name: reverse_post_mcast_layer2_octet_delta_count - type: long - - name: reverse_post_layer2_octet_total_count - type: long - - name: reverse_post_mcast_layer2_octet_total_count - type: long - - name: reverse_minimum_layer2_total_length - type: long - - name: reverse_maximum_layer2_total_length - type: long - - name: reverse_dropped_layer2_octet_delta_count - type: long - - name: reverse_dropped_layer2_octet_total_count - type: long - - name: reverse_ignored_layer2_octet_total_count - type: long - - name: reverse_not_sent_layer2_octet_total_count - type: long - - name: reverse_layer2_octet_delta_sum_of_squares - type: long - - name: reverse_layer2_octet_total_sum_of_squares - type: long - - name: reverse_layer2_frame_delta_count - type: long - - name: reverse_layer2_frame_total_count - type: long - - name: reverse_pseudo_wire_destination_ipv4_address + - name: xlate_destination_address_ip_v4 type: ip - - name: reverse_ignored_layer2_frame_total_count - type: long - - name: viptela_vpn_id - type: long + - name: xlate_destination_port + type: integer + - name: xlate_source_address_ip_v4 + type: ip + - name: xlate_source_port + type: integer diff --git a/packages/netflow/docs/README.md b/packages/netflow/docs/README.md index 82151f4ce080..210682292bcb 100644 --- a/packages/netflow/docs/README.md +++ b/packages/netflow/docs/README.md @@ -205,7 +205,7 @@ The `log` dataset collects netflow logs. | host.geo.region_name | Region name. | keyword | | host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | | host.id | Unique host id. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | -| host.ip | Host ip address. | ip | +| host.ip | Host ip addresses. | ip | | host.mac | Host mac address. | keyword | | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | | host.os.build | OS build information. | keyword | @@ -263,14 +263,14 @@ The `log` dataset collects netflow logs. | netflow.anonymization_flags | | integer | | netflow.anonymization_technique | | integer | | netflow.application_business-relevance | | long | -| netflow.application_category_name | | long | +| netflow.application_category_name | | keyword | | netflow.application_description | | keyword | | netflow.application_group_name | | keyword | | netflow.application_http_uri_statistics | | short | | netflow.application_http_user-agent | | short | | netflow.application_id | | short | | netflow.application_name | | keyword | -| netflow.application_sub_category_name | | long | +| netflow.application_sub_category_name | | keyword | | netflow.application_traffic-class | | long | | netflow.art_client_network_time_maximum | | long | | netflow.art_client_network_time_minimum | | long | diff --git a/packages/netflow/manifest.yml b/packages/netflow/manifest.yml index 1aa449008a03..391e43a51f42 100644 --- a/packages/netflow/manifest.yml +++ b/packages/netflow/manifest.yml @@ -1,7 +1,7 @@ format_version: 1.0.0 name: netflow title: NetFlow -version: 0.3.6 +version: 0.3.7 license: basic description: NetFlow Integration type: integration