diff --git a/x-pack/plugins/apm/server/routes/settings/agent_configuration.ts b/x-pack/plugins/apm/server/routes/settings/agent_configuration.ts index f5c9cc2adf238..0350ebfb9196c 100644 --- a/x-pack/plugins/apm/server/routes/settings/agent_configuration.ts +++ b/x-pack/plugins/apm/server/routes/settings/agent_configuration.ts @@ -136,15 +136,19 @@ export const createOrUpdateAgentConfigurationRoute = createRoute(() => ({ }, })); +const searchParamsRt = t.intersection([ + t.type({ service: serviceRt }), + t.partial({ etag: t.string, mark_as_applied_by_agent: t.boolean }), +]); + +export type AgentConfigSearchParams = t.TypeOf; + // Lookup single configuration (used by APM Server) export const agentConfigurationSearchRoute = createRoute(() => ({ method: 'POST', path: '/api/apm/settings/agent-configuration/search', params: { - body: t.intersection([ - t.type({ service: serviceRt }), - t.partial({ etag: t.string, mark_as_applied_by_agent: t.boolean }), - ]), + body: searchParamsRt, }, handler: async ({ context, request }) => { const { diff --git a/x-pack/test/apm_api_integration/basic/fixtures/es_archiver/8.0.0/data.json.gz b/x-pack/test/apm_api_integration/basic/fixtures/es_archiver/8.0.0/data.json.gz new file mode 100644 index 0000000000000..e9360878b7bb7 Binary files /dev/null and b/x-pack/test/apm_api_integration/basic/fixtures/es_archiver/8.0.0/data.json.gz differ diff --git a/x-pack/test/apm_api_integration/basic/fixtures/es_archiver/8.0.0/mappings.json b/x-pack/test/apm_api_integration/basic/fixtures/es_archiver/8.0.0/mappings.json new file mode 100644 index 0000000000000..5e9f9f52be8d3 --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/fixtures/es_archiver/8.0.0/mappings.json @@ -0,0 +1,25698 @@ +{ + "type": "index", + "value": { + "aliases": { + "apm-8.0.0-error": { + "is_write_index": true + } + }, + "index": "apm-8.0.0-error-000001", + "mappings": { + "_meta": { + "beat": "apm", + "version": "8.0.0" + }, + "date_detection": false, + "dynamic_templates": [ + { + "labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "container.labels.*" + } + }, + { + "dns.answers": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "dns.answers.*" + } + }, + { + "log.syslog": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "log.syslog.*" + } + }, + { + "network.inner": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "network.inner.*" + } + }, + { + "observer.egress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.egress.*" + } + }, + { + "observer.ingress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.ingress.*" + } + }, + { + "fields": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "fields.*" + } + }, + { + "docker.container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "docker.container.labels.*" + } + }, + { + "kubernetes.labels.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.labels.*" + } + }, + { + "kubernetes.annotations.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.annotations.*" + } + }, + { + "labels_string": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "labels_boolean": { + "mapping": { + "type": "boolean" + }, + "match_mapping_type": "boolean", + "path_match": "labels.*" + } + }, + { + "labels_*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "labels.*" + } + }, + { + "transaction.marks": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "transaction.marks.*" + } + }, + { + "transaction.marks.*.*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "transaction.marks.*.*" + } + }, + { + "strings_as_keyword": { + "mapping": { + "ignore_above": 1024, + "type": "keyword" + }, + "match_mapping_type": "string" + } + } + ], + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "dynamic": "false", + "properties": { + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "hostname": { + "path": "agent.name", + "type": "alias" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "child": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "client": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "cloud": { + "properties": { + "account": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "availability_zone": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "instance": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "machine": { + "dynamic": "false", + "properties": { + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "project": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "region": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "container": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "tag": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "type": "object" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "runtime": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "destination": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dll": { + "properties": { + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dns": { + "properties": { + "answers": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "data": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "ttl": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "header_flags": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "op_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "question": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "subdomain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "resolved_ip": { + "type": "ip" + }, + "response_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "docker": { + "properties": { + "container": { + "properties": { + "labels": { + "type": "object" + } + } + } + } + }, + "ecs": { + "properties": { + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "error": { + "dynamic": "false", + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "culprit": { + "ignore_above": 1024, + "type": "keyword" + }, + "exception": { + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "handled": { + "type": "boolean" + }, + "message": { + "norms": false, + "type": "text" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "grouping_key": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "norms": false, + "type": "text" + }, + "param_message": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "stack_trace": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "event": { + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "created": { + "type": "date" + }, + "dataset": { + "ignore_above": 1024, + "type": "keyword" + }, + "duration": { + "type": "long" + }, + "end": { + "type": "date" + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingested": { + "type": "date" + }, + "kind": { + "ignore_above": 1024, + "type": "keyword" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "outcome": { + "ignore_above": 1024, + "type": "keyword" + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "risk_score": { + "type": "float" + }, + "risk_score_norm": { + "type": "float" + }, + "sequence": { + "type": "long" + }, + "severity": { + "type": "long" + }, + "start": { + "type": "date" + }, + "timezone": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "url": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "experimental": { + "dynamic": "true", + "type": "object" + }, + "fields": { + "type": "object" + }, + "file": { + "properties": { + "accessed": { + "type": "date" + }, + "attributes": { + "ignore_above": 1024, + "type": "keyword" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "created": { + "type": "date" + }, + "ctime": { + "type": "date" + }, + "device": { + "ignore_above": 1024, + "type": "keyword" + }, + "directory": { + "ignore_above": 1024, + "type": "keyword" + }, + "drive_letter": { + "ignore_above": 1, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "gid": { + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "inode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mime_type": { + "ignore_above": 1024, + "type": "keyword" + }, + "mode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mtime": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "owner": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "size": { + "type": "long" + }, + "target_path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "host": { + "dynamic": "false", + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "containerized": { + "type": "boolean" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "build": { + "ignore_above": 1024, + "type": "keyword" + }, + "codename": { + "ignore_above": 1024, + "type": "keyword" + }, + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "http": { + "dynamic": "false", + "properties": { + "request": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "method": { + "ignore_above": 1024, + "type": "keyword" + }, + "referrer": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "response": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "finished": { + "type": "boolean" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "status_code": { + "type": "long" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "kubernetes": { + "dynamic": "false", + "properties": { + "annotations": { + "properties": { + "*": { + "type": "object" + } + } + }, + "container": { + "properties": { + "image": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "deployment": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "properties": { + "*": { + "type": "object" + } + } + }, + "namespace": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pod": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "replicaset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "statefulset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "labels": { + "dynamic": "true", + "properties": { + "foo": { + "type": "keyword" + }, + "lorem": { + "type": "keyword" + }, + "multi-line": { + "type": "keyword" + }, + "this-is-a-very-long-tag-name-without-any-spaces": { + "type": "keyword" + } + } + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger": { + "ignore_above": 1024, + "type": "keyword" + }, + "origin": { + "properties": { + "file": { + "properties": { + "line": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "syslog": { + "properties": { + "facility": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "priority": { + "type": "long" + }, + "severity": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "network": { + "properties": { + "application": { + "ignore_above": 1024, + "type": "keyword" + }, + "bytes": { + "type": "long" + }, + "community_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "direction": { + "ignore_above": 1024, + "type": "keyword" + }, + "forwarded_ip": { + "type": "ip" + }, + "iana_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "inner": { + "properties": { + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "packets": { + "type": "long" + }, + "protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "transport": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "observer": { + "dynamic": "false", + "properties": { + "egress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "listening": { + "ignore_above": 1024, + "type": "keyword" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "serial_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vendor": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_major": { + "type": "byte" + } + } + }, + "organization": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "build_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "checksum": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "install_scope": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "parent": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "process": { + "dynamic": "false", + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "parent": { + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "processor": { + "properties": { + "event": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "profile": { + "dynamic": "false", + "properties": { + "alloc_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "alloc_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "cpu": { + "properties": { + "ns": { + "type": "long" + } + } + }, + "duration": { + "type": "long" + }, + "inuse_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "inuse_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "samples": { + "properties": { + "count": { + "type": "long" + } + } + }, + "stack": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + }, + "top": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + } + } + }, + "registry": { + "properties": { + "data": { + "properties": { + "bytes": { + "ignore_above": 1024, + "type": "keyword" + }, + "strings": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hive": { + "ignore_above": 1024, + "type": "keyword" + }, + "key": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "value": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "related": { + "properties": { + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "user": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "rule": { + "properties": { + "author": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "ruleset": { + "ignore_above": 1024, + "type": "keyword" + }, + "uuid": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "server": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "service": { + "dynamic": "false", + "properties": { + "environment": { + "ignore_above": 1024, + "type": "keyword" + }, + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "framework": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "language": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "runtime": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "state": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "source": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "sourcemap": { + "dynamic": "false", + "properties": { + "bundle_filepath": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "span": { + "dynamic": "false", + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "db": { + "dynamic": "false", + "properties": { + "link": { + "ignore_above": 1024, + "type": "keyword" + }, + "rows_affected": { + "type": "long" + } + } + }, + "destination": { + "dynamic": "false", + "properties": { + "service": { + "dynamic": "false", + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "resource": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "duration": { + "properties": { + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "start": { + "properties": { + "us": { + "type": "long" + } + } + }, + "subtype": { + "ignore_above": 1024, + "type": "keyword" + }, + "sync": { + "type": "boolean" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "system": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "actual": { + "properties": { + "free": { + "type": "long" + } + } + }, + "total": { + "type": "long" + } + } + }, + "process": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "rss": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "size": { + "type": "long" + } + } + } + } + } + } + }, + "tags": { + "ignore_above": 1024, + "type": "keyword" + }, + "threat": { + "properties": { + "framework": { + "ignore_above": 1024, + "type": "keyword" + }, + "tactic": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "technique": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "timeseries": { + "properties": { + "instance": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "timestamp": { + "properties": { + "us": { + "type": "long" + } + } + }, + "tls": { + "properties": { + "cipher": { + "ignore_above": 1024, + "type": "keyword" + }, + "client": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "server_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + }, + "supported_ciphers": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "curve": { + "ignore_above": 1024, + "type": "keyword" + }, + "established": { + "type": "boolean" + }, + "next_protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "resumed": { + "type": "boolean" + }, + "server": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3s": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_protocol": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "trace": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "tracing": { + "properties": { + "trace": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "transaction": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "transaction": { + "dynamic": "false", + "properties": { + "breakdown": { + "properties": { + "count": { + "type": "long" + } + } + }, + "duration": { + "properties": { + "count": { + "type": "long" + }, + "histogram": { + "type": "histogram" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + }, + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "marks": { + "dynamic": "true", + "properties": { + "*": { + "properties": { + "*": { + "dynamic": "true", + "type": "object" + } + } + } + } + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "result": { + "ignore_above": 1024, + "type": "keyword" + }, + "root": { + "type": "boolean" + }, + "sampled": { + "type": "boolean" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "span_count": { + "properties": { + "dropped": { + "type": "long" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "url": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "fragment": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "password": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "port": { + "type": "long" + }, + "query": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "scheme": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "username": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user_agent": { + "dynamic": "false", + "properties": { + "device": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "view spans": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vulnerability": { + "properties": { + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "classification": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "enumeration": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "report_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "scanner": { + "properties": { + "vendor": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "score": { + "properties": { + "base": { + "type": "float" + }, + "environmental": { + "type": "float" + }, + "temporal": { + "type": "float" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "severity": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "settings": { + "index": { + "codec": "best_compression", + "lifecycle": { + "name": "apm-rollover-30-days", + "rollover_alias": "apm-8.0.0-error" + }, + "mapping": { + "total_fields": { + "limit": "2000" + } + }, + "number_of_replicas": "0", + "number_of_shards": "1", + "priority": "100", + "query": { + "default_field": [ + "message", + "tags", + "agent.ephemeral_id", + "agent.id", + "agent.name", + "agent.type", + "agent.version", + "as.organization.name", + "client.address", + "client.as.organization.name", + "client.domain", + "client.geo.city_name", + "client.geo.continent_name", + "client.geo.country_iso_code", + "client.geo.country_name", + "client.geo.name", + "client.geo.region_iso_code", + "client.geo.region_name", + "client.mac", + "client.registered_domain", + "client.top_level_domain", + "client.user.domain", + "client.user.email", + "client.user.full_name", + "client.user.group.domain", + "client.user.group.id", + "client.user.group.name", + "client.user.hash", + "client.user.id", + "client.user.name", + "cloud.account.id", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.provider", + "cloud.region", + "container.id", + "container.image.name", + "container.image.tag", + "container.name", + "container.runtime", + "destination.address", + "destination.as.organization.name", + "destination.domain", + "destination.geo.city_name", + "destination.geo.continent_name", + "destination.geo.country_iso_code", + "destination.geo.country_name", + "destination.geo.name", + "destination.geo.region_iso_code", + "destination.geo.region_name", + "destination.mac", + "destination.registered_domain", + "destination.top_level_domain", + "destination.user.domain", + "destination.user.email", + "destination.user.full_name", + "destination.user.group.domain", + "destination.user.group.id", + "destination.user.group.name", + "destination.user.hash", + "destination.user.id", + "destination.user.name", + "dns.answers.class", + "dns.answers.data", + "dns.answers.name", + "dns.answers.type", + "dns.header_flags", + "dns.id", + "dns.op_code", + "dns.question.class", + "dns.question.name", + "dns.question.registered_domain", + "dns.question.subdomain", + "dns.question.top_level_domain", + "dns.question.type", + "dns.response_code", + "dns.type", + "ecs.version", + "error.code", + "error.id", + "error.message", + "error.stack_trace", + "error.type", + "event.action", + "event.category", + "event.code", + "event.dataset", + "event.hash", + "event.id", + "event.kind", + "event.module", + "event.original", + "event.outcome", + "event.provider", + "event.timezone", + "event.type", + "file.device", + "file.directory", + "file.extension", + "file.gid", + "file.group", + "file.hash.md5", + "file.hash.sha1", + "file.hash.sha256", + "file.hash.sha512", + "file.inode", + "file.mode", + "file.name", + "file.owner", + "file.path", + "file.target_path", + "file.type", + "file.uid", + "geo.city_name", + "geo.continent_name", + "geo.country_iso_code", + "geo.country_name", + "geo.name", + "geo.region_iso_code", + "geo.region_name", + "group.domain", + "group.id", + "group.name", + "hash.md5", + "hash.sha1", + "hash.sha256", + "hash.sha512", + "host.architecture", + "host.geo.city_name", + "host.geo.continent_name", + "host.geo.country_iso_code", + "host.geo.country_name", + "host.geo.name", + "host.geo.region_iso_code", + "host.geo.region_name", + "host.hostname", + "host.id", + "host.mac", + "host.name", + "host.os.family", + "host.os.full", + "host.os.kernel", + "host.os.name", + "host.os.platform", + "host.os.version", + "host.type", + "host.user.domain", + "host.user.email", + "host.user.full_name", + "host.user.group.domain", + "host.user.group.id", + "host.user.group.name", + "host.user.hash", + "host.user.id", + "host.user.name", + "http.request.body.content", + "http.request.method", + "http.request.referrer", + "http.response.body.content", + "http.version", + "log.level", + "log.logger", + "log.origin.file.name", + "log.origin.function", + "log.original", + "log.syslog.facility.name", + "log.syslog.severity.name", + "network.application", + "network.community_id", + "network.direction", + "network.iana_number", + "network.name", + "network.protocol", + "network.transport", + "network.type", + "observer.geo.city_name", + "observer.geo.continent_name", + "observer.geo.country_iso_code", + "observer.geo.country_name", + "observer.geo.name", + "observer.geo.region_iso_code", + "observer.geo.region_name", + "observer.hostname", + "observer.mac", + "observer.name", + "observer.os.family", + "observer.os.full", + "observer.os.kernel", + "observer.os.name", + "observer.os.platform", + "observer.os.version", + "observer.product", + "observer.serial_number", + "observer.type", + "observer.vendor", + "observer.version", + "organization.id", + "organization.name", + "os.family", + "os.full", + "os.kernel", + "os.name", + "os.platform", + "os.version", + "package.architecture", + "package.checksum", + "package.description", + "package.install_scope", + "package.license", + "package.name", + "package.path", + "package.version", + "process.args", + "text", + "process.executable", + "process.hash.md5", + "process.hash.sha1", + "process.hash.sha256", + "process.hash.sha512", + "process.name", + "text", + "text", + "text", + "text", + "text", + "process.thread.name", + "process.title", + "process.working_directory", + "server.address", + "server.as.organization.name", + "server.domain", + "server.geo.city_name", + "server.geo.continent_name", + "server.geo.country_iso_code", + "server.geo.country_name", + "server.geo.name", + "server.geo.region_iso_code", + "server.geo.region_name", + "server.mac", + "server.registered_domain", + "server.top_level_domain", + "server.user.domain", + "server.user.email", + "server.user.full_name", + "server.user.group.domain", + "server.user.group.id", + "server.user.group.name", + "server.user.hash", + "server.user.id", + "server.user.name", + "service.ephemeral_id", + "service.id", + "service.name", + "service.node.name", + "service.state", + "service.type", + "service.version", + "source.address", + "source.as.organization.name", + "source.domain", + "source.geo.city_name", + "source.geo.continent_name", + "source.geo.country_iso_code", + "source.geo.country_name", + "source.geo.name", + "source.geo.region_iso_code", + "source.geo.region_name", + "source.mac", + "source.registered_domain", + "source.top_level_domain", + "source.user.domain", + "source.user.email", + "source.user.full_name", + "source.user.group.domain", + "source.user.group.id", + "source.user.group.name", + "source.user.hash", + "source.user.id", + "source.user.name", + "threat.framework", + "threat.tactic.id", + "threat.tactic.name", + "threat.tactic.reference", + "threat.technique.id", + "threat.technique.name", + "threat.technique.reference", + "tracing.trace.id", + "tracing.transaction.id", + "url.domain", + "url.extension", + "url.fragment", + "url.full", + "url.original", + "url.password", + "url.path", + "url.query", + "url.registered_domain", + "url.scheme", + "url.top_level_domain", + "url.username", + "user.domain", + "user.email", + "user.full_name", + "user.group.domain", + "user.group.id", + "user.group.name", + "user.hash", + "user.id", + "user.name", + "user_agent.device.name", + "user_agent.name", + "text", + "user_agent.original", + "user_agent.os.family", + "user_agent.os.full", + "user_agent.os.kernel", + "user_agent.os.name", + "user_agent.os.platform", + "user_agent.os.version", + "user_agent.version", + "text", + "timeseries.instance", + "cloud.project.id", + "cloud.image.id", + "host.os.build", + "host.os.codename", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.replicaset.name", + "kubernetes.deployment.name", + "kubernetes.statefulset.name", + "kubernetes.container.name", + "kubernetes.container.image", + "processor.name", + "processor.event", + "url.scheme", + "url.full", + "url.domain", + "url.path", + "url.query", + "url.fragment", + "http.version", + "http.request.method", + "http.request.referrer", + "service.name", + "service.version", + "service.environment", + "service.node.name", + "service.language.name", + "service.language.version", + "service.runtime.name", + "service.runtime.version", + "service.framework.name", + "service.framework.version", + "transaction.id", + "transaction.type", + "text", + "transaction.name", + "span.type", + "span.subtype", + "trace.id", + "parent.id", + "agent.name", + "agent.version", + "agent.ephemeral_id", + "container.id", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "host.architecture", + "host.hostname", + "host.name", + "host.os.platform", + "process.args", + "process.title", + "observer.listening", + "observer.hostname", + "observer.version", + "observer.type", + "user.name", + "user.id", + "user.email", + "destination.address", + "text", + "user_agent.original", + "user_agent.name", + "user_agent.version", + "user_agent.device.name", + "user_agent.os.platform", + "user_agent.os.name", + "user_agent.os.full", + "user_agent.os.family", + "user_agent.os.version", + "user_agent.os.kernel", + "cloud.account.id", + "cloud.account.name", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.project.id", + "cloud.project.name", + "cloud.provider", + "cloud.region", + "error.id", + "error.culprit", + "error.grouping_key", + "error.exception.code", + "error.exception.message", + "error.exception.module", + "error.exception.type", + "error.log.level", + "error.log.logger_name", + "error.log.message", + "error.log.param_message", + "profile.top.id", + "profile.top.function", + "profile.top.filename", + "profile.stack.id", + "profile.stack.function", + "profile.stack.filename", + "sourcemap.service.name", + "sourcemap.service.version", + "sourcemap.bundle_filepath", + "view spans", + "child.id", + "span.id", + "span.name", + "span.action", + "span.db.link", + "span.destination.service.type", + "span.destination.service.name", + "span.destination.service.resource", + "span.message.queue.name", + "transaction.result", + "transaction.message.queue.name", + "fields.*" + ] + }, + "refresh_interval": "1ms" + } + } + } +} + +{ + "type": "index", + "value": { + "aliases": { + "apm-8.0.0-metric": { + "is_write_index": true + } + }, + "index": "apm-8.0.0-metric-000001", + "mappings": { + "_meta": { + "beat": "apm", + "version": "8.0.0" + }, + "date_detection": false, + "dynamic_templates": [ + { + "labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "container.labels.*" + } + }, + { + "dns.answers": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "dns.answers.*" + } + }, + { + "log.syslog": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "log.syslog.*" + } + }, + { + "network.inner": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "network.inner.*" + } + }, + { + "observer.egress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.egress.*" + } + }, + { + "observer.ingress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.ingress.*" + } + }, + { + "fields": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "fields.*" + } + }, + { + "docker.container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "docker.container.labels.*" + } + }, + { + "kubernetes.labels.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.labels.*" + } + }, + { + "kubernetes.annotations.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.annotations.*" + } + }, + { + "labels_string": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "labels_boolean": { + "mapping": { + "type": "boolean" + }, + "match_mapping_type": "boolean", + "path_match": "labels.*" + } + }, + { + "labels_*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "labels.*" + } + }, + { + "transaction.marks": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "transaction.marks.*" + } + }, + { + "transaction.marks.*.*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "transaction.marks.*.*" + } + }, + { + "strings_as_keyword": { + "mapping": { + "ignore_above": 1024, + "type": "keyword" + }, + "match_mapping_type": "string" + } + } + ], + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "dynamic": "false", + "properties": { + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "hostname": { + "path": "agent.name", + "type": "alias" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "child": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "client": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "cloud": { + "properties": { + "account": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "availability_zone": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "instance": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "machine": { + "dynamic": "false", + "properties": { + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "project": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "region": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "container": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "tag": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "type": "object" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "runtime": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "destination": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dll": { + "properties": { + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dns": { + "properties": { + "answers": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "data": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "ttl": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "header_flags": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "op_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "question": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "subdomain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "resolved_ip": { + "type": "ip" + }, + "response_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "docker": { + "properties": { + "container": { + "properties": { + "labels": { + "type": "object" + } + } + } + } + }, + "ecs": { + "properties": { + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "error": { + "dynamic": "false", + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "culprit": { + "ignore_above": 1024, + "type": "keyword" + }, + "exception": { + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "handled": { + "type": "boolean" + }, + "message": { + "norms": false, + "type": "text" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "grouping_key": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "norms": false, + "type": "text" + }, + "param_message": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "stack_trace": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "event": { + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "created": { + "type": "date" + }, + "dataset": { + "ignore_above": 1024, + "type": "keyword" + }, + "duration": { + "type": "long" + }, + "end": { + "type": "date" + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingested": { + "type": "date" + }, + "kind": { + "ignore_above": 1024, + "type": "keyword" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "outcome": { + "ignore_above": 1024, + "type": "keyword" + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "risk_score": { + "type": "float" + }, + "risk_score_norm": { + "type": "float" + }, + "sequence": { + "type": "long" + }, + "severity": { + "type": "long" + }, + "start": { + "type": "date" + }, + "timezone": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "url": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "experimental": { + "dynamic": "true", + "type": "object" + }, + "fields": { + "type": "object" + }, + "file": { + "properties": { + "accessed": { + "type": "date" + }, + "attributes": { + "ignore_above": 1024, + "type": "keyword" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "created": { + "type": "date" + }, + "ctime": { + "type": "date" + }, + "device": { + "ignore_above": 1024, + "type": "keyword" + }, + "directory": { + "ignore_above": 1024, + "type": "keyword" + }, + "drive_letter": { + "ignore_above": 1, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "gid": { + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "inode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mime_type": { + "ignore_above": 1024, + "type": "keyword" + }, + "mode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mtime": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "owner": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "size": { + "type": "long" + }, + "target_path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "host": { + "dynamic": "false", + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "containerized": { + "type": "boolean" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "build": { + "ignore_above": 1024, + "type": "keyword" + }, + "codename": { + "ignore_above": 1024, + "type": "keyword" + }, + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "http": { + "dynamic": "false", + "properties": { + "request": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "method": { + "ignore_above": 1024, + "type": "keyword" + }, + "referrer": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "response": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "finished": { + "type": "boolean" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "status_code": { + "type": "long" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "jvm": { + "properties": { + "gc": { + "properties": { + "alloc": { + "type": "float" + }, + "count": { + "type": "long" + }, + "time": { + "type": "long" + } + } + }, + "memory": { + "properties": { + "heap": { + "properties": { + "committed": { + "type": "float" + }, + "max": { + "type": "float" + }, + "used": { + "type": "float" + } + } + }, + "non_heap": { + "properties": { + "committed": { + "type": "float" + }, + "max": { + "type": "long" + }, + "used": { + "type": "float" + } + } + } + } + }, + "thread": { + "properties": { + "count": { + "type": "long" + } + } + } + } + }, + "kubernetes": { + "dynamic": "false", + "properties": { + "annotations": { + "properties": { + "*": { + "type": "object" + } + } + }, + "container": { + "properties": { + "image": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "deployment": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "properties": { + "*": { + "type": "object" + } + } + }, + "namespace": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pod": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "replicaset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "statefulset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "labels": { + "dynamic": "true", + "properties": { + "env": { + "type": "keyword" + }, + "hostname": { + "type": "keyword" + }, + "name": { + "type": "keyword" + } + } + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger": { + "ignore_above": 1024, + "type": "keyword" + }, + "origin": { + "properties": { + "file": { + "properties": { + "line": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "syslog": { + "properties": { + "facility": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "priority": { + "type": "long" + }, + "severity": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "network": { + "properties": { + "application": { + "ignore_above": 1024, + "type": "keyword" + }, + "bytes": { + "type": "long" + }, + "community_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "direction": { + "ignore_above": 1024, + "type": "keyword" + }, + "forwarded_ip": { + "type": "ip" + }, + "iana_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "inner": { + "properties": { + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "packets": { + "type": "long" + }, + "protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "transport": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "nodejs": { + "properties": { + "eventloop": { + "properties": { + "delay": { + "properties": { + "avg": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "ns": { + "type": "long" + } + } + } + } + }, + "handles": { + "properties": { + "active": { + "type": "long" + } + } + }, + "memory": { + "properties": { + "arrayBuffers": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "external": { + "properties": { + "bytes": { + "type": "float" + } + } + }, + "heap": { + "properties": { + "allocated": { + "properties": { + "bytes": { + "type": "float" + } + } + }, + "used": { + "properties": { + "bytes": { + "type": "float" + } + } + } + } + } + } + }, + "requests": { + "properties": { + "active": { + "type": "long" + } + } + } + } + }, + "observer": { + "dynamic": "false", + "properties": { + "egress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "listening": { + "ignore_above": 1024, + "type": "keyword" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "serial_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vendor": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_major": { + "type": "byte" + } + } + }, + "organization": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "build_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "checksum": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "install_scope": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "parent": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "process": { + "dynamic": "false", + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "parent": { + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "processor": { + "properties": { + "event": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "profile": { + "dynamic": "false", + "properties": { + "alloc_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "alloc_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "cpu": { + "properties": { + "ns": { + "type": "long" + } + } + }, + "duration": { + "type": "long" + }, + "inuse_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "inuse_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "samples": { + "properties": { + "count": { + "type": "long" + } + } + }, + "stack": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + }, + "top": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + } + } + }, + "registry": { + "properties": { + "data": { + "properties": { + "bytes": { + "ignore_above": 1024, + "type": "keyword" + }, + "strings": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hive": { + "ignore_above": 1024, + "type": "keyword" + }, + "key": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "value": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "related": { + "properties": { + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "user": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "rule": { + "properties": { + "author": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "ruleset": { + "ignore_above": 1024, + "type": "keyword" + }, + "uuid": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "server": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "service": { + "dynamic": "false", + "properties": { + "environment": { + "ignore_above": 1024, + "type": "keyword" + }, + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "framework": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "language": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "runtime": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "state": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "source": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "sourcemap": { + "dynamic": "false", + "properties": { + "bundle_filepath": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "span": { + "dynamic": "false", + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "db": { + "dynamic": "false", + "properties": { + "link": { + "ignore_above": 1024, + "type": "keyword" + }, + "rows_affected": { + "type": "long" + } + } + }, + "destination": { + "dynamic": "false", + "properties": { + "service": { + "dynamic": "false", + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "resource": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "duration": { + "properties": { + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "start": { + "properties": { + "us": { + "type": "long" + } + } + }, + "subtype": { + "ignore_above": 1024, + "type": "keyword" + }, + "sync": { + "type": "boolean" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "system": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "actual": { + "properties": { + "free": { + "type": "long" + } + } + }, + "total": { + "type": "long" + } + } + }, + "process": { + "properties": { + "cpu": { + "properties": { + "system": { + "properties": { + "norm": { + "properties": { + "pct": { + "type": "float" + } + } + } + } + }, + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + }, + "user": { + "properties": { + "norm": { + "properties": { + "pct": { + "type": "float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "rss": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "size": { + "type": "long" + } + } + } + } + } + } + }, + "tags": { + "ignore_above": 1024, + "type": "keyword" + }, + "threat": { + "properties": { + "framework": { + "ignore_above": 1024, + "type": "keyword" + }, + "tactic": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "technique": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "timeseries": { + "properties": { + "instance": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "timestamp": { + "properties": { + "us": { + "type": "long" + } + } + }, + "tls": { + "properties": { + "cipher": { + "ignore_above": 1024, + "type": "keyword" + }, + "client": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "server_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + }, + "supported_ciphers": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "curve": { + "ignore_above": 1024, + "type": "keyword" + }, + "established": { + "type": "boolean" + }, + "next_protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "resumed": { + "type": "boolean" + }, + "server": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3s": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_protocol": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "trace": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "tracing": { + "properties": { + "trace": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "transaction": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "transaction": { + "dynamic": "false", + "properties": { + "breakdown": { + "properties": { + "count": { + "type": "long" + } + } + }, + "duration": { + "properties": { + "count": { + "type": "long" + }, + "histogram": { + "type": "histogram" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + }, + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "marks": { + "dynamic": "true", + "properties": { + "*": { + "properties": { + "*": { + "dynamic": "true", + "type": "object" + } + } + } + } + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "result": { + "ignore_above": 1024, + "type": "keyword" + }, + "root": { + "type": "boolean" + }, + "sampled": { + "type": "boolean" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "span_count": { + "properties": { + "dropped": { + "type": "long" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "url": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "fragment": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "password": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "port": { + "type": "long" + }, + "query": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "scheme": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "username": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user_agent": { + "dynamic": "false", + "properties": { + "device": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "view spans": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vulnerability": { + "properties": { + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "classification": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "enumeration": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "report_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "scanner": { + "properties": { + "vendor": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "score": { + "properties": { + "base": { + "type": "float" + }, + "environmental": { + "type": "float" + }, + "temporal": { + "type": "float" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "severity": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "settings": { + "index": { + "codec": "best_compression", + "lifecycle": { + "name": "apm-rollover-30-days", + "rollover_alias": "apm-8.0.0-metric" + }, + "mapping": { + "total_fields": { + "limit": "2000" + } + }, + "number_of_replicas": "0", + "number_of_shards": "1", + "priority": "100", + "query": { + "default_field": [ + "message", + "tags", + "agent.ephemeral_id", + "agent.id", + "agent.name", + "agent.type", + "agent.version", + "as.organization.name", + "client.address", + "client.as.organization.name", + "client.domain", + "client.geo.city_name", + "client.geo.continent_name", + "client.geo.country_iso_code", + "client.geo.country_name", + "client.geo.name", + "client.geo.region_iso_code", + "client.geo.region_name", + "client.mac", + "client.registered_domain", + "client.top_level_domain", + "client.user.domain", + "client.user.email", + "client.user.full_name", + "client.user.group.domain", + "client.user.group.id", + "client.user.group.name", + "client.user.hash", + "client.user.id", + "client.user.name", + "cloud.account.id", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.provider", + "cloud.region", + "container.id", + "container.image.name", + "container.image.tag", + "container.name", + "container.runtime", + "destination.address", + "destination.as.organization.name", + "destination.domain", + "destination.geo.city_name", + "destination.geo.continent_name", + "destination.geo.country_iso_code", + "destination.geo.country_name", + "destination.geo.name", + "destination.geo.region_iso_code", + "destination.geo.region_name", + "destination.mac", + "destination.registered_domain", + "destination.top_level_domain", + "destination.user.domain", + "destination.user.email", + "destination.user.full_name", + "destination.user.group.domain", + "destination.user.group.id", + "destination.user.group.name", + "destination.user.hash", + "destination.user.id", + "destination.user.name", + "dns.answers.class", + "dns.answers.data", + "dns.answers.name", + "dns.answers.type", + "dns.header_flags", + "dns.id", + "dns.op_code", + "dns.question.class", + "dns.question.name", + "dns.question.registered_domain", + "dns.question.subdomain", + "dns.question.top_level_domain", + "dns.question.type", + "dns.response_code", + "dns.type", + "ecs.version", + "error.code", + "error.id", + "error.message", + "error.stack_trace", + "error.type", + "event.action", + "event.category", + "event.code", + "event.dataset", + "event.hash", + "event.id", + "event.kind", + "event.module", + "event.original", + "event.outcome", + "event.provider", + "event.timezone", + "event.type", + "file.device", + "file.directory", + "file.extension", + "file.gid", + "file.group", + "file.hash.md5", + "file.hash.sha1", + "file.hash.sha256", + "file.hash.sha512", + "file.inode", + "file.mode", + "file.name", + "file.owner", + "file.path", + "file.target_path", + "file.type", + "file.uid", + "geo.city_name", + "geo.continent_name", + "geo.country_iso_code", + "geo.country_name", + "geo.name", + "geo.region_iso_code", + "geo.region_name", + "group.domain", + "group.id", + "group.name", + "hash.md5", + "hash.sha1", + "hash.sha256", + "hash.sha512", + "host.architecture", + "host.geo.city_name", + "host.geo.continent_name", + "host.geo.country_iso_code", + "host.geo.country_name", + "host.geo.name", + "host.geo.region_iso_code", + "host.geo.region_name", + "host.hostname", + "host.id", + "host.mac", + "host.name", + "host.os.family", + "host.os.full", + "host.os.kernel", + "host.os.name", + "host.os.platform", + "host.os.version", + "host.type", + "host.user.domain", + "host.user.email", + "host.user.full_name", + "host.user.group.domain", + "host.user.group.id", + "host.user.group.name", + "host.user.hash", + "host.user.id", + "host.user.name", + "http.request.body.content", + "http.request.method", + "http.request.referrer", + "http.response.body.content", + "http.version", + "log.level", + "log.logger", + "log.origin.file.name", + "log.origin.function", + "log.original", + "log.syslog.facility.name", + "log.syslog.severity.name", + "network.application", + "network.community_id", + "network.direction", + "network.iana_number", + "network.name", + "network.protocol", + "network.transport", + "network.type", + "observer.geo.city_name", + "observer.geo.continent_name", + "observer.geo.country_iso_code", + "observer.geo.country_name", + "observer.geo.name", + "observer.geo.region_iso_code", + "observer.geo.region_name", + "observer.hostname", + "observer.mac", + "observer.name", + "observer.os.family", + "observer.os.full", + "observer.os.kernel", + "observer.os.name", + "observer.os.platform", + "observer.os.version", + "observer.product", + "observer.serial_number", + "observer.type", + "observer.vendor", + "observer.version", + "organization.id", + "organization.name", + "os.family", + "os.full", + "os.kernel", + "os.name", + "os.platform", + "os.version", + "package.architecture", + "package.checksum", + "package.description", + "package.install_scope", + "package.license", + "package.name", + "package.path", + "package.version", + "process.args", + "text", + "process.executable", + "process.hash.md5", + "process.hash.sha1", + "process.hash.sha256", + "process.hash.sha512", + "process.name", + "text", + "text", + "text", + "text", + "text", + "process.thread.name", + "process.title", + "process.working_directory", + "server.address", + "server.as.organization.name", + "server.domain", + "server.geo.city_name", + "server.geo.continent_name", + "server.geo.country_iso_code", + "server.geo.country_name", + "server.geo.name", + "server.geo.region_iso_code", + "server.geo.region_name", + "server.mac", + "server.registered_domain", + "server.top_level_domain", + "server.user.domain", + "server.user.email", + "server.user.full_name", + "server.user.group.domain", + "server.user.group.id", + "server.user.group.name", + "server.user.hash", + "server.user.id", + "server.user.name", + "service.ephemeral_id", + "service.id", + "service.name", + "service.node.name", + "service.state", + "service.type", + "service.version", + "source.address", + "source.as.organization.name", + "source.domain", + "source.geo.city_name", + "source.geo.continent_name", + "source.geo.country_iso_code", + "source.geo.country_name", + "source.geo.name", + "source.geo.region_iso_code", + "source.geo.region_name", + "source.mac", + "source.registered_domain", + "source.top_level_domain", + "source.user.domain", + "source.user.email", + "source.user.full_name", + "source.user.group.domain", + "source.user.group.id", + "source.user.group.name", + "source.user.hash", + "source.user.id", + "source.user.name", + "threat.framework", + "threat.tactic.id", + "threat.tactic.name", + "threat.tactic.reference", + "threat.technique.id", + "threat.technique.name", + "threat.technique.reference", + "tracing.trace.id", + "tracing.transaction.id", + "url.domain", + "url.extension", + "url.fragment", + "url.full", + "url.original", + "url.password", + "url.path", + "url.query", + "url.registered_domain", + "url.scheme", + "url.top_level_domain", + "url.username", + "user.domain", + "user.email", + "user.full_name", + "user.group.domain", + "user.group.id", + "user.group.name", + "user.hash", + "user.id", + "user.name", + "user_agent.device.name", + "user_agent.name", + "text", + "user_agent.original", + "user_agent.os.family", + "user_agent.os.full", + "user_agent.os.kernel", + "user_agent.os.name", + "user_agent.os.platform", + "user_agent.os.version", + "user_agent.version", + "text", + "timeseries.instance", + "cloud.project.id", + "cloud.image.id", + "host.os.build", + "host.os.codename", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.replicaset.name", + "kubernetes.deployment.name", + "kubernetes.statefulset.name", + "kubernetes.container.name", + "kubernetes.container.image", + "processor.name", + "processor.event", + "url.scheme", + "url.full", + "url.domain", + "url.path", + "url.query", + "url.fragment", + "http.version", + "http.request.method", + "http.request.referrer", + "service.name", + "service.version", + "service.environment", + "service.node.name", + "service.language.name", + "service.language.version", + "service.runtime.name", + "service.runtime.version", + "service.framework.name", + "service.framework.version", + "transaction.id", + "transaction.type", + "text", + "transaction.name", + "span.type", + "span.subtype", + "trace.id", + "parent.id", + "agent.name", + "agent.version", + "agent.ephemeral_id", + "container.id", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "host.architecture", + "host.hostname", + "host.name", + "host.os.platform", + "process.args", + "process.title", + "observer.listening", + "observer.hostname", + "observer.version", + "observer.type", + "user.name", + "user.id", + "user.email", + "destination.address", + "text", + "user_agent.original", + "user_agent.name", + "user_agent.version", + "user_agent.device.name", + "user_agent.os.platform", + "user_agent.os.name", + "user_agent.os.full", + "user_agent.os.family", + "user_agent.os.version", + "user_agent.os.kernel", + "cloud.account.id", + "cloud.account.name", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.project.id", + "cloud.project.name", + "cloud.provider", + "cloud.region", + "error.id", + "error.culprit", + "error.grouping_key", + "error.exception.code", + "error.exception.message", + "error.exception.module", + "error.exception.type", + "error.log.level", + "error.log.logger_name", + "error.log.message", + "error.log.param_message", + "profile.top.id", + "profile.top.function", + "profile.top.filename", + "profile.stack.id", + "profile.stack.function", + "profile.stack.filename", + "sourcemap.service.name", + "sourcemap.service.version", + "sourcemap.bundle_filepath", + "view spans", + "child.id", + "span.id", + "span.name", + "span.action", + "span.db.link", + "span.destination.service.type", + "span.destination.service.name", + "span.destination.service.resource", + "span.message.queue.name", + "transaction.result", + "transaction.message.queue.name", + "fields.*" + ] + }, + "refresh_interval": "1ms" + } + } + } +} + +{ + "type": "index", + "value": { + "aliases": { + }, + "index": "apm-8.0.0-onboarding-2020.06.29", + "mappings": { + "_meta": { + "beat": "apm", + "version": "8.0.0" + }, + "date_detection": false, + "dynamic_templates": [ + { + "labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "container.labels.*" + } + }, + { + "dns.answers": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "dns.answers.*" + } + }, + { + "log.syslog": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "log.syslog.*" + } + }, + { + "network.inner": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "network.inner.*" + } + }, + { + "observer.egress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.egress.*" + } + }, + { + "observer.ingress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.ingress.*" + } + }, + { + "fields": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "fields.*" + } + }, + { + "docker.container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "docker.container.labels.*" + } + }, + { + "kubernetes.labels.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.labels.*" + } + }, + { + "kubernetes.annotations.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.annotations.*" + } + }, + { + "labels_string": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "labels_boolean": { + "mapping": { + "type": "boolean" + }, + "match_mapping_type": "boolean", + "path_match": "labels.*" + } + }, + { + "labels_*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "labels.*" + } + }, + { + "transaction.marks": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "transaction.marks.*" + } + }, + { + "transaction.marks.*.*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "transaction.marks.*.*" + } + }, + { + "strings_as_keyword": { + "mapping": { + "ignore_above": 1024, + "type": "keyword" + }, + "match_mapping_type": "string" + } + } + ], + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "dynamic": "false", + "properties": { + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "hostname": { + "path": "agent.name", + "type": "alias" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "child": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "client": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "cloud": { + "properties": { + "account": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "availability_zone": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "instance": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "machine": { + "dynamic": "false", + "properties": { + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "project": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "region": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "container": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "tag": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "type": "object" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "runtime": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "destination": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dll": { + "properties": { + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dns": { + "properties": { + "answers": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "data": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "ttl": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "header_flags": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "op_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "question": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "subdomain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "resolved_ip": { + "type": "ip" + }, + "response_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "docker": { + "properties": { + "container": { + "properties": { + "labels": { + "type": "object" + } + } + } + } + }, + "ecs": { + "properties": { + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "error": { + "dynamic": "false", + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "culprit": { + "ignore_above": 1024, + "type": "keyword" + }, + "exception": { + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "handled": { + "type": "boolean" + }, + "message": { + "norms": false, + "type": "text" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "grouping_key": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "norms": false, + "type": "text" + }, + "param_message": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "stack_trace": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "event": { + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "created": { + "type": "date" + }, + "dataset": { + "ignore_above": 1024, + "type": "keyword" + }, + "duration": { + "type": "long" + }, + "end": { + "type": "date" + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingested": { + "type": "date" + }, + "kind": { + "ignore_above": 1024, + "type": "keyword" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "outcome": { + "ignore_above": 1024, + "type": "keyword" + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "risk_score": { + "type": "float" + }, + "risk_score_norm": { + "type": "float" + }, + "sequence": { + "type": "long" + }, + "severity": { + "type": "long" + }, + "start": { + "type": "date" + }, + "timezone": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "url": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "experimental": { + "dynamic": "true", + "type": "object" + }, + "fields": { + "type": "object" + }, + "file": { + "properties": { + "accessed": { + "type": "date" + }, + "attributes": { + "ignore_above": 1024, + "type": "keyword" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "created": { + "type": "date" + }, + "ctime": { + "type": "date" + }, + "device": { + "ignore_above": 1024, + "type": "keyword" + }, + "directory": { + "ignore_above": 1024, + "type": "keyword" + }, + "drive_letter": { + "ignore_above": 1, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "gid": { + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "inode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mime_type": { + "ignore_above": 1024, + "type": "keyword" + }, + "mode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mtime": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "owner": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "size": { + "type": "long" + }, + "target_path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "host": { + "dynamic": "false", + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "containerized": { + "type": "boolean" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "build": { + "ignore_above": 1024, + "type": "keyword" + }, + "codename": { + "ignore_above": 1024, + "type": "keyword" + }, + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "http": { + "dynamic": "false", + "properties": { + "request": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "method": { + "ignore_above": 1024, + "type": "keyword" + }, + "referrer": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "response": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "finished": { + "type": "boolean" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "status_code": { + "type": "long" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "kubernetes": { + "dynamic": "false", + "properties": { + "annotations": { + "properties": { + "*": { + "type": "object" + } + } + }, + "container": { + "properties": { + "image": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "deployment": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "properties": { + "*": { + "type": "object" + } + } + }, + "namespace": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pod": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "replicaset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "statefulset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "labels": { + "dynamic": "true", + "type": "object" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger": { + "ignore_above": 1024, + "type": "keyword" + }, + "origin": { + "properties": { + "file": { + "properties": { + "line": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "syslog": { + "properties": { + "facility": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "priority": { + "type": "long" + }, + "severity": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "network": { + "properties": { + "application": { + "ignore_above": 1024, + "type": "keyword" + }, + "bytes": { + "type": "long" + }, + "community_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "direction": { + "ignore_above": 1024, + "type": "keyword" + }, + "forwarded_ip": { + "type": "ip" + }, + "iana_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "inner": { + "properties": { + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "packets": { + "type": "long" + }, + "protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "transport": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "observer": { + "dynamic": "false", + "properties": { + "egress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "listening": { + "ignore_above": 1024, + "type": "keyword" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "serial_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vendor": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_major": { + "type": "byte" + } + } + }, + "organization": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "build_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "checksum": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "install_scope": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "parent": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "process": { + "dynamic": "false", + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "parent": { + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "processor": { + "properties": { + "event": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "profile": { + "dynamic": "false", + "properties": { + "alloc_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "alloc_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "cpu": { + "properties": { + "ns": { + "type": "long" + } + } + }, + "duration": { + "type": "long" + }, + "inuse_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "inuse_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "samples": { + "properties": { + "count": { + "type": "long" + } + } + }, + "stack": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + }, + "top": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + } + } + }, + "registry": { + "properties": { + "data": { + "properties": { + "bytes": { + "ignore_above": 1024, + "type": "keyword" + }, + "strings": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hive": { + "ignore_above": 1024, + "type": "keyword" + }, + "key": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "value": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "related": { + "properties": { + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "user": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "rule": { + "properties": { + "author": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "ruleset": { + "ignore_above": 1024, + "type": "keyword" + }, + "uuid": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "server": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "service": { + "dynamic": "false", + "properties": { + "environment": { + "ignore_above": 1024, + "type": "keyword" + }, + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "framework": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "language": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "runtime": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "state": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "source": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "sourcemap": { + "dynamic": "false", + "properties": { + "bundle_filepath": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "span": { + "dynamic": "false", + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "db": { + "dynamic": "false", + "properties": { + "link": { + "ignore_above": 1024, + "type": "keyword" + }, + "rows_affected": { + "type": "long" + } + } + }, + "destination": { + "dynamic": "false", + "properties": { + "service": { + "dynamic": "false", + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "resource": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "duration": { + "properties": { + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "start": { + "properties": { + "us": { + "type": "long" + } + } + }, + "subtype": { + "ignore_above": 1024, + "type": "keyword" + }, + "sync": { + "type": "boolean" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "system": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "actual": { + "properties": { + "free": { + "type": "long" + } + } + }, + "total": { + "type": "long" + } + } + }, + "process": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "rss": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "size": { + "type": "long" + } + } + } + } + } + } + }, + "tags": { + "ignore_above": 1024, + "type": "keyword" + }, + "threat": { + "properties": { + "framework": { + "ignore_above": 1024, + "type": "keyword" + }, + "tactic": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "technique": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "timeseries": { + "properties": { + "instance": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "timestamp": { + "properties": { + "us": { + "type": "long" + } + } + }, + "tls": { + "properties": { + "cipher": { + "ignore_above": 1024, + "type": "keyword" + }, + "client": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "server_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + }, + "supported_ciphers": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "curve": { + "ignore_above": 1024, + "type": "keyword" + }, + "established": { + "type": "boolean" + }, + "next_protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "resumed": { + "type": "boolean" + }, + "server": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3s": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_protocol": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "trace": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "tracing": { + "properties": { + "trace": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "transaction": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "transaction": { + "dynamic": "false", + "properties": { + "breakdown": { + "properties": { + "count": { + "type": "long" + } + } + }, + "duration": { + "properties": { + "count": { + "type": "long" + }, + "histogram": { + "type": "histogram" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + }, + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "marks": { + "dynamic": "true", + "properties": { + "*": { + "properties": { + "*": { + "dynamic": "true", + "type": "object" + } + } + } + } + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "result": { + "ignore_above": 1024, + "type": "keyword" + }, + "root": { + "type": "boolean" + }, + "sampled": { + "type": "boolean" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "span_count": { + "properties": { + "dropped": { + "type": "long" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "url": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "fragment": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "password": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "port": { + "type": "long" + }, + "query": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "scheme": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "username": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user_agent": { + "dynamic": "false", + "properties": { + "device": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "view spans": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vulnerability": { + "properties": { + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "classification": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "enumeration": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "report_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "scanner": { + "properties": { + "vendor": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "score": { + "properties": { + "base": { + "type": "float" + }, + "environmental": { + "type": "float" + }, + "temporal": { + "type": "float" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "severity": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "settings": { + "index": { + "codec": "best_compression", + "mapping": { + "total_fields": { + "limit": "2000" + } + }, + "number_of_replicas": "0", + "number_of_shards": "1", + "query": { + "default_field": [ + "message", + "tags", + "agent.ephemeral_id", + "agent.id", + "agent.name", + "agent.type", + "agent.version", + "as.organization.name", + "client.address", + "client.as.organization.name", + "client.domain", + "client.geo.city_name", + "client.geo.continent_name", + "client.geo.country_iso_code", + "client.geo.country_name", + "client.geo.name", + "client.geo.region_iso_code", + "client.geo.region_name", + "client.mac", + "client.registered_domain", + "client.top_level_domain", + "client.user.domain", + "client.user.email", + "client.user.full_name", + "client.user.group.domain", + "client.user.group.id", + "client.user.group.name", + "client.user.hash", + "client.user.id", + "client.user.name", + "cloud.account.id", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.provider", + "cloud.region", + "container.id", + "container.image.name", + "container.image.tag", + "container.name", + "container.runtime", + "destination.address", + "destination.as.organization.name", + "destination.domain", + "destination.geo.city_name", + "destination.geo.continent_name", + "destination.geo.country_iso_code", + "destination.geo.country_name", + "destination.geo.name", + "destination.geo.region_iso_code", + "destination.geo.region_name", + "destination.mac", + "destination.registered_domain", + "destination.top_level_domain", + "destination.user.domain", + "destination.user.email", + "destination.user.full_name", + "destination.user.group.domain", + "destination.user.group.id", + "destination.user.group.name", + "destination.user.hash", + "destination.user.id", + "destination.user.name", + "dns.answers.class", + "dns.answers.data", + "dns.answers.name", + "dns.answers.type", + "dns.header_flags", + "dns.id", + "dns.op_code", + "dns.question.class", + "dns.question.name", + "dns.question.registered_domain", + "dns.question.subdomain", + "dns.question.top_level_domain", + "dns.question.type", + "dns.response_code", + "dns.type", + "ecs.version", + "error.code", + "error.id", + "error.message", + "error.stack_trace", + "error.type", + "event.action", + "event.category", + "event.code", + "event.dataset", + "event.hash", + "event.id", + "event.kind", + "event.module", + "event.original", + "event.outcome", + "event.provider", + "event.timezone", + "event.type", + "file.device", + "file.directory", + "file.extension", + "file.gid", + "file.group", + "file.hash.md5", + "file.hash.sha1", + "file.hash.sha256", + "file.hash.sha512", + "file.inode", + "file.mode", + "file.name", + "file.owner", + "file.path", + "file.target_path", + "file.type", + "file.uid", + "geo.city_name", + "geo.continent_name", + "geo.country_iso_code", + "geo.country_name", + "geo.name", + "geo.region_iso_code", + "geo.region_name", + "group.domain", + "group.id", + "group.name", + "hash.md5", + "hash.sha1", + "hash.sha256", + "hash.sha512", + "host.architecture", + "host.geo.city_name", + "host.geo.continent_name", + "host.geo.country_iso_code", + "host.geo.country_name", + "host.geo.name", + "host.geo.region_iso_code", + "host.geo.region_name", + "host.hostname", + "host.id", + "host.mac", + "host.name", + "host.os.family", + "host.os.full", + "host.os.kernel", + "host.os.name", + "host.os.platform", + "host.os.version", + "host.type", + "host.user.domain", + "host.user.email", + "host.user.full_name", + "host.user.group.domain", + "host.user.group.id", + "host.user.group.name", + "host.user.hash", + "host.user.id", + "host.user.name", + "http.request.body.content", + "http.request.method", + "http.request.referrer", + "http.response.body.content", + "http.version", + "log.level", + "log.logger", + "log.origin.file.name", + "log.origin.function", + "log.original", + "log.syslog.facility.name", + "log.syslog.severity.name", + "network.application", + "network.community_id", + "network.direction", + "network.iana_number", + "network.name", + "network.protocol", + "network.transport", + "network.type", + "observer.geo.city_name", + "observer.geo.continent_name", + "observer.geo.country_iso_code", + "observer.geo.country_name", + "observer.geo.name", + "observer.geo.region_iso_code", + "observer.geo.region_name", + "observer.hostname", + "observer.mac", + "observer.name", + "observer.os.family", + "observer.os.full", + "observer.os.kernel", + "observer.os.name", + "observer.os.platform", + "observer.os.version", + "observer.product", + "observer.serial_number", + "observer.type", + "observer.vendor", + "observer.version", + "organization.id", + "organization.name", + "os.family", + "os.full", + "os.kernel", + "os.name", + "os.platform", + "os.version", + "package.architecture", + "package.checksum", + "package.description", + "package.install_scope", + "package.license", + "package.name", + "package.path", + "package.version", + "process.args", + "text", + "process.executable", + "process.hash.md5", + "process.hash.sha1", + "process.hash.sha256", + "process.hash.sha512", + "process.name", + "text", + "text", + "text", + "text", + "text", + "process.thread.name", + "process.title", + "process.working_directory", + "server.address", + "server.as.organization.name", + "server.domain", + "server.geo.city_name", + "server.geo.continent_name", + "server.geo.country_iso_code", + "server.geo.country_name", + "server.geo.name", + "server.geo.region_iso_code", + "server.geo.region_name", + "server.mac", + "server.registered_domain", + "server.top_level_domain", + "server.user.domain", + "server.user.email", + "server.user.full_name", + "server.user.group.domain", + "server.user.group.id", + "server.user.group.name", + "server.user.hash", + "server.user.id", + "server.user.name", + "service.ephemeral_id", + "service.id", + "service.name", + "service.node.name", + "service.state", + "service.type", + "service.version", + "source.address", + "source.as.organization.name", + "source.domain", + "source.geo.city_name", + "source.geo.continent_name", + "source.geo.country_iso_code", + "source.geo.country_name", + "source.geo.name", + "source.geo.region_iso_code", + "source.geo.region_name", + "source.mac", + "source.registered_domain", + "source.top_level_domain", + "source.user.domain", + "source.user.email", + "source.user.full_name", + "source.user.group.domain", + "source.user.group.id", + "source.user.group.name", + "source.user.hash", + "source.user.id", + "source.user.name", + "threat.framework", + "threat.tactic.id", + "threat.tactic.name", + "threat.tactic.reference", + "threat.technique.id", + "threat.technique.name", + "threat.technique.reference", + "tracing.trace.id", + "tracing.transaction.id", + "url.domain", + "url.extension", + "url.fragment", + "url.full", + "url.original", + "url.password", + "url.path", + "url.query", + "url.registered_domain", + "url.scheme", + "url.top_level_domain", + "url.username", + "user.domain", + "user.email", + "user.full_name", + "user.group.domain", + "user.group.id", + "user.group.name", + "user.hash", + "user.id", + "user.name", + "user_agent.device.name", + "user_agent.name", + "text", + "user_agent.original", + "user_agent.os.family", + "user_agent.os.full", + "user_agent.os.kernel", + "user_agent.os.name", + "user_agent.os.platform", + "user_agent.os.version", + "user_agent.version", + "text", + "timeseries.instance", + "cloud.project.id", + "cloud.image.id", + "host.os.build", + "host.os.codename", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.replicaset.name", + "kubernetes.deployment.name", + "kubernetes.statefulset.name", + "kubernetes.container.name", + "kubernetes.container.image", + "processor.name", + "processor.event", + "url.scheme", + "url.full", + "url.domain", + "url.path", + "url.query", + "url.fragment", + "http.version", + "http.request.method", + "http.request.referrer", + "service.name", + "service.version", + "service.environment", + "service.node.name", + "service.language.name", + "service.language.version", + "service.runtime.name", + "service.runtime.version", + "service.framework.name", + "service.framework.version", + "transaction.id", + "transaction.type", + "text", + "transaction.name", + "span.type", + "span.subtype", + "trace.id", + "parent.id", + "agent.name", + "agent.version", + "agent.ephemeral_id", + "container.id", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "host.architecture", + "host.hostname", + "host.name", + "host.os.platform", + "process.args", + "process.title", + "observer.listening", + "observer.hostname", + "observer.version", + "observer.type", + "user.name", + "user.id", + "user.email", + "destination.address", + "text", + "user_agent.original", + "user_agent.name", + "user_agent.version", + "user_agent.device.name", + "user_agent.os.platform", + "user_agent.os.name", + "user_agent.os.full", + "user_agent.os.family", + "user_agent.os.version", + "user_agent.os.kernel", + "cloud.account.id", + "cloud.account.name", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.project.id", + "cloud.project.name", + "cloud.provider", + "cloud.region", + "error.id", + "error.culprit", + "error.grouping_key", + "error.exception.code", + "error.exception.message", + "error.exception.module", + "error.exception.type", + "error.log.level", + "error.log.logger_name", + "error.log.message", + "error.log.param_message", + "profile.top.id", + "profile.top.function", + "profile.top.filename", + "profile.stack.id", + "profile.stack.function", + "profile.stack.filename", + "sourcemap.service.name", + "sourcemap.service.version", + "sourcemap.bundle_filepath", + "view spans", + "child.id", + "span.id", + "span.name", + "span.action", + "span.db.link", + "span.destination.service.type", + "span.destination.service.name", + "span.destination.service.resource", + "span.message.queue.name", + "transaction.result", + "transaction.message.queue.name", + "fields.*" + ] + }, + "refresh_interval": "1ms" + } + } + } +} + +{ + "type": "index", + "value": { + "aliases": { + "apm-8.0.0-profile": { + "is_write_index": true + } + }, + "index": "apm-8.0.0-profile-000001", + "mappings": { + "_meta": { + "beat": "apm", + "version": "8.0.0" + }, + "date_detection": false, + "dynamic_templates": [ + { + "labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "container.labels.*" + } + }, + { + "dns.answers": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "dns.answers.*" + } + }, + { + "log.syslog": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "log.syslog.*" + } + }, + { + "network.inner": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "network.inner.*" + } + }, + { + "observer.egress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.egress.*" + } + }, + { + "observer.ingress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.ingress.*" + } + }, + { + "fields": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "fields.*" + } + }, + { + "docker.container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "docker.container.labels.*" + } + }, + { + "kubernetes.labels.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.labels.*" + } + }, + { + "kubernetes.annotations.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.annotations.*" + } + }, + { + "labels_string": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "labels_boolean": { + "mapping": { + "type": "boolean" + }, + "match_mapping_type": "boolean", + "path_match": "labels.*" + } + }, + { + "labels_*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "labels.*" + } + }, + { + "transaction.marks": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "transaction.marks.*" + } + }, + { + "transaction.marks.*.*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "transaction.marks.*.*" + } + }, + { + "strings_as_keyword": { + "mapping": { + "ignore_above": 1024, + "type": "keyword" + }, + "match_mapping_type": "string" + } + } + ], + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "dynamic": "false", + "properties": { + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "hostname": { + "path": "agent.name", + "type": "alias" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "child": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "client": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "cloud": { + "properties": { + "account": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "availability_zone": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "instance": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "machine": { + "dynamic": "false", + "properties": { + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "project": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "region": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "container": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "tag": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "type": "object" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "runtime": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "destination": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dll": { + "properties": { + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dns": { + "properties": { + "answers": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "data": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "ttl": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "header_flags": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "op_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "question": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "subdomain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "resolved_ip": { + "type": "ip" + }, + "response_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "docker": { + "properties": { + "container": { + "properties": { + "labels": { + "type": "object" + } + } + } + } + }, + "ecs": { + "properties": { + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "error": { + "dynamic": "false", + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "culprit": { + "ignore_above": 1024, + "type": "keyword" + }, + "exception": { + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "handled": { + "type": "boolean" + }, + "message": { + "norms": false, + "type": "text" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "grouping_key": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "norms": false, + "type": "text" + }, + "param_message": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "stack_trace": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "event": { + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "created": { + "type": "date" + }, + "dataset": { + "ignore_above": 1024, + "type": "keyword" + }, + "duration": { + "type": "long" + }, + "end": { + "type": "date" + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingested": { + "type": "date" + }, + "kind": { + "ignore_above": 1024, + "type": "keyword" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "outcome": { + "ignore_above": 1024, + "type": "keyword" + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "risk_score": { + "type": "float" + }, + "risk_score_norm": { + "type": "float" + }, + "sequence": { + "type": "long" + }, + "severity": { + "type": "long" + }, + "start": { + "type": "date" + }, + "timezone": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "url": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "experimental": { + "dynamic": "true", + "type": "object" + }, + "fields": { + "type": "object" + }, + "file": { + "properties": { + "accessed": { + "type": "date" + }, + "attributes": { + "ignore_above": 1024, + "type": "keyword" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "created": { + "type": "date" + }, + "ctime": { + "type": "date" + }, + "device": { + "ignore_above": 1024, + "type": "keyword" + }, + "directory": { + "ignore_above": 1024, + "type": "keyword" + }, + "drive_letter": { + "ignore_above": 1, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "gid": { + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "inode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mime_type": { + "ignore_above": 1024, + "type": "keyword" + }, + "mode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mtime": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "owner": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "size": { + "type": "long" + }, + "target_path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "host": { + "dynamic": "false", + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "containerized": { + "type": "boolean" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "build": { + "ignore_above": 1024, + "type": "keyword" + }, + "codename": { + "ignore_above": 1024, + "type": "keyword" + }, + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "http": { + "dynamic": "false", + "properties": { + "request": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "method": { + "ignore_above": 1024, + "type": "keyword" + }, + "referrer": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "response": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "finished": { + "type": "boolean" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "status_code": { + "type": "long" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "kubernetes": { + "dynamic": "false", + "properties": { + "annotations": { + "properties": { + "*": { + "type": "object" + } + } + }, + "container": { + "properties": { + "image": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "deployment": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "properties": { + "*": { + "type": "object" + } + } + }, + "namespace": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pod": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "replicaset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "statefulset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "labels": { + "dynamic": "true", + "type": "object" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger": { + "ignore_above": 1024, + "type": "keyword" + }, + "origin": { + "properties": { + "file": { + "properties": { + "line": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "syslog": { + "properties": { + "facility": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "priority": { + "type": "long" + }, + "severity": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "network": { + "properties": { + "application": { + "ignore_above": 1024, + "type": "keyword" + }, + "bytes": { + "type": "long" + }, + "community_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "direction": { + "ignore_above": 1024, + "type": "keyword" + }, + "forwarded_ip": { + "type": "ip" + }, + "iana_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "inner": { + "properties": { + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "packets": { + "type": "long" + }, + "protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "transport": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "observer": { + "dynamic": "false", + "properties": { + "egress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "listening": { + "ignore_above": 1024, + "type": "keyword" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "serial_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vendor": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_major": { + "type": "byte" + } + } + }, + "organization": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "build_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "checksum": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "install_scope": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "parent": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "process": { + "dynamic": "false", + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "parent": { + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "processor": { + "properties": { + "event": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "profile": { + "dynamic": "false", + "properties": { + "alloc_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "alloc_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "cpu": { + "properties": { + "ns": { + "type": "long" + } + } + }, + "duration": { + "type": "long" + }, + "inuse_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "inuse_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "samples": { + "properties": { + "count": { + "type": "long" + } + } + }, + "stack": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + }, + "top": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + } + } + }, + "registry": { + "properties": { + "data": { + "properties": { + "bytes": { + "ignore_above": 1024, + "type": "keyword" + }, + "strings": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hive": { + "ignore_above": 1024, + "type": "keyword" + }, + "key": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "value": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "related": { + "properties": { + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "user": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "rule": { + "properties": { + "author": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "ruleset": { + "ignore_above": 1024, + "type": "keyword" + }, + "uuid": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "server": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "service": { + "dynamic": "false", + "properties": { + "environment": { + "ignore_above": 1024, + "type": "keyword" + }, + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "framework": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "language": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "runtime": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "state": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "source": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "sourcemap": { + "dynamic": "false", + "properties": { + "bundle_filepath": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "span": { + "dynamic": "false", + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "db": { + "dynamic": "false", + "properties": { + "link": { + "ignore_above": 1024, + "type": "keyword" + }, + "rows_affected": { + "type": "long" + } + } + }, + "destination": { + "dynamic": "false", + "properties": { + "service": { + "dynamic": "false", + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "resource": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "duration": { + "properties": { + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "start": { + "properties": { + "us": { + "type": "long" + } + } + }, + "subtype": { + "ignore_above": 1024, + "type": "keyword" + }, + "sync": { + "type": "boolean" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "system": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "actual": { + "properties": { + "free": { + "type": "long" + } + } + }, + "total": { + "type": "long" + } + } + }, + "process": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "rss": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "size": { + "type": "long" + } + } + } + } + } + } + }, + "tags": { + "ignore_above": 1024, + "type": "keyword" + }, + "threat": { + "properties": { + "framework": { + "ignore_above": 1024, + "type": "keyword" + }, + "tactic": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "technique": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "timeseries": { + "properties": { + "instance": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "timestamp": { + "properties": { + "us": { + "type": "long" + } + } + }, + "tls": { + "properties": { + "cipher": { + "ignore_above": 1024, + "type": "keyword" + }, + "client": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "server_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + }, + "supported_ciphers": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "curve": { + "ignore_above": 1024, + "type": "keyword" + }, + "established": { + "type": "boolean" + }, + "next_protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "resumed": { + "type": "boolean" + }, + "server": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3s": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_protocol": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "trace": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "tracing": { + "properties": { + "trace": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "transaction": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "transaction": { + "dynamic": "false", + "properties": { + "breakdown": { + "properties": { + "count": { + "type": "long" + } + } + }, + "duration": { + "properties": { + "count": { + "type": "long" + }, + "histogram": { + "type": "histogram" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + }, + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "marks": { + "dynamic": "true", + "properties": { + "*": { + "properties": { + "*": { + "dynamic": "true", + "type": "object" + } + } + } + } + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "result": { + "ignore_above": 1024, + "type": "keyword" + }, + "root": { + "type": "boolean" + }, + "sampled": { + "type": "boolean" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "span_count": { + "properties": { + "dropped": { + "type": "long" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "url": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "fragment": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "password": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "port": { + "type": "long" + }, + "query": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "scheme": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "username": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user_agent": { + "dynamic": "false", + "properties": { + "device": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "view spans": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vulnerability": { + "properties": { + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "classification": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "enumeration": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "report_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "scanner": { + "properties": { + "vendor": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "score": { + "properties": { + "base": { + "type": "float" + }, + "environmental": { + "type": "float" + }, + "temporal": { + "type": "float" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "severity": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "settings": { + "index": { + "codec": "best_compression", + "lifecycle": { + "name": "apm-rollover-30-days", + "rollover_alias": "apm-8.0.0-profile" + }, + "mapping": { + "total_fields": { + "limit": "2000" + } + }, + "number_of_replicas": "0", + "number_of_shards": "1", + "priority": "100", + "query": { + "default_field": [ + "message", + "tags", + "agent.ephemeral_id", + "agent.id", + "agent.name", + "agent.type", + "agent.version", + "as.organization.name", + "client.address", + "client.as.organization.name", + "client.domain", + "client.geo.city_name", + "client.geo.continent_name", + "client.geo.country_iso_code", + "client.geo.country_name", + "client.geo.name", + "client.geo.region_iso_code", + "client.geo.region_name", + "client.mac", + "client.registered_domain", + "client.top_level_domain", + "client.user.domain", + "client.user.email", + "client.user.full_name", + "client.user.group.domain", + "client.user.group.id", + "client.user.group.name", + "client.user.hash", + "client.user.id", + "client.user.name", + "cloud.account.id", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.provider", + "cloud.region", + "container.id", + "container.image.name", + "container.image.tag", + "container.name", + "container.runtime", + "destination.address", + "destination.as.organization.name", + "destination.domain", + "destination.geo.city_name", + "destination.geo.continent_name", + "destination.geo.country_iso_code", + "destination.geo.country_name", + "destination.geo.name", + "destination.geo.region_iso_code", + "destination.geo.region_name", + "destination.mac", + "destination.registered_domain", + "destination.top_level_domain", + "destination.user.domain", + "destination.user.email", + "destination.user.full_name", + "destination.user.group.domain", + "destination.user.group.id", + "destination.user.group.name", + "destination.user.hash", + "destination.user.id", + "destination.user.name", + "dns.answers.class", + "dns.answers.data", + "dns.answers.name", + "dns.answers.type", + "dns.header_flags", + "dns.id", + "dns.op_code", + "dns.question.class", + "dns.question.name", + "dns.question.registered_domain", + "dns.question.subdomain", + "dns.question.top_level_domain", + "dns.question.type", + "dns.response_code", + "dns.type", + "ecs.version", + "error.code", + "error.id", + "error.message", + "error.stack_trace", + "error.type", + "event.action", + "event.category", + "event.code", + "event.dataset", + "event.hash", + "event.id", + "event.kind", + "event.module", + "event.original", + "event.outcome", + "event.provider", + "event.timezone", + "event.type", + "file.device", + "file.directory", + "file.extension", + "file.gid", + "file.group", + "file.hash.md5", + "file.hash.sha1", + "file.hash.sha256", + "file.hash.sha512", + "file.inode", + "file.mode", + "file.name", + "file.owner", + "file.path", + "file.target_path", + "file.type", + "file.uid", + "geo.city_name", + "geo.continent_name", + "geo.country_iso_code", + "geo.country_name", + "geo.name", + "geo.region_iso_code", + "geo.region_name", + "group.domain", + "group.id", + "group.name", + "hash.md5", + "hash.sha1", + "hash.sha256", + "hash.sha512", + "host.architecture", + "host.geo.city_name", + "host.geo.continent_name", + "host.geo.country_iso_code", + "host.geo.country_name", + "host.geo.name", + "host.geo.region_iso_code", + "host.geo.region_name", + "host.hostname", + "host.id", + "host.mac", + "host.name", + "host.os.family", + "host.os.full", + "host.os.kernel", + "host.os.name", + "host.os.platform", + "host.os.version", + "host.type", + "host.user.domain", + "host.user.email", + "host.user.full_name", + "host.user.group.domain", + "host.user.group.id", + "host.user.group.name", + "host.user.hash", + "host.user.id", + "host.user.name", + "http.request.body.content", + "http.request.method", + "http.request.referrer", + "http.response.body.content", + "http.version", + "log.level", + "log.logger", + "log.origin.file.name", + "log.origin.function", + "log.original", + "log.syslog.facility.name", + "log.syslog.severity.name", + "network.application", + "network.community_id", + "network.direction", + "network.iana_number", + "network.name", + "network.protocol", + "network.transport", + "network.type", + "observer.geo.city_name", + "observer.geo.continent_name", + "observer.geo.country_iso_code", + "observer.geo.country_name", + "observer.geo.name", + "observer.geo.region_iso_code", + "observer.geo.region_name", + "observer.hostname", + "observer.mac", + "observer.name", + "observer.os.family", + "observer.os.full", + "observer.os.kernel", + "observer.os.name", + "observer.os.platform", + "observer.os.version", + "observer.product", + "observer.serial_number", + "observer.type", + "observer.vendor", + "observer.version", + "organization.id", + "organization.name", + "os.family", + "os.full", + "os.kernel", + "os.name", + "os.platform", + "os.version", + "package.architecture", + "package.checksum", + "package.description", + "package.install_scope", + "package.license", + "package.name", + "package.path", + "package.version", + "process.args", + "text", + "process.executable", + "process.hash.md5", + "process.hash.sha1", + "process.hash.sha256", + "process.hash.sha512", + "process.name", + "text", + "text", + "text", + "text", + "text", + "process.thread.name", + "process.title", + "process.working_directory", + "server.address", + "server.as.organization.name", + "server.domain", + "server.geo.city_name", + "server.geo.continent_name", + "server.geo.country_iso_code", + "server.geo.country_name", + "server.geo.name", + "server.geo.region_iso_code", + "server.geo.region_name", + "server.mac", + "server.registered_domain", + "server.top_level_domain", + "server.user.domain", + "server.user.email", + "server.user.full_name", + "server.user.group.domain", + "server.user.group.id", + "server.user.group.name", + "server.user.hash", + "server.user.id", + "server.user.name", + "service.ephemeral_id", + "service.id", + "service.name", + "service.node.name", + "service.state", + "service.type", + "service.version", + "source.address", + "source.as.organization.name", + "source.domain", + "source.geo.city_name", + "source.geo.continent_name", + "source.geo.country_iso_code", + "source.geo.country_name", + "source.geo.name", + "source.geo.region_iso_code", + "source.geo.region_name", + "source.mac", + "source.registered_domain", + "source.top_level_domain", + "source.user.domain", + "source.user.email", + "source.user.full_name", + "source.user.group.domain", + "source.user.group.id", + "source.user.group.name", + "source.user.hash", + "source.user.id", + "source.user.name", + "threat.framework", + "threat.tactic.id", + "threat.tactic.name", + "threat.tactic.reference", + "threat.technique.id", + "threat.technique.name", + "threat.technique.reference", + "tracing.trace.id", + "tracing.transaction.id", + "url.domain", + "url.extension", + "url.fragment", + "url.full", + "url.original", + "url.password", + "url.path", + "url.query", + "url.registered_domain", + "url.scheme", + "url.top_level_domain", + "url.username", + "user.domain", + "user.email", + "user.full_name", + "user.group.domain", + "user.group.id", + "user.group.name", + "user.hash", + "user.id", + "user.name", + "user_agent.device.name", + "user_agent.name", + "text", + "user_agent.original", + "user_agent.os.family", + "user_agent.os.full", + "user_agent.os.kernel", + "user_agent.os.name", + "user_agent.os.platform", + "user_agent.os.version", + "user_agent.version", + "text", + "timeseries.instance", + "cloud.project.id", + "cloud.image.id", + "host.os.build", + "host.os.codename", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.replicaset.name", + "kubernetes.deployment.name", + "kubernetes.statefulset.name", + "kubernetes.container.name", + "kubernetes.container.image", + "processor.name", + "processor.event", + "url.scheme", + "url.full", + "url.domain", + "url.path", + "url.query", + "url.fragment", + "http.version", + "http.request.method", + "http.request.referrer", + "service.name", + "service.version", + "service.environment", + "service.node.name", + "service.language.name", + "service.language.version", + "service.runtime.name", + "service.runtime.version", + "service.framework.name", + "service.framework.version", + "transaction.id", + "transaction.type", + "text", + "transaction.name", + "span.type", + "span.subtype", + "trace.id", + "parent.id", + "agent.name", + "agent.version", + "agent.ephemeral_id", + "container.id", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "host.architecture", + "host.hostname", + "host.name", + "host.os.platform", + "process.args", + "process.title", + "observer.listening", + "observer.hostname", + "observer.version", + "observer.type", + "user.name", + "user.id", + "user.email", + "destination.address", + "text", + "user_agent.original", + "user_agent.name", + "user_agent.version", + "user_agent.device.name", + "user_agent.os.platform", + "user_agent.os.name", + "user_agent.os.full", + "user_agent.os.family", + "user_agent.os.version", + "user_agent.os.kernel", + "cloud.account.id", + "cloud.account.name", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.project.id", + "cloud.project.name", + "cloud.provider", + "cloud.region", + "error.id", + "error.culprit", + "error.grouping_key", + "error.exception.code", + "error.exception.message", + "error.exception.module", + "error.exception.type", + "error.log.level", + "error.log.logger_name", + "error.log.message", + "error.log.param_message", + "profile.top.id", + "profile.top.function", + "profile.top.filename", + "profile.stack.id", + "profile.stack.function", + "profile.stack.filename", + "sourcemap.service.name", + "sourcemap.service.version", + "sourcemap.bundle_filepath", + "view spans", + "child.id", + "span.id", + "span.name", + "span.action", + "span.db.link", + "span.destination.service.type", + "span.destination.service.name", + "span.destination.service.resource", + "span.message.queue.name", + "transaction.result", + "transaction.message.queue.name", + "fields.*" + ] + }, + "refresh_interval": "1ms" + } + } + } +} + +{ + "type": "index", + "value": { + "aliases": { + "apm-8.0.0-span": { + "is_write_index": true + } + }, + "index": "apm-8.0.0-span-000001", + "mappings": { + "_meta": { + "beat": "apm", + "version": "8.0.0" + }, + "date_detection": false, + "dynamic_templates": [ + { + "labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "container.labels.*" + } + }, + { + "dns.answers": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "dns.answers.*" + } + }, + { + "log.syslog": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "log.syslog.*" + } + }, + { + "network.inner": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "network.inner.*" + } + }, + { + "observer.egress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.egress.*" + } + }, + { + "observer.ingress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.ingress.*" + } + }, + { + "fields": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "fields.*" + } + }, + { + "docker.container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "docker.container.labels.*" + } + }, + { + "kubernetes.labels.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.labels.*" + } + }, + { + "kubernetes.annotations.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.annotations.*" + } + }, + { + "labels_string": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "labels_boolean": { + "mapping": { + "type": "boolean" + }, + "match_mapping_type": "boolean", + "path_match": "labels.*" + } + }, + { + "labels_*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "labels.*" + } + }, + { + "transaction.marks": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "transaction.marks.*" + } + }, + { + "transaction.marks.*.*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "transaction.marks.*.*" + } + }, + { + "strings_as_keyword": { + "mapping": { + "ignore_above": 1024, + "type": "keyword" + }, + "match_mapping_type": "string" + } + } + ], + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "dynamic": "false", + "properties": { + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "hostname": { + "path": "agent.name", + "type": "alias" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "child": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "client": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "cloud": { + "properties": { + "account": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "availability_zone": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "instance": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "machine": { + "dynamic": "false", + "properties": { + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "project": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "region": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "container": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "tag": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "type": "object" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "runtime": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "destination": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dll": { + "properties": { + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dns": { + "properties": { + "answers": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "data": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "ttl": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "header_flags": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "op_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "question": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "subdomain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "resolved_ip": { + "type": "ip" + }, + "response_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "docker": { + "properties": { + "container": { + "properties": { + "labels": { + "type": "object" + } + } + } + } + }, + "ecs": { + "properties": { + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "error": { + "dynamic": "false", + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "culprit": { + "ignore_above": 1024, + "type": "keyword" + }, + "exception": { + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "handled": { + "type": "boolean" + }, + "message": { + "norms": false, + "type": "text" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "grouping_key": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "norms": false, + "type": "text" + }, + "param_message": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "stack_trace": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "event": { + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "created": { + "type": "date" + }, + "dataset": { + "ignore_above": 1024, + "type": "keyword" + }, + "duration": { + "type": "long" + }, + "end": { + "type": "date" + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingested": { + "type": "date" + }, + "kind": { + "ignore_above": 1024, + "type": "keyword" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "outcome": { + "ignore_above": 1024, + "type": "keyword" + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "risk_score": { + "type": "float" + }, + "risk_score_norm": { + "type": "float" + }, + "sequence": { + "type": "long" + }, + "severity": { + "type": "long" + }, + "start": { + "type": "date" + }, + "timezone": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "url": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "experimental": { + "dynamic": "true", + "type": "object" + }, + "fields": { + "type": "object" + }, + "file": { + "properties": { + "accessed": { + "type": "date" + }, + "attributes": { + "ignore_above": 1024, + "type": "keyword" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "created": { + "type": "date" + }, + "ctime": { + "type": "date" + }, + "device": { + "ignore_above": 1024, + "type": "keyword" + }, + "directory": { + "ignore_above": 1024, + "type": "keyword" + }, + "drive_letter": { + "ignore_above": 1, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "gid": { + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "inode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mime_type": { + "ignore_above": 1024, + "type": "keyword" + }, + "mode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mtime": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "owner": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "size": { + "type": "long" + }, + "target_path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "host": { + "dynamic": "false", + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "containerized": { + "type": "boolean" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "build": { + "ignore_above": 1024, + "type": "keyword" + }, + "codename": { + "ignore_above": 1024, + "type": "keyword" + }, + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "http": { + "dynamic": "false", + "properties": { + "request": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "method": { + "ignore_above": 1024, + "type": "keyword" + }, + "referrer": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "response": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "finished": { + "type": "boolean" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "status_code": { + "type": "long" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "kubernetes": { + "dynamic": "false", + "properties": { + "annotations": { + "properties": { + "*": { + "type": "object" + } + } + }, + "container": { + "properties": { + "image": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "deployment": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "properties": { + "*": { + "type": "object" + } + } + }, + "namespace": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pod": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "replicaset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "statefulset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "labels": { + "dynamic": "true", + "properties": { + "foo": { + "type": "keyword" + }, + "productId": { + "type": "keyword" + } + } + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger": { + "ignore_above": 1024, + "type": "keyword" + }, + "origin": { + "properties": { + "file": { + "properties": { + "line": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "syslog": { + "properties": { + "facility": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "priority": { + "type": "long" + }, + "severity": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "network": { + "properties": { + "application": { + "ignore_above": 1024, + "type": "keyword" + }, + "bytes": { + "type": "long" + }, + "community_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "direction": { + "ignore_above": 1024, + "type": "keyword" + }, + "forwarded_ip": { + "type": "ip" + }, + "iana_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "inner": { + "properties": { + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "packets": { + "type": "long" + }, + "protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "transport": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "observer": { + "dynamic": "false", + "properties": { + "egress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "listening": { + "ignore_above": 1024, + "type": "keyword" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "serial_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vendor": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_major": { + "type": "byte" + } + } + }, + "organization": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "build_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "checksum": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "install_scope": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "parent": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "process": { + "dynamic": "false", + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "parent": { + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "processor": { + "properties": { + "event": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "profile": { + "dynamic": "false", + "properties": { + "alloc_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "alloc_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "cpu": { + "properties": { + "ns": { + "type": "long" + } + } + }, + "duration": { + "type": "long" + }, + "inuse_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "inuse_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "samples": { + "properties": { + "count": { + "type": "long" + } + } + }, + "stack": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + }, + "top": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + } + } + }, + "registry": { + "properties": { + "data": { + "properties": { + "bytes": { + "ignore_above": 1024, + "type": "keyword" + }, + "strings": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hive": { + "ignore_above": 1024, + "type": "keyword" + }, + "key": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "value": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "related": { + "properties": { + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "user": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "rule": { + "properties": { + "author": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "ruleset": { + "ignore_above": 1024, + "type": "keyword" + }, + "uuid": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "server": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "service": { + "dynamic": "false", + "properties": { + "environment": { + "ignore_above": 1024, + "type": "keyword" + }, + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "framework": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "language": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "runtime": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "state": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "source": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "sourcemap": { + "dynamic": "false", + "properties": { + "bundle_filepath": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "span": { + "dynamic": "false", + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "db": { + "dynamic": "false", + "properties": { + "link": { + "ignore_above": 1024, + "type": "keyword" + }, + "rows_affected": { + "type": "long" + } + } + }, + "destination": { + "dynamic": "false", + "properties": { + "service": { + "dynamic": "false", + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "resource": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "duration": { + "properties": { + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "start": { + "properties": { + "us": { + "type": "long" + } + } + }, + "subtype": { + "ignore_above": 1024, + "type": "keyword" + }, + "sync": { + "type": "boolean" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "system": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "actual": { + "properties": { + "free": { + "type": "long" + } + } + }, + "total": { + "type": "long" + } + } + }, + "process": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "rss": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "size": { + "type": "long" + } + } + } + } + } + } + }, + "tags": { + "ignore_above": 1024, + "type": "keyword" + }, + "threat": { + "properties": { + "framework": { + "ignore_above": 1024, + "type": "keyword" + }, + "tactic": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "technique": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "timeseries": { + "properties": { + "instance": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "timestamp": { + "properties": { + "us": { + "type": "long" + } + } + }, + "tls": { + "properties": { + "cipher": { + "ignore_above": 1024, + "type": "keyword" + }, + "client": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "server_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + }, + "supported_ciphers": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "curve": { + "ignore_above": 1024, + "type": "keyword" + }, + "established": { + "type": "boolean" + }, + "next_protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "resumed": { + "type": "boolean" + }, + "server": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3s": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_protocol": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "trace": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "tracing": { + "properties": { + "trace": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "transaction": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "transaction": { + "dynamic": "false", + "properties": { + "breakdown": { + "properties": { + "count": { + "type": "long" + } + } + }, + "duration": { + "properties": { + "count": { + "type": "long" + }, + "histogram": { + "type": "histogram" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + }, + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "marks": { + "dynamic": "true", + "properties": { + "*": { + "properties": { + "*": { + "dynamic": "true", + "type": "object" + } + } + } + } + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "result": { + "ignore_above": 1024, + "type": "keyword" + }, + "root": { + "type": "boolean" + }, + "sampled": { + "type": "boolean" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "span_count": { + "properties": { + "dropped": { + "type": "long" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "url": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "fragment": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "password": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "port": { + "type": "long" + }, + "query": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "scheme": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "username": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user_agent": { + "dynamic": "false", + "properties": { + "device": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "view spans": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vulnerability": { + "properties": { + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "classification": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "enumeration": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "report_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "scanner": { + "properties": { + "vendor": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "score": { + "properties": { + "base": { + "type": "float" + }, + "environmental": { + "type": "float" + }, + "temporal": { + "type": "float" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "severity": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "settings": { + "index": { + "codec": "best_compression", + "lifecycle": { + "name": "apm-rollover-30-days", + "rollover_alias": "apm-8.0.0-span" + }, + "mapping": { + "total_fields": { + "limit": "2000" + } + }, + "number_of_replicas": "0", + "number_of_shards": "1", + "priority": "100", + "query": { + "default_field": [ + "message", + "tags", + "agent.ephemeral_id", + "agent.id", + "agent.name", + "agent.type", + "agent.version", + "as.organization.name", + "client.address", + "client.as.organization.name", + "client.domain", + "client.geo.city_name", + "client.geo.continent_name", + "client.geo.country_iso_code", + "client.geo.country_name", + "client.geo.name", + "client.geo.region_iso_code", + "client.geo.region_name", + "client.mac", + "client.registered_domain", + "client.top_level_domain", + "client.user.domain", + "client.user.email", + "client.user.full_name", + "client.user.group.domain", + "client.user.group.id", + "client.user.group.name", + "client.user.hash", + "client.user.id", + "client.user.name", + "cloud.account.id", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.provider", + "cloud.region", + "container.id", + "container.image.name", + "container.image.tag", + "container.name", + "container.runtime", + "destination.address", + "destination.as.organization.name", + "destination.domain", + "destination.geo.city_name", + "destination.geo.continent_name", + "destination.geo.country_iso_code", + "destination.geo.country_name", + "destination.geo.name", + "destination.geo.region_iso_code", + "destination.geo.region_name", + "destination.mac", + "destination.registered_domain", + "destination.top_level_domain", + "destination.user.domain", + "destination.user.email", + "destination.user.full_name", + "destination.user.group.domain", + "destination.user.group.id", + "destination.user.group.name", + "destination.user.hash", + "destination.user.id", + "destination.user.name", + "dns.answers.class", + "dns.answers.data", + "dns.answers.name", + "dns.answers.type", + "dns.header_flags", + "dns.id", + "dns.op_code", + "dns.question.class", + "dns.question.name", + "dns.question.registered_domain", + "dns.question.subdomain", + "dns.question.top_level_domain", + "dns.question.type", + "dns.response_code", + "dns.type", + "ecs.version", + "error.code", + "error.id", + "error.message", + "error.stack_trace", + "error.type", + "event.action", + "event.category", + "event.code", + "event.dataset", + "event.hash", + "event.id", + "event.kind", + "event.module", + "event.original", + "event.outcome", + "event.provider", + "event.timezone", + "event.type", + "file.device", + "file.directory", + "file.extension", + "file.gid", + "file.group", + "file.hash.md5", + "file.hash.sha1", + "file.hash.sha256", + "file.hash.sha512", + "file.inode", + "file.mode", + "file.name", + "file.owner", + "file.path", + "file.target_path", + "file.type", + "file.uid", + "geo.city_name", + "geo.continent_name", + "geo.country_iso_code", + "geo.country_name", + "geo.name", + "geo.region_iso_code", + "geo.region_name", + "group.domain", + "group.id", + "group.name", + "hash.md5", + "hash.sha1", + "hash.sha256", + "hash.sha512", + "host.architecture", + "host.geo.city_name", + "host.geo.continent_name", + "host.geo.country_iso_code", + "host.geo.country_name", + "host.geo.name", + "host.geo.region_iso_code", + "host.geo.region_name", + "host.hostname", + "host.id", + "host.mac", + "host.name", + "host.os.family", + "host.os.full", + "host.os.kernel", + "host.os.name", + "host.os.platform", + "host.os.version", + "host.type", + "host.user.domain", + "host.user.email", + "host.user.full_name", + "host.user.group.domain", + "host.user.group.id", + "host.user.group.name", + "host.user.hash", + "host.user.id", + "host.user.name", + "http.request.body.content", + "http.request.method", + "http.request.referrer", + "http.response.body.content", + "http.version", + "log.level", + "log.logger", + "log.origin.file.name", + "log.origin.function", + "log.original", + "log.syslog.facility.name", + "log.syslog.severity.name", + "network.application", + "network.community_id", + "network.direction", + "network.iana_number", + "network.name", + "network.protocol", + "network.transport", + "network.type", + "observer.geo.city_name", + "observer.geo.continent_name", + "observer.geo.country_iso_code", + "observer.geo.country_name", + "observer.geo.name", + "observer.geo.region_iso_code", + "observer.geo.region_name", + "observer.hostname", + "observer.mac", + "observer.name", + "observer.os.family", + "observer.os.full", + "observer.os.kernel", + "observer.os.name", + "observer.os.platform", + "observer.os.version", + "observer.product", + "observer.serial_number", + "observer.type", + "observer.vendor", + "observer.version", + "organization.id", + "organization.name", + "os.family", + "os.full", + "os.kernel", + "os.name", + "os.platform", + "os.version", + "package.architecture", + "package.checksum", + "package.description", + "package.install_scope", + "package.license", + "package.name", + "package.path", + "package.version", + "process.args", + "text", + "process.executable", + "process.hash.md5", + "process.hash.sha1", + "process.hash.sha256", + "process.hash.sha512", + "process.name", + "text", + "text", + "text", + "text", + "text", + "process.thread.name", + "process.title", + "process.working_directory", + "server.address", + "server.as.organization.name", + "server.domain", + "server.geo.city_name", + "server.geo.continent_name", + "server.geo.country_iso_code", + "server.geo.country_name", + "server.geo.name", + "server.geo.region_iso_code", + "server.geo.region_name", + "server.mac", + "server.registered_domain", + "server.top_level_domain", + "server.user.domain", + "server.user.email", + "server.user.full_name", + "server.user.group.domain", + "server.user.group.id", + "server.user.group.name", + "server.user.hash", + "server.user.id", + "server.user.name", + "service.ephemeral_id", + "service.id", + "service.name", + "service.node.name", + "service.state", + "service.type", + "service.version", + "source.address", + "source.as.organization.name", + "source.domain", + "source.geo.city_name", + "source.geo.continent_name", + "source.geo.country_iso_code", + "source.geo.country_name", + "source.geo.name", + "source.geo.region_iso_code", + "source.geo.region_name", + "source.mac", + "source.registered_domain", + "source.top_level_domain", + "source.user.domain", + "source.user.email", + "source.user.full_name", + "source.user.group.domain", + "source.user.group.id", + "source.user.group.name", + "source.user.hash", + "source.user.id", + "source.user.name", + "threat.framework", + "threat.tactic.id", + "threat.tactic.name", + "threat.tactic.reference", + "threat.technique.id", + "threat.technique.name", + "threat.technique.reference", + "tracing.trace.id", + "tracing.transaction.id", + "url.domain", + "url.extension", + "url.fragment", + "url.full", + "url.original", + "url.password", + "url.path", + "url.query", + "url.registered_domain", + "url.scheme", + "url.top_level_domain", + "url.username", + "user.domain", + "user.email", + "user.full_name", + "user.group.domain", + "user.group.id", + "user.group.name", + "user.hash", + "user.id", + "user.name", + "user_agent.device.name", + "user_agent.name", + "text", + "user_agent.original", + "user_agent.os.family", + "user_agent.os.full", + "user_agent.os.kernel", + "user_agent.os.name", + "user_agent.os.platform", + "user_agent.os.version", + "user_agent.version", + "text", + "timeseries.instance", + "cloud.project.id", + "cloud.image.id", + "host.os.build", + "host.os.codename", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.replicaset.name", + "kubernetes.deployment.name", + "kubernetes.statefulset.name", + "kubernetes.container.name", + "kubernetes.container.image", + "processor.name", + "processor.event", + "url.scheme", + "url.full", + "url.domain", + "url.path", + "url.query", + "url.fragment", + "http.version", + "http.request.method", + "http.request.referrer", + "service.name", + "service.version", + "service.environment", + "service.node.name", + "service.language.name", + "service.language.version", + "service.runtime.name", + "service.runtime.version", + "service.framework.name", + "service.framework.version", + "transaction.id", + "transaction.type", + "text", + "transaction.name", + "span.type", + "span.subtype", + "trace.id", + "parent.id", + "agent.name", + "agent.version", + "agent.ephemeral_id", + "container.id", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "host.architecture", + "host.hostname", + "host.name", + "host.os.platform", + "process.args", + "process.title", + "observer.listening", + "observer.hostname", + "observer.version", + "observer.type", + "user.name", + "user.id", + "user.email", + "destination.address", + "text", + "user_agent.original", + "user_agent.name", + "user_agent.version", + "user_agent.device.name", + "user_agent.os.platform", + "user_agent.os.name", + "user_agent.os.full", + "user_agent.os.family", + "user_agent.os.version", + "user_agent.os.kernel", + "cloud.account.id", + "cloud.account.name", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.project.id", + "cloud.project.name", + "cloud.provider", + "cloud.region", + "error.id", + "error.culprit", + "error.grouping_key", + "error.exception.code", + "error.exception.message", + "error.exception.module", + "error.exception.type", + "error.log.level", + "error.log.logger_name", + "error.log.message", + "error.log.param_message", + "profile.top.id", + "profile.top.function", + "profile.top.filename", + "profile.stack.id", + "profile.stack.function", + "profile.stack.filename", + "sourcemap.service.name", + "sourcemap.service.version", + "sourcemap.bundle_filepath", + "view spans", + "child.id", + "span.id", + "span.name", + "span.action", + "span.db.link", + "span.destination.service.type", + "span.destination.service.name", + "span.destination.service.resource", + "span.message.queue.name", + "transaction.result", + "transaction.message.queue.name", + "fields.*" + ] + }, + "refresh_interval": "1ms" + } + } + } +} + +{ + "type": "index", + "value": { + "aliases": { + "apm-8.0.0-transaction": { + "is_write_index": true + } + }, + "index": "apm-8.0.0-transaction-000001", + "mappings": { + "_meta": { + "beat": "apm", + "version": "8.0.0" + }, + "date_detection": false, + "dynamic_templates": [ + { + "labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "container.labels.*" + } + }, + { + "dns.answers": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "dns.answers.*" + } + }, + { + "log.syslog": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "log.syslog.*" + } + }, + { + "network.inner": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "network.inner.*" + } + }, + { + "observer.egress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.egress.*" + } + }, + { + "observer.ingress": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "observer.ingress.*" + } + }, + { + "fields": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "fields.*" + } + }, + { + "docker.container.labels": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "docker.container.labels.*" + } + }, + { + "kubernetes.labels.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.labels.*" + } + }, + { + "kubernetes.annotations.*": { + "mapping": { + "type": "keyword" + }, + "path_match": "kubernetes.annotations.*" + } + }, + { + "labels_string": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "labels.*" + } + }, + { + "labels_boolean": { + "mapping": { + "type": "boolean" + }, + "match_mapping_type": "boolean", + "path_match": "labels.*" + } + }, + { + "labels_*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "labels.*" + } + }, + { + "transaction.marks": { + "mapping": { + "type": "keyword" + }, + "match_mapping_type": "string", + "path_match": "transaction.marks.*" + } + }, + { + "transaction.marks.*.*": { + "mapping": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "path_match": "transaction.marks.*.*" + } + }, + { + "strings_as_keyword": { + "mapping": { + "ignore_above": 1024, + "type": "keyword" + }, + "match_mapping_type": "string" + } + } + ], + "properties": { + "@timestamp": { + "type": "date" + }, + "agent": { + "dynamic": "false", + "properties": { + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "hostname": { + "path": "agent.name", + "type": "alias" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "child": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "client": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "cloud": { + "properties": { + "account": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "availability_zone": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "instance": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "machine": { + "dynamic": "false", + "properties": { + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "project": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "region": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "container": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "image": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "tag": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "type": "object" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "runtime": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "destination": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dll": { + "properties": { + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "dns": { + "properties": { + "answers": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "data": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "ttl": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "header_flags": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "op_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "question": { + "properties": { + "class": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "subdomain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "resolved_ip": { + "type": "ip" + }, + "response_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "docker": { + "properties": { + "container": { + "properties": { + "labels": { + "type": "object" + } + } + } + } + }, + "ecs": { + "properties": { + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "error": { + "dynamic": "false", + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "culprit": { + "ignore_above": 1024, + "type": "keyword" + }, + "exception": { + "properties": { + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "handled": { + "type": "boolean" + }, + "message": { + "norms": false, + "type": "text" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "grouping_key": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "norms": false, + "type": "text" + }, + "param_message": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "stack_trace": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "event": { + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "code": { + "ignore_above": 1024, + "type": "keyword" + }, + "created": { + "type": "date" + }, + "dataset": { + "ignore_above": 1024, + "type": "keyword" + }, + "duration": { + "type": "long" + }, + "end": { + "type": "date" + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingested": { + "type": "date" + }, + "kind": { + "ignore_above": 1024, + "type": "keyword" + }, + "module": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "outcome": { + "ignore_above": 1024, + "type": "keyword" + }, + "provider": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "risk_score": { + "type": "float" + }, + "risk_score_norm": { + "type": "float" + }, + "sequence": { + "type": "long" + }, + "severity": { + "type": "long" + }, + "start": { + "type": "date" + }, + "timezone": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "url": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "experimental": { + "dynamic": "true", + "type": "object" + }, + "fields": { + "type": "object" + }, + "file": { + "properties": { + "accessed": { + "type": "date" + }, + "attributes": { + "ignore_above": 1024, + "type": "keyword" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "created": { + "type": "date" + }, + "ctime": { + "type": "date" + }, + "device": { + "ignore_above": 1024, + "type": "keyword" + }, + "directory": { + "ignore_above": 1024, + "type": "keyword" + }, + "drive_letter": { + "ignore_above": 1, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "gid": { + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "inode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mime_type": { + "ignore_above": 1024, + "type": "keyword" + }, + "mode": { + "ignore_above": 1024, + "type": "keyword" + }, + "mtime": { + "type": "date" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "owner": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "size": { + "type": "long" + }, + "target_path": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "host": { + "dynamic": "false", + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "containerized": { + "type": "boolean" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "build": { + "ignore_above": 1024, + "type": "keyword" + }, + "codename": { + "ignore_above": 1024, + "type": "keyword" + }, + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "http": { + "dynamic": "false", + "properties": { + "request": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "method": { + "ignore_above": 1024, + "type": "keyword" + }, + "referrer": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "response": { + "properties": { + "body": { + "properties": { + "bytes": { + "type": "long" + }, + "content": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "bytes": { + "type": "long" + }, + "finished": { + "type": "boolean" + }, + "headers": { + "enabled": false, + "type": "object" + }, + "status_code": { + "type": "long" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "kubernetes": { + "dynamic": "false", + "properties": { + "annotations": { + "properties": { + "*": { + "type": "object" + } + } + }, + "container": { + "properties": { + "image": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "deployment": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "labels": { + "properties": { + "*": { + "type": "object" + } + } + }, + "namespace": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pod": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "uid": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "replicaset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "statefulset": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "labels": { + "dynamic": "true", + "properties": { + "foo": { + "type": "keyword" + }, + "lorem": { + "type": "keyword" + }, + "multi-line": { + "type": "keyword" + }, + "this-is-a-very-long-tag-name-without-any-spaces": { + "type": "keyword" + } + } + }, + "log": { + "properties": { + "level": { + "ignore_above": 1024, + "type": "keyword" + }, + "logger": { + "ignore_above": 1024, + "type": "keyword" + }, + "origin": { + "properties": { + "file": { + "properties": { + "line": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "original": { + "ignore_above": 1024, + "type": "keyword" + }, + "syslog": { + "properties": { + "facility": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "priority": { + "type": "long" + }, + "severity": { + "properties": { + "code": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + } + } + }, + "message": { + "norms": false, + "type": "text" + }, + "network": { + "properties": { + "application": { + "ignore_above": 1024, + "type": "keyword" + }, + "bytes": { + "type": "long" + }, + "community_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "direction": { + "ignore_above": 1024, + "type": "keyword" + }, + "forwarded_ip": { + "type": "ip" + }, + "iana_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "inner": { + "properties": { + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "packets": { + "type": "long" + }, + "protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "transport": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "observer": { + "dynamic": "false", + "properties": { + "egress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hostname": { + "ignore_above": 1024, + "type": "keyword" + }, + "ingress": { + "properties": { + "interface": { + "properties": { + "alias": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "zone": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "listening": { + "ignore_above": 1024, + "type": "keyword" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + }, + "serial_number": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "vendor": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_major": { + "type": "byte" + } + } + }, + "organization": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "package": { + "properties": { + "architecture": { + "ignore_above": 1024, + "type": "keyword" + }, + "build_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "checksum": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "install_scope": { + "ignore_above": 1024, + "type": "keyword" + }, + "installed": { + "type": "date" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "size": { + "type": "long" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "parent": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "process": { + "dynamic": "false", + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "parent": { + "properties": { + "args": { + "ignore_above": 1024, + "type": "keyword" + }, + "args_count": { + "type": "long" + }, + "code_signature": { + "properties": { + "exists": { + "type": "boolean" + }, + "status": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "trusted": { + "type": "boolean" + }, + "valid": { + "type": "boolean" + } + } + }, + "command_line": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "entity_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "executable": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "exit_code": { + "type": "long" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha512": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pe": { + "properties": { + "company": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "file_version": { + "ignore_above": 1024, + "type": "keyword" + }, + "original_file_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "product": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "pgid": { + "type": "long" + }, + "pid": { + "type": "long" + }, + "ppid": { + "type": "long" + }, + "start": { + "type": "date" + }, + "thread": { + "properties": { + "id": { + "type": "long" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "title": { + "ignore_above": 1024, + "type": "keyword" + }, + "uptime": { + "type": "long" + }, + "working_directory": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "processor": { + "properties": { + "event": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "profile": { + "dynamic": "false", + "properties": { + "alloc_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "alloc_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "cpu": { + "properties": { + "ns": { + "type": "long" + } + } + }, + "duration": { + "type": "long" + }, + "inuse_objects": { + "properties": { + "count": { + "type": "long" + } + } + }, + "inuse_space": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "samples": { + "properties": { + "count": { + "type": "long" + } + } + }, + "stack": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + }, + "top": { + "dynamic": "false", + "properties": { + "filename": { + "ignore_above": 1024, + "type": "keyword" + }, + "function": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "line": { + "type": "long" + } + } + } + } + }, + "registry": { + "properties": { + "data": { + "properties": { + "bytes": { + "ignore_above": 1024, + "type": "keyword" + }, + "strings": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hive": { + "ignore_above": 1024, + "type": "keyword" + }, + "key": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "value": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "related": { + "properties": { + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "ip": { + "type": "ip" + }, + "user": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "rule": { + "properties": { + "author": { + "ignore_above": 1024, + "type": "keyword" + }, + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "license": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "ruleset": { + "ignore_above": 1024, + "type": "keyword" + }, + "uuid": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "server": { + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "service": { + "dynamic": "false", + "properties": { + "environment": { + "ignore_above": 1024, + "type": "keyword" + }, + "ephemeral_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "framework": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "language": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "node": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "runtime": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "state": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "source": { + "dynamic": "false", + "properties": { + "address": { + "ignore_above": 1024, + "type": "keyword" + }, + "as": { + "properties": { + "number": { + "type": "long" + }, + "organization": { + "properties": { + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "bytes": { + "type": "long" + }, + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "geo": { + "properties": { + "city_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "continent_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "country_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "location": { + "type": "geo_point" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_iso_code": { + "ignore_above": 1024, + "type": "keyword" + }, + "region_name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "ip": { + "type": "ip" + }, + "mac": { + "ignore_above": 1024, + "type": "keyword" + }, + "nat": { + "properties": { + "ip": { + "type": "ip" + }, + "port": { + "type": "long" + } + } + }, + "packets": { + "type": "long" + }, + "port": { + "type": "long" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "user": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "sourcemap": { + "dynamic": "false", + "properties": { + "bundle_filepath": { + "ignore_above": 1024, + "type": "keyword" + }, + "service": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "span": { + "dynamic": "false", + "properties": { + "action": { + "ignore_above": 1024, + "type": "keyword" + }, + "db": { + "dynamic": "false", + "properties": { + "link": { + "ignore_above": 1024, + "type": "keyword" + }, + "rows_affected": { + "type": "long" + } + } + }, + "destination": { + "dynamic": "false", + "properties": { + "service": { + "dynamic": "false", + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "resource": { + "ignore_above": 1024, + "type": "keyword" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "duration": { + "properties": { + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "start": { + "properties": { + "us": { + "type": "long" + } + } + }, + "subtype": { + "ignore_above": 1024, + "type": "keyword" + }, + "sync": { + "type": "boolean" + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "system": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "actual": { + "properties": { + "free": { + "type": "long" + } + } + }, + "total": { + "type": "long" + } + } + }, + "process": { + "properties": { + "cpu": { + "properties": { + "total": { + "properties": { + "norm": { + "properties": { + "pct": { + "scaling_factor": 1000, + "type": "scaled_float" + } + } + } + } + } + } + }, + "memory": { + "properties": { + "rss": { + "properties": { + "bytes": { + "type": "long" + } + } + }, + "size": { + "type": "long" + } + } + } + } + } + } + }, + "tags": { + "ignore_above": 1024, + "type": "keyword" + }, + "threat": { + "properties": { + "framework": { + "ignore_above": 1024, + "type": "keyword" + }, + "tactic": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "technique": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "timeseries": { + "properties": { + "instance": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "timestamp": { + "properties": { + "us": { + "type": "long" + } + } + }, + "tls": { + "properties": { + "cipher": { + "ignore_above": 1024, + "type": "keyword" + }, + "client": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "server_name": { + "ignore_above": 1024, + "type": "keyword" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + }, + "supported_ciphers": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "curve": { + "ignore_above": 1024, + "type": "keyword" + }, + "established": { + "type": "boolean" + }, + "next_protocol": { + "ignore_above": 1024, + "type": "keyword" + }, + "resumed": { + "type": "boolean" + }, + "server": { + "properties": { + "certificate": { + "ignore_above": 1024, + "type": "keyword" + }, + "certificate_chain": { + "ignore_above": 1024, + "type": "keyword" + }, + "hash": { + "properties": { + "md5": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha1": { + "ignore_above": 1024, + "type": "keyword" + }, + "sha256": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "issuer": { + "ignore_above": 1024, + "type": "keyword" + }, + "ja3s": { + "ignore_above": 1024, + "type": "keyword" + }, + "not_after": { + "type": "date" + }, + "not_before": { + "type": "date" + }, + "subject": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + }, + "version_protocol": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "trace": { + "dynamic": "false", + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "tracing": { + "properties": { + "trace": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "transaction": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "transaction": { + "dynamic": "false", + "properties": { + "breakdown": { + "properties": { + "count": { + "type": "long" + } + } + }, + "duration": { + "properties": { + "count": { + "type": "long" + }, + "histogram": { + "type": "histogram" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + }, + "us": { + "type": "long" + } + } + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "marks": { + "dynamic": "true", + "properties": { + "*": { + "properties": { + "*": { + "dynamic": "true", + "type": "object" + } + } + }, + "agent": { + "properties": { + "domComplete": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domInteractive": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "firstContentfulPaint": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "largestContentfulPaint": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "timeToFirstByte": { + "scaling_factor": 1000000, + "type": "scaled_float" + } + } + }, + "navigationTiming": { + "properties": { + "connectEnd": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "connectStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domComplete": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domContentLoadedEventEnd": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domContentLoadedEventStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domInteractive": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domLoading": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domainLookupEnd": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "domainLookupStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "fetchStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "loadEventEnd": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "loadEventStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "requestStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "responseEnd": { + "scaling_factor": 1000000, + "type": "scaled_float" + }, + "responseStart": { + "scaling_factor": 1000000, + "type": "scaled_float" + } + } + } + } + }, + "message": { + "dynamic": "false", + "properties": { + "age": { + "properties": { + "ms": { + "type": "long" + } + } + }, + "queue": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "result": { + "ignore_above": 1024, + "type": "keyword" + }, + "root": { + "type": "boolean" + }, + "sampled": { + "type": "boolean" + }, + "self_time": { + "properties": { + "count": { + "type": "long" + }, + "sum": { + "properties": { + "us": { + "type": "long" + } + } + } + } + }, + "span_count": { + "properties": { + "dropped": { + "type": "long" + } + } + }, + "type": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "url": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "extension": { + "ignore_above": 1024, + "type": "keyword" + }, + "fragment": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "password": { + "ignore_above": 1024, + "type": "keyword" + }, + "path": { + "ignore_above": 1024, + "type": "keyword" + }, + "port": { + "type": "long" + }, + "query": { + "ignore_above": 1024, + "type": "keyword" + }, + "registered_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "scheme": { + "ignore_above": 1024, + "type": "keyword" + }, + "top_level_domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "username": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user": { + "dynamic": "false", + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "email": { + "ignore_above": 1024, + "type": "keyword" + }, + "full_name": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "group": { + "properties": { + "domain": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "hash": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "user_agent": { + "dynamic": "false", + "properties": { + "device": { + "properties": { + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "original": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "os": { + "properties": { + "family": { + "ignore_above": 1024, + "type": "keyword" + }, + "full": { + "ignore_above": 1024, + "type": "keyword" + }, + "kernel": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + }, + "platform": { + "ignore_above": 1024, + "type": "keyword" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "view spans": { + "ignore_above": 1024, + "type": "keyword" + }, + "vlan": { + "properties": { + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "name": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "vulnerability": { + "properties": { + "category": { + "ignore_above": 1024, + "type": "keyword" + }, + "classification": { + "ignore_above": 1024, + "type": "keyword" + }, + "description": { + "fields": { + "text": { + "norms": false, + "type": "text" + } + }, + "ignore_above": 1024, + "type": "keyword" + }, + "enumeration": { + "ignore_above": 1024, + "type": "keyword" + }, + "id": { + "ignore_above": 1024, + "type": "keyword" + }, + "reference": { + "ignore_above": 1024, + "type": "keyword" + }, + "report_id": { + "ignore_above": 1024, + "type": "keyword" + }, + "scanner": { + "properties": { + "vendor": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "score": { + "properties": { + "base": { + "type": "float" + }, + "environmental": { + "type": "float" + }, + "temporal": { + "type": "float" + }, + "version": { + "ignore_above": 1024, + "type": "keyword" + } + } + }, + "severity": { + "ignore_above": 1024, + "type": "keyword" + } + } + } + } + }, + "settings": { + "index": { + "codec": "best_compression", + "lifecycle": { + "name": "apm-rollover-30-days", + "rollover_alias": "apm-8.0.0-transaction" + }, + "mapping": { + "total_fields": { + "limit": "2000" + } + }, + "number_of_replicas": "0", + "number_of_shards": "1", + "priority": "100", + "query": { + "default_field": [ + "message", + "tags", + "agent.ephemeral_id", + "agent.id", + "agent.name", + "agent.type", + "agent.version", + "as.organization.name", + "client.address", + "client.as.organization.name", + "client.domain", + "client.geo.city_name", + "client.geo.continent_name", + "client.geo.country_iso_code", + "client.geo.country_name", + "client.geo.name", + "client.geo.region_iso_code", + "client.geo.region_name", + "client.mac", + "client.registered_domain", + "client.top_level_domain", + "client.user.domain", + "client.user.email", + "client.user.full_name", + "client.user.group.domain", + "client.user.group.id", + "client.user.group.name", + "client.user.hash", + "client.user.id", + "client.user.name", + "cloud.account.id", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.provider", + "cloud.region", + "container.id", + "container.image.name", + "container.image.tag", + "container.name", + "container.runtime", + "destination.address", + "destination.as.organization.name", + "destination.domain", + "destination.geo.city_name", + "destination.geo.continent_name", + "destination.geo.country_iso_code", + "destination.geo.country_name", + "destination.geo.name", + "destination.geo.region_iso_code", + "destination.geo.region_name", + "destination.mac", + "destination.registered_domain", + "destination.top_level_domain", + "destination.user.domain", + "destination.user.email", + "destination.user.full_name", + "destination.user.group.domain", + "destination.user.group.id", + "destination.user.group.name", + "destination.user.hash", + "destination.user.id", + "destination.user.name", + "dns.answers.class", + "dns.answers.data", + "dns.answers.name", + "dns.answers.type", + "dns.header_flags", + "dns.id", + "dns.op_code", + "dns.question.class", + "dns.question.name", + "dns.question.registered_domain", + "dns.question.subdomain", + "dns.question.top_level_domain", + "dns.question.type", + "dns.response_code", + "dns.type", + "ecs.version", + "error.code", + "error.id", + "error.message", + "error.stack_trace", + "error.type", + "event.action", + "event.category", + "event.code", + "event.dataset", + "event.hash", + "event.id", + "event.kind", + "event.module", + "event.original", + "event.outcome", + "event.provider", + "event.timezone", + "event.type", + "file.device", + "file.directory", + "file.extension", + "file.gid", + "file.group", + "file.hash.md5", + "file.hash.sha1", + "file.hash.sha256", + "file.hash.sha512", + "file.inode", + "file.mode", + "file.name", + "file.owner", + "file.path", + "file.target_path", + "file.type", + "file.uid", + "geo.city_name", + "geo.continent_name", + "geo.country_iso_code", + "geo.country_name", + "geo.name", + "geo.region_iso_code", + "geo.region_name", + "group.domain", + "group.id", + "group.name", + "hash.md5", + "hash.sha1", + "hash.sha256", + "hash.sha512", + "host.architecture", + "host.geo.city_name", + "host.geo.continent_name", + "host.geo.country_iso_code", + "host.geo.country_name", + "host.geo.name", + "host.geo.region_iso_code", + "host.geo.region_name", + "host.hostname", + "host.id", + "host.mac", + "host.name", + "host.os.family", + "host.os.full", + "host.os.kernel", + "host.os.name", + "host.os.platform", + "host.os.version", + "host.type", + "host.user.domain", + "host.user.email", + "host.user.full_name", + "host.user.group.domain", + "host.user.group.id", + "host.user.group.name", + "host.user.hash", + "host.user.id", + "host.user.name", + "http.request.body.content", + "http.request.method", + "http.request.referrer", + "http.response.body.content", + "http.version", + "log.level", + "log.logger", + "log.origin.file.name", + "log.origin.function", + "log.original", + "log.syslog.facility.name", + "log.syslog.severity.name", + "network.application", + "network.community_id", + "network.direction", + "network.iana_number", + "network.name", + "network.protocol", + "network.transport", + "network.type", + "observer.geo.city_name", + "observer.geo.continent_name", + "observer.geo.country_iso_code", + "observer.geo.country_name", + "observer.geo.name", + "observer.geo.region_iso_code", + "observer.geo.region_name", + "observer.hostname", + "observer.mac", + "observer.name", + "observer.os.family", + "observer.os.full", + "observer.os.kernel", + "observer.os.name", + "observer.os.platform", + "observer.os.version", + "observer.product", + "observer.serial_number", + "observer.type", + "observer.vendor", + "observer.version", + "organization.id", + "organization.name", + "os.family", + "os.full", + "os.kernel", + "os.name", + "os.platform", + "os.version", + "package.architecture", + "package.checksum", + "package.description", + "package.install_scope", + "package.license", + "package.name", + "package.path", + "package.version", + "process.args", + "text", + "process.executable", + "process.hash.md5", + "process.hash.sha1", + "process.hash.sha256", + "process.hash.sha512", + "process.name", + "text", + "text", + "text", + "text", + "text", + "process.thread.name", + "process.title", + "process.working_directory", + "server.address", + "server.as.organization.name", + "server.domain", + "server.geo.city_name", + "server.geo.continent_name", + "server.geo.country_iso_code", + "server.geo.country_name", + "server.geo.name", + "server.geo.region_iso_code", + "server.geo.region_name", + "server.mac", + "server.registered_domain", + "server.top_level_domain", + "server.user.domain", + "server.user.email", + "server.user.full_name", + "server.user.group.domain", + "server.user.group.id", + "server.user.group.name", + "server.user.hash", + "server.user.id", + "server.user.name", + "service.ephemeral_id", + "service.id", + "service.name", + "service.node.name", + "service.state", + "service.type", + "service.version", + "source.address", + "source.as.organization.name", + "source.domain", + "source.geo.city_name", + "source.geo.continent_name", + "source.geo.country_iso_code", + "source.geo.country_name", + "source.geo.name", + "source.geo.region_iso_code", + "source.geo.region_name", + "source.mac", + "source.registered_domain", + "source.top_level_domain", + "source.user.domain", + "source.user.email", + "source.user.full_name", + "source.user.group.domain", + "source.user.group.id", + "source.user.group.name", + "source.user.hash", + "source.user.id", + "source.user.name", + "threat.framework", + "threat.tactic.id", + "threat.tactic.name", + "threat.tactic.reference", + "threat.technique.id", + "threat.technique.name", + "threat.technique.reference", + "tracing.trace.id", + "tracing.transaction.id", + "url.domain", + "url.extension", + "url.fragment", + "url.full", + "url.original", + "url.password", + "url.path", + "url.query", + "url.registered_domain", + "url.scheme", + "url.top_level_domain", + "url.username", + "user.domain", + "user.email", + "user.full_name", + "user.group.domain", + "user.group.id", + "user.group.name", + "user.hash", + "user.id", + "user.name", + "user_agent.device.name", + "user_agent.name", + "text", + "user_agent.original", + "user_agent.os.family", + "user_agent.os.full", + "user_agent.os.kernel", + "user_agent.os.name", + "user_agent.os.platform", + "user_agent.os.version", + "user_agent.version", + "text", + "timeseries.instance", + "cloud.project.id", + "cloud.image.id", + "host.os.build", + "host.os.codename", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.replicaset.name", + "kubernetes.deployment.name", + "kubernetes.statefulset.name", + "kubernetes.container.name", + "kubernetes.container.image", + "processor.name", + "processor.event", + "url.scheme", + "url.full", + "url.domain", + "url.path", + "url.query", + "url.fragment", + "http.version", + "http.request.method", + "http.request.referrer", + "service.name", + "service.version", + "service.environment", + "service.node.name", + "service.language.name", + "service.language.version", + "service.runtime.name", + "service.runtime.version", + "service.framework.name", + "service.framework.version", + "transaction.id", + "transaction.type", + "text", + "transaction.name", + "span.type", + "span.subtype", + "trace.id", + "parent.id", + "agent.name", + "agent.version", + "agent.ephemeral_id", + "container.id", + "kubernetes.namespace", + "kubernetes.node.name", + "kubernetes.pod.name", + "kubernetes.pod.uid", + "host.architecture", + "host.hostname", + "host.name", + "host.os.platform", + "process.args", + "process.title", + "observer.listening", + "observer.hostname", + "observer.version", + "observer.type", + "user.name", + "user.id", + "user.email", + "destination.address", + "text", + "user_agent.original", + "user_agent.name", + "user_agent.version", + "user_agent.device.name", + "user_agent.os.platform", + "user_agent.os.name", + "user_agent.os.full", + "user_agent.os.family", + "user_agent.os.version", + "user_agent.os.kernel", + "cloud.account.id", + "cloud.account.name", + "cloud.availability_zone", + "cloud.instance.id", + "cloud.instance.name", + "cloud.machine.type", + "cloud.project.id", + "cloud.project.name", + "cloud.provider", + "cloud.region", + "error.id", + "error.culprit", + "error.grouping_key", + "error.exception.code", + "error.exception.message", + "error.exception.module", + "error.exception.type", + "error.log.level", + "error.log.logger_name", + "error.log.message", + "error.log.param_message", + "profile.top.id", + "profile.top.function", + "profile.top.filename", + "profile.stack.id", + "profile.stack.function", + "profile.stack.filename", + "sourcemap.service.name", + "sourcemap.service.version", + "sourcemap.bundle_filepath", + "view spans", + "child.id", + "span.id", + "span.name", + "span.action", + "span.db.link", + "span.destination.service.type", + "span.destination.service.name", + "span.destination.service.resource", + "span.message.queue.name", + "transaction.result", + "transaction.message.queue.name", + "fields.*" + ] + }, + "refresh_interval": "1ms" + } + } + } +} \ No newline at end of file diff --git a/x-pack/test/apm_api_integration/basic/tests/agent_configuration.ts b/x-pack/test/apm_api_integration/basic/tests/agent_configuration.ts index 7b99622cc4657..1c8097760bc04 100644 --- a/x-pack/test/apm_api_integration/basic/tests/agent_configuration.ts +++ b/x-pack/test/apm_api_integration/basic/tests/agent_configuration.ts @@ -5,24 +5,51 @@ */ import expect from '@kbn/expect'; +import { omit, orderBy } from 'lodash'; import { AgentConfigurationIntake } from '../../../../plugins/apm/common/agent_configuration/configuration_types'; +import { AgentConfigSearchParams } from '../../../../plugins/apm/server/routes/settings/agent_configuration'; import { FtrProviderContext } from '../../common/ftr_provider_context'; export default function agentConfigurationTests({ getService }: FtrProviderContext) { const supertestRead = getService('supertestAsApmReadUser'); const supertestWrite = getService('supertestAsApmWriteUser'); const log = getService('log'); + const esArchiver = getService('esArchiver'); - function searchConfigurations(configuration: any) { + function getServices() { + return supertestRead + .get(`/api/apm/settings/agent-configuration/services`) + .set('kbn-xsrf', 'foo'); + } + + function getEnvironments(serviceName: string) { + return supertestRead + .get(`/api/apm/settings/agent-configuration/environments?serviceName=${serviceName}`) + .set('kbn-xsrf', 'foo'); + } + + function getAgentName(serviceName: string) { + return supertestRead + .get(`/api/apm/settings/agent-configuration/agent_name?serviceName=${serviceName}`) + .set('kbn-xsrf', 'foo'); + } + + function searchConfigurations(configuration: AgentConfigSearchParams) { return supertestRead .post(`/api/apm/settings/agent-configuration/search`) .send(configuration) .set('kbn-xsrf', 'foo'); } - async function createConfiguration(config: AgentConfigurationIntake) { + function getAllConfigurations() { + return supertestRead.get(`/api/apm/settings/agent-configuration`).set('kbn-xsrf', 'foo'); + } + + async function createConfiguration(config: AgentConfigurationIntake, { user = 'write' } = {}) { log.debug('creating configuration', config.service); - const res = await supertestWrite + const supertestClient = user === 'read' ? supertestRead : supertestWrite; + + const res = await supertestClient .put(`/api/apm/settings/agent-configuration`) .send(config) .set('kbn-xsrf', 'foo'); @@ -32,9 +59,11 @@ export default function agentConfigurationTests({ getService }: FtrProviderConte return res; } - async function updateConfiguration(config: AgentConfigurationIntake) { + async function updateConfiguration(config: AgentConfigurationIntake, { user = 'write' } = {}) { log.debug('updating configuration', config.service); - const res = await supertestWrite + const supertestClient = user === 'read' ? supertestRead : supertestWrite; + + const res = await supertestClient .put(`/api/apm/settings/agent-configuration?overwrite=true`) .send(config) .set('kbn-xsrf', 'foo'); @@ -44,9 +73,14 @@ export default function agentConfigurationTests({ getService }: FtrProviderConte return res; } - async function deleteConfiguration({ service }: AgentConfigurationIntake) { + async function deleteConfiguration( + { service }: AgentConfigurationIntake, + { user = 'write' } = {} + ) { log.debug('deleting configuration', service); - const res = await supertestWrite + const supertestClient = user === 'read' ? supertestRead : supertestWrite; + + const res = await supertestClient .delete(`/api/apm/settings/agent-configuration`) .send({ service }) .set('kbn-xsrf', 'foo'); @@ -59,15 +93,101 @@ export default function agentConfigurationTests({ getService }: FtrProviderConte function throwOnError(res: any) { const { statusCode, req, body } = res; if (statusCode !== 200) { - throw new Error(` + const e = new Error(` Endpoint: ${req.method} ${req.path} Service: ${JSON.stringify(res.request._data.service)} Status code: ${statusCode} Response: ${body.message}`); + + // @ts-ignore + e.res = res; + + throw e; } } describe('agent configuration', () => { + describe('when no data is loaded', () => { + it('handles the empty state for services', async () => { + const { body } = await getServices(); + expect(body).to.eql(['ALL_OPTION_VALUE']); + }); + + it('handles the empty state for environments', async () => { + const { body } = await getEnvironments('myservice'); + expect(body).to.eql([{ name: 'ALL_OPTION_VALUE', alreadyConfigured: false }]); + }); + + it('handles the empty state for agent names', async () => { + const { body } = await getAgentName('myservice'); + expect(body).to.eql({}); + }); + }); + + describe('when data is loaded', () => { + before(() => esArchiver.load('8.0.0')); + after(() => esArchiver.unload('8.0.0')); + + it('returns all services', async () => { + const { body } = await getServices(); + expect(body).to.eql(['ALL_OPTION_VALUE', 'client', 'opbeans-java', 'opbeans-node']); + }); + + it('returns the environments', async () => { + const { body } = await getEnvironments('opbeans-node'); + expect(body).to.eql([ + { name: 'ALL_OPTION_VALUE', alreadyConfigured: false }, + { name: 'production', alreadyConfigured: false }, + ]); + }); + + it('returns the agent names', async () => { + const { body } = await getAgentName('opbeans-node'); + expect(body).to.eql({ agentName: 'nodejs' }); + }); + }); + + describe('as a read-only user', () => { + const newConfig = { service: {}, settings: { transaction_sample_rate: '0.55' } }; + it('throws when attempting to create config', async () => { + try { + await createConfiguration(newConfig, { user: 'read' }); + + // ensure that `createConfiguration` throws + expect(true).to.be(false); + } catch (e) { + expect(e.res.statusCode).to.be(404); + } + }); + + describe('when a configuration already exists', () => { + before(async () => createConfiguration(newConfig)); + after(async () => deleteConfiguration(newConfig)); + + it('throws when attempting to update config', async () => { + try { + await updateConfiguration(newConfig, { user: 'read' }); + + // ensure that `updateConfiguration` throws + expect(true).to.be(false); + } catch (e) { + expect(e.res.statusCode).to.be(404); + } + }); + + it('throws when attempting to delete config', async () => { + try { + await deleteConfiguration(newConfig, { user: 'read' }); + + // ensure that `deleteConfiguration` throws + expect(true).to.be(false); + } catch (e) { + expect(e.res.statusCode).to.be(404); + } + }); + }); + }); + describe('when creating one configuration', () => { const newConfig = { service: {}, @@ -79,30 +199,53 @@ export default function agentConfigurationTests({ getService }: FtrProviderConte etag: '7312bdcc34999629a3d39df24ed9b2a7553c0c39', }; - before(async () => { + it('can create and delete config', async () => { + // assert that config does not exist + const res1 = await searchConfigurations(searchParams); + expect(res1.status).to.equal(404); + + // assert that config was created await createConfiguration(newConfig); - }); + const res2 = await searchConfigurations(searchParams); + expect(res2.status).to.equal(200); - it('can find the created config', async () => { - const { status, body } = await searchConfigurations(searchParams); - expect(status).to.equal(200); - expect(body._source.service).to.eql({}); - expect(body._source.settings).to.eql({ transaction_sample_rate: '0.55' }); + // assert that config was deleted + await deleteConfiguration(newConfig); + const res3 = await searchConfigurations(searchParams); + expect(res3.status).to.equal(404); }); - it('can update the created config', async () => { - await updateConfiguration({ service: {}, settings: { transaction_sample_rate: '0.85' } }); + describe('when a configuration exists', () => { + before(async () => createConfiguration(newConfig)); + after(async () => deleteConfiguration(newConfig)); - const { status, body } = await searchConfigurations(searchParams); - expect(status).to.equal(200); - expect(body._source.service).to.eql({}); - expect(body._source.settings).to.eql({ transaction_sample_rate: '0.85' }); - }); + it('can find the config', async () => { + const { status, body } = await searchConfigurations(searchParams); + expect(status).to.equal(200); + expect(body._source.service).to.eql({}); + expect(body._source.settings).to.eql({ transaction_sample_rate: '0.55' }); + }); - it('can delete the created config', async () => { - await deleteConfiguration(newConfig); - const { status } = await searchConfigurations(searchParams); - expect(status).to.equal(404); + it('can list the config', async () => { + const { status, body } = await getAllConfigurations(); + expect(status).to.equal(200); + expect(omitTimestamp(body)).to.eql([ + { + service: {}, + settings: { transaction_sample_rate: '0.55' }, + applied_by_agent: false, + etag: 'eb88a8997666cc4b33745ef355a1bbd7c4782f2d', + }, + ]); + }); + + it('can update the config', async () => { + await updateConfiguration({ service: {}, settings: { transaction_sample_rate: '0.85' } }); + const { status, body } = await searchConfigurations(searchParams); + expect(status).to.equal(200); + expect(body._source.service).to.eql({}); + expect(body._source.settings).to.eql({ transaction_sample_rate: '0.85' }); + }); }); }); @@ -165,6 +308,43 @@ export default function agentConfigurationTests({ getService }: FtrProviderConte }, ]; + it('can list all configs', async () => { + const { status, body } = await getAllConfigurations(); + expect(status).to.equal(200); + expect(orderBy(omitTimestamp(body), ['settings.transaction_sample_rate'])).to.eql([ + { + service: {}, + settings: { transaction_sample_rate: '0.1' }, + applied_by_agent: false, + etag: '0758cb18817de60cca29e07480d472694239c4c3', + }, + { + service: { name: 'my_service' }, + settings: { transaction_sample_rate: '0.2' }, + applied_by_agent: false, + etag: 'e04737637056fdf1763bf0ef0d3fcb86e89ae5fc', + }, + { + service: { name: 'my_service', environment: 'development' }, + settings: { transaction_sample_rate: '0.3' }, + applied_by_agent: false, + etag: 'af4dac62621b6762e6281481d1f7523af1124120', + }, + { + service: { environment: 'production' }, + settings: { transaction_sample_rate: '0.4' }, + applied_by_agent: false, + etag: '8d1bf8e6b778b60af351117e2cf53fb1ee570068', + }, + { + service: { environment: 'development' }, + settings: { transaction_sample_rate: '0.5' }, + applied_by_agent: false, + etag: '4ce40da57e3c71daca704121c784b911ec05ae81', + }, + ]); + }); + for (const agentRequest of agentsRequests) { it(`${agentRequest.service.name} / ${agentRequest.service.environment}`, async () => { const { status, body } = await searchConfigurations({ @@ -273,3 +453,7 @@ async function waitFor(cb: () => Promise, retries = 50): Promise omit(config, '@timestamp')); +} diff --git a/x-pack/test/apm_api_integration/basic/tests/index.ts b/x-pack/test/apm_api_integration/basic/tests/index.ts index 02185b0761c5b..3658208e38d00 100644 --- a/x-pack/test/apm_api_integration/basic/tests/index.ts +++ b/x-pack/test/apm_api_integration/basic/tests/index.ts @@ -14,5 +14,17 @@ export default function apmApiIntegrationTests({ loadTestFile }: FtrProviderCont loadTestFile(require.resolve('./agent_configuration')); loadTestFile(require.resolve('./custom_link')); loadTestFile(require.resolve('./service_maps')); + + // traces + loadTestFile(require.resolve('./traces/top_traces')); + + // services + loadTestFile(require.resolve('./services/top_services')); + + // services/transaction + loadTestFile(require.resolve('./services/transactions/top_transaction_groups')); + loadTestFile(require.resolve('./services/transactions/transaction_charts')); + loadTestFile(require.resolve('./services/transactions/agent_name')); + loadTestFile(require.resolve('./services/transactions/transaction_types')); }); } diff --git a/x-pack/test/apm_api_integration/basic/tests/service_maps.ts b/x-pack/test/apm_api_integration/basic/tests/service_maps.ts index 64910d2b45632..45972aaf529af 100644 --- a/x-pack/test/apm_api_integration/basic/tests/service_maps.ts +++ b/x-pack/test/apm_api_integration/basic/tests/service_maps.ts @@ -10,11 +10,13 @@ import { FtrProviderContext } from '../../common/ftr_provider_context'; export default function serviceMapsApiTests({ getService }: FtrProviderContext) { const supertest = getService('supertest'); + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + describe('Service Maps', () => { - it('should only be available to users with Platinum license (or higher)', async () => { - const response = await supertest.get( - '/api/apm/service-map?start=2020-06-28T10%3A24%3A46.055Z&end=2020-06-29T10%3A24%3A46.055Z' - ); + it('is only be available to users with Platinum license (or higher)', async () => { + const response = await supertest.get(`/api/apm/service-map?start=${start}&end=${end}`); expect(response.status).to.be(403); expect(response.body.message).to.be( diff --git a/x-pack/test/apm_api_integration/basic/tests/services/top_services.ts b/x-pack/test/apm_api_integration/basic/tests/services/top_services.ts new file mode 100644 index 0000000000000..ea3ed2539c12f --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/top_services.ts @@ -0,0 +1,76 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License; + * you may not use this file except in compliance with the Elastic License. + */ + +import { sortBy } from 'lodash'; +import expect from '@kbn/expect'; +import { FtrProviderContext } from '../../../common/ftr_provider_context'; + +export default function ApiTest({ getService }: FtrProviderContext) { + const supertest = getService('supertest'); + const esArchiver = getService('esArchiver'); + + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + const uiFilters = encodeURIComponent(JSON.stringify({})); + + describe('APM Services Overview', () => { + describe('when data is not loaded ', () => { + it('handles the empty state', async () => { + const response = await supertest.get( + `/api/apm/services?start=${start}&end=${end}&uiFilters=${uiFilters}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ hasHistoricalData: false, hasLegacyData: false, items: [] }); + }); + }); + + describe('when data is loaded', () => { + before(() => esArchiver.load('8.0.0')); + after(() => esArchiver.unload('8.0.0')); + + it('returns a list of services', async () => { + const response = await supertest.get( + `/api/apm/services?start=${start}&end=${end}&uiFilters=${uiFilters}` + ); + // sort services to mitigate unstable sort order + const services = sortBy(response.body.items, ['serviceName']); + + expect(response.status).to.be(200); + expect(services).to.eql([ + { + serviceName: 'client', + agentName: 'rum-js', + transactionsPerMinute: 2, + errorsPerMinute: 2.75, + avgResponseTime: 116375, + environments: [], + }, + { + serviceName: 'opbeans-java', + agentName: 'java', + transactionsPerMinute: 30.75, + errorsPerMinute: 4.5, + avgResponseTime: 25636.349593495936, + environments: ['production'], + }, + { + serviceName: 'opbeans-node', + agentName: 'nodejs', + transactionsPerMinute: 31, + errorsPerMinute: 3.75, + avgResponseTime: 38682.52419354839, + environments: ['production'], + }, + ]); + + expect(response.body.hasHistoricalData).to.be(true); + expect(response.body.hasLegacyData).to.be(false); + }); + }); + }); +} diff --git a/x-pack/test/apm_api_integration/basic/tests/services/transactions/agent_name.ts b/x-pack/test/apm_api_integration/basic/tests/services/transactions/agent_name.ts new file mode 100644 index 0000000000000..a9aeaf813aa5c --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/transactions/agent_name.ts @@ -0,0 +1,44 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License; + * you may not use this file except in compliance with the Elastic License. + */ + +import expect from '@kbn/expect'; +import { FtrProviderContext } from '../../../../../common/ftr_provider_context'; + +export default function ApiTest({ getService }: FtrProviderContext) { + const supertest = getService('supertest'); + const esArchiver = getService('esArchiver'); + + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + + describe('Agent name', () => { + describe('when data is not loaded ', () => { + it('handles the empty state', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/agent_name?start=${start}&end=${end}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({}); + }); + }); + + describe('when data is loaded', () => { + before(() => esArchiver.load('8.0.0')); + after(() => esArchiver.unload('8.0.0')); + + it('returns the agent name', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/agent_name?start=${start}&end=${end}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ agentName: 'nodejs' }); + }); + }); + }); +} diff --git a/x-pack/test/apm_api_integration/basic/tests/services/transactions/expectations/top_transaction_groups.json b/x-pack/test/apm_api_integration/basic/tests/services/transactions/expectations/top_transaction_groups.json new file mode 100644 index 0000000000000..7d314e75e4d1d --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/transactions/expectations/top_transaction_groups.json @@ -0,0 +1,1942 @@ +{ + "items": [ + { + "name": "GET /api", + "sample": { + "@timestamp": "2020-06-29T06:48:41.454Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.992834Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:41 GMT"], + "Transfer-Encoding": ["chunked"], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413321454009 }, + "trace": { "id": "0507830eeff93f7bf1a354e4031097b3" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 8334 }, + "id": "878250a8b937445d", + "name": "GET /api", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/6", + "original": "/api/products/6", + "path": "/api/products/6", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 259040, + "averageResponseTime": 51175.73170731707, + "transactionsPerMinute": 10.25, + "impact": 100 + }, + { + "name": "POST /api/orders", + "sample": { + "@timestamp": "2020-06-29T06:48:39.953Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.991549Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "body": { "original": "[REDACTED]" }, + "headers": { + "Accept": ["application/json"], + "Connection": ["close"], + "Content-Length": ["129"], + "Content-Type": ["application/json"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "post", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["13"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:40 GMT"], + "Etag": ["W/\"d-eEOWU4Cnr5DZ23ErRUeYu9oOIks\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413319953033 }, + "trace": { "id": "52b8fda5f6df745b990740ba18378620" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 270684 }, + "id": "a3afc2a112e9c893", + "name": "POST /api/orders", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 16 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders", + "original": "/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 270336, + "averageResponseTime": 270684, + "transactionsPerMinute": 0.25, + "impact": 12.686265169840583 + }, + { + "name": "GET /api/customers", + "sample": { + "@timestamp": "2020-06-29T06:48:37.952Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.492402Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["186769"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:37 GMT"], + "Etag": ["W/\"2d991-yG3J8W/roH7fSxXTudZrO27Ax9s\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413317952016 }, + "trace": { "id": "5d99327edae38ed735e8d7a6028cf719" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 16824 }, + "id": "071808429ec9d00b", + "name": "GET /api/customers", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/customers", + "original": "/api/customers", + "path": "/api/customers", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 26432, + "averageResponseTime": 16896.8, + "transactionsPerMinute": 1.25, + "impact": 3.790160870423129 + }, + { + "name": "GET /log-message", + "sample": { + "@timestamp": "2020-06-29T06:48:28.944Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.370695Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["24"], + "Content-Type": ["text/html; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:28 GMT"], + "Etag": ["W/\"18-MS3VbhH7auHMzO0fUuNF6v14N/M\""], + "X-Powered-By": ["Express"] + }, + "status_code": 500 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413308944016 }, + "trace": { "id": "afabe4cb397616f5ec35a2f3da49ba62" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 26788 }, + "id": "cc8c4261387507cf", + "name": "GET /log-message", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/log-message", + "original": "/log-message", + "path": "/log-message", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 38528, + "averageResponseTime": 32667.5, + "transactionsPerMinute": 0.5, + "impact": 2.875276331059301 + }, + { + "name": "GET /*", + "sample": { + "@timestamp": "2020-06-29T06:48:42.454Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.995202Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["813"], + "Content-Type": ["text/html"], + "Date": ["Mon, 29 Jun 2020 06:48:42 GMT"], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "parent": { "id": "5baa6c3bedc93f9d" }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413322454015 }, + "trace": { "id": "022b01256b291a4c417199d91ec8755f" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 1737 }, + "id": "eff3e45e0d9529d9", + "name": "GET /*", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/", + "original": "/", + "path": "/", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 4472, + "averageResponseTime": 3262.95, + "transactionsPerMinute": 5, + "impact": 2.8716452680799467 + }, + { + "name": "GET /api/orders", + "sample": { + "@timestamp": "2020-06-29T06:48:40.106Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.6" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.988104Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Accept": [ + "text/plain, application/json, application/x-jackson-smile, application/cbor, application/*+json, */*" + ], + "Connection": ["keep-alive"], + "Elastic-Apm-Traceparent": [ + "00-90bd7780b32cc51a7f4c200b1e0c170f-5ff346d602ce27b0-01" + ], + "Host": ["opbeans-node:3000"], + "Traceparent": ["00-90bd7780b32cc51a7f4c200b1e0c170f-5ff346d602ce27b0-01"], + "User-Agent": ["Java/11.0.7"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.6" } + }, + "response": { + "headers": { + "Connection": ["keep-alive"], + "Content-Length": ["2"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:40 GMT"], + "Etag": ["W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "parent": { "id": "5ff346d602ce27b0" }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.6" }, + "timestamp": { "us": 1593413320106015 }, + "trace": { "id": "90bd7780b32cc51a7f4c200b1e0c170f" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 7424 }, + "id": "f3dd00d12c594cba", + "name": "GET /api/orders", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders", + "original": "/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Spider" }, + "name": "Java", + "original": "Java/11.0.7", + "version": "0.7." + } + }, + "p95": 11616, + "averageResponseTime": 7615.625, + "transactionsPerMinute": 2, + "impact": 2.6645791239678345 + }, + { + "name": "GET /api/products", + "sample": { + "@timestamp": "2020-06-29T06:48:27.452Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.6" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:29.978463Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Accept": [ + "text/plain, application/json, application/x-jackson-smile, application/cbor, application/*+json, */*" + ], + "Connection": ["keep-alive"], + "Elastic-Apm-Traceparent": [ + "00-27b168a328e0fd442377de8eaa0bf582-2c86873dedb66c2c-01" + ], + "Host": ["opbeans-node:3000"], + "Traceparent": ["00-27b168a328e0fd442377de8eaa0bf582-2c86873dedb66c2c-01"], + "User-Agent": ["Java/11.0.7"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.6" } + }, + "response": { + "headers": { + "Connection": ["keep-alive"], + "Content-Length": ["1023"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:27 GMT"], + "Etag": ["W/\"3ff-VyOxcDApb+a/lnjkm9FeTOGSDrs\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "parent": { "id": "2c86873dedb66c2c" }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.6" }, + "timestamp": { "us": 1593413307452013 }, + "trace": { "id": "27b168a328e0fd442377de8eaa0bf582" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 4292 }, + "id": "141ecc2dfd55eeea", + "name": "GET /api/products", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products", + "original": "/api/products", + "path": "/api/products", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Spider" }, + "name": "Java", + "original": "Java/11.0.7", + "version": "0.7." + } + }, + "p95": 22112, + "averageResponseTime": 8585, + "transactionsPerMinute": 1.75, + "impact": 2.624924094061731 + }, + { + "name": "GET /api/products/:id", + "sample": { + "@timestamp": "2020-06-29T06:48:24.977Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:27.004717Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["231"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:24 GMT"], + "Etag": ["W/\"e7-kkuzj37GZDzXDh0CWqh5Gan0VO4\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413304977014 }, + "trace": { "id": "b9b290bca14c99962fa9a1c509401630" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 4482 }, + "id": "b8d8284ff1fc25d6", + "name": "GET /api/products/:id", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/3", + "original": "/api/products/3", + "path": "/api/products/3", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 37856, + "averageResponseTime": 13516.5, + "transactionsPerMinute": 1, + "impact": 2.3368756900811305 + }, + { + "name": "GET /api/types", + "sample": { + "@timestamp": "2020-06-29T06:48:26.443Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:29.977518Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["112"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:26 GMT"], + "Etag": ["W/\"70-1z6hT7P1WHgBgS/BeUEVeHhOCQU\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413306443014 }, + "trace": { "id": "be3f4eb50d253afc032c90eacaa85072" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 8892 }, + "id": "ccce129bb8c6b125", + "name": "GET /api/types", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/types", + "original": "/api/types", + "path": "/api/types", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 45248, + "averageResponseTime": 26992.5, + "transactionsPerMinute": 0.5, + "impact": 2.3330057413794503 + }, + { + "name": "GET static file", + "sample": { + "@timestamp": "2020-06-29T06:48:40.953Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.992454Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Accept-Ranges": ["bytes"], + "Cache-Control": ["public, max-age=0"], + "Connection": ["close"], + "Content-Length": ["15086"], + "Content-Type": ["image/x-icon"], + "Date": ["Mon, 29 Jun 2020 06:48:40 GMT"], + "Etag": ["W/\"3aee-1725aff14f0\""], + "Last-Modified": ["Thu, 28 May 2020 11:16:06 GMT"], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413320953016 }, + "trace": { "id": "292393440bbe04385f3c2e3715ac35fe" }, + "transaction": { + "duration": { "us": 1671 }, + "id": "d1d964ca1865dce3", + "name": "GET static file", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/favicon.ico", + "original": "/favicon.ico", + "path": "/favicon.ico", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 11900, + "averageResponseTime": 3492.9285714285716, + "transactionsPerMinute": 3.5, + "impact": 2.0901067389184496 + }, + { + "name": "GET /api/products/top", + "sample": { + "@timestamp": "2020-06-29T06:48:18.211Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.8" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:21.007197Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Connection": ["keep-alive"], + "Host": ["opbeans-node:3000"], + "Referer": ["http://opbeans-node:3000/dashboard"], + "Traceparent": ["00-4879105b2de793ca54ce7299aff0f5ce-0d67fab9c9dec84d-01"], + "User-Agent": [ + "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.0 Safari/537.36" + ] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.8" } + }, + "response": { + "headers": { + "Connection": ["keep-alive"], + "Content-Length": ["2"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:18 GMT"], + "Etag": ["W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "parent": { "id": "0d67fab9c9dec84d" }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.8" }, + "timestamp": { "us": 1593413298211013 }, + "trace": { "id": "4879105b2de793ca54ce7299aff0f5ce" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 12820 }, + "id": "b15b12c837ab8b89", + "name": "GET /api/products/top", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/top", + "original": "/api/products/top", + "path": "/api/products/top", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "HeadlessChrome", + "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.0 Safari/537.36", + "os": { "name": "Linux" }, + "version": "79.0.3945" + } + }, + "p95": 33216, + "averageResponseTime": 22958.5, + "transactionsPerMinute": 0.5, + "impact": 1.9475397398343375 + }, + { + "name": "GET /api/stats", + "sample": { + "@timestamp": "2020-06-29T06:48:39.451Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.984824Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["92"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:39 GMT"], + "Etag": ["W/\"5c-6I+bqIiLxvkWuwBUnTxhBoK4lBk\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413319451016 }, + "trace": { "id": "a05787cb03a0af0863fab5e05de942f1" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 5050 }, + "id": "a7e004eba8f021ce", + "name": "GET /api/stats", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 4 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/stats", + "original": "/api/stats", + "path": "/api/stats", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 15136, + "averageResponseTime": 7105.333333333333, + "transactionsPerMinute": 1.5, + "impact": 1.7905918202662048 + }, + { + "name": "GET /log-error", + "sample": { + "@timestamp": "2020-06-29T06:48:07.467Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:18.533253Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["24"], + "Content-Type": ["text/html; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:07 GMT"], + "Etag": ["W/\"18-MS3VbhH7auHMzO0fUuNF6v14N/M\""], + "X-Powered-By": ["Express"] + }, + "status_code": 500 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413287467017 }, + "trace": { "id": "d518b2c4d72cd2aaf1e39bad7ebcbdbb" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 35846 }, + "id": "c7a30c1b076907ec", + "name": "GET /log-error", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/log-error", + "original": "/log-error", + "path": "/log-error", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 35840, + "averageResponseTime": 35846, + "transactionsPerMinute": 0.25, + "impact": 1.466376117925459 + }, + { + "name": "POST /api", + "sample": { + "@timestamp": "2020-06-29T06:48:25.478Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:27.005671Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "body": { "original": "[REDACTED]" }, + "headers": { + "Accept": ["application/json"], + "Connection": ["close"], + "Content-Length": ["129"], + "Content-Type": ["application/json"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "post", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Allow": ["GET"], + "Connection": ["close"], + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:25 GMT"], + "Transfer-Encoding": ["chunked"], + "X-Powered-By": ["Express"] + }, + "status_code": 405 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413305478010 }, + "trace": { "id": "4bd9027dd1e355ec742970e2d6333124" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 20011 }, + "id": "94104435cf151478", + "name": "POST /api", + "result": "HTTP 4xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders", + "original": "/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 19968, + "averageResponseTime": 20011, + "transactionsPerMinute": 0.25, + "impact": 0.7098250353192541 + }, + { + "name": "GET /api/types/:id", + "sample": { + "@timestamp": "2020-06-29T06:48:12.972Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:18.543436Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["205"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:12 GMT"], + "Etag": ["W/\"cd-pFMi1QOVY6YqWe+nwcbZVviCths\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413292972011 }, + "trace": { "id": "aea65cef5f902dda5d8e38f9fb38864d" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 6300 }, + "id": "a5bdbe43ac05fae2", + "name": "GET /api/types/:id", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/types/2", + "original": "/api/types/2", + "path": "/api/types/2", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 10080, + "averageResponseTime": 8181, + "transactionsPerMinute": 0.5, + "impact": 0.5354862351657939 + }, + { + "name": "GET /api/orders/:id", + "sample": { + "@timestamp": "2020-06-29T06:48:35.951Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.484133Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["0"], + "Date": ["Mon, 29 Jun 2020 06:48:35 GMT"], + "X-Powered-By": ["Express"] + }, + "status_code": 404 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413315951017 }, + "trace": { "id": "95979caa80e6622cbbb2d308800c3016" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 3210 }, + "id": "30344988dace0b43", + "name": "GET /api/orders/:id", + "result": "HTTP 4xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders/117", + "original": "/api/orders/117", + "path": "/api/orders/117", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 7184, + "averageResponseTime": 4749.666666666667, + "transactionsPerMinute": 0.75, + "impact": 0.43453312891085794 + }, + { + "name": "GET /api/products/:id/customers", + "sample": { + "@timestamp": "2020-06-29T06:48:41.956Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.994692Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["2"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:41 GMT"], + "Etag": ["W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413321956016 }, + "trace": { "id": "f735ac5fca8f83eebc748f4a2e009e61" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 3896 }, + "id": "b24ce95c855f83a4", + "name": "GET /api/products/:id/customers", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/5/customers", + "original": "/api/products/5/customers", + "path": "/api/products/5/customers", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 5616, + "averageResponseTime": 4757, + "transactionsPerMinute": 0.5, + "impact": 0.20830834986820673 + }, + { + "name": "GET /throw-error", + "sample": { + "@timestamp": "2020-06-29T06:48:42.954Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.996435Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "::ffff:172.18.0.7" } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["148"], + "Content-Security-Policy": ["default-src 'none'"], + "Content-Type": ["text/html; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:42 GMT"], + "X-Content-Type-Options": ["nosniff"], + "X-Powered-By": ["Express"] + }, + "status_code": 500 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413322954016 }, + "trace": { "id": "9d5aee7443a43db9820f622a10dfac6e" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 1928 }, + "id": "8e6fc8c3f99e8fc9", + "name": "GET /throw-error", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/throw-error", + "original": "/throw-error", + "path": "/throw-error", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 3224, + "averageResponseTime": 2577, + "transactionsPerMinute": 0.5, + "impact": 0 + } + ], + "isAggregationAccurate": true, + "bucketSize": 100 +} diff --git a/x-pack/test/apm_api_integration/basic/tests/services/transactions/expectations/transaction_charts.json b/x-pack/test/apm_api_integration/basic/tests/services/transactions/expectations/transaction_charts.json new file mode 100644 index 0000000000000..0e878969f269f --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/transactions/expectations/transaction_charts.json @@ -0,0 +1,1973 @@ +{ + "apmTimeseries": { + "responseTimes": { + "avg": [ + { "x": 1593413100000, "y": null }, + { "x": 1593413101000, "y": null }, + { "x": 1593413102000, "y": null }, + { "x": 1593413103000, "y": null }, + { "x": 1593413104000, "y": null }, + { "x": 1593413105000, "y": null }, + { "x": 1593413106000, "y": null }, + { "x": 1593413107000, "y": null }, + { "x": 1593413108000, "y": null }, + { "x": 1593413109000, "y": null }, + { "x": 1593413110000, "y": null }, + { "x": 1593413111000, "y": null }, + { "x": 1593413112000, "y": null }, + { "x": 1593413113000, "y": null }, + { "x": 1593413114000, "y": null }, + { "x": 1593413115000, "y": null }, + { "x": 1593413116000, "y": null }, + { "x": 1593413117000, "y": null }, + { "x": 1593413118000, "y": null }, + { "x": 1593413119000, "y": null }, + { "x": 1593413120000, "y": null }, + { "x": 1593413121000, "y": null }, + { "x": 1593413122000, "y": null }, + { "x": 1593413123000, "y": null }, + { "x": 1593413124000, "y": null }, + { "x": 1593413125000, "y": null }, + { "x": 1593413126000, "y": null }, + { "x": 1593413127000, "y": null }, + { "x": 1593413128000, "y": null }, + { "x": 1593413129000, "y": null }, + { "x": 1593413130000, "y": null }, + { "x": 1593413131000, "y": null }, + { "x": 1593413132000, "y": null }, + { "x": 1593413133000, "y": null }, + { "x": 1593413134000, "y": null }, + { "x": 1593413135000, "y": null }, + { "x": 1593413136000, "y": null }, + { "x": 1593413137000, "y": null }, + { "x": 1593413138000, "y": null }, + { "x": 1593413139000, "y": null }, + { "x": 1593413140000, "y": null }, + { "x": 1593413141000, "y": null }, + { "x": 1593413142000, "y": null }, + { "x": 1593413143000, "y": null }, + { "x": 1593413144000, "y": null }, + { "x": 1593413145000, "y": null }, + { "x": 1593413146000, "y": null }, + { "x": 1593413147000, "y": null }, + { "x": 1593413148000, "y": null }, + { "x": 1593413149000, "y": null }, + { "x": 1593413150000, "y": null }, + { "x": 1593413151000, "y": null }, + { "x": 1593413152000, "y": null }, + { "x": 1593413153000, "y": null }, + { "x": 1593413154000, "y": null }, + { "x": 1593413155000, "y": null }, + { "x": 1593413156000, "y": null }, + { "x": 1593413157000, "y": null }, + { "x": 1593413158000, "y": null }, + { "x": 1593413159000, "y": null }, + { "x": 1593413160000, "y": null }, + { "x": 1593413161000, "y": null }, + { "x": 1593413162000, "y": null }, + { "x": 1593413163000, "y": null }, + { "x": 1593413164000, "y": null }, + { "x": 1593413165000, "y": null }, + { "x": 1593413166000, "y": null }, + { "x": 1593413167000, "y": null }, + { "x": 1593413168000, "y": null }, + { "x": 1593413169000, "y": null }, + { "x": 1593413170000, "y": null }, + { "x": 1593413171000, "y": null }, + { "x": 1593413172000, "y": null }, + { "x": 1593413173000, "y": null }, + { "x": 1593413174000, "y": null }, + { "x": 1593413175000, "y": null }, + { "x": 1593413176000, "y": null }, + { "x": 1593413177000, "y": null }, + { "x": 1593413178000, "y": null }, + { "x": 1593413179000, "y": null }, + { "x": 1593413180000, "y": null }, + { "x": 1593413181000, "y": null }, + { "x": 1593413182000, "y": null }, + { "x": 1593413183000, "y": null }, + { "x": 1593413184000, "y": null }, + { "x": 1593413185000, "y": null }, + { "x": 1593413186000, "y": null }, + { "x": 1593413187000, "y": null }, + { "x": 1593413188000, "y": null }, + { "x": 1593413189000, "y": null }, + { "x": 1593413190000, "y": null }, + { "x": 1593413191000, "y": null }, + { "x": 1593413192000, "y": null }, + { "x": 1593413193000, "y": null }, + { "x": 1593413194000, "y": null }, + { "x": 1593413195000, "y": null }, + { "x": 1593413196000, "y": null }, + { "x": 1593413197000, "y": null }, + { "x": 1593413198000, "y": null }, + { "x": 1593413199000, "y": null }, + { "x": 1593413200000, "y": null }, + { "x": 1593413201000, "y": null }, + { "x": 1593413202000, "y": null }, + { "x": 1593413203000, "y": null }, + { "x": 1593413204000, "y": null }, + { "x": 1593413205000, "y": null }, + { "x": 1593413206000, "y": null }, + { "x": 1593413207000, "y": null }, + { "x": 1593413208000, "y": null }, + { "x": 1593413209000, "y": null }, + { "x": 1593413210000, "y": null }, + { "x": 1593413211000, "y": null }, + { "x": 1593413212000, "y": null }, + { "x": 1593413213000, "y": null }, + { "x": 1593413214000, "y": null }, + { "x": 1593413215000, "y": null }, + { "x": 1593413216000, "y": null }, + { "x": 1593413217000, "y": null }, + { "x": 1593413218000, "y": null }, + { "x": 1593413219000, "y": null }, + { "x": 1593413220000, "y": null }, + { "x": 1593413221000, "y": null }, + { "x": 1593413222000, "y": null }, + { "x": 1593413223000, "y": null }, + { "x": 1593413224000, "y": null }, + { "x": 1593413225000, "y": null }, + { "x": 1593413226000, "y": null }, + { "x": 1593413227000, "y": null }, + { "x": 1593413228000, "y": null }, + { "x": 1593413229000, "y": null }, + { "x": 1593413230000, "y": null }, + { "x": 1593413231000, "y": null }, + { "x": 1593413232000, "y": null }, + { "x": 1593413233000, "y": null }, + { "x": 1593413234000, "y": null }, + { "x": 1593413235000, "y": null }, + { "x": 1593413236000, "y": null }, + { "x": 1593413237000, "y": null }, + { "x": 1593413238000, "y": null }, + { "x": 1593413239000, "y": null }, + { "x": 1593413240000, "y": null }, + { "x": 1593413241000, "y": null }, + { "x": 1593413242000, "y": null }, + { "x": 1593413243000, "y": null }, + { "x": 1593413244000, "y": null }, + { "x": 1593413245000, "y": null }, + { "x": 1593413246000, "y": null }, + { "x": 1593413247000, "y": null }, + { "x": 1593413248000, "y": null }, + { "x": 1593413249000, "y": null }, + { "x": 1593413250000, "y": null }, + { "x": 1593413251000, "y": null }, + { "x": 1593413252000, "y": null }, + { "x": 1593413253000, "y": null }, + { "x": 1593413254000, "y": null }, + { "x": 1593413255000, "y": null }, + { "x": 1593413256000, "y": null }, + { "x": 1593413257000, "y": null }, + { "x": 1593413258000, "y": null }, + { "x": 1593413259000, "y": null }, + { "x": 1593413260000, "y": null }, + { "x": 1593413261000, "y": null }, + { "x": 1593413262000, "y": null }, + { "x": 1593413263000, "y": null }, + { "x": 1593413264000, "y": null }, + { "x": 1593413265000, "y": null }, + { "x": 1593413266000, "y": null }, + { "x": 1593413267000, "y": null }, + { "x": 1593413268000, "y": null }, + { "x": 1593413269000, "y": null }, + { "x": 1593413270000, "y": null }, + { "x": 1593413271000, "y": null }, + { "x": 1593413272000, "y": 45093 }, + { "x": 1593413273000, "y": 7498 }, + { "x": 1593413274000, "y": null }, + { "x": 1593413275000, "y": null }, + { "x": 1593413276000, "y": null }, + { "x": 1593413277000, "y": 37709 }, + { "x": 1593413278000, "y": null }, + { "x": 1593413279000, "y": null }, + { "x": 1593413280000, "y": null }, + { "x": 1593413281000, "y": 33097 }, + { "x": 1593413282000, "y": null }, + { "x": 1593413283000, "y": null }, + { "x": 1593413284000, "y": 388507 }, + { "x": 1593413285000, "y": 42331.5 }, + { "x": 1593413286000, "y": 99104.25 }, + { "x": 1593413287000, "y": 18939.5 }, + { "x": 1593413288000, "y": 23229.5 }, + { "x": 1593413289000, "y": 11318 }, + { "x": 1593413290000, "y": 15651.25 }, + { "x": 1593413291000, "y": 2376 }, + { "x": 1593413292000, "y": 7796 }, + { "x": 1593413293000, "y": 7571 }, + { "x": 1593413294000, "y": 4219.333333333333 }, + { "x": 1593413295000, "y": 6827.5 }, + { "x": 1593413296000, "y": 10415.5 }, + { "x": 1593413297000, "y": 10082 }, + { "x": 1593413298000, "y": 6459.375 }, + { "x": 1593413299000, "y": 3131.5 }, + { "x": 1593413300000, "y": 6713.333333333333 }, + { "x": 1593413301000, "y": 8800 }, + { "x": 1593413302000, "y": 3743.5 }, + { "x": 1593413303000, "y": 9239.5 }, + { "x": 1593413304000, "y": 8402 }, + { "x": 1593413305000, "y": 20520.666666666668 }, + { "x": 1593413306000, "y": 9319.5 }, + { "x": 1593413307000, "y": 7694.333333333333 }, + { "x": 1593413308000, "y": 20131 }, + { "x": 1593413309000, "y": 439937.75 }, + { "x": 1593413310000, "y": 11933 }, + { "x": 1593413311000, "y": 18670.5 }, + { "x": 1593413312000, "y": 9232 }, + { "x": 1593413313000, "y": 7602 }, + { "x": 1593413314000, "y": 10428.8 }, + { "x": 1593413315000, "y": 8405.25 }, + { "x": 1593413316000, "y": 10654.5 }, + { "x": 1593413317000, "y": 10250 }, + { "x": 1593413318000, "y": 5775 }, + { "x": 1593413319000, "y": 137867 }, + { "x": 1593413320000, "y": 5694.333333333333 }, + { "x": 1593413321000, "y": 6115 }, + { "x": 1593413322000, "y": 1832.5 }, + { "x": 1593413323000, "y": null }, + { "x": 1593413324000, "y": null }, + { "x": 1593413325000, "y": null }, + { "x": 1593413326000, "y": null }, + { "x": 1593413327000, "y": null }, + { "x": 1593413328000, "y": null }, + { "x": 1593413329000, "y": null }, + { "x": 1593413330000, "y": null }, + { "x": 1593413331000, "y": null }, + { "x": 1593413332000, "y": null }, + { "x": 1593413333000, "y": null }, + { "x": 1593413334000, "y": null }, + { "x": 1593413335000, "y": null }, + { "x": 1593413336000, "y": null }, + { "x": 1593413337000, "y": null }, + { "x": 1593413338000, "y": null }, + { "x": 1593413339000, "y": null }, + { "x": 1593413340000, "y": null } + ], + "p95": [ + { "x": 1593413100000, "y": null }, + { "x": 1593413101000, "y": null }, + { "x": 1593413102000, "y": null }, + { "x": 1593413103000, "y": null }, + { "x": 1593413104000, "y": null }, + { "x": 1593413105000, "y": null }, + { "x": 1593413106000, "y": null }, + { "x": 1593413107000, "y": null }, + { "x": 1593413108000, "y": null }, + { "x": 1593413109000, "y": null }, + { "x": 1593413110000, "y": null }, + { "x": 1593413111000, "y": null }, + { "x": 1593413112000, "y": null }, + { "x": 1593413113000, "y": null }, + { "x": 1593413114000, "y": null }, + { "x": 1593413115000, "y": null }, + { "x": 1593413116000, "y": null }, + { "x": 1593413117000, "y": null }, + { "x": 1593413118000, "y": null }, + { "x": 1593413119000, "y": null }, + { "x": 1593413120000, "y": null }, + { "x": 1593413121000, "y": null }, + { "x": 1593413122000, "y": null }, + { "x": 1593413123000, "y": null }, + { "x": 1593413124000, "y": null }, + { "x": 1593413125000, "y": null }, + { "x": 1593413126000, "y": null }, + { "x": 1593413127000, "y": null }, + { "x": 1593413128000, "y": null }, + { "x": 1593413129000, "y": null }, + { "x": 1593413130000, "y": null }, + { "x": 1593413131000, "y": null }, + { "x": 1593413132000, "y": null }, + { "x": 1593413133000, "y": null }, + { "x": 1593413134000, "y": null }, + { "x": 1593413135000, "y": null }, + { "x": 1593413136000, "y": null }, + { "x": 1593413137000, "y": null }, + { "x": 1593413138000, "y": null }, + { "x": 1593413139000, "y": null }, + { "x": 1593413140000, "y": null }, + { "x": 1593413141000, "y": null }, + { "x": 1593413142000, "y": null }, + { "x": 1593413143000, "y": null }, + { "x": 1593413144000, "y": null }, + { "x": 1593413145000, "y": null }, + { "x": 1593413146000, "y": null }, + { "x": 1593413147000, "y": null }, + { "x": 1593413148000, "y": null }, + { "x": 1593413149000, "y": null }, + { "x": 1593413150000, "y": null }, + { "x": 1593413151000, "y": null }, + { "x": 1593413152000, "y": null }, + { "x": 1593413153000, "y": null }, + { "x": 1593413154000, "y": null }, + { "x": 1593413155000, "y": null }, + { "x": 1593413156000, "y": null }, + { "x": 1593413157000, "y": null }, + { "x": 1593413158000, "y": null }, + { "x": 1593413159000, "y": null }, + { "x": 1593413160000, "y": null }, + { "x": 1593413161000, "y": null }, + { "x": 1593413162000, "y": null }, + { "x": 1593413163000, "y": null }, + { "x": 1593413164000, "y": null }, + { "x": 1593413165000, "y": null }, + { "x": 1593413166000, "y": null }, + { "x": 1593413167000, "y": null }, + { "x": 1593413168000, "y": null }, + { "x": 1593413169000, "y": null }, + { "x": 1593413170000, "y": null }, + { "x": 1593413171000, "y": null }, + { "x": 1593413172000, "y": null }, + { "x": 1593413173000, "y": null }, + { "x": 1593413174000, "y": null }, + { "x": 1593413175000, "y": null }, + { "x": 1593413176000, "y": null }, + { "x": 1593413177000, "y": null }, + { "x": 1593413178000, "y": null }, + { "x": 1593413179000, "y": null }, + { "x": 1593413180000, "y": null }, + { "x": 1593413181000, "y": null }, + { "x": 1593413182000, "y": null }, + { "x": 1593413183000, "y": null }, + { "x": 1593413184000, "y": null }, + { "x": 1593413185000, "y": null }, + { "x": 1593413186000, "y": null }, + { "x": 1593413187000, "y": null }, + { "x": 1593413188000, "y": null }, + { "x": 1593413189000, "y": null }, + { "x": 1593413190000, "y": null }, + { "x": 1593413191000, "y": null }, + { "x": 1593413192000, "y": null }, + { "x": 1593413193000, "y": null }, + { "x": 1593413194000, "y": null }, + { "x": 1593413195000, "y": null }, + { "x": 1593413196000, "y": null }, + { "x": 1593413197000, "y": null }, + { "x": 1593413198000, "y": null }, + { "x": 1593413199000, "y": null }, + { "x": 1593413200000, "y": null }, + { "x": 1593413201000, "y": null }, + { "x": 1593413202000, "y": null }, + { "x": 1593413203000, "y": null }, + { "x": 1593413204000, "y": null }, + { "x": 1593413205000, "y": null }, + { "x": 1593413206000, "y": null }, + { "x": 1593413207000, "y": null }, + { "x": 1593413208000, "y": null }, + { "x": 1593413209000, "y": null }, + { "x": 1593413210000, "y": null }, + { "x": 1593413211000, "y": null }, + { "x": 1593413212000, "y": null }, + { "x": 1593413213000, "y": null }, + { "x": 1593413214000, "y": null }, + { "x": 1593413215000, "y": null }, + { "x": 1593413216000, "y": null }, + { "x": 1593413217000, "y": null }, + { "x": 1593413218000, "y": null }, + { "x": 1593413219000, "y": null }, + { "x": 1593413220000, "y": null }, + { "x": 1593413221000, "y": null }, + { "x": 1593413222000, "y": null }, + { "x": 1593413223000, "y": null }, + { "x": 1593413224000, "y": null }, + { "x": 1593413225000, "y": null }, + { "x": 1593413226000, "y": null }, + { "x": 1593413227000, "y": null }, + { "x": 1593413228000, "y": null }, + { "x": 1593413229000, "y": null }, + { "x": 1593413230000, "y": null }, + { "x": 1593413231000, "y": null }, + { "x": 1593413232000, "y": null }, + { "x": 1593413233000, "y": null }, + { "x": 1593413234000, "y": null }, + { "x": 1593413235000, "y": null }, + { "x": 1593413236000, "y": null }, + { "x": 1593413237000, "y": null }, + { "x": 1593413238000, "y": null }, + { "x": 1593413239000, "y": null }, + { "x": 1593413240000, "y": null }, + { "x": 1593413241000, "y": null }, + { "x": 1593413242000, "y": null }, + { "x": 1593413243000, "y": null }, + { "x": 1593413244000, "y": null }, + { "x": 1593413245000, "y": null }, + { "x": 1593413246000, "y": null }, + { "x": 1593413247000, "y": null }, + { "x": 1593413248000, "y": null }, + { "x": 1593413249000, "y": null }, + { "x": 1593413250000, "y": null }, + { "x": 1593413251000, "y": null }, + { "x": 1593413252000, "y": null }, + { "x": 1593413253000, "y": null }, + { "x": 1593413254000, "y": null }, + { "x": 1593413255000, "y": null }, + { "x": 1593413256000, "y": null }, + { "x": 1593413257000, "y": null }, + { "x": 1593413258000, "y": null }, + { "x": 1593413259000, "y": null }, + { "x": 1593413260000, "y": null }, + { "x": 1593413261000, "y": null }, + { "x": 1593413262000, "y": null }, + { "x": 1593413263000, "y": null }, + { "x": 1593413264000, "y": null }, + { "x": 1593413265000, "y": null }, + { "x": 1593413266000, "y": null }, + { "x": 1593413267000, "y": null }, + { "x": 1593413268000, "y": null }, + { "x": 1593413269000, "y": null }, + { "x": 1593413270000, "y": null }, + { "x": 1593413271000, "y": null }, + { "x": 1593413272000, "y": 45056 }, + { "x": 1593413273000, "y": 10080 }, + { "x": 1593413274000, "y": null }, + { "x": 1593413275000, "y": null }, + { "x": 1593413276000, "y": null }, + { "x": 1593413277000, "y": 37632 }, + { "x": 1593413278000, "y": null }, + { "x": 1593413279000, "y": null }, + { "x": 1593413280000, "y": null }, + { "x": 1593413281000, "y": 33024 }, + { "x": 1593413282000, "y": null }, + { "x": 1593413283000, "y": null }, + { "x": 1593413284000, "y": 761728 }, + { "x": 1593413285000, "y": 81904 }, + { "x": 1593413286000, "y": 358384 }, + { "x": 1593413287000, "y": 36088 }, + { "x": 1593413288000, "y": 44536 }, + { "x": 1593413289000, "y": 11648 }, + { "x": 1593413290000, "y": 31984 }, + { "x": 1593413291000, "y": 2920 }, + { "x": 1593413292000, "y": 9312 }, + { "x": 1593413293000, "y": 10912 }, + { "x": 1593413294000, "y": 6392 }, + { "x": 1593413295000, "y": 11704 }, + { "x": 1593413296000, "y": 10816 }, + { "x": 1593413297000, "y": 12000 }, + { "x": 1593413298000, "y": 15164 }, + { "x": 1593413299000, "y": 3216 }, + { "x": 1593413300000, "y": 9584 }, + { "x": 1593413301000, "y": 21240 }, + { "x": 1593413302000, "y": 5624 }, + { "x": 1593413303000, "y": 11360 }, + { "x": 1593413304000, "y": 12320 }, + { "x": 1593413305000, "y": 38640 }, + { "x": 1593413306000, "y": 9728 }, + { "x": 1593413307000, "y": 17016 }, + { "x": 1593413308000, "y": 26848 }, + { "x": 1593413309000, "y": 1753072 }, + { "x": 1593413310000, "y": 16992 }, + { "x": 1593413311000, "y": 26560 }, + { "x": 1593413312000, "y": 11232 }, + { "x": 1593413313000, "y": 11424 }, + { "x": 1593413314000, "y": 16096 }, + { "x": 1593413315000, "y": 18800 }, + { "x": 1593413316000, "y": 12672 }, + { "x": 1593413317000, "y": 24316 }, + { "x": 1593413318000, "y": 8944 }, + { "x": 1593413319000, "y": 272352 }, + { "x": 1593413320000, "y": 7992 }, + { "x": 1593413321000, "y": 8368 }, + { "x": 1593413322000, "y": 1928 }, + { "x": 1593413323000, "y": null }, + { "x": 1593413324000, "y": null }, + { "x": 1593413325000, "y": null }, + { "x": 1593413326000, "y": null }, + { "x": 1593413327000, "y": null }, + { "x": 1593413328000, "y": null }, + { "x": 1593413329000, "y": null }, + { "x": 1593413330000, "y": null }, + { "x": 1593413331000, "y": null }, + { "x": 1593413332000, "y": null }, + { "x": 1593413333000, "y": null }, + { "x": 1593413334000, "y": null }, + { "x": 1593413335000, "y": null }, + { "x": 1593413336000, "y": null }, + { "x": 1593413337000, "y": null }, + { "x": 1593413338000, "y": null }, + { "x": 1593413339000, "y": null }, + { "x": 1593413340000, "y": null } + ], + "p99": [ + { "x": 1593413100000, "y": null }, + { "x": 1593413101000, "y": null }, + { "x": 1593413102000, "y": null }, + { "x": 1593413103000, "y": null }, + { "x": 1593413104000, "y": null }, + { "x": 1593413105000, "y": null }, + { "x": 1593413106000, "y": null }, + { "x": 1593413107000, "y": null }, + { "x": 1593413108000, "y": null }, + { "x": 1593413109000, "y": null }, + { "x": 1593413110000, "y": null }, + { "x": 1593413111000, "y": null }, + { "x": 1593413112000, "y": null }, + { "x": 1593413113000, "y": null }, + { "x": 1593413114000, "y": null }, + { "x": 1593413115000, "y": null }, + { "x": 1593413116000, "y": null }, + { "x": 1593413117000, "y": null }, + { "x": 1593413118000, "y": null }, + { "x": 1593413119000, "y": null }, + { "x": 1593413120000, "y": null }, + { "x": 1593413121000, "y": null }, + { "x": 1593413122000, "y": null }, + { "x": 1593413123000, "y": null }, + { "x": 1593413124000, "y": null }, + { "x": 1593413125000, "y": null }, + { "x": 1593413126000, "y": null }, + { "x": 1593413127000, "y": null }, + { "x": 1593413128000, "y": null }, + { "x": 1593413129000, "y": null }, + { "x": 1593413130000, "y": null }, + { "x": 1593413131000, "y": null }, + { "x": 1593413132000, "y": null }, + { "x": 1593413133000, "y": null }, + { "x": 1593413134000, "y": null }, + { "x": 1593413135000, "y": null }, + { "x": 1593413136000, "y": null }, + { "x": 1593413137000, "y": null }, + { "x": 1593413138000, "y": null }, + { "x": 1593413139000, "y": null }, + { "x": 1593413140000, "y": null }, + { "x": 1593413141000, "y": null }, + { "x": 1593413142000, "y": null }, + { "x": 1593413143000, "y": null }, + { "x": 1593413144000, "y": null }, + { "x": 1593413145000, "y": null }, + { "x": 1593413146000, "y": null }, + { "x": 1593413147000, "y": null }, + { "x": 1593413148000, "y": null }, + { "x": 1593413149000, "y": null }, + { "x": 1593413150000, "y": null }, + { "x": 1593413151000, "y": null }, + { "x": 1593413152000, "y": null }, + { "x": 1593413153000, "y": null }, + { "x": 1593413154000, "y": null }, + { "x": 1593413155000, "y": null }, + { "x": 1593413156000, "y": null }, + { "x": 1593413157000, "y": null }, + { "x": 1593413158000, "y": null }, + { "x": 1593413159000, "y": null }, + { "x": 1593413160000, "y": null }, + { "x": 1593413161000, "y": null }, + { "x": 1593413162000, "y": null }, + { "x": 1593413163000, "y": null }, + { "x": 1593413164000, "y": null }, + { "x": 1593413165000, "y": null }, + { "x": 1593413166000, "y": null }, + { "x": 1593413167000, "y": null }, + { "x": 1593413168000, "y": null }, + { "x": 1593413169000, "y": null }, + { "x": 1593413170000, "y": null }, + { "x": 1593413171000, "y": null }, + { "x": 1593413172000, "y": null }, + { "x": 1593413173000, "y": null }, + { "x": 1593413174000, "y": null }, + { "x": 1593413175000, "y": null }, + { "x": 1593413176000, "y": null }, + { "x": 1593413177000, "y": null }, + { "x": 1593413178000, "y": null }, + { "x": 1593413179000, "y": null }, + { "x": 1593413180000, "y": null }, + { "x": 1593413181000, "y": null }, + { "x": 1593413182000, "y": null }, + { "x": 1593413183000, "y": null }, + { "x": 1593413184000, "y": null }, + { "x": 1593413185000, "y": null }, + { "x": 1593413186000, "y": null }, + { "x": 1593413187000, "y": null }, + { "x": 1593413188000, "y": null }, + { "x": 1593413189000, "y": null }, + { "x": 1593413190000, "y": null }, + { "x": 1593413191000, "y": null }, + { "x": 1593413192000, "y": null }, + { "x": 1593413193000, "y": null }, + { "x": 1593413194000, "y": null }, + { "x": 1593413195000, "y": null }, + { "x": 1593413196000, "y": null }, + { "x": 1593413197000, "y": null }, + { "x": 1593413198000, "y": null }, + { "x": 1593413199000, "y": null }, + { "x": 1593413200000, "y": null }, + { "x": 1593413201000, "y": null }, + { "x": 1593413202000, "y": null }, + { "x": 1593413203000, "y": null }, + { "x": 1593413204000, "y": null }, + { "x": 1593413205000, "y": null }, + { "x": 1593413206000, "y": null }, + { "x": 1593413207000, "y": null }, + { "x": 1593413208000, "y": null }, + { "x": 1593413209000, "y": null }, + { "x": 1593413210000, "y": null }, + { "x": 1593413211000, "y": null }, + { "x": 1593413212000, "y": null }, + { "x": 1593413213000, "y": null }, + { "x": 1593413214000, "y": null }, + { "x": 1593413215000, "y": null }, + { "x": 1593413216000, "y": null }, + { "x": 1593413217000, "y": null }, + { "x": 1593413218000, "y": null }, + { "x": 1593413219000, "y": null }, + { "x": 1593413220000, "y": null }, + { "x": 1593413221000, "y": null }, + { "x": 1593413222000, "y": null }, + { "x": 1593413223000, "y": null }, + { "x": 1593413224000, "y": null }, + { "x": 1593413225000, "y": null }, + { "x": 1593413226000, "y": null }, + { "x": 1593413227000, "y": null }, + { "x": 1593413228000, "y": null }, + { "x": 1593413229000, "y": null }, + { "x": 1593413230000, "y": null }, + { "x": 1593413231000, "y": null }, + { "x": 1593413232000, "y": null }, + { "x": 1593413233000, "y": null }, + { "x": 1593413234000, "y": null }, + { "x": 1593413235000, "y": null }, + { "x": 1593413236000, "y": null }, + { "x": 1593413237000, "y": null }, + { "x": 1593413238000, "y": null }, + { "x": 1593413239000, "y": null }, + { "x": 1593413240000, "y": null }, + { "x": 1593413241000, "y": null }, + { "x": 1593413242000, "y": null }, + { "x": 1593413243000, "y": null }, + { "x": 1593413244000, "y": null }, + { "x": 1593413245000, "y": null }, + { "x": 1593413246000, "y": null }, + { "x": 1593413247000, "y": null }, + { "x": 1593413248000, "y": null }, + { "x": 1593413249000, "y": null }, + { "x": 1593413250000, "y": null }, + { "x": 1593413251000, "y": null }, + { "x": 1593413252000, "y": null }, + { "x": 1593413253000, "y": null }, + { "x": 1593413254000, "y": null }, + { "x": 1593413255000, "y": null }, + { "x": 1593413256000, "y": null }, + { "x": 1593413257000, "y": null }, + { "x": 1593413258000, "y": null }, + { "x": 1593413259000, "y": null }, + { "x": 1593413260000, "y": null }, + { "x": 1593413261000, "y": null }, + { "x": 1593413262000, "y": null }, + { "x": 1593413263000, "y": null }, + { "x": 1593413264000, "y": null }, + { "x": 1593413265000, "y": null }, + { "x": 1593413266000, "y": null }, + { "x": 1593413267000, "y": null }, + { "x": 1593413268000, "y": null }, + { "x": 1593413269000, "y": null }, + { "x": 1593413270000, "y": null }, + { "x": 1593413271000, "y": null }, + { "x": 1593413272000, "y": 45056 }, + { "x": 1593413273000, "y": 10080 }, + { "x": 1593413274000, "y": null }, + { "x": 1593413275000, "y": null }, + { "x": 1593413276000, "y": null }, + { "x": 1593413277000, "y": 37632 }, + { "x": 1593413278000, "y": null }, + { "x": 1593413279000, "y": null }, + { "x": 1593413280000, "y": null }, + { "x": 1593413281000, "y": 33024 }, + { "x": 1593413282000, "y": null }, + { "x": 1593413283000, "y": null }, + { "x": 1593413284000, "y": 761728 }, + { "x": 1593413285000, "y": 81904 }, + { "x": 1593413286000, "y": 358384 }, + { "x": 1593413287000, "y": 36088 }, + { "x": 1593413288000, "y": 44536 }, + { "x": 1593413289000, "y": 11648 }, + { "x": 1593413290000, "y": 31984 }, + { "x": 1593413291000, "y": 2920 }, + { "x": 1593413292000, "y": 9312 }, + { "x": 1593413293000, "y": 10912 }, + { "x": 1593413294000, "y": 6392 }, + { "x": 1593413295000, "y": 11704 }, + { "x": 1593413296000, "y": 10816 }, + { "x": 1593413297000, "y": 12000 }, + { "x": 1593413298000, "y": 15164 }, + { "x": 1593413299000, "y": 3216 }, + { "x": 1593413300000, "y": 9584 }, + { "x": 1593413301000, "y": 21240 }, + { "x": 1593413302000, "y": 5624 }, + { "x": 1593413303000, "y": 11360 }, + { "x": 1593413304000, "y": 12320 }, + { "x": 1593413305000, "y": 38640 }, + { "x": 1593413306000, "y": 9728 }, + { "x": 1593413307000, "y": 17016 }, + { "x": 1593413308000, "y": 26848 }, + { "x": 1593413309000, "y": 1753072 }, + { "x": 1593413310000, "y": 16992 }, + { "x": 1593413311000, "y": 26560 }, + { "x": 1593413312000, "y": 11232 }, + { "x": 1593413313000, "y": 11424 }, + { "x": 1593413314000, "y": 16096 }, + { "x": 1593413315000, "y": 18800 }, + { "x": 1593413316000, "y": 12672 }, + { "x": 1593413317000, "y": 24316 }, + { "x": 1593413318000, "y": 8944 }, + { "x": 1593413319000, "y": 272352 }, + { "x": 1593413320000, "y": 7992 }, + { "x": 1593413321000, "y": 8368 }, + { "x": 1593413322000, "y": 1928 }, + { "x": 1593413323000, "y": null }, + { "x": 1593413324000, "y": null }, + { "x": 1593413325000, "y": null }, + { "x": 1593413326000, "y": null }, + { "x": 1593413327000, "y": null }, + { "x": 1593413328000, "y": null }, + { "x": 1593413329000, "y": null }, + { "x": 1593413330000, "y": null }, + { "x": 1593413331000, "y": null }, + { "x": 1593413332000, "y": null }, + { "x": 1593413333000, "y": null }, + { "x": 1593413334000, "y": null }, + { "x": 1593413335000, "y": null }, + { "x": 1593413336000, "y": null }, + { "x": 1593413337000, "y": null }, + { "x": 1593413338000, "y": null }, + { "x": 1593413339000, "y": null }, + { "x": 1593413340000, "y": null } + ] + }, + "tpmBuckets": [ + { + "key": "HTTP 2xx", + "dataPoints": [ + { "x": 1593413100000, "y": 0 }, + { "x": 1593413101000, "y": 0 }, + { "x": 1593413102000, "y": 0 }, + { "x": 1593413103000, "y": 0 }, + { "x": 1593413104000, "y": 0 }, + { "x": 1593413105000, "y": 0 }, + { "x": 1593413106000, "y": 0 }, + { "x": 1593413107000, "y": 0 }, + { "x": 1593413108000, "y": 0 }, + { "x": 1593413109000, "y": 0 }, + { "x": 1593413110000, "y": 0 }, + { "x": 1593413111000, "y": 0 }, + { "x": 1593413112000, "y": 0 }, + { "x": 1593413113000, "y": 0 }, + { "x": 1593413114000, "y": 0 }, + { "x": 1593413115000, "y": 0 }, + { "x": 1593413116000, "y": 0 }, + { "x": 1593413117000, "y": 0 }, + { "x": 1593413118000, "y": 0 }, + { "x": 1593413119000, "y": 0 }, + { "x": 1593413120000, "y": 0 }, + { "x": 1593413121000, "y": 0 }, + { "x": 1593413122000, "y": 0 }, + { "x": 1593413123000, "y": 0 }, + { "x": 1593413124000, "y": 0 }, + { "x": 1593413125000, "y": 0 }, + { "x": 1593413126000, "y": 0 }, + { "x": 1593413127000, "y": 0 }, + { "x": 1593413128000, "y": 0 }, + { "x": 1593413129000, "y": 0 }, + { "x": 1593413130000, "y": 0 }, + { "x": 1593413131000, "y": 0 }, + { "x": 1593413132000, "y": 0 }, + { "x": 1593413133000, "y": 0 }, + { "x": 1593413134000, "y": 0 }, + { "x": 1593413135000, "y": 0 }, + { "x": 1593413136000, "y": 0 }, + { "x": 1593413137000, "y": 0 }, + { "x": 1593413138000, "y": 0 }, + { "x": 1593413139000, "y": 0 }, + { "x": 1593413140000, "y": 0 }, + { "x": 1593413141000, "y": 0 }, + { "x": 1593413142000, "y": 0 }, + { "x": 1593413143000, "y": 0 }, + { "x": 1593413144000, "y": 0 }, + { "x": 1593413145000, "y": 0 }, + { "x": 1593413146000, "y": 0 }, + { "x": 1593413147000, "y": 0 }, + { "x": 1593413148000, "y": 0 }, + { "x": 1593413149000, "y": 0 }, + { "x": 1593413150000, "y": 0 }, + { "x": 1593413151000, "y": 0 }, + { "x": 1593413152000, "y": 0 }, + { "x": 1593413153000, "y": 0 }, + { "x": 1593413154000, "y": 0 }, + { "x": 1593413155000, "y": 0 }, + { "x": 1593413156000, "y": 0 }, + { "x": 1593413157000, "y": 0 }, + { "x": 1593413158000, "y": 0 }, + { "x": 1593413159000, "y": 0 }, + { "x": 1593413160000, "y": 0 }, + { "x": 1593413161000, "y": 0 }, + { "x": 1593413162000, "y": 0 }, + { "x": 1593413163000, "y": 0 }, + { "x": 1593413164000, "y": 0 }, + { "x": 1593413165000, "y": 0 }, + { "x": 1593413166000, "y": 0 }, + { "x": 1593413167000, "y": 0 }, + { "x": 1593413168000, "y": 0 }, + { "x": 1593413169000, "y": 0 }, + { "x": 1593413170000, "y": 0 }, + { "x": 1593413171000, "y": 0 }, + { "x": 1593413172000, "y": 0 }, + { "x": 1593413173000, "y": 0 }, + { "x": 1593413174000, "y": 0 }, + { "x": 1593413175000, "y": 0 }, + { "x": 1593413176000, "y": 0 }, + { "x": 1593413177000, "y": 0 }, + { "x": 1593413178000, "y": 0 }, + { "x": 1593413179000, "y": 0 }, + { "x": 1593413180000, "y": 0 }, + { "x": 1593413181000, "y": 0 }, + { "x": 1593413182000, "y": 0 }, + { "x": 1593413183000, "y": 0 }, + { "x": 1593413184000, "y": 0 }, + { "x": 1593413185000, "y": 0 }, + { "x": 1593413186000, "y": 0 }, + { "x": 1593413187000, "y": 0 }, + { "x": 1593413188000, "y": 0 }, + { "x": 1593413189000, "y": 0 }, + { "x": 1593413190000, "y": 0 }, + { "x": 1593413191000, "y": 0 }, + { "x": 1593413192000, "y": 0 }, + { "x": 1593413193000, "y": 0 }, + { "x": 1593413194000, "y": 0 }, + { "x": 1593413195000, "y": 0 }, + { "x": 1593413196000, "y": 0 }, + { "x": 1593413197000, "y": 0 }, + { "x": 1593413198000, "y": 0 }, + { "x": 1593413199000, "y": 0 }, + { "x": 1593413200000, "y": 0 }, + { "x": 1593413201000, "y": 0 }, + { "x": 1593413202000, "y": 0 }, + { "x": 1593413203000, "y": 0 }, + { "x": 1593413204000, "y": 0 }, + { "x": 1593413205000, "y": 0 }, + { "x": 1593413206000, "y": 0 }, + { "x": 1593413207000, "y": 0 }, + { "x": 1593413208000, "y": 0 }, + { "x": 1593413209000, "y": 0 }, + { "x": 1593413210000, "y": 0 }, + { "x": 1593413211000, "y": 0 }, + { "x": 1593413212000, "y": 0 }, + { "x": 1593413213000, "y": 0 }, + { "x": 1593413214000, "y": 0 }, + { "x": 1593413215000, "y": 0 }, + { "x": 1593413216000, "y": 0 }, + { "x": 1593413217000, "y": 0 }, + { "x": 1593413218000, "y": 0 }, + { "x": 1593413219000, "y": 0 }, + { "x": 1593413220000, "y": 0 }, + { "x": 1593413221000, "y": 0 }, + { "x": 1593413222000, "y": 0 }, + { "x": 1593413223000, "y": 0 }, + { "x": 1593413224000, "y": 0 }, + { "x": 1593413225000, "y": 0 }, + { "x": 1593413226000, "y": 0 }, + { "x": 1593413227000, "y": 0 }, + { "x": 1593413228000, "y": 0 }, + { "x": 1593413229000, "y": 0 }, + { "x": 1593413230000, "y": 0 }, + { "x": 1593413231000, "y": 0 }, + { "x": 1593413232000, "y": 0 }, + { "x": 1593413233000, "y": 0 }, + { "x": 1593413234000, "y": 0 }, + { "x": 1593413235000, "y": 0 }, + { "x": 1593413236000, "y": 0 }, + { "x": 1593413237000, "y": 0 }, + { "x": 1593413238000, "y": 0 }, + { "x": 1593413239000, "y": 0 }, + { "x": 1593413240000, "y": 0 }, + { "x": 1593413241000, "y": 0 }, + { "x": 1593413242000, "y": 0 }, + { "x": 1593413243000, "y": 0 }, + { "x": 1593413244000, "y": 0 }, + { "x": 1593413245000, "y": 0 }, + { "x": 1593413246000, "y": 0 }, + { "x": 1593413247000, "y": 0 }, + { "x": 1593413248000, "y": 0 }, + { "x": 1593413249000, "y": 0 }, + { "x": 1593413250000, "y": 0 }, + { "x": 1593413251000, "y": 0 }, + { "x": 1593413252000, "y": 0 }, + { "x": 1593413253000, "y": 0 }, + { "x": 1593413254000, "y": 0 }, + { "x": 1593413255000, "y": 0 }, + { "x": 1593413256000, "y": 0 }, + { "x": 1593413257000, "y": 0 }, + { "x": 1593413258000, "y": 0 }, + { "x": 1593413259000, "y": 0 }, + { "x": 1593413260000, "y": 0 }, + { "x": 1593413261000, "y": 0 }, + { "x": 1593413262000, "y": 0 }, + { "x": 1593413263000, "y": 0 }, + { "x": 1593413264000, "y": 0 }, + { "x": 1593413265000, "y": 0 }, + { "x": 1593413266000, "y": 0 }, + { "x": 1593413267000, "y": 0 }, + { "x": 1593413268000, "y": 0 }, + { "x": 1593413269000, "y": 0 }, + { "x": 1593413270000, "y": 0 }, + { "x": 1593413271000, "y": 0 }, + { "x": 1593413272000, "y": 1 }, + { "x": 1593413273000, "y": 2 }, + { "x": 1593413274000, "y": 0 }, + { "x": 1593413275000, "y": 0 }, + { "x": 1593413276000, "y": 0 }, + { "x": 1593413277000, "y": 1 }, + { "x": 1593413278000, "y": 0 }, + { "x": 1593413279000, "y": 0 }, + { "x": 1593413280000, "y": 0 }, + { "x": 1593413281000, "y": 1 }, + { "x": 1593413282000, "y": 0 }, + { "x": 1593413283000, "y": 0 }, + { "x": 1593413284000, "y": 2 }, + { "x": 1593413285000, "y": 2 }, + { "x": 1593413286000, "y": 7 }, + { "x": 1593413287000, "y": 1 }, + { "x": 1593413288000, "y": 2 }, + { "x": 1593413289000, "y": 1 }, + { "x": 1593413290000, "y": 4 }, + { "x": 1593413291000, "y": 2 }, + { "x": 1593413292000, "y": 1 }, + { "x": 1593413293000, "y": 2 }, + { "x": 1593413294000, "y": 3 }, + { "x": 1593413295000, "y": 2 }, + { "x": 1593413296000, "y": 2 }, + { "x": 1593413297000, "y": 2 }, + { "x": 1593413298000, "y": 6 }, + { "x": 1593413299000, "y": 1 }, + { "x": 1593413300000, "y": 2 }, + { "x": 1593413301000, "y": 3 }, + { "x": 1593413302000, "y": 2 }, + { "x": 1593413303000, "y": 2 }, + { "x": 1593413304000, "y": 2 }, + { "x": 1593413305000, "y": 1 }, + { "x": 1593413306000, "y": 2 }, + { "x": 1593413307000, "y": 3 }, + { "x": 1593413308000, "y": 2 }, + { "x": 1593413309000, "y": 2 }, + { "x": 1593413310000, "y": 2 }, + { "x": 1593413311000, "y": 1 }, + { "x": 1593413312000, "y": 3 }, + { "x": 1593413313000, "y": 3 }, + { "x": 1593413314000, "y": 5 }, + { "x": 1593413315000, "y": 2 }, + { "x": 1593413316000, "y": 2 }, + { "x": 1593413317000, "y": 6 }, + { "x": 1593413318000, "y": 2 }, + { "x": 1593413319000, "y": 2 }, + { "x": 1593413320000, "y": 2 }, + { "x": 1593413321000, "y": 2 }, + { "x": 1593413322000, "y": 1 }, + { "x": 1593413323000, "y": 0 }, + { "x": 1593413324000, "y": 0 }, + { "x": 1593413325000, "y": 0 }, + { "x": 1593413326000, "y": 0 }, + { "x": 1593413327000, "y": 0 }, + { "x": 1593413328000, "y": 0 }, + { "x": 1593413329000, "y": 0 }, + { "x": 1593413330000, "y": 0 }, + { "x": 1593413331000, "y": 0 }, + { "x": 1593413332000, "y": 0 }, + { "x": 1593413333000, "y": 0 }, + { "x": 1593413334000, "y": 0 }, + { "x": 1593413335000, "y": 0 }, + { "x": 1593413336000, "y": 0 }, + { "x": 1593413337000, "y": 0 }, + { "x": 1593413338000, "y": 0 }, + { "x": 1593413339000, "y": 0 }, + { "x": 1593413340000, "y": 0 } + ], + "avg": 24.75 + }, + { + "key": "HTTP 3xx", + "dataPoints": [ + { "x": 1593413100000, "y": 0 }, + { "x": 1593413101000, "y": 0 }, + { "x": 1593413102000, "y": 0 }, + { "x": 1593413103000, "y": 0 }, + { "x": 1593413104000, "y": 0 }, + { "x": 1593413105000, "y": 0 }, + { "x": 1593413106000, "y": 0 }, + { "x": 1593413107000, "y": 0 }, + { "x": 1593413108000, "y": 0 }, + { "x": 1593413109000, "y": 0 }, + { "x": 1593413110000, "y": 0 }, + { "x": 1593413111000, "y": 0 }, + { "x": 1593413112000, "y": 0 }, + { "x": 1593413113000, "y": 0 }, + { "x": 1593413114000, "y": 0 }, + { "x": 1593413115000, "y": 0 }, + { "x": 1593413116000, "y": 0 }, + { "x": 1593413117000, "y": 0 }, + { "x": 1593413118000, "y": 0 }, + { "x": 1593413119000, "y": 0 }, + { "x": 1593413120000, "y": 0 }, + { "x": 1593413121000, "y": 0 }, + { "x": 1593413122000, "y": 0 }, + { "x": 1593413123000, "y": 0 }, + { "x": 1593413124000, "y": 0 }, + { "x": 1593413125000, "y": 0 }, + { "x": 1593413126000, "y": 0 }, + { "x": 1593413127000, "y": 0 }, + { "x": 1593413128000, "y": 0 }, + { "x": 1593413129000, "y": 0 }, + { "x": 1593413130000, "y": 0 }, + { "x": 1593413131000, "y": 0 }, + { "x": 1593413132000, "y": 0 }, + { "x": 1593413133000, "y": 0 }, + { "x": 1593413134000, "y": 0 }, + { "x": 1593413135000, "y": 0 }, + { "x": 1593413136000, "y": 0 }, + { "x": 1593413137000, "y": 0 }, + { "x": 1593413138000, "y": 0 }, + { "x": 1593413139000, "y": 0 }, + { "x": 1593413140000, "y": 0 }, + { "x": 1593413141000, "y": 0 }, + { "x": 1593413142000, "y": 0 }, + { "x": 1593413143000, "y": 0 }, + { "x": 1593413144000, "y": 0 }, + { "x": 1593413145000, "y": 0 }, + { "x": 1593413146000, "y": 0 }, + { "x": 1593413147000, "y": 0 }, + { "x": 1593413148000, "y": 0 }, + { "x": 1593413149000, "y": 0 }, + { "x": 1593413150000, "y": 0 }, + { "x": 1593413151000, "y": 0 }, + { "x": 1593413152000, "y": 0 }, + { "x": 1593413153000, "y": 0 }, + { "x": 1593413154000, "y": 0 }, + { "x": 1593413155000, "y": 0 }, + { "x": 1593413156000, "y": 0 }, + { "x": 1593413157000, "y": 0 }, + { "x": 1593413158000, "y": 0 }, + { "x": 1593413159000, "y": 0 }, + { "x": 1593413160000, "y": 0 }, + { "x": 1593413161000, "y": 0 }, + { "x": 1593413162000, "y": 0 }, + { "x": 1593413163000, "y": 0 }, + { "x": 1593413164000, "y": 0 }, + { "x": 1593413165000, "y": 0 }, + { "x": 1593413166000, "y": 0 }, + { "x": 1593413167000, "y": 0 }, + { "x": 1593413168000, "y": 0 }, + { "x": 1593413169000, "y": 0 }, + { "x": 1593413170000, "y": 0 }, + { "x": 1593413171000, "y": 0 }, + { "x": 1593413172000, "y": 0 }, + { "x": 1593413173000, "y": 0 }, + { "x": 1593413174000, "y": 0 }, + { "x": 1593413175000, "y": 0 }, + { "x": 1593413176000, "y": 0 }, + { "x": 1593413177000, "y": 0 }, + { "x": 1593413178000, "y": 0 }, + { "x": 1593413179000, "y": 0 }, + { "x": 1593413180000, "y": 0 }, + { "x": 1593413181000, "y": 0 }, + { "x": 1593413182000, "y": 0 }, + { "x": 1593413183000, "y": 0 }, + { "x": 1593413184000, "y": 0 }, + { "x": 1593413185000, "y": 0 }, + { "x": 1593413186000, "y": 0 }, + { "x": 1593413187000, "y": 0 }, + { "x": 1593413188000, "y": 0 }, + { "x": 1593413189000, "y": 0 }, + { "x": 1593413190000, "y": 0 }, + { "x": 1593413191000, "y": 0 }, + { "x": 1593413192000, "y": 0 }, + { "x": 1593413193000, "y": 0 }, + { "x": 1593413194000, "y": 0 }, + { "x": 1593413195000, "y": 0 }, + { "x": 1593413196000, "y": 0 }, + { "x": 1593413197000, "y": 0 }, + { "x": 1593413198000, "y": 0 }, + { "x": 1593413199000, "y": 0 }, + { "x": 1593413200000, "y": 0 }, + { "x": 1593413201000, "y": 0 }, + { "x": 1593413202000, "y": 0 }, + { "x": 1593413203000, "y": 0 }, + { "x": 1593413204000, "y": 0 }, + { "x": 1593413205000, "y": 0 }, + { "x": 1593413206000, "y": 0 }, + { "x": 1593413207000, "y": 0 }, + { "x": 1593413208000, "y": 0 }, + { "x": 1593413209000, "y": 0 }, + { "x": 1593413210000, "y": 0 }, + { "x": 1593413211000, "y": 0 }, + { "x": 1593413212000, "y": 0 }, + { "x": 1593413213000, "y": 0 }, + { "x": 1593413214000, "y": 0 }, + { "x": 1593413215000, "y": 0 }, + { "x": 1593413216000, "y": 0 }, + { "x": 1593413217000, "y": 0 }, + { "x": 1593413218000, "y": 0 }, + { "x": 1593413219000, "y": 0 }, + { "x": 1593413220000, "y": 0 }, + { "x": 1593413221000, "y": 0 }, + { "x": 1593413222000, "y": 0 }, + { "x": 1593413223000, "y": 0 }, + { "x": 1593413224000, "y": 0 }, + { "x": 1593413225000, "y": 0 }, + { "x": 1593413226000, "y": 0 }, + { "x": 1593413227000, "y": 0 }, + { "x": 1593413228000, "y": 0 }, + { "x": 1593413229000, "y": 0 }, + { "x": 1593413230000, "y": 0 }, + { "x": 1593413231000, "y": 0 }, + { "x": 1593413232000, "y": 0 }, + { "x": 1593413233000, "y": 0 }, + { "x": 1593413234000, "y": 0 }, + { "x": 1593413235000, "y": 0 }, + { "x": 1593413236000, "y": 0 }, + { "x": 1593413237000, "y": 0 }, + { "x": 1593413238000, "y": 0 }, + { "x": 1593413239000, "y": 0 }, + { "x": 1593413240000, "y": 0 }, + { "x": 1593413241000, "y": 0 }, + { "x": 1593413242000, "y": 0 }, + { "x": 1593413243000, "y": 0 }, + { "x": 1593413244000, "y": 0 }, + { "x": 1593413245000, "y": 0 }, + { "x": 1593413246000, "y": 0 }, + { "x": 1593413247000, "y": 0 }, + { "x": 1593413248000, "y": 0 }, + { "x": 1593413249000, "y": 0 }, + { "x": 1593413250000, "y": 0 }, + { "x": 1593413251000, "y": 0 }, + { "x": 1593413252000, "y": 0 }, + { "x": 1593413253000, "y": 0 }, + { "x": 1593413254000, "y": 0 }, + { "x": 1593413255000, "y": 0 }, + { "x": 1593413256000, "y": 0 }, + { "x": 1593413257000, "y": 0 }, + { "x": 1593413258000, "y": 0 }, + { "x": 1593413259000, "y": 0 }, + { "x": 1593413260000, "y": 0 }, + { "x": 1593413261000, "y": 0 }, + { "x": 1593413262000, "y": 0 }, + { "x": 1593413263000, "y": 0 }, + { "x": 1593413264000, "y": 0 }, + { "x": 1593413265000, "y": 0 }, + { "x": 1593413266000, "y": 0 }, + { "x": 1593413267000, "y": 0 }, + { "x": 1593413268000, "y": 0 }, + { "x": 1593413269000, "y": 0 }, + { "x": 1593413270000, "y": 0 }, + { "x": 1593413271000, "y": 0 }, + { "x": 1593413272000, "y": 0 }, + { "x": 1593413273000, "y": 0 }, + { "x": 1593413274000, "y": 0 }, + { "x": 1593413275000, "y": 0 }, + { "x": 1593413276000, "y": 0 }, + { "x": 1593413277000, "y": 0 }, + { "x": 1593413278000, "y": 0 }, + { "x": 1593413279000, "y": 0 }, + { "x": 1593413280000, "y": 0 }, + { "x": 1593413281000, "y": 0 }, + { "x": 1593413282000, "y": 0 }, + { "x": 1593413283000, "y": 0 }, + { "x": 1593413284000, "y": 0 }, + { "x": 1593413285000, "y": 0 }, + { "x": 1593413286000, "y": 0 }, + { "x": 1593413287000, "y": 0 }, + { "x": 1593413288000, "y": 0 }, + { "x": 1593413289000, "y": 0 }, + { "x": 1593413290000, "y": 0 }, + { "x": 1593413291000, "y": 0 }, + { "x": 1593413292000, "y": 0 }, + { "x": 1593413293000, "y": 0 }, + { "x": 1593413294000, "y": 0 }, + { "x": 1593413295000, "y": 0 }, + { "x": 1593413296000, "y": 0 }, + { "x": 1593413297000, "y": 0 }, + { "x": 1593413298000, "y": 2 }, + { "x": 1593413299000, "y": 0 }, + { "x": 1593413300000, "y": 0 }, + { "x": 1593413301000, "y": 3 }, + { "x": 1593413302000, "y": 0 }, + { "x": 1593413303000, "y": 0 }, + { "x": 1593413304000, "y": 0 }, + { "x": 1593413305000, "y": 0 }, + { "x": 1593413306000, "y": 0 }, + { "x": 1593413307000, "y": 0 }, + { "x": 1593413308000, "y": 0 }, + { "x": 1593413309000, "y": 0 }, + { "x": 1593413310000, "y": 0 }, + { "x": 1593413311000, "y": 0 }, + { "x": 1593413312000, "y": 0 }, + { "x": 1593413313000, "y": 0 }, + { "x": 1593413314000, "y": 0 }, + { "x": 1593413315000, "y": 0 }, + { "x": 1593413316000, "y": 0 }, + { "x": 1593413317000, "y": 2 }, + { "x": 1593413318000, "y": 0 }, + { "x": 1593413319000, "y": 0 }, + { "x": 1593413320000, "y": 0 }, + { "x": 1593413321000, "y": 0 }, + { "x": 1593413322000, "y": 0 }, + { "x": 1593413323000, "y": 0 }, + { "x": 1593413324000, "y": 0 }, + { "x": 1593413325000, "y": 0 }, + { "x": 1593413326000, "y": 0 }, + { "x": 1593413327000, "y": 0 }, + { "x": 1593413328000, "y": 0 }, + { "x": 1593413329000, "y": 0 }, + { "x": 1593413330000, "y": 0 }, + { "x": 1593413331000, "y": 0 }, + { "x": 1593413332000, "y": 0 }, + { "x": 1593413333000, "y": 0 }, + { "x": 1593413334000, "y": 0 }, + { "x": 1593413335000, "y": 0 }, + { "x": 1593413336000, "y": 0 }, + { "x": 1593413337000, "y": 0 }, + { "x": 1593413338000, "y": 0 }, + { "x": 1593413339000, "y": 0 }, + { "x": 1593413340000, "y": 0 } + ], + "avg": 1.75 + }, + { + "key": "HTTP 4xx", + "dataPoints": [ + { "x": 1593413100000, "y": 0 }, + { "x": 1593413101000, "y": 0 }, + { "x": 1593413102000, "y": 0 }, + { "x": 1593413103000, "y": 0 }, + { "x": 1593413104000, "y": 0 }, + { "x": 1593413105000, "y": 0 }, + { "x": 1593413106000, "y": 0 }, + { "x": 1593413107000, "y": 0 }, + { "x": 1593413108000, "y": 0 }, + { "x": 1593413109000, "y": 0 }, + { "x": 1593413110000, "y": 0 }, + { "x": 1593413111000, "y": 0 }, + { "x": 1593413112000, "y": 0 }, + { "x": 1593413113000, "y": 0 }, + { "x": 1593413114000, "y": 0 }, + { "x": 1593413115000, "y": 0 }, + { "x": 1593413116000, "y": 0 }, + { "x": 1593413117000, "y": 0 }, + { "x": 1593413118000, "y": 0 }, + { "x": 1593413119000, "y": 0 }, + { "x": 1593413120000, "y": 0 }, + { "x": 1593413121000, "y": 0 }, + { "x": 1593413122000, "y": 0 }, + { "x": 1593413123000, "y": 0 }, + { "x": 1593413124000, "y": 0 }, + { "x": 1593413125000, "y": 0 }, + { "x": 1593413126000, "y": 0 }, + { "x": 1593413127000, "y": 0 }, + { "x": 1593413128000, "y": 0 }, + { "x": 1593413129000, "y": 0 }, + { "x": 1593413130000, "y": 0 }, + { "x": 1593413131000, "y": 0 }, + { "x": 1593413132000, "y": 0 }, + { "x": 1593413133000, "y": 0 }, + { "x": 1593413134000, "y": 0 }, + { "x": 1593413135000, "y": 0 }, + { "x": 1593413136000, "y": 0 }, + { "x": 1593413137000, "y": 0 }, + { "x": 1593413138000, "y": 0 }, + { "x": 1593413139000, "y": 0 }, + { "x": 1593413140000, "y": 0 }, + { "x": 1593413141000, "y": 0 }, + { "x": 1593413142000, "y": 0 }, + { "x": 1593413143000, "y": 0 }, + { "x": 1593413144000, "y": 0 }, + { "x": 1593413145000, "y": 0 }, + { "x": 1593413146000, "y": 0 }, + { "x": 1593413147000, "y": 0 }, + { "x": 1593413148000, "y": 0 }, + { "x": 1593413149000, "y": 0 }, + { "x": 1593413150000, "y": 0 }, + { "x": 1593413151000, "y": 0 }, + { "x": 1593413152000, "y": 0 }, + { "x": 1593413153000, "y": 0 }, + { "x": 1593413154000, "y": 0 }, + { "x": 1593413155000, "y": 0 }, + { "x": 1593413156000, "y": 0 }, + { "x": 1593413157000, "y": 0 }, + { "x": 1593413158000, "y": 0 }, + { "x": 1593413159000, "y": 0 }, + { "x": 1593413160000, "y": 0 }, + { "x": 1593413161000, "y": 0 }, + { "x": 1593413162000, "y": 0 }, + { "x": 1593413163000, "y": 0 }, + { "x": 1593413164000, "y": 0 }, + { "x": 1593413165000, "y": 0 }, + { "x": 1593413166000, "y": 0 }, + { "x": 1593413167000, "y": 0 }, + { "x": 1593413168000, "y": 0 }, + { "x": 1593413169000, "y": 0 }, + { "x": 1593413170000, "y": 0 }, + { "x": 1593413171000, "y": 0 }, + { "x": 1593413172000, "y": 0 }, + { "x": 1593413173000, "y": 0 }, + { "x": 1593413174000, "y": 0 }, + { "x": 1593413175000, "y": 0 }, + { "x": 1593413176000, "y": 0 }, + { "x": 1593413177000, "y": 0 }, + { "x": 1593413178000, "y": 0 }, + { "x": 1593413179000, "y": 0 }, + { "x": 1593413180000, "y": 0 }, + { "x": 1593413181000, "y": 0 }, + { "x": 1593413182000, "y": 0 }, + { "x": 1593413183000, "y": 0 }, + { "x": 1593413184000, "y": 0 }, + { "x": 1593413185000, "y": 0 }, + { "x": 1593413186000, "y": 0 }, + { "x": 1593413187000, "y": 0 }, + { "x": 1593413188000, "y": 0 }, + { "x": 1593413189000, "y": 0 }, + { "x": 1593413190000, "y": 0 }, + { "x": 1593413191000, "y": 0 }, + { "x": 1593413192000, "y": 0 }, + { "x": 1593413193000, "y": 0 }, + { "x": 1593413194000, "y": 0 }, + { "x": 1593413195000, "y": 0 }, + { "x": 1593413196000, "y": 0 }, + { "x": 1593413197000, "y": 0 }, + { "x": 1593413198000, "y": 0 }, + { "x": 1593413199000, "y": 0 }, + { "x": 1593413200000, "y": 0 }, + { "x": 1593413201000, "y": 0 }, + { "x": 1593413202000, "y": 0 }, + { "x": 1593413203000, "y": 0 }, + { "x": 1593413204000, "y": 0 }, + { "x": 1593413205000, "y": 0 }, + { "x": 1593413206000, "y": 0 }, + { "x": 1593413207000, "y": 0 }, + { "x": 1593413208000, "y": 0 }, + { "x": 1593413209000, "y": 0 }, + { "x": 1593413210000, "y": 0 }, + { "x": 1593413211000, "y": 0 }, + { "x": 1593413212000, "y": 0 }, + { "x": 1593413213000, "y": 0 }, + { "x": 1593413214000, "y": 0 }, + { "x": 1593413215000, "y": 0 }, + { "x": 1593413216000, "y": 0 }, + { "x": 1593413217000, "y": 0 }, + { "x": 1593413218000, "y": 0 }, + { "x": 1593413219000, "y": 0 }, + { "x": 1593413220000, "y": 0 }, + { "x": 1593413221000, "y": 0 }, + { "x": 1593413222000, "y": 0 }, + { "x": 1593413223000, "y": 0 }, + { "x": 1593413224000, "y": 0 }, + { "x": 1593413225000, "y": 0 }, + { "x": 1593413226000, "y": 0 }, + { "x": 1593413227000, "y": 0 }, + { "x": 1593413228000, "y": 0 }, + { "x": 1593413229000, "y": 0 }, + { "x": 1593413230000, "y": 0 }, + { "x": 1593413231000, "y": 0 }, + { "x": 1593413232000, "y": 0 }, + { "x": 1593413233000, "y": 0 }, + { "x": 1593413234000, "y": 0 }, + { "x": 1593413235000, "y": 0 }, + { "x": 1593413236000, "y": 0 }, + { "x": 1593413237000, "y": 0 }, + { "x": 1593413238000, "y": 0 }, + { "x": 1593413239000, "y": 0 }, + { "x": 1593413240000, "y": 0 }, + { "x": 1593413241000, "y": 0 }, + { "x": 1593413242000, "y": 0 }, + { "x": 1593413243000, "y": 0 }, + { "x": 1593413244000, "y": 0 }, + { "x": 1593413245000, "y": 0 }, + { "x": 1593413246000, "y": 0 }, + { "x": 1593413247000, "y": 0 }, + { "x": 1593413248000, "y": 0 }, + { "x": 1593413249000, "y": 0 }, + { "x": 1593413250000, "y": 0 }, + { "x": 1593413251000, "y": 0 }, + { "x": 1593413252000, "y": 0 }, + { "x": 1593413253000, "y": 0 }, + { "x": 1593413254000, "y": 0 }, + { "x": 1593413255000, "y": 0 }, + { "x": 1593413256000, "y": 0 }, + { "x": 1593413257000, "y": 0 }, + { "x": 1593413258000, "y": 0 }, + { "x": 1593413259000, "y": 0 }, + { "x": 1593413260000, "y": 0 }, + { "x": 1593413261000, "y": 0 }, + { "x": 1593413262000, "y": 0 }, + { "x": 1593413263000, "y": 0 }, + { "x": 1593413264000, "y": 0 }, + { "x": 1593413265000, "y": 0 }, + { "x": 1593413266000, "y": 0 }, + { "x": 1593413267000, "y": 0 }, + { "x": 1593413268000, "y": 0 }, + { "x": 1593413269000, "y": 0 }, + { "x": 1593413270000, "y": 0 }, + { "x": 1593413271000, "y": 0 }, + { "x": 1593413272000, "y": 0 }, + { "x": 1593413273000, "y": 0 }, + { "x": 1593413274000, "y": 0 }, + { "x": 1593413275000, "y": 0 }, + { "x": 1593413276000, "y": 0 }, + { "x": 1593413277000, "y": 0 }, + { "x": 1593413278000, "y": 0 }, + { "x": 1593413279000, "y": 0 }, + { "x": 1593413280000, "y": 0 }, + { "x": 1593413281000, "y": 0 }, + { "x": 1593413282000, "y": 0 }, + { "x": 1593413283000, "y": 0 }, + { "x": 1593413284000, "y": 0 }, + { "x": 1593413285000, "y": 0 }, + { "x": 1593413286000, "y": 0 }, + { "x": 1593413287000, "y": 0 }, + { "x": 1593413288000, "y": 0 }, + { "x": 1593413289000, "y": 1 }, + { "x": 1593413290000, "y": 0 }, + { "x": 1593413291000, "y": 0 }, + { "x": 1593413292000, "y": 1 }, + { "x": 1593413293000, "y": 0 }, + { "x": 1593413294000, "y": 0 }, + { "x": 1593413295000, "y": 0 }, + { "x": 1593413296000, "y": 0 }, + { "x": 1593413297000, "y": 0 }, + { "x": 1593413298000, "y": 0 }, + { "x": 1593413299000, "y": 0 }, + { "x": 1593413300000, "y": 1 }, + { "x": 1593413301000, "y": 0 }, + { "x": 1593413302000, "y": 0 }, + { "x": 1593413303000, "y": 0 }, + { "x": 1593413304000, "y": 0 }, + { "x": 1593413305000, "y": 1 }, + { "x": 1593413306000, "y": 0 }, + { "x": 1593413307000, "y": 0 }, + { "x": 1593413308000, "y": 0 }, + { "x": 1593413309000, "y": 1 }, + { "x": 1593413310000, "y": 1 }, + { "x": 1593413311000, "y": 0 }, + { "x": 1593413312000, "y": 0 }, + { "x": 1593413313000, "y": 0 }, + { "x": 1593413314000, "y": 0 }, + { "x": 1593413315000, "y": 1 }, + { "x": 1593413316000, "y": 0 }, + { "x": 1593413317000, "y": 0 }, + { "x": 1593413318000, "y": 0 }, + { "x": 1593413319000, "y": 0 }, + { "x": 1593413320000, "y": 1 }, + { "x": 1593413321000, "y": 0 }, + { "x": 1593413322000, "y": 0 }, + { "x": 1593413323000, "y": 0 }, + { "x": 1593413324000, "y": 0 }, + { "x": 1593413325000, "y": 0 }, + { "x": 1593413326000, "y": 0 }, + { "x": 1593413327000, "y": 0 }, + { "x": 1593413328000, "y": 0 }, + { "x": 1593413329000, "y": 0 }, + { "x": 1593413330000, "y": 0 }, + { "x": 1593413331000, "y": 0 }, + { "x": 1593413332000, "y": 0 }, + { "x": 1593413333000, "y": 0 }, + { "x": 1593413334000, "y": 0 }, + { "x": 1593413335000, "y": 0 }, + { "x": 1593413336000, "y": 0 }, + { "x": 1593413337000, "y": 0 }, + { "x": 1593413338000, "y": 0 }, + { "x": 1593413339000, "y": 0 }, + { "x": 1593413340000, "y": 0 } + ], + "avg": 2 + }, + { + "key": "HTTP 5xx", + "dataPoints": [ + { "x": 1593413100000, "y": 0 }, + { "x": 1593413101000, "y": 0 }, + { "x": 1593413102000, "y": 0 }, + { "x": 1593413103000, "y": 0 }, + { "x": 1593413104000, "y": 0 }, + { "x": 1593413105000, "y": 0 }, + { "x": 1593413106000, "y": 0 }, + { "x": 1593413107000, "y": 0 }, + { "x": 1593413108000, "y": 0 }, + { "x": 1593413109000, "y": 0 }, + { "x": 1593413110000, "y": 0 }, + { "x": 1593413111000, "y": 0 }, + { "x": 1593413112000, "y": 0 }, + { "x": 1593413113000, "y": 0 }, + { "x": 1593413114000, "y": 0 }, + { "x": 1593413115000, "y": 0 }, + { "x": 1593413116000, "y": 0 }, + { "x": 1593413117000, "y": 0 }, + { "x": 1593413118000, "y": 0 }, + { "x": 1593413119000, "y": 0 }, + { "x": 1593413120000, "y": 0 }, + { "x": 1593413121000, "y": 0 }, + { "x": 1593413122000, "y": 0 }, + { "x": 1593413123000, "y": 0 }, + { "x": 1593413124000, "y": 0 }, + { "x": 1593413125000, "y": 0 }, + { "x": 1593413126000, "y": 0 }, + { "x": 1593413127000, "y": 0 }, + { "x": 1593413128000, "y": 0 }, + { "x": 1593413129000, "y": 0 }, + { "x": 1593413130000, "y": 0 }, + { "x": 1593413131000, "y": 0 }, + { "x": 1593413132000, "y": 0 }, + { "x": 1593413133000, "y": 0 }, + { "x": 1593413134000, "y": 0 }, + { "x": 1593413135000, "y": 0 }, + { "x": 1593413136000, "y": 0 }, + { "x": 1593413137000, "y": 0 }, + { "x": 1593413138000, "y": 0 }, + { "x": 1593413139000, "y": 0 }, + { "x": 1593413140000, "y": 0 }, + { "x": 1593413141000, "y": 0 }, + { "x": 1593413142000, "y": 0 }, + { "x": 1593413143000, "y": 0 }, + { "x": 1593413144000, "y": 0 }, + { "x": 1593413145000, "y": 0 }, + { "x": 1593413146000, "y": 0 }, + { "x": 1593413147000, "y": 0 }, + { "x": 1593413148000, "y": 0 }, + { "x": 1593413149000, "y": 0 }, + { "x": 1593413150000, "y": 0 }, + { "x": 1593413151000, "y": 0 }, + { "x": 1593413152000, "y": 0 }, + { "x": 1593413153000, "y": 0 }, + { "x": 1593413154000, "y": 0 }, + { "x": 1593413155000, "y": 0 }, + { "x": 1593413156000, "y": 0 }, + { "x": 1593413157000, "y": 0 }, + { "x": 1593413158000, "y": 0 }, + { "x": 1593413159000, "y": 0 }, + { "x": 1593413160000, "y": 0 }, + { "x": 1593413161000, "y": 0 }, + { "x": 1593413162000, "y": 0 }, + { "x": 1593413163000, "y": 0 }, + { "x": 1593413164000, "y": 0 }, + { "x": 1593413165000, "y": 0 }, + { "x": 1593413166000, "y": 0 }, + { "x": 1593413167000, "y": 0 }, + { "x": 1593413168000, "y": 0 }, + { "x": 1593413169000, "y": 0 }, + { "x": 1593413170000, "y": 0 }, + { "x": 1593413171000, "y": 0 }, + { "x": 1593413172000, "y": 0 }, + { "x": 1593413173000, "y": 0 }, + { "x": 1593413174000, "y": 0 }, + { "x": 1593413175000, "y": 0 }, + { "x": 1593413176000, "y": 0 }, + { "x": 1593413177000, "y": 0 }, + { "x": 1593413178000, "y": 0 }, + { "x": 1593413179000, "y": 0 }, + { "x": 1593413180000, "y": 0 }, + { "x": 1593413181000, "y": 0 }, + { "x": 1593413182000, "y": 0 }, + { "x": 1593413183000, "y": 0 }, + { "x": 1593413184000, "y": 0 }, + { "x": 1593413185000, "y": 0 }, + { "x": 1593413186000, "y": 0 }, + { "x": 1593413187000, "y": 0 }, + { "x": 1593413188000, "y": 0 }, + { "x": 1593413189000, "y": 0 }, + { "x": 1593413190000, "y": 0 }, + { "x": 1593413191000, "y": 0 }, + { "x": 1593413192000, "y": 0 }, + { "x": 1593413193000, "y": 0 }, + { "x": 1593413194000, "y": 0 }, + { "x": 1593413195000, "y": 0 }, + { "x": 1593413196000, "y": 0 }, + { "x": 1593413197000, "y": 0 }, + { "x": 1593413198000, "y": 0 }, + { "x": 1593413199000, "y": 0 }, + { "x": 1593413200000, "y": 0 }, + { "x": 1593413201000, "y": 0 }, + { "x": 1593413202000, "y": 0 }, + { "x": 1593413203000, "y": 0 }, + { "x": 1593413204000, "y": 0 }, + { "x": 1593413205000, "y": 0 }, + { "x": 1593413206000, "y": 0 }, + { "x": 1593413207000, "y": 0 }, + { "x": 1593413208000, "y": 0 }, + { "x": 1593413209000, "y": 0 }, + { "x": 1593413210000, "y": 0 }, + { "x": 1593413211000, "y": 0 }, + { "x": 1593413212000, "y": 0 }, + { "x": 1593413213000, "y": 0 }, + { "x": 1593413214000, "y": 0 }, + { "x": 1593413215000, "y": 0 }, + { "x": 1593413216000, "y": 0 }, + { "x": 1593413217000, "y": 0 }, + { "x": 1593413218000, "y": 0 }, + { "x": 1593413219000, "y": 0 }, + { "x": 1593413220000, "y": 0 }, + { "x": 1593413221000, "y": 0 }, + { "x": 1593413222000, "y": 0 }, + { "x": 1593413223000, "y": 0 }, + { "x": 1593413224000, "y": 0 }, + { "x": 1593413225000, "y": 0 }, + { "x": 1593413226000, "y": 0 }, + { "x": 1593413227000, "y": 0 }, + { "x": 1593413228000, "y": 0 }, + { "x": 1593413229000, "y": 0 }, + { "x": 1593413230000, "y": 0 }, + { "x": 1593413231000, "y": 0 }, + { "x": 1593413232000, "y": 0 }, + { "x": 1593413233000, "y": 0 }, + { "x": 1593413234000, "y": 0 }, + { "x": 1593413235000, "y": 0 }, + { "x": 1593413236000, "y": 0 }, + { "x": 1593413237000, "y": 0 }, + { "x": 1593413238000, "y": 0 }, + { "x": 1593413239000, "y": 0 }, + { "x": 1593413240000, "y": 0 }, + { "x": 1593413241000, "y": 0 }, + { "x": 1593413242000, "y": 0 }, + { "x": 1593413243000, "y": 0 }, + { "x": 1593413244000, "y": 0 }, + { "x": 1593413245000, "y": 0 }, + { "x": 1593413246000, "y": 0 }, + { "x": 1593413247000, "y": 0 }, + { "x": 1593413248000, "y": 0 }, + { "x": 1593413249000, "y": 0 }, + { "x": 1593413250000, "y": 0 }, + { "x": 1593413251000, "y": 0 }, + { "x": 1593413252000, "y": 0 }, + { "x": 1593413253000, "y": 0 }, + { "x": 1593413254000, "y": 0 }, + { "x": 1593413255000, "y": 0 }, + { "x": 1593413256000, "y": 0 }, + { "x": 1593413257000, "y": 0 }, + { "x": 1593413258000, "y": 0 }, + { "x": 1593413259000, "y": 0 }, + { "x": 1593413260000, "y": 0 }, + { "x": 1593413261000, "y": 0 }, + { "x": 1593413262000, "y": 0 }, + { "x": 1593413263000, "y": 0 }, + { "x": 1593413264000, "y": 0 }, + { "x": 1593413265000, "y": 0 }, + { "x": 1593413266000, "y": 0 }, + { "x": 1593413267000, "y": 0 }, + { "x": 1593413268000, "y": 0 }, + { "x": 1593413269000, "y": 0 }, + { "x": 1593413270000, "y": 0 }, + { "x": 1593413271000, "y": 0 }, + { "x": 1593413272000, "y": 0 }, + { "x": 1593413273000, "y": 0 }, + { "x": 1593413274000, "y": 0 }, + { "x": 1593413275000, "y": 0 }, + { "x": 1593413276000, "y": 0 }, + { "x": 1593413277000, "y": 0 }, + { "x": 1593413278000, "y": 0 }, + { "x": 1593413279000, "y": 0 }, + { "x": 1593413280000, "y": 0 }, + { "x": 1593413281000, "y": 0 }, + { "x": 1593413282000, "y": 0 }, + { "x": 1593413283000, "y": 0 }, + { "x": 1593413284000, "y": 0 }, + { "x": 1593413285000, "y": 0 }, + { "x": 1593413286000, "y": 1 }, + { "x": 1593413287000, "y": 1 }, + { "x": 1593413288000, "y": 0 }, + { "x": 1593413289000, "y": 0 }, + { "x": 1593413290000, "y": 0 }, + { "x": 1593413291000, "y": 0 }, + { "x": 1593413292000, "y": 0 }, + { "x": 1593413293000, "y": 0 }, + { "x": 1593413294000, "y": 0 }, + { "x": 1593413295000, "y": 0 }, + { "x": 1593413296000, "y": 0 }, + { "x": 1593413297000, "y": 0 }, + { "x": 1593413298000, "y": 0 }, + { "x": 1593413299000, "y": 1 }, + { "x": 1593413300000, "y": 0 }, + { "x": 1593413301000, "y": 1 }, + { "x": 1593413302000, "y": 0 }, + { "x": 1593413303000, "y": 0 }, + { "x": 1593413304000, "y": 0 }, + { "x": 1593413305000, "y": 1 }, + { "x": 1593413306000, "y": 0 }, + { "x": 1593413307000, "y": 0 }, + { "x": 1593413308000, "y": 1 }, + { "x": 1593413309000, "y": 0 }, + { "x": 1593413310000, "y": 0 }, + { "x": 1593413311000, "y": 1 }, + { "x": 1593413312000, "y": 0 }, + { "x": 1593413313000, "y": 0 }, + { "x": 1593413314000, "y": 0 }, + { "x": 1593413315000, "y": 1 }, + { "x": 1593413316000, "y": 0 }, + { "x": 1593413317000, "y": 0 }, + { "x": 1593413318000, "y": 0 }, + { "x": 1593413319000, "y": 0 }, + { "x": 1593413320000, "y": 0 }, + { "x": 1593413321000, "y": 0 }, + { "x": 1593413322000, "y": 1 }, + { "x": 1593413323000, "y": 0 }, + { "x": 1593413324000, "y": 0 }, + { "x": 1593413325000, "y": 0 }, + { "x": 1593413326000, "y": 0 }, + { "x": 1593413327000, "y": 0 }, + { "x": 1593413328000, "y": 0 }, + { "x": 1593413329000, "y": 0 }, + { "x": 1593413330000, "y": 0 }, + { "x": 1593413331000, "y": 0 }, + { "x": 1593413332000, "y": 0 }, + { "x": 1593413333000, "y": 0 }, + { "x": 1593413334000, "y": 0 }, + { "x": 1593413335000, "y": 0 }, + { "x": 1593413336000, "y": 0 }, + { "x": 1593413337000, "y": 0 }, + { "x": 1593413338000, "y": 0 }, + { "x": 1593413339000, "y": 0 }, + { "x": 1593413340000, "y": 0 } + ], + "avg": 2.25 + }, + { + "key": "success", + "dataPoints": [ + { "x": 1593413100000, "y": 0 }, + { "x": 1593413101000, "y": 0 }, + { "x": 1593413102000, "y": 0 }, + { "x": 1593413103000, "y": 0 }, + { "x": 1593413104000, "y": 0 }, + { "x": 1593413105000, "y": 0 }, + { "x": 1593413106000, "y": 0 }, + { "x": 1593413107000, "y": 0 }, + { "x": 1593413108000, "y": 0 }, + { "x": 1593413109000, "y": 0 }, + { "x": 1593413110000, "y": 0 }, + { "x": 1593413111000, "y": 0 }, + { "x": 1593413112000, "y": 0 }, + { "x": 1593413113000, "y": 0 }, + { "x": 1593413114000, "y": 0 }, + { "x": 1593413115000, "y": 0 }, + { "x": 1593413116000, "y": 0 }, + { "x": 1593413117000, "y": 0 }, + { "x": 1593413118000, "y": 0 }, + { "x": 1593413119000, "y": 0 }, + { "x": 1593413120000, "y": 0 }, + { "x": 1593413121000, "y": 0 }, + { "x": 1593413122000, "y": 0 }, + { "x": 1593413123000, "y": 0 }, + { "x": 1593413124000, "y": 0 }, + { "x": 1593413125000, "y": 0 }, + { "x": 1593413126000, "y": 0 }, + { "x": 1593413127000, "y": 0 }, + { "x": 1593413128000, "y": 0 }, + { "x": 1593413129000, "y": 0 }, + { "x": 1593413130000, "y": 0 }, + { "x": 1593413131000, "y": 0 }, + { "x": 1593413132000, "y": 0 }, + { "x": 1593413133000, "y": 0 }, + { "x": 1593413134000, "y": 0 }, + { "x": 1593413135000, "y": 0 }, + { "x": 1593413136000, "y": 0 }, + { "x": 1593413137000, "y": 0 }, + { "x": 1593413138000, "y": 0 }, + { "x": 1593413139000, "y": 0 }, + { "x": 1593413140000, "y": 0 }, + { "x": 1593413141000, "y": 0 }, + { "x": 1593413142000, "y": 0 }, + { "x": 1593413143000, "y": 0 }, + { "x": 1593413144000, "y": 0 }, + { "x": 1593413145000, "y": 0 }, + { "x": 1593413146000, "y": 0 }, + { "x": 1593413147000, "y": 0 }, + { "x": 1593413148000, "y": 0 }, + { "x": 1593413149000, "y": 0 }, + { "x": 1593413150000, "y": 0 }, + { "x": 1593413151000, "y": 0 }, + { "x": 1593413152000, "y": 0 }, + { "x": 1593413153000, "y": 0 }, + { "x": 1593413154000, "y": 0 }, + { "x": 1593413155000, "y": 0 }, + { "x": 1593413156000, "y": 0 }, + { "x": 1593413157000, "y": 0 }, + { "x": 1593413158000, "y": 0 }, + { "x": 1593413159000, "y": 0 }, + { "x": 1593413160000, "y": 0 }, + { "x": 1593413161000, "y": 0 }, + { "x": 1593413162000, "y": 0 }, + { "x": 1593413163000, "y": 0 }, + { "x": 1593413164000, "y": 0 }, + { "x": 1593413165000, "y": 0 }, + { "x": 1593413166000, "y": 0 }, + { "x": 1593413167000, "y": 0 }, + { "x": 1593413168000, "y": 0 }, + { "x": 1593413169000, "y": 0 }, + { "x": 1593413170000, "y": 0 }, + { "x": 1593413171000, "y": 0 }, + { "x": 1593413172000, "y": 0 }, + { "x": 1593413173000, "y": 0 }, + { "x": 1593413174000, "y": 0 }, + { "x": 1593413175000, "y": 0 }, + { "x": 1593413176000, "y": 0 }, + { "x": 1593413177000, "y": 0 }, + { "x": 1593413178000, "y": 0 }, + { "x": 1593413179000, "y": 0 }, + { "x": 1593413180000, "y": 0 }, + { "x": 1593413181000, "y": 0 }, + { "x": 1593413182000, "y": 0 }, + { "x": 1593413183000, "y": 0 }, + { "x": 1593413184000, "y": 0 }, + { "x": 1593413185000, "y": 0 }, + { "x": 1593413186000, "y": 0 }, + { "x": 1593413187000, "y": 0 }, + { "x": 1593413188000, "y": 0 }, + { "x": 1593413189000, "y": 0 }, + { "x": 1593413190000, "y": 0 }, + { "x": 1593413191000, "y": 0 }, + { "x": 1593413192000, "y": 0 }, + { "x": 1593413193000, "y": 0 }, + { "x": 1593413194000, "y": 0 }, + { "x": 1593413195000, "y": 0 }, + { "x": 1593413196000, "y": 0 }, + { "x": 1593413197000, "y": 0 }, + { "x": 1593413198000, "y": 0 }, + { "x": 1593413199000, "y": 0 }, + { "x": 1593413200000, "y": 0 }, + { "x": 1593413201000, "y": 0 }, + { "x": 1593413202000, "y": 0 }, + { "x": 1593413203000, "y": 0 }, + { "x": 1593413204000, "y": 0 }, + { "x": 1593413205000, "y": 0 }, + { "x": 1593413206000, "y": 0 }, + { "x": 1593413207000, "y": 0 }, + { "x": 1593413208000, "y": 0 }, + { "x": 1593413209000, "y": 0 }, + { "x": 1593413210000, "y": 0 }, + { "x": 1593413211000, "y": 0 }, + { "x": 1593413212000, "y": 0 }, + { "x": 1593413213000, "y": 0 }, + { "x": 1593413214000, "y": 0 }, + { "x": 1593413215000, "y": 0 }, + { "x": 1593413216000, "y": 0 }, + { "x": 1593413217000, "y": 0 }, + { "x": 1593413218000, "y": 0 }, + { "x": 1593413219000, "y": 0 }, + { "x": 1593413220000, "y": 0 }, + { "x": 1593413221000, "y": 0 }, + { "x": 1593413222000, "y": 0 }, + { "x": 1593413223000, "y": 0 }, + { "x": 1593413224000, "y": 0 }, + { "x": 1593413225000, "y": 0 }, + { "x": 1593413226000, "y": 0 }, + { "x": 1593413227000, "y": 0 }, + { "x": 1593413228000, "y": 0 }, + { "x": 1593413229000, "y": 0 }, + { "x": 1593413230000, "y": 0 }, + { "x": 1593413231000, "y": 0 }, + { "x": 1593413232000, "y": 0 }, + { "x": 1593413233000, "y": 0 }, + { "x": 1593413234000, "y": 0 }, + { "x": 1593413235000, "y": 0 }, + { "x": 1593413236000, "y": 0 }, + { "x": 1593413237000, "y": 0 }, + { "x": 1593413238000, "y": 0 }, + { "x": 1593413239000, "y": 0 }, + { "x": 1593413240000, "y": 0 }, + { "x": 1593413241000, "y": 0 }, + { "x": 1593413242000, "y": 0 }, + { "x": 1593413243000, "y": 0 }, + { "x": 1593413244000, "y": 0 }, + { "x": 1593413245000, "y": 0 }, + { "x": 1593413246000, "y": 0 }, + { "x": 1593413247000, "y": 0 }, + { "x": 1593413248000, "y": 0 }, + { "x": 1593413249000, "y": 0 }, + { "x": 1593413250000, "y": 0 }, + { "x": 1593413251000, "y": 0 }, + { "x": 1593413252000, "y": 0 }, + { "x": 1593413253000, "y": 0 }, + { "x": 1593413254000, "y": 0 }, + { "x": 1593413255000, "y": 0 }, + { "x": 1593413256000, "y": 0 }, + { "x": 1593413257000, "y": 0 }, + { "x": 1593413258000, "y": 0 }, + { "x": 1593413259000, "y": 0 }, + { "x": 1593413260000, "y": 0 }, + { "x": 1593413261000, "y": 0 }, + { "x": 1593413262000, "y": 0 }, + { "x": 1593413263000, "y": 0 }, + { "x": 1593413264000, "y": 0 }, + { "x": 1593413265000, "y": 0 }, + { "x": 1593413266000, "y": 0 }, + { "x": 1593413267000, "y": 0 }, + { "x": 1593413268000, "y": 0 }, + { "x": 1593413269000, "y": 0 }, + { "x": 1593413270000, "y": 0 }, + { "x": 1593413271000, "y": 0 }, + { "x": 1593413272000, "y": 0 }, + { "x": 1593413273000, "y": 0 }, + { "x": 1593413274000, "y": 0 }, + { "x": 1593413275000, "y": 0 }, + { "x": 1593413276000, "y": 0 }, + { "x": 1593413277000, "y": 0 }, + { "x": 1593413278000, "y": 0 }, + { "x": 1593413279000, "y": 0 }, + { "x": 1593413280000, "y": 0 }, + { "x": 1593413281000, "y": 0 }, + { "x": 1593413282000, "y": 0 }, + { "x": 1593413283000, "y": 0 }, + { "x": 1593413284000, "y": 0 }, + { "x": 1593413285000, "y": 0 }, + { "x": 1593413286000, "y": 0 }, + { "x": 1593413287000, "y": 0 }, + { "x": 1593413288000, "y": 0 }, + { "x": 1593413289000, "y": 0 }, + { "x": 1593413290000, "y": 0 }, + { "x": 1593413291000, "y": 0 }, + { "x": 1593413292000, "y": 0 }, + { "x": 1593413293000, "y": 0 }, + { "x": 1593413294000, "y": 0 }, + { "x": 1593413295000, "y": 0 }, + { "x": 1593413296000, "y": 0 }, + { "x": 1593413297000, "y": 0 }, + { "x": 1593413298000, "y": 0 }, + { "x": 1593413299000, "y": 0 }, + { "x": 1593413300000, "y": 0 }, + { "x": 1593413301000, "y": 0 }, + { "x": 1593413302000, "y": 0 }, + { "x": 1593413303000, "y": 0 }, + { "x": 1593413304000, "y": 0 }, + { "x": 1593413305000, "y": 0 }, + { "x": 1593413306000, "y": 0 }, + { "x": 1593413307000, "y": 0 }, + { "x": 1593413308000, "y": 0 }, + { "x": 1593413309000, "y": 1 }, + { "x": 1593413310000, "y": 0 }, + { "x": 1593413311000, "y": 0 }, + { "x": 1593413312000, "y": 0 }, + { "x": 1593413313000, "y": 0 }, + { "x": 1593413314000, "y": 0 }, + { "x": 1593413315000, "y": 0 }, + { "x": 1593413316000, "y": 0 }, + { "x": 1593413317000, "y": 0 }, + { "x": 1593413318000, "y": 0 }, + { "x": 1593413319000, "y": 0 }, + { "x": 1593413320000, "y": 0 }, + { "x": 1593413321000, "y": 0 }, + { "x": 1593413322000, "y": 0 }, + { "x": 1593413323000, "y": 0 }, + { "x": 1593413324000, "y": 0 }, + { "x": 1593413325000, "y": 0 }, + { "x": 1593413326000, "y": 0 }, + { "x": 1593413327000, "y": 0 }, + { "x": 1593413328000, "y": 0 }, + { "x": 1593413329000, "y": 0 }, + { "x": 1593413330000, "y": 0 }, + { "x": 1593413331000, "y": 0 }, + { "x": 1593413332000, "y": 0 }, + { "x": 1593413333000, "y": 0 }, + { "x": 1593413334000, "y": 0 }, + { "x": 1593413335000, "y": 0 }, + { "x": 1593413336000, "y": 0 }, + { "x": 1593413337000, "y": 0 }, + { "x": 1593413338000, "y": 0 }, + { "x": 1593413339000, "y": 0 }, + { "x": 1593413340000, "y": 0 } + ], + "avg": 0.25 + } + ], + "overallAvgDuration": 38682.52419354839 + } +} diff --git a/x-pack/test/apm_api_integration/basic/tests/services/transactions/top_transaction_groups.ts b/x-pack/test/apm_api_integration/basic/tests/services/transactions/top_transaction_groups.ts new file mode 100644 index 0000000000000..3df1e9972d5ac --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/transactions/top_transaction_groups.ts @@ -0,0 +1,63 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License; + * you may not use this file except in compliance with the Elastic License. + */ +import expect from '@kbn/expect'; +import { FtrProviderContext } from '../../../../../common/ftr_provider_context'; +import expectedTransactionGroups from './expectations/top_transaction_groups.json'; + +export default function ApiTest({ getService }: FtrProviderContext) { + const supertest = getService('supertest'); + const esArchiver = getService('esArchiver'); + + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + const uiFilters = encodeURIComponent(JSON.stringify({})); + const transactionType = 'request'; + + describe('Top transaction groups', () => { + describe('when data is not loaded ', () => { + it('handles empty state', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/transaction_groups?start=${start}&end=${end}&uiFilters=${uiFilters}&transactionType=${transactionType}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ items: [], isAggregationAccurate: true, bucketSize: 100 }); + }); + }); + + describe('when data is loaded', () => { + let response: any; + before(async () => { + await esArchiver.load('8.0.0'); + response = await supertest.get( + `/api/apm/services/opbeans-node/transaction_groups?start=${start}&end=${end}&uiFilters=${uiFilters}&transactionType=${transactionType}` + ); + }); + after(() => esArchiver.unload('8.0.0')); + + it('returns the correct status code', async () => { + expect(response.status).to.be(200); + }); + + it('returns the correct number of buckets', async () => { + expect(response.body.items.length).to.be(18); + }); + + it('returns the correct buckets (when ignoring samples)', async () => { + function omitSample(items: any[]) { + return items.map(({ sample, ...item }) => ({ ...item })); + } + + expect(omitSample(response.body.items)).to.eql(omitSample(expectedTransactionGroups.items)); + }); + + it('returns the correct buckets and samples', async () => { + expect(response.body.items).to.eql(expectedTransactionGroups.items); + }); + }); + }); +} diff --git a/x-pack/test/apm_api_integration/basic/tests/services/transactions/transaction_charts.ts b/x-pack/test/apm_api_integration/basic/tests/services/transactions/transaction_charts.ts new file mode 100644 index 0000000000000..7178498863787 --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/transactions/transaction_charts.ts @@ -0,0 +1,55 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License; + * you may not use this file except in compliance with the Elastic License. + */ +import expect from '@kbn/expect'; +import { FtrProviderContext } from '../../../../../common/ftr_provider_context'; +import expectedTransactionCharts from './expectations/transaction_charts.json'; + +export default function ApiTest({ getService }: FtrProviderContext) { + const supertest = getService('supertest'); + const esArchiver = getService('esArchiver'); + + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + const uiFilters = encodeURIComponent(JSON.stringify({})); + + describe('Transaction charts', () => { + describe('when data is not loaded ', () => { + it('handles the empty state', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/transaction_groups/charts?start=${start}&end=${end}&uiFilters=${uiFilters}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ + apmTimeseries: { + overallAvgDuration: null, + responseTimes: { + avg: [], + p95: [], + p99: [], + }, + tpmBuckets: [], + }, + }); + }); + }); + + describe('when data is loaded', () => { + before(() => esArchiver.load('8.0.0')); + after(() => esArchiver.unload('8.0.0')); + + it('returns the transaction charts', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/transaction_groups/charts?start=${start}&end=${end}&uiFilters=${uiFilters}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql(expectedTransactionCharts); + }); + }); + }); +} diff --git a/x-pack/test/apm_api_integration/basic/tests/services/transactions/transaction_types.ts b/x-pack/test/apm_api_integration/basic/tests/services/transactions/transaction_types.ts new file mode 100644 index 0000000000000..56844dfcedda1 --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/services/transactions/transaction_types.ts @@ -0,0 +1,44 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License; + * you may not use this file except in compliance with the Elastic License. + */ + +import expect from '@kbn/expect'; +import { FtrProviderContext } from '../../../../../common/ftr_provider_context'; + +export default function ApiTest({ getService }: FtrProviderContext) { + const supertest = getService('supertest'); + const esArchiver = getService('esArchiver'); + + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + + describe('Transaction types', () => { + describe('when data is not loaded ', () => { + it('handles empty state', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/transaction_types?start=${start}&end=${end}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ transactionTypes: [] }); + }); + }); + + describe('when data is loaded', () => { + before(() => esArchiver.load('8.0.0')); + after(() => esArchiver.unload('8.0.0')); + + it('handles empty state', async () => { + const response = await supertest.get( + `/api/apm/services/opbeans-node/transaction_types?start=${start}&end=${end}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ transactionTypes: ['request', 'Worker'] }); + }); + }); + }); +} diff --git a/x-pack/test/apm_api_integration/basic/tests/traces/top_traces.expectation.json b/x-pack/test/apm_api_integration/basic/tests/traces/top_traces.expectation.json new file mode 100644 index 0000000000000..bacb340292f93 --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/traces/top_traces.expectation.json @@ -0,0 +1,3378 @@ +[ + { + "name": "Process payment", + "sample": { + "@timestamp": "2020-06-29T06:48:29.892Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.379730Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "timestamp": { "us": 1593413309892019 }, + "trace": { "id": "bc393b659bef63291b6fa08e6f1d3f14" }, + "transaction": { + "duration": { "us": 1745009 }, + "id": "a58333df6d851cf1", + "name": "Process payment", + "result": "success", + "sampled": true, + "span_count": { "started": 2 }, + "type": "Worker" + } + }, + "p95": 1744896, + "averageResponseTime": 1745009, + "transactionsPerMinute": 0.25, + "impact": 100 + }, + { + "name": "GET /api", + "sample": { + "@timestamp": "2020-06-29T06:48:41.454Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.992834Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:41 GMT"], + "Transfer-Encoding": ["chunked"], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413321454009 }, + "trace": { "id": "0507830eeff93f7bf1a354e4031097b3" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 8334 }, + "id": "878250a8b937445d", + "name": "GET /api", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/6", + "original": "/api/products/6", + "path": "/api/products/6", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 81888, + "averageResponseTime": 49816.15625, + "transactionsPerMinute": 8, + "impact": 91.32732325394932 + }, + { + "name": "/dashboard", + "sample": { + "@timestamp": "2020-06-29T06:48:21.621Z", + "agent": { "name": "rum-js", "version": "5.2.0" }, + "client": { "ip": "172.18.0.8" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:22.625275Z" }, + "http": { + "request": { "referrer": "" }, + "response": { + "decoded_body_size": 813, + "encoded_body_size": 813, + "transfer_size": 962 + } + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "language": { "name": "javascript" }, + "name": "client", + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.8" }, + "timestamp": { "us": 1593413301621808 }, + "trace": { "id": "ee0ce8b38b8d5945829fc1c9432538bf" }, + "transaction": { + "custom": { + "userConfig": { + "featureFlags": ["double-trouble", "4423-hotfix"], + "showDashboard": true + } + }, + "duration": { "us": 109000 }, + "id": "c546a6716b681bf2", + "marks": { + "agent": { + "domComplete": 98, + "domInteractive": 87, + "timeToFirstByte": 3 + }, + "navigationTiming": { + "connectEnd": 0, + "connectStart": 0, + "domComplete": 98, + "domContentLoadedEventEnd": 87, + "domContentLoadedEventStart": 87, + "domInteractive": 87, + "domLoading": 8, + "domainLookupEnd": 0, + "domainLookupStart": 0, + "fetchStart": 0, + "loadEventEnd": 98, + "loadEventStart": 98, + "requestStart": 1, + "responseEnd": 8, + "responseStart": 3 + } + }, + "name": "/dashboard", + "page": { "referer": "", "url": "http://opbeans-node:3000/dashboard" }, + "sampled": true, + "span_count": { "started": 8 }, + "type": "page-load" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/dashboard", + "original": "http://opbeans-node:3000/dashboard", + "path": "/dashboard", + "port": 3000, + "scheme": "http" + }, + "user": { + "email": "arthur.dent@example.com", + "id": "1", + "name": "arthurdent" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "HeadlessChrome", + "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.0 Safari/537.36", + "os": { "name": "Linux" }, + "version": "79.0.3945" + } + }, + "p95": 341504, + "averageResponseTime": 208000, + "transactionsPerMinute": 0.75, + "impact": 35.56882613781033 + }, + { + "name": "DispatcherServlet#doGet", + "sample": { + "@timestamp": "2020-06-29T06:48:40.104Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.706956Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers_sent": false, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Servlet API" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413320104008 }, + "trace": { "id": "90bd7780b32cc51a7f4c200b1e0c170f" }, + "transaction": { + "duration": { "us": 8896 }, + "id": "40b22b21e92bbb20", + "name": "DispatcherServlet#doGet", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 1 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 34528, + "averageResponseTime": 36010.53846153846, + "transactionsPerMinute": 3.25, + "impact": 26.61043592713186 + }, + { + "name": "POST /api/orders", + "sample": { + "@timestamp": "2020-06-29T06:48:39.953Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.991549Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "body": { "original": "[REDACTED]" }, + "headers": { + "Accept": ["application/json"], + "Connection": ["close"], + "Content-Length": ["129"], + "Content-Type": ["application/json"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "post", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["13"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:40 GMT"], + "Etag": ["W/\"d-eEOWU4Cnr5DZ23ErRUeYu9oOIks\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413319953033 }, + "trace": { "id": "52b8fda5f6df745b990740ba18378620" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 270684 }, + "id": "a3afc2a112e9c893", + "name": "POST /api/orders", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 16 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders", + "original": "/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 270336, + "averageResponseTime": 270684, + "transactionsPerMinute": 0.25, + "impact": 15.261616628971955 + }, + { + "name": "ResourceHttpRequestHandler", + "sample": { + "@timestamp": "2020-06-29T06:48:44.376Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.720380Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers_sent": true, + "status_code": 404 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413324376010 }, + "trace": { "id": "7e70dc471913473e7d3bffda9b27d720" }, + "transaction": { + "duration": { "us": 1420 }, + "id": "5c4e9f4b0846c2f8", + "name": "ResourceHttpRequestHandler", + "result": "HTTP 4xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 0 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/types", + "path": "/api/types", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 4120, + "averageResponseTime": 14419.42857142857, + "transactionsPerMinute": 3.5, + "impact": 11.30657439844125 + }, + { + "name": "/orders", + "sample": { + "@timestamp": "2020-06-29T06:48:38.358Z", + "agent": { "name": "rum-js", "version": "5.2.0" }, + "client": { "ip": "172.18.0.8" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.365914Z" }, + "http": { + "request": { "referrer": "" }, + "response": { + "decoded_body_size": 813, + "encoded_body_size": 813, + "transfer_size": 962 + } + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "language": { "name": "javascript" }, + "name": "client", + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.8" }, + "timestamp": { "us": 1593413318358392 }, + "trace": { "id": "c1dea08a4128e776fd9965ccf8c8da99" }, + "transaction": { + "custom": { + "userConfig": { + "featureFlags": ["double-trouble", "4423-hotfix"], + "showDashboard": true + } + }, + "duration": { "us": 140000 }, + "id": "4f2ea2796645d6e5", + "marks": { + "agent": { + "domComplete": 126, + "domInteractive": 116, + "timeToFirstByte": 3 + }, + "navigationTiming": { + "connectEnd": 0, + "connectStart": 0, + "domComplete": 126, + "domContentLoadedEventEnd": 116, + "domContentLoadedEventStart": 116, + "domInteractive": 116, + "domLoading": 20, + "domainLookupEnd": 0, + "domainLookupStart": 0, + "fetchStart": 0, + "loadEventEnd": 126, + "loadEventStart": 126, + "requestStart": 1, + "responseEnd": 3, + "responseStart": 3 + } + }, + "name": "/orders", + "page": { "referer": "", "url": "http://opbeans-node:3000/orders" }, + "sampled": true, + "span_count": { "started": 7 }, + "type": "page-load" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/orders", + "original": "http://opbeans-node:3000/orders", + "path": "/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "adastra@example.com", "id": "3", "name": "trillian" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "HeadlessChrome", + "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.0 Safari/537.36", + "os": { "name": "Linux" }, + "version": "79.0.3945" + } + }, + "p95": 140160, + "averageResponseTime": 81500, + "transactionsPerMinute": 0.5, + "impact": 9.072365225837785 + }, + { + "name": "APIRestController#customer", + "sample": { + "@timestamp": "2020-06-29T06:48:38.893Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.680126Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:38 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413318893006 }, + "trace": { "id": "efcf3446b51d080dbde1339969cf79a0" }, + "transaction": { + "duration": { "us": 4594 }, + "id": "31ef64d71933e846", + "name": "APIRestController#customer", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 2 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/customers/235", + "path": "/api/customers/235", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 77280, + "averageResponseTime": 19370.6, + "transactionsPerMinute": 1.25, + "impact": 5.270496679320978 + }, + { + "name": "/products", + "sample": { + "@timestamp": "2020-06-29T06:48:48.824Z", + "agent": { "name": "rum-js", "version": "5.2.0" }, + "client": { "ip": "172.18.0.8" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:49.293664Z" }, + "http": { + "request": { "referrer": "" }, + "response": { + "decoded_body_size": 813, + "encoded_body_size": 813, + "transfer_size": 962 + } + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "language": { "name": "javascript" }, + "name": "client", + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.8" }, + "timestamp": { "us": 1593413328824656 }, + "trace": { "id": "f6c4a9197bbd080bd45072970f251525" }, + "transaction": { + "custom": { + "userConfig": { + "featureFlags": ["double-trouble", "4423-hotfix"], + "showDashboard": true + } + }, + "duration": { "us": 77000 }, + "id": "a11ede1968973bc5", + "marks": { + "agent": { + "domComplete": 68, + "domInteractive": 58, + "timeToFirstByte": 5 + }, + "navigationTiming": { + "connectEnd": 1, + "connectStart": 1, + "domComplete": 68, + "domContentLoadedEventEnd": 59, + "domContentLoadedEventStart": 59, + "domInteractive": 58, + "domLoading": 23, + "domainLookupEnd": 1, + "domainLookupStart": 1, + "fetchStart": 0, + "loadEventEnd": 68, + "loadEventStart": 68, + "requestStart": 2, + "responseEnd": 5, + "responseStart": 5 + } + }, + "name": "/products", + "page": { "referer": "", "url": "http://opbeans-node:3000/products" }, + "sampled": true, + "span_count": { "started": 5 }, + "type": "page-load" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/products", + "original": "http://opbeans-node:3000/products", + "path": "/products", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "z@example.com", "id": "4", "name": "zaphod" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "HeadlessChrome", + "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.0 Safari/537.36", + "os": { "name": "Linux" }, + "version": "79.0.3945" + } + }, + "p95": 76800, + "averageResponseTime": 77000, + "transactionsPerMinute": 0.25, + "impact": 4.129424578484989 + }, + { + "name": "/customers", + "sample": { + "@timestamp": "2020-06-29T06:48:48.287Z", + "agent": { "name": "rum-js", "version": "5.2.0" }, + "client": { "ip": "172.18.0.8" }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:49.292535Z" }, + "http": { "request": { "referrer": "" } }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "language": { "name": "javascript" }, + "name": "client", + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.8" }, + "timestamp": { "us": 1593413328287946 }, + "trace": { "id": "48d130530a1fc0b2b99d138d3461bad4" }, + "transaction": { + "custom": { + "userConfig": { + "featureFlags": ["double-trouble", "4423-hotfix"], + "showDashboard": true + } + }, + "duration": { "us": 39000 }, + "id": "2f3a2b0fd3016d3e", + "name": "/customers", + "page": { "referer": "", "url": "http://opbeans-node:3000/customers" }, + "sampled": true, + "span_count": { "started": 1 }, + "type": "route-change" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/customers", + "original": "http://opbeans-node:3000/customers", + "path": "/customers", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "adastra@example.com", "id": "3", "name": "trillian" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "HeadlessChrome", + "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/79.0.3945.0 Safari/537.36", + "os": { "name": "Linux" }, + "version": "79.0.3945" + } + }, + "p95": 39040, + "averageResponseTime": 33500, + "transactionsPerMinute": 0.5, + "impact": 3.5546640380951287 + }, + { + "name": "APIRestController#customers", + "sample": { + "@timestamp": "2020-06-29T06:48:43.765Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.716850Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:43 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 500 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413323765008 }, + "trace": { "id": "affce4cea9b60bd5b635dc1bd2e4ce79" }, + "transaction": { + "duration": { "us": 10880 }, + "id": "cfe0a84b49b4a340", + "name": "APIRestController#customers", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 2 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/customers", + "path": "/api/customers", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 26432, + "averageResponseTime": 16690.75, + "transactionsPerMinute": 1, + "impact": 3.541042213287889 + }, + { + "name": "GET /log-message", + "sample": { + "@timestamp": "2020-06-29T06:48:28.944Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.370695Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["24"], + "Content-Type": ["text/html; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:28 GMT"], + "Etag": ["W/\"18-MS3VbhH7auHMzO0fUuNF6v14N/M\""], + "X-Powered-By": ["Express"] + }, + "status_code": 500 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413308944016 }, + "trace": { "id": "afabe4cb397616f5ec35a2f3da49ba62" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 26788 }, + "id": "cc8c4261387507cf", + "name": "GET /log-message", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/log-message", + "original": "/log-message", + "path": "/log-message", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 38528, + "averageResponseTime": 32667.5, + "transactionsPerMinute": 0.5, + "impact": 3.458966408120217 + }, + { + "name": "APIRestController#stats", + "sample": { + "@timestamp": "2020-06-29T06:48:42.549Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.715898Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:42 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413322549008 }, + "trace": { "id": "c3556e143784f94d4b4220dd40687fae" }, + "transaction": { + "duration": { "us": 9166 }, + "id": "ac40e567f63c3eef", + "name": "APIRestController#stats", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 5 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/stats", + "path": "/api/stats", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 32064, + "averageResponseTime": 15535, + "transactionsPerMinute": 1, + "impact": 3.275330415465657 + }, + { + "name": "GET /api/customers", + "sample": { + "@timestamp": "2020-06-29T06:48:37.952Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.492402Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["186769"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:37 GMT"], + "Etag": ["W/\"2d991-yG3J8W/roH7fSxXTudZrO27Ax9s\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413317952016 }, + "trace": { "id": "5d99327edae38ed735e8d7a6028cf719" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 16824 }, + "id": "071808429ec9d00b", + "name": "GET /api/customers", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/customers", + "original": "/api/customers", + "path": "/api/customers", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 26368, + "averageResponseTime": 20092, + "transactionsPerMinute": 0.75, + "impact": 3.168195050736987 + }, + { + "name": "GET /api/products/:id", + "sample": { + "@timestamp": "2020-06-29T06:48:24.977Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:27.004717Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["231"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:24 GMT"], + "Etag": ["W/\"e7-kkuzj37GZDzXDh0CWqh5Gan0VO4\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413304977014 }, + "trace": { "id": "b9b290bca14c99962fa9a1c509401630" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 4482 }, + "id": "b8d8284ff1fc25d6", + "name": "GET /api/products/:id", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/3", + "original": "/api/products/3", + "path": "/api/products/3", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 37856, + "averageResponseTime": 13516.5, + "transactionsPerMinute": 1, + "impact": 2.8112687551548836 + }, + { + "name": "GET /api/types", + "sample": { + "@timestamp": "2020-06-29T06:48:26.443Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:29.977518Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["112"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:26 GMT"], + "Etag": ["W/\"70-1z6hT7P1WHgBgS/BeUEVeHhOCQU\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413306443014 }, + "trace": { "id": "be3f4eb50d253afc032c90eacaa85072" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 8892 }, + "id": "ccce129bb8c6b125", + "name": "GET /api/types", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/types", + "original": "/api/types", + "path": "/api/types", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 45248, + "averageResponseTime": 26992.5, + "transactionsPerMinute": 0.5, + "impact": 2.8066131947777255 + }, + { + "name": "GET static file", + "sample": { + "@timestamp": "2020-06-29T06:48:40.953Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.992454Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Accept-Ranges": ["bytes"], + "Cache-Control": ["public, max-age=0"], + "Connection": ["close"], + "Content-Length": ["15086"], + "Content-Type": ["image/x-icon"], + "Date": ["Mon, 29 Jun 2020 06:48:40 GMT"], + "Etag": ["W/\"3aee-1725aff14f0\""], + "Last-Modified": ["Thu, 28 May 2020 11:16:06 GMT"], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413320953016 }, + "trace": { "id": "292393440bbe04385f3c2e3715ac35fe" }, + "transaction": { + "duration": { "us": 1671 }, + "id": "d1d964ca1865dce3", + "name": "GET static file", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/favicon.ico", + "original": "/favicon.ico", + "path": "/favicon.ico", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 11900, + "averageResponseTime": 3492.9285714285716, + "transactionsPerMinute": 3.5, + "impact": 2.5144049360435208 + }, + { + "name": "APIRestController#customerWhoBought", + "sample": { + "@timestamp": "2020-06-29T06:48:44.982Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.721114Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:44 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413324982008 }, + "trace": { "id": "e5ce8ba877f69510e7abc3f0d11c1e4f" }, + "transaction": { + "duration": { "us": 2797 }, + "id": "b8c1bd3b31b197d3", + "name": "APIRestController#customerWhoBought", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 1 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/products/5/customers", + "path": "/api/products/5/customers", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 4464, + "averageResponseTime": 3742.153846153846, + "transactionsPerMinute": 3.25, + "impact": 2.4998634943716573 + }, + { + "name": "GET /log-error", + "sample": { + "@timestamp": "2020-06-29T06:48:07.467Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:18.533253Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["24"], + "Content-Type": ["text/html; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:07 GMT"], + "Etag": ["W/\"18-MS3VbhH7auHMzO0fUuNF6v14N/M\""], + "X-Powered-By": ["Express"] + }, + "status_code": 500 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413287467017 }, + "trace": { "id": "d518b2c4d72cd2aaf1e39bad7ebcbdbb" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 35846 }, + "id": "c7a30c1b076907ec", + "name": "GET /log-error", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/log-error", + "original": "/log-error", + "path": "/log-error", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 35840, + "averageResponseTime": 35846, + "transactionsPerMinute": 0.25, + "impact": 1.7640550505645587 + }, + { + "name": "APIRestController#topProducts", + "sample": { + "@timestamp": "2020-06-29T06:48:45.587Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.770758Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:44 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413325587007 }, + "trace": { "id": "4470d0cc076e22018e2dd258a25c8812" }, + "transaction": { + "duration": { "us": 4070 }, + "id": "cb860b712121d0d8", + "name": "APIRestController#topProducts", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 1 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/products/top", + "path": "/api/products/top", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 7344, + "averageResponseTime": 4825, + "transactionsPerMinute": 1.75, + "impact": 1.6450221426498186 + }, + { + "name": "GET /api/products/top", + "sample": { + "@timestamp": "2020-06-29T06:48:01.200Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:02.734903Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["2"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:01 GMT"], + "Etag": ["W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 115, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413281200133 }, + "trace": { "id": "195f32efeb6f91e2f71b6bc8bb74ae3a" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 33097 }, + "id": "22e72956dfc8967a", + "name": "GET /api/products/top", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/top", + "original": "/api/products/top", + "path": "/api/products/top", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 33024, + "averageResponseTime": 33097, + "transactionsPerMinute": 0.25, + "impact": 1.6060533780113861 + }, + { + "name": "GET /api/products", + "sample": { + "@timestamp": "2020-06-29T06:48:23.477Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:27.001228Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["1023"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:23 GMT"], + "Etag": ["W/\"3ff-VyOxcDApb+a/lnjkm9FeTOGSDrs\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413303477028 }, + "trace": { "id": "9f26158b9a3915577b3cccc17636ea01" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 7150 }, + "id": "27ff4add22ac2e1b", + "name": "GET /api/products", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products", + "original": "/api/products", + "path": "/api/products", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 8160, + "averageResponseTime": 6583, + "transactionsPerMinute": 1, + "impact": 1.2172278724376455 + }, + { + "name": "POST /api", + "sample": { + "@timestamp": "2020-06-29T06:48:25.478Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:27.005671Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "body": { "original": "[REDACTED]" }, + "headers": { + "Accept": ["application/json"], + "Connection": ["close"], + "Content-Length": ["129"], + "Content-Type": ["application/json"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "post", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Allow": ["GET"], + "Connection": ["close"], + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:25 GMT"], + "Transfer-Encoding": ["chunked"], + "X-Powered-By": ["Express"] + }, + "status_code": 405 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413305478010 }, + "trace": { "id": "4bd9027dd1e355ec742970e2d6333124" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 20011 }, + "id": "94104435cf151478", + "name": "POST /api", + "result": "HTTP 4xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders", + "original": "/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 19968, + "averageResponseTime": 20011, + "transactionsPerMinute": 0.25, + "impact": 0.853921734857215 + }, + { + "name": "GET /api/types/:id", + "sample": { + "@timestamp": "2020-06-29T06:48:12.972Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:18.543436Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["205"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:12 GMT"], + "Etag": ["W/\"cd-pFMi1QOVY6YqWe+nwcbZVviCths\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413292972011 }, + "trace": { "id": "aea65cef5f902dda5d8e38f9fb38864d" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 6300 }, + "id": "a5bdbe43ac05fae2", + "name": "GET /api/types/:id", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/types/2", + "original": "/api/types/2", + "path": "/api/types/2", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 10080, + "averageResponseTime": 8181, + "transactionsPerMinute": 0.5, + "impact": 0.6441916136689552 + }, + { + "name": "GET /api/stats", + "sample": { + "@timestamp": "2020-06-29T06:48:39.451Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.984824Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["92"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:39 GMT"], + "Etag": ["W/\"5c-6I+bqIiLxvkWuwBUnTxhBoK4lBk\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413319451016 }, + "trace": { "id": "a05787cb03a0af0863fab5e05de942f1" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 5050 }, + "id": "a7e004eba8f021ce", + "name": "GET /api/stats", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 4 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/stats", + "original": "/api/stats", + "path": "/api/stats", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 5440, + "averageResponseTime": 5098, + "transactionsPerMinute": 0.75, + "impact": 0.582807187955318 + }, + { + "name": "GET /api/orders", + "sample": { + "@timestamp": "2020-06-29T06:48:35.450Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.483715Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["2"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:35 GMT"], + "Etag": ["W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413315450014 }, + "trace": { "id": "2da70ccf10599b271f65273d169cde9f" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 8784 }, + "id": "a3f4a4f339758440", + "name": "GET /api/orders", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 2 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders", + "original": "/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 8800, + "averageResponseTime": 7624.5, + "transactionsPerMinute": 0.5, + "impact": 0.5802207655235637 + }, + { + "name": "GET /api/orders/:id", + "sample": { + "@timestamp": "2020-06-29T06:48:35.951Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:39.484133Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["0"], + "Date": ["Mon, 29 Jun 2020 06:48:35 GMT"], + "X-Powered-By": ["Express"] + }, + "status_code": 404 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413315951017 }, + "trace": { "id": "95979caa80e6622cbbb2d308800c3016" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 3210 }, + "id": "30344988dace0b43", + "name": "GET /api/orders/:id", + "result": "HTTP 4xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/orders/117", + "original": "/api/orders/117", + "path": "/api/orders/117", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 7184, + "averageResponseTime": 4749.666666666667, + "transactionsPerMinute": 0.75, + "impact": 0.5227447114845778 + }, + { + "name": "APIRestController#products", + "sample": { + "@timestamp": "2020-06-29T06:48:27.824Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:36.087688Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:27 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413307824008 }, + "trace": { "id": "a6adb17bd5a5d1c0eabb9f36cb626dd5" }, + "transaction": { + "duration": { "us": 5645 }, + "id": "df3e726eaa003d96", + "name": "APIRestController#products", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 3 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/products", + "path": "/api/products", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 7904, + "averageResponseTime": 6787, + "transactionsPerMinute": 0.5, + "impact": 0.4839483750082622 + }, + { + "name": "GET /api/products/:id/customers", + "sample": { + "@timestamp": "2020-06-29T06:48:41.956Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.994692Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["2"], + "Content-Type": ["application/json; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:41 GMT"], + "Etag": ["W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\""], + "X-Powered-By": ["Express"] + }, + "status_code": 200 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413321956016 }, + "trace": { "id": "f735ac5fca8f83eebc748f4a2e009e61" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 3896 }, + "id": "b24ce95c855f83a4", + "name": "GET /api/products/:id/customers", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "started": 1 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/api/products/5/customers", + "original": "/api/products/5/customers", + "path": "/api/products/5/customers", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 5616, + "averageResponseTime": 4757, + "transactionsPerMinute": 0.5, + "impact": 0.25059559560997896 + }, + { + "name": "APIRestController#product", + "sample": { + "@timestamp": "2020-06-29T06:48:41.941Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.709268Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:41 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413321941007 }, + "trace": { "id": "88a2b9ca970cdd38dfa1b5646d26b897" }, + "transaction": { + "duration": { "us": 4539 }, + "id": "24ee0e4812cfed62", + "name": "APIRestController#product", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 2 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/products/4", + "path": "/api/products/4", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 4864, + "averageResponseTime": 4713.5, + "transactionsPerMinute": 0.5, + "impact": 0.24559517890858723 + }, + { + "name": "APIRestController#order", + "sample": { + "@timestamp": "2020-06-29T06:48:33.314Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:36.137777Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers_sent": false, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413313314007 }, + "trace": { "id": "aaf67f944393124080d1e4de804dc6eb" }, + "transaction": { + "duration": { "us": 2503 }, + "id": "f7f9f5e0f8a3a0d4", + "name": "APIRestController#order", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 1 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/orders/906", + "path": "/api/orders/906", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 4272, + "averageResponseTime": 3392.5, + "transactionsPerMinute": 0.5, + "impact": 0.09374344413758617 + }, + { + "name": "APIRestController#orders", + "sample": { + "@timestamp": "2020-06-29T06:48:39.500Z", + "agent": { + "ephemeral_id": "222af346-6dd9-45ef-ac85-d86b67edd2de", + "name": "java", + "version": "1.17.1-SNAPSHOT" + }, + "client": { "ip": "172.18.0.9" }, + "container": { + "id": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:46.706280Z" }, + "host": { + "architecture": "amd64", + "hostname": "918ebbd99b4f", + "ip": "172.18.0.6", + "name": "918ebbd99b4f", + "os": { "platform": "Linux" } + }, + "http": { + "request": { + "headers": { + "Accept": ["*/*"], + "Accept-Encoding": ["gzip, deflate"], + "Host": ["172.18.0.6:3000"], + "User-Agent": ["Python/3.7 aiohttp/3.3.2"] + }, + "method": "get", + "socket": { "encrypted": false, "remote_address": "172.18.0.9" } + }, + "response": { + "finished": true, + "headers": { + "Content-Type": ["application/json;charset=UTF-8"], + "Date": ["Mon, 29 Jun 2020 06:48:38 GMT"], + "Transfer-Encoding": ["chunked"] + }, + "headers_sent": true, + "status_code": 200 + }, + "version": "1.1" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { "pid": 6, "ppid": 1, "title": "/opt/java/openjdk/bin/java" }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "Spring Web MVC", "version": "5.0.6.RELEASE" }, + "language": { "name": "Java", "version": "11.0.7" }, + "name": "opbeans-java", + "node": { + "name": "918ebbd99b4f40003cf5713c080bb8120fa3bbe7ac4a96acb3aec558ced91ec0" + }, + "runtime": { "name": "Java", "version": "11.0.7" }, + "version": "None" + }, + "source": { "ip": "172.18.0.9" }, + "timestamp": { "us": 1593413319500008 }, + "trace": { "id": "f89b02f09a2e7a7f2cc3478f53d4a495" }, + "transaction": { + "duration": { "us": 3391 }, + "id": "41c8c4300ee2ccda", + "name": "APIRestController#orders", + "result": "HTTP 2xx", + "sampled": true, + "span_count": { "dropped": 0, "started": 2 }, + "type": "request" + }, + "url": { + "domain": "172.18.0.6", + "full": "http://172.18.0.6:3000/api/orders", + "path": "/api/orders", + "port": 3000, + "scheme": "http" + }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "Python/3.7 aiohttp/3.3.2" + } + }, + "p95": 3376, + "averageResponseTime": 3147, + "transactionsPerMinute": 0.5, + "impact": 0.06552270160444405 + }, + { + "name": "GET /throw-error", + "sample": { + "@timestamp": "2020-06-29T06:48:42.954Z", + "agent": { "name": "nodejs", "version": "3.6.1" }, + "client": { "ip": "172.18.0.7" }, + "container": { + "id": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "ecs": { "version": "1.5.0" }, + "event": { "ingested": "2020-06-29T06:48:43.996435Z" }, + "host": { + "architecture": "x64", + "hostname": "41712ded148f", + "ip": "172.18.0.7", + "name": "41712ded148f", + "os": { "platform": "linux" } + }, + "http": { + "request": { + "headers": { + "Connection": ["close"], + "Host": ["opbeans-node:3000"], + "User-Agent": ["workload/2.4.3"] + }, + "method": "get", + "socket": { + "encrypted": false, + "remote_address": "::ffff:172.18.0.7" + } + }, + "response": { + "headers": { + "Connection": ["close"], + "Content-Length": ["148"], + "Content-Security-Policy": ["default-src 'none'"], + "Content-Type": ["text/html; charset=utf-8"], + "Date": ["Mon, 29 Jun 2020 06:48:42 GMT"], + "X-Content-Type-Options": ["nosniff"], + "X-Powered-By": ["Express"] + }, + "status_code": 500 + }, + "version": "1.1" + }, + "labels": { + "foo": "bar", + "lorem": "ipsum dolor sit amet, consectetur adipiscing elit. Nulla finibus, ipsum id scelerisque consequat, enim leo vulputate massa, vel ultricies ante neque ac risus. Curabitur tincidunt vitae sapien id pulvinar. Mauris eu vestibulum tortor. Integer sit amet lorem fringilla, egestas tellus vitae, vulputate purus. Nulla feugiat blandit nunc et semper. Morbi purus libero, mattis sed mauris non, euismod iaculis lacus. Curabitur eleifend ante eros, non faucibus velit lacinia id. Duis posuere libero augue, at dignissim urna consectetur eget. Praesent eu congue est, iaculis finibus augue.", + "multi-line": "foo\nbar\nbaz", + "this-is-a-very-long-tag-name-without-any-spaces": "test" + }, + "observer": { + "ephemeral_id": "99908b73-9813-4a73-baa6-993db405523a", + "hostname": "aa0bd613aa4c", + "id": "1ccc5210-1e6c-4252-a5c8-1d6571a5fa2e", + "type": "apm-server", + "version": "8.0.0", + "version_major": 8 + }, + "process": { + "args": [ + "/usr/local/bin/node", + "/usr/local/lib/node_modules/pm2/lib/ProcessContainer.js", + "ecosystem-workload.config.js" + ], + "pid": 137, + "ppid": 1, + "title": "node /app/server.js" + }, + "processor": { "event": "transaction", "name": "transaction" }, + "service": { + "environment": "production", + "framework": { "name": "express", "version": "4.17.1" }, + "language": { "name": "javascript" }, + "name": "opbeans-node", + "node": { + "name": "41712ded148f30ee09a13421780eec4304bf5049b82a0d8dbc877893be6799e4" + }, + "runtime": { "name": "node", "version": "12.18.1" }, + "version": "1.0.0" + }, + "source": { "ip": "172.18.0.7" }, + "timestamp": { "us": 1593413322954016 }, + "trace": { "id": "9d5aee7443a43db9820f622a10dfac6e" }, + "transaction": { + "custom": { "shoppingBasketCount": 42 }, + "duration": { "us": 1928 }, + "id": "8e6fc8c3f99e8fc9", + "name": "GET /throw-error", + "result": "HTTP 5xx", + "sampled": true, + "span_count": { "started": 0 }, + "type": "request" + }, + "url": { + "domain": "opbeans-node", + "full": "http://opbeans-node:3000/throw-error", + "original": "/throw-error", + "path": "/throw-error", + "port": 3000, + "scheme": "http" + }, + "user": { "email": "kimchy@elastic.co", "id": "42", "name": "kimchy" }, + "user_agent": { + "device": { "name": "Other" }, + "name": "Other", + "original": "workload/2.4.3" + } + }, + "p95": 3224, + "averageResponseTime": 2577, + "transactionsPerMinute": 0.5, + "impact": 0 + } +] diff --git a/x-pack/test/apm_api_integration/basic/tests/traces/top_traces.ts b/x-pack/test/apm_api_integration/basic/tests/traces/top_traces.ts new file mode 100644 index 0000000000000..ca50ae291f110 --- /dev/null +++ b/x-pack/test/apm_api_integration/basic/tests/traces/top_traces.ts @@ -0,0 +1,54 @@ +/* + * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one + * or more contributor license agreements. Licensed under the Elastic License; + * you may not use this file except in compliance with the Elastic License. + */ +import expect from '@kbn/expect'; +import { FtrProviderContext } from '../../../../common/ftr_provider_context'; +import expectTopTraces from './top_traces.expectation.json'; + +export default function ApiTest({ getService }: FtrProviderContext) { + const supertest = getService('supertest'); + const esArchiver = getService('esArchiver'); + + // url parameters + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + const uiFilters = encodeURIComponent(JSON.stringify({})); + + describe('Top traces', () => { + describe('when data is not loaded ', () => { + it('handles empty state', async () => { + const response = await supertest.get( + `/api/apm/traces?start=${start}&end=${end}&uiFilters=${uiFilters}` + ); + + expect(response.status).to.be(200); + expect(response.body).to.eql({ items: [], isAggregationAccurate: true, bucketSize: 100 }); + }); + }); + + describe('when data is loaded', () => { + let response: any; + before(async () => { + await esArchiver.load('8.0.0'); + response = await supertest.get( + `/api/apm/traces?start=${start}&end=${end}&uiFilters=${uiFilters}` + ); + }); + after(() => esArchiver.unload('8.0.0')); + + it('returns the correct status code', async () => { + expect(response.status).to.be(200); + }); + + it('returns the correct number of buckets', async () => { + expect(response.body.items.length).to.be(33); + }); + + it('returns the correct buckets and samples', async () => { + expect(response.body.items).to.eql(expectTopTraces); + }); + }); + }); +} diff --git a/x-pack/test/apm_api_integration/trial/tests/service_maps.ts b/x-pack/test/apm_api_integration/trial/tests/service_maps.ts index a2ba9b5bc2e30..cf265c3fb6737 100644 --- a/x-pack/test/apm_api_integration/trial/tests/service_maps.ts +++ b/x-pack/test/apm_api_integration/trial/tests/service_maps.ts @@ -11,12 +11,13 @@ export default function serviceMapsApiTests({ getService }: FtrProviderContext) const supertest = getService('supertest'); const esArchiver = getService('esArchiver'); + const start = encodeURIComponent('2020-06-29T06:45:00.000Z'); + const end = encodeURIComponent('2020-06-29T06:49:00.000Z'); + describe('Service Maps', () => { describe('when there is no data', () => { it('returns empty list', async () => { - const response = await supertest.get( - '/api/apm/service-map?start=2020-06-28T10%3A24%3A46.055Z&end=2020-06-29T10%3A24%3A46.055Z' - ); + const response = await supertest.get(`/api/apm/service-map?start=${start}&end=${end}`); expect(response.status).to.be(200); expect(response.body).to.eql({ elements: [] }); @@ -28,12 +29,9 @@ export default function serviceMapsApiTests({ getService }: FtrProviderContext) after(() => esArchiver.unload('8.0.0')); it('returns service map elements', async () => { - const response = await supertest.get( - '/api/apm/service-map?start=2020-06-28T10%3A24%3A46.055Z&end=2020-06-29T10%3A24%3A46.055Z' - ); + const response = await supertest.get(`/api/apm/service-map?start=${start}&end=${end}`); expect(response.status).to.be(200); - expect(response.body).to.eql({ elements: [ {