From 8bf4db038ca9d0a39b499a760ea1891535ab7e84 Mon Sep 17 00:00:00 2001 From: Rich Megginson Date: Fri, 10 Nov 2017 16:29:23 -0700 Subject: [PATCH] Bug 1494912 - metrics indexes should not save the _source https://bugzilla.redhat.com/show_bug.cgi?id=1494912 Completely disable the _source and _all for ovirt-metrics-* --- ....redhat.viaq-openshift-operations.asciidoc | 63 +++++++++++++++++++ ...com.redhat.viaq-openshift-project.asciidoc | 63 +++++++++++++++++++ ...m.redhat.viaq-openshift.index-pattern.json | 2 +- ...at.viaq-openshift-operations.template.json | 47 +++++++++++++- ...edhat.viaq-openshift-project.template.json | 47 +++++++++++++- .../org.ovirt.viaq-collectd.template.json | 9 +-- 6 files changed, 224 insertions(+), 7 deletions(-) diff --git a/docs/com.redhat.viaq-openshift-operations.asciidoc b/docs/com.redhat.viaq-openshift-operations.asciidoc index 568faafc8..872c29150 100644 --- a/docs/com.redhat.viaq-openshift-operations.asciidoc +++ b/docs/com.redhat.viaq-openshift-operations.asciidoc @@ -822,6 +822,69 @@ type: string Docker container id +==== docker.container_id_short + +type: string + +Short container id, assigned by the container engine + + +==== docker.sauid + +type: string + +Sent login user id + + +==== docker.container_image + +type: string + +Name of the image + + +==== docker.pid + +type: string + +The process id + + +==== docker.user + +type: string + +User under which the container process runs + + +==== docker.command + +type: string + +Name of the command + + +==== docker.reason + +type: string + +Action that triggered this event + + +==== docker.operation + +type: string + +Operation carried out + + +==== docker.result + +type: string + +Result of the action + + ''' [[exported-fields-pipeline_metadata]] diff --git a/docs/com.redhat.viaq-openshift-project.asciidoc b/docs/com.redhat.viaq-openshift-project.asciidoc index 568faafc8..872c29150 100644 --- a/docs/com.redhat.viaq-openshift-project.asciidoc +++ b/docs/com.redhat.viaq-openshift-project.asciidoc @@ -822,6 +822,69 @@ type: string Docker container id +==== docker.container_id_short + +type: string + +Short container id, assigned by the container engine + + +==== docker.sauid + +type: string + +Sent login user id + + +==== docker.container_image + +type: string + +Name of the image + + +==== docker.pid + +type: string + +The process id + + +==== docker.user + +type: string + +User under which the container process runs + + +==== docker.command + +type: string + +Name of the command + + +==== docker.reason + +type: string + +Action that triggered this event + + +==== docker.operation + +type: string + +Operation carried out + + +==== docker.result + +type: string + +Result of the action + + ''' [[exported-fields-pipeline_metadata]] diff --git a/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json b/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json index fea47bb24..51b325d7e 100644 --- a/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json +++ b/elasticsearch/index_patterns/com.redhat.viaq-openshift.index-pattern.json @@ -1,6 +1,6 @@ { "description": "This is the Kibana index file for the .operations.* index pattern", - "fields": "[{\"count\": 0, \"name\": \"@timestamp\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"@timestamp.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"geoip\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"name\": \"hostname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ipaddr4\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"ip\", \"scripted\": false}, {\"count\": 0, \"name\": \"ipaddr4.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ipaddr6\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"level\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"message\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"service\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tags\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"file\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"file.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"offset\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"namespace_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"namespace_uuid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.facility\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.protocol-version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.structured-data\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.msgid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.appname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.KERNEL_DEVICE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.KERNEL_SUBSYSTEM\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.UDEV_DEVLINK\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.UDEV_DEVNODE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.UDEV_SYSNAME\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.AUDIT_LOGINUID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.BOOT_ID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.AUDIT_SESSION\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.CAP_EFFECTIVE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.CMDLINE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.COMM\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.EXE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.GID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.HOSTNAME\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.MACHINE_ID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.PID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SELINUX_CONTEXT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SOURCE_REALTIME_TIMESTAMP\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_CGROUP\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_OWNER_UID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_SESSION\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_SLICE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_UNIT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_USER_UNIT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.TRANSPORT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.UID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.CODE_FILE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.CODE_FUNCTION\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.CODE_LINE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.ERRNO\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.MESSAGE_ID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.SYSLOG_FACILITY\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.SYSLOG_IDENTIFIER\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.SYSLOG_PID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.RESULT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.UNIT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.pod_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.pod_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.namespace_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.namespace_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.host\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.master_url\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.container_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.container_name.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.deployment\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.deploymentconfig\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.deploymentconfig.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.component\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.provider\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.verb\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.namespace\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.selfLink\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.uid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.resourceVersion\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.kind\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.namespace\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.uid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.apiVersion\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.resourceVersion\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.reason\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.source_component\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.firstTimestamp\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.count\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.type\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.container_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.@version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.hostname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.ipaddr4\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"ip\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.ipaddr4.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.ipaddr6\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.inputname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.received_at\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.original_raw_message\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.original_raw_message.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.hostname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.ipaddr4\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"ip\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.ipaddr4.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.ipaddr6\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.inputname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.received_at\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.original_raw_message\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.original_raw_message.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.trace\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.entity\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.host_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.engine_fqdn\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.cluster_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.serial\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.node\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.error\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.trimmed\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.text\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.avc\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.execve\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.netfilter_cfg\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.obj_pid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.path\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.ver\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.term\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.session\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.pos\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.timing\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.in_txt\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.in_bin\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.out_txt\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.out_bin\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interval\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.plugin\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.plugin_instance\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.type_instance\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.type\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.dstypes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_state\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_ops.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_ops.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_vm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_rss\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_data\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_code\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_stacksize\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_cputime.user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_cputime.syst\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_count.processes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_count.threads\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_pagefaults.majflt\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_pagefaults.minflt\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_octets.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_octets.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.fork_rate\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_merged.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_merged.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_octets.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_octets.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_time.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_time.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_ops.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_ops.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.pending_operations\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_io_time.io_time\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_io_time.weighted_io_time\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_octets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_octets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_packets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_packets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_errors.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_errors.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_dropped.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_dropped.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_octets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_octets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_packets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_packets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_errors.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_errors.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_dropped.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_dropped.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_ops.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_ops.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_octets.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_octets.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.memory\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.virt_vcpu\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.virt_cpu_total\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.cpu.percent\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.df.df_complex\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.df.percent_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.entropy.entropy\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.nfs.nfs_procedure\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.memory.memory\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.memory.percent\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.swap.swap\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.swap.swap_io\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.load.load.shortterm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.load.load.midterm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.load.load.longterm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.aggregation.percent\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_cpu\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_elapsed_time\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_memory\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_speed\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_rx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_tx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_rx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_tx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_storage\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_swap\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_vdsm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_vms\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_tx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_rx_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_tx_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_min\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_max\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_target\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_cur\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_cpu_sys\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_cpu_usage\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_ops\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_ops\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_flush_latency\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_apparent_size\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_rate\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_true_size\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_rate\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_latency\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_latency\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_rx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_cpu_user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_rx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_tx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_speed\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_n_tup_g\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_n_tup_c\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_numbackends\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_xact\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_db_size\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_blks\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}]", + "fields": "[{\"count\": 0, \"name\": \"@timestamp\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"@timestamp.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"geoip\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"geo_point\", \"scripted\": false}, {\"count\": 0, \"name\": \"hostname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ipaddr4\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"ip\", \"scripted\": false}, {\"count\": 0, \"name\": \"ipaddr4.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ipaddr6\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"level\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"message\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"service\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tags\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"file\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"file.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"offset\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"namespace_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"namespace_uuid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.facility\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.protocol-version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.structured-data\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.msgid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"rsyslog.appname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.KERNEL_DEVICE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.KERNEL_SUBSYSTEM\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.UDEV_DEVLINK\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.UDEV_DEVNODE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.k.UDEV_SYSNAME\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.AUDIT_LOGINUID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.BOOT_ID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.AUDIT_SESSION\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.CAP_EFFECTIVE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.CMDLINE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.COMM\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.EXE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.GID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.HOSTNAME\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.MACHINE_ID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.PID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SELINUX_CONTEXT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SOURCE_REALTIME_TIMESTAMP\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_CGROUP\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_OWNER_UID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_SESSION\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_SLICE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_UNIT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.SYSTEMD_USER_UNIT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.TRANSPORT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.t.UID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.CODE_FILE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.CODE_FUNCTION\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.CODE_LINE\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.ERRNO\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.MESSAGE_ID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.SYSLOG_FACILITY\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.SYSLOG_IDENTIFIER\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.SYSLOG_PID\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.RESULT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"systemd.u.UNIT\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.pod_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.pod_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.namespace_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.namespace_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.host\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.master_url\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.container_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.container_name.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.deployment\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.deploymentconfig\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.deploymentconfig.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.component\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.labels.provider\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.verb\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.namespace\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.selfLink\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.uid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.metadata.resourceVersion\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.kind\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.namespace\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.uid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.apiVersion\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.involvedObject.resourceVersion\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.reason\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.source_component\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.firstTimestamp\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.count\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"kubernetes.event.type\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.container_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.container_id_short\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.sauid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.container_image\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.pid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.command\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.reason\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.operation\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"docker.result\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.@version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.hostname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.ipaddr4\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"ip\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.ipaddr4.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.ipaddr6\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.inputname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.received_at\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.original_raw_message\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.collector.original_raw_message.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.hostname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.version\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.ipaddr4\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"ip\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.ipaddr4.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.ipaddr6\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.inputname\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.received_at\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"date\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.original_raw_message\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.normalizer.original_raw_message.raw\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"pipeline_metadata.trace\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.entity\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.host_id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.engine_fqdn\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"ovirt.cluster_name\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.serial\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.node\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.error\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.trimmed\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.text\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.avc\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.execve\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.netfilter_cfg\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.obj_pid\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"aushape.data.path\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.ver\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.term\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.session\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.id\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.pos\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.timing\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.in_txt\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.in_bin\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.out_txt\", \"indexed\": true, \"analyzed\": true, \"doc_values\": false, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"tlog.out_bin\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interval\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.plugin\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.plugin_instance\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.type_instance\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.type\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.dstypes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"string\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_state\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_ops.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_ops.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_vm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_rss\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_data\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_code\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_stacksize\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_cputime.user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_cputime.syst\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_count.processes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_count.threads\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_pagefaults.majflt\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_pagefaults.minflt\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_octets.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.ps_disk_octets.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.processes.fork_rate\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_merged.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_merged.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_octets.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_octets.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_time.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_time.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_ops.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_ops.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.pending_operations\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_io_time.io_time\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.disk.disk_io_time.weighted_io_time\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_octets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_octets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_packets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_packets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_errors.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_errors.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_dropped.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.interface.if_dropped.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_octets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_octets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_packets.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_packets.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_errors.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_errors.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_dropped.rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.if_dropped.tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_ops.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_ops.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_octets.read\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.disk_octets.write\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.memory\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.virt_vcpu\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.virt.virt_cpu_total\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.cpu.percent\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.df.df_complex\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.df.percent_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.entropy.entropy\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.nfs.nfs_procedure\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.memory.memory\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.memory.percent\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.swap.swap\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.swap.swap_io\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.load.load.shortterm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.load.load.midterm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.load.load.longterm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.aggregation.percent\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_cpu\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_elapsed_time\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_memory\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_speed\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_rx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_tx\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_rx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_tx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_rx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_nic_tx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_storage\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_swap\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_vdsm\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.host_vms\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_tx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_rx_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_tx_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_min\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_max\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_target\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_balloon_cur\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_cpu_sys\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_cpu_usage\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_ops\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_ops\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_flush_latency\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_apparent_size\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_rate\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_true_size\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_rate\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_write_latency\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_latency\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_disk_read_bytes\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_rx_dropped\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_cpu_user\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_rx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_tx_errors\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.statsd.vm_nic_speed\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_n_tup_g\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_n_tup_c\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_numbackends\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_xact\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_db_size\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}, {\"count\": 0, \"name\": \"collectd.postgresql.pg_blks\", \"indexed\": true, \"analyzed\": false, \"doc_values\": true, \"type\": \"number\", \"scripted\": false}]", "timeFieldName": "@timestamp", "title": "$TITLE$" } diff --git a/elasticsearch/index_templates/com.redhat.viaq-openshift-operations.template.json b/elasticsearch/index_templates/com.redhat.viaq-openshift-operations.template.json index 6af486280..7f3f0dd56 100644 --- a/elasticsearch/index_templates/com.redhat.viaq-openshift-operations.template.json +++ b/elasticsearch/index_templates/com.redhat.viaq-openshift-operations.template.json @@ -3,7 +3,7 @@ "mappings": { "_default_": { "_meta": { - "version": "2017.09.06.0" + "version": "2017.11.11.0" }, "date_detection": false, "dynamic_templates": [ @@ -130,10 +130,55 @@ }, "docker": { "properties": { + "command": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, "container_id": { "doc_values": true, "index": "not_analyzed", "type": "string" + }, + "container_id_short": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "container_image": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "operation": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "pid": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "reason": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "result": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "sauid": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "user": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" } } }, diff --git a/elasticsearch/index_templates/com.redhat.viaq-openshift-project.template.json b/elasticsearch/index_templates/com.redhat.viaq-openshift-project.template.json index d6c4edf0f..c2faee90b 100644 --- a/elasticsearch/index_templates/com.redhat.viaq-openshift-project.template.json +++ b/elasticsearch/index_templates/com.redhat.viaq-openshift-project.template.json @@ -3,7 +3,7 @@ "mappings": { "_default_": { "_meta": { - "version": "2017.09.06.0" + "version": "2017.11.11.0" }, "date_detection": false, "dynamic_templates": [ @@ -130,10 +130,55 @@ }, "docker": { "properties": { + "command": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, "container_id": { "doc_values": true, "index": "not_analyzed", "type": "string" + }, + "container_id_short": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "container_image": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "operation": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "pid": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "reason": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "result": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "sauid": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" + }, + "user": { + "doc_values": true, + "index": "not_analyzed", + "type": "string" } } }, diff --git a/elasticsearch/index_templates/org.ovirt.viaq-collectd.template.json b/elasticsearch/index_templates/org.ovirt.viaq-collectd.template.json index 5b51f4ff2..4e48b62d8 100644 --- a/elasticsearch/index_templates/org.ovirt.viaq-collectd.template.json +++ b/elasticsearch/index_templates/org.ovirt.viaq-collectd.template.json @@ -2,13 +2,14 @@ "aliases": {}, "mappings": { "_default_": { + "_all": { + "enabled": false + }, "_meta": { - "version": "2017.09.06.0" + "version": "2017.11.11.0" }, "_source": { - "excludes": [ - "collectd.*" - ] + "enabled": false }, "date_detection": false, "dynamic_templates": [