diff --git a/public/components/integrations/components/__tests__/__snapshots__/available_integration_card_view.test.tsx.snap b/public/components/integrations/components/__tests__/__snapshots__/available_integration_card_view.test.tsx.snap index 6f47d925a0..0fb8df0d21 100644 --- a/public/components/integrations/components/__tests__/__snapshots__/available_integration_card_view.test.tsx.snap +++ b/public/components/integrations/components/__tests__/__snapshots__/available_integration_card_view.test.tsx.snap @@ -444,6 +444,54 @@ exports[`Available Integration Card View Test Renders nginx integration card vie className="euiSpacer euiSpacer--l" /> + + + + + + + + + + + No Integrations Available + + + You can get bundles from + + + the OpenSearch Catalog. + + + + + + + + + + + diff --git a/public/components/integrations/components/available_integration_card_view.tsx b/public/components/integrations/components/available_integration_card_view.tsx index 5c0ff6fd2c..9426f6cfc9 100644 --- a/public/components/integrations/components/available_integration_card_view.tsx +++ b/public/components/integrations/components/available_integration_card_view.tsx @@ -11,6 +11,8 @@ import { EuiSpacer, EuiFieldSearch, EuiButtonGroup, + EuiText, + EuiLoadingDashboards, } from '@elastic/eui'; import _ from 'lodash'; import React, { useState } from 'react'; @@ -20,11 +22,47 @@ import { } from './available_integration_overview_page'; import { INTEGRATIONS_BASE } from '../../../../common/constants/shared'; import { badges } from './integration_category_badge_group'; +import { HttpSetup } from '../../../../../../src/core/public'; -export function AvailableIntegrationsCardView(props: AvailableIntegrationsCardViewProps) { - const http = props.http; - const [toggleIconIdSelected, setToggleIconIdSelected] = useState('1'); +function NoIntegrationsAvailable() { + return ( + <> + + + No Integrations Available + + You can get bundles from{' '} + + the OpenSearch Catalog. + + + + + > + ); +} +function LoadingIntegrations() { + return ( + <> + + + + Loading Integrations... + + > + ); +} + +function RenderRows({ + loading, + integrations, + http, +}: { + loading: boolean; + integrations: AvailableIntegrationType[]; + http: HttpSetup; +}) { const getImage = (url?: string) => { let optionalImg; if (url) { @@ -35,6 +73,39 @@ export function AvailableIntegrationsCardView(props: AvailableIntegrationsCardVi return optionalImg; }; + if (loading) return ; + if (!integrations.length) return ; + return ( + <> + + {integrations.map((i, v) => { + return ( + + (window.location.hash = `#/available/${i.name}`)} + footer={badges(i.labels ?? [])} + /> + + ); + })} + + + > + ); +} + +export function AvailableIntegrationsCardView(props: AvailableIntegrationsCardViewProps) { + const [toggleIconIdSelected, setToggleIconIdSelected] = useState('1'); + const toggleButtonsIcons = [ { id: '0', @@ -57,36 +128,6 @@ export function AvailableIntegrationsCardView(props: AvailableIntegrationsCardVi } }; - const renderRows = (integrations: AvailableIntegrationType[]) => { - if (!integrations || !integrations.length) return null; - return ( - <> - - {integrations.map((i, v) => { - return ( - - (window.location.hash = `#/available/${i.name}`)} - footer={badges(i.labels ?? [])} - /> - - ); - })} - - - > - ); - }; - return ( @@ -113,7 +154,11 @@ export function AvailableIntegrationsCardView(props: AvailableIntegrationsCardVi - {renderRows(props.data.hits.filter((x) => x.name.includes(props.query)))} + x.name.includes(props.query))} + http={props.http} + /> ); } diff --git a/public/components/integrations/components/available_integration_overview_page.tsx b/public/components/integrations/components/available_integration_overview_page.tsx index 9fc1ec9ea6..153909b8c3 100644 --- a/public/components/integrations/components/available_integration_overview_page.tsx +++ b/public/components/integrations/components/available_integration_overview_page.tsx @@ -21,7 +21,6 @@ import { AvailableIntegrationsTable } from './available_integration_table'; import { AvailableIntegrationsCardView } from './available_integration_card_view'; import { INTEGRATIONS_BASE } from '../../../../common/constants/shared'; import { AvailableIntegrationOverviewPageProps } from './integration_types'; -import { useToast } from '../../../../public/components/common/toast'; import { HttpStart } from '../../../../../../src/core/public'; export interface AvailableIntegrationType { @@ -57,6 +56,7 @@ export interface AvailableIntegrationsCardViewProps { setQuery: (input: string) => void; renderCateogryFilters: () => React.JSX.Element; http: HttpStart; + loading: boolean; } export function AvailableIntegrationOverviewPage(props: AvailableIntegrationOverviewPageProps) { @@ -64,8 +64,8 @@ export function AvailableIntegrationOverviewPage(props: AvailableIntegrationOver const [query, setQuery] = useState(''); const [isCardView, setCardView] = useState(true); - const { setToast } = useToast(); const [data, setData] = useState({ hits: [] }); + const [loading, setLoading] = useState(true); const [isPopoverOpen, setIsPopoverOpen] = useState(false); @@ -116,6 +116,7 @@ export function AvailableIntegrationOverviewPage(props: AvailableIntegrationOver async function handleDataRequest() { http.get(`${INTEGRATIONS_BASE}/repository`).then((exists) => { setData(exists.data); + setLoading(false); let newItems = exists.data.hits.flatMap( (hit: { labels?: string[] }) => hit.labels?.sort() ?? [] @@ -130,24 +131,6 @@ export function AvailableIntegrationOverviewPage(props: AvailableIntegrationOver }); } - async function addIntegrationRequest(name: string) { - http - .post(`${INTEGRATIONS_BASE}/store`) - .then((res) => { - setToast( - `${name} integration successfully added!`, - 'success', - `View the added assets from ${name} in the Added Integrations list` - ); - }) - .catch((err) => - setToast( - 'Failed to load integration. Check Added Integrations table for more details', - 'danger' - ) - ); - } - const renderCateogryFilters = () => { return ( @@ -180,7 +163,7 @@ export function AvailableIntegrationOverviewPage(props: AvailableIntegrationOver return ( - {IntegrationHeader()} + {isCardView ? AvailableIntegrationsCardView({ data: { @@ -192,6 +175,7 @@ export function AvailableIntegrationOverviewPage(props: AvailableIntegrationOver setQuery, renderCateogryFilters, http, + loading, }) : AvailableIntegrationsTable({ loading: false, diff --git a/server/adaptors/integrations/__data__/repository/apache/apache-1.0.0.json b/server/adaptors/integrations/__data__/repository/apache/apache-1.0.0.json deleted file mode 100644 index 99fb24a16d..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/apache-1.0.0.json +++ /dev/null @@ -1,46 +0,0 @@ -{ - "name": "apache", - "version": "1.0.0", - "displayName": "Apache Dashboard", - "description": "Apache web logs collector", - "license": "Apache-2.0", - "type": "logs_apache", - "labels": ["Observability", "Logs"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/apache/info", - "statics": { - "logo": { - "annotation": "Apache Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "Apache Dashboard", - "path": "dashboard1.png" - } - ] - }, - "components": [ - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "http", - "version": "1.0.0" - }, - { - "name": "logs_apache", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "apache", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/apache/assets/apache-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/apache/assets/apache-1.0.0.ndjson deleted file mode 100644 index 6bee20b263..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/assets/apache-1.0.0.ndjson +++ /dev/null @@ -1,11 +0,0 @@ -{"attributes": {"fields": "[{\"name\": \"_index\", \"type\": \"string\", \"esTypes\": [\"_index\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"_score\", \"type\": \"number\", \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"_source\", \"type\": \"_source\", \"esTypes\": [\"_source\"], \"count\": 0, \"scripted\": false, \"searchable\": false, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"_type\", \"type\": \"string\", \"esTypes\": [\"_type\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"severity.number\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"severity.text\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"severity.text.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"severity.text\"}}}, {\"name\": \"attributes.data_stream.dataset\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"attributes.data_stream.namespace\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"attributes.data_stream.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"body\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"@message\", \"type\": \"string\", \"esTypes\": [\"alias\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"@timestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"observedTimestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"observerTime\", \"type\": \"string\", \"esTypes\": [\"alias\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"traceId\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"spanId\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"schemaUrl\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"schemaUrl.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"schemaUrl\"}}}, {\"name\": \"instrumentationScope.name\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.name.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.name\"}}}, {\"name\": \"instrumentationScope.version\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.version.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.version\"}}}, {\"name\": \"instrumentationScope.dropped_attributes_count\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"instrumentationScope.schemaUrl\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.schemaUrl.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.schemaUrl\"}}}, {\"name\": \"event.domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.source\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.category\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.kind\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.result\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.message\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.stacktrace\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.flavor\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.url\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.schema\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.target\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.route\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.client.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.resent_count\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.id\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"http.request.id.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"http.request.id\"}}}, {\"name\": \"http.request.body.content\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.method\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.referrer\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.mime_type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.id\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"http.response.id.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"http.response.id\"}}}, {\"name\": \"http.response.body.content\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.status_code\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.sock.family\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.address\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.source.address.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.source.address\"}}}, {\"name\": \"communication.source.domain\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.source.domain.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.source.domain\"}}}, {\"name\": \"communication.source.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.mac\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.packets\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.city_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.country_iso_code\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.country_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.location\", \"type\": \"geo_point\", \"esTypes\": [\"geo_point\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.address\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.destination.address.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.destination.address\"}}}, {\"name\": \"communication.destination.domain\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.destination.domain.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.destination.domain\"}}}, {\"name\": \"communication.destination.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.mac\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.packets\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.city_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.country_iso_code\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.country_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.location\", \"type\": \"geo_point\", \"esTypes\": [\"geo_point\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.original\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.version\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.device.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.platform\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.full\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.family\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.version\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.os.kernel\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}]", "timeFieldName": "@timestamp", "title": "ss4o_logs-*-*"}, "id": "d8a559c0-04b9-11ee-a4b2-e1966e8247fd", "migrationVersion": {"index-pattern": "7.6.0"}, "references": [], "type": "index-pattern", "updated_at": "2023-07-21T16:00:22", "version": "WzE0LDFd"} -{ "attributes": { "columns": [ "communication.source.address.keyword", "http.request.method", "http.url", "http.response.status_code" ], "description": "", "hits": 0, "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [], \"highlight\": { \"fields\": { \"*\": {} }, \"fragment_size\": 2147483647, \"post_tags\": [ \"@/kibana-highlighted-field@\" ], \"pre_tags\": [ \"@kibana-highlighted-field@\" ], \"require_field_match\": false }, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\" }" }, "sort": [ [ "@timestamp", "desc" ] ], "title": "Apache access logs ", "version": 1 }, "coreMigrationVersion": "8.0.0", "id": "Apache-access-logs-ecs", "migrationVersion": { "search": "7.9.3" }, "references": [ { "id": "d8a559c0-04b9-11ee-a4b2-e1966e8247fd", "name": "kibanaSavedObjectMeta.searchSourceJSON.index", "type": "index-pattern" } ], "type": "search", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzNDQsMV0=" } -{ "attributes": { "columns": [ "communication.source.address.keyword", "severity.text", "apache2.error.module", "body" ], "description": "", "hits": 0, "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [], \"highlight\": { \"fields\": { \"*\": {} }, \"fragment_size\": 2147483647, \"post_tags\": [ \"@/kibana-highlighted-field@\" ], \"pre_tags\": [ \"@kibana-highlighted-field@\" ], \"require_field_match\": false }, \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\",\"query\": { \"language\": \"kuery\", \"query\": \"event.domain:apache.error\"}}" }, "sort": [ [ "@timestamp", "desc" ] ], "title": "Apache errors log ", "version": 1 }, "coreMigrationVersion": "8.0.0", "id": "Apache-errors-log-ecs", "migrationVersion": { "search": "7.9.3" }, "references": [ { "id": "d8a559c0-04b9-11ee-a4b2-e1966e8247fd", "name": "kibanaSavedObjectMeta.searchSourceJSON.index", "type": "index-pattern" } ], "type": "search", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzNDMsMV0=" } -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [] }" }, "savedSearchRefName": "search_0", "title": "Browsers breakdown ", "uiStateJSON": "{}", "version": 1, "visState": "{ \"aggs\": [ { \"enabled\": true, \"id\": \"1\", \"params\": { \"field\": \"communication.source.address.keyword\" }, \"schema\": \"metric\", \"type\": \"cardinality\" }, { \"enabled\": true, \"id\": \"2\", \"params\": { \"field\": \"http.user_agent.name\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"segment\", \"type\": \"terms\" }, { \"enabled\": true, \"id\": \"3\", \"params\": { \"field\": \"http.user_agent.version\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"segment\", \"type\": \"terms\" } ], \"listeners\": {}, \"params\": { \"addLegend\": true, \"addTooltip\": true, \"distinctColors\": true, \"isDonut\": true, \"legendPosition\": \"bottom\", \"palette\": { \"name\": \"kibana_palette\", \"type\": \"palette\" }, \"shareYAxis\": true }, \"title\": \"Apache browsers ECS\", \"type\": \"pie\" }" }, "coreMigrationVersion": "8.0.0", "id": "Apache-browsers-ecs", "migrationVersion": { "visualization": "7.10.0" }, "references": [ { "id": "Apache-access-logs-ecs", "name": "search_0", "type": "search" } ], "type": "visualization", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzMzksMV0=" } -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [ ] }" }, "savedSearchRefName": "search_0", "title": "Unique IPs map ", "uiStateJSON": "{\"mapCenter\": [14.944784875088372,5.09765625 ]}", "version": 1, "visState":"{ \"title\":\"Hehe\", \"type\":\"region_map\", \"aggs\":[ { \"id\":\"1\", \"enabled\":true, \"type\":\"count\", \"params\":{ }, \"schema\":\"metric\" }, { \"id\":\"2\", \"enabled\":true, \"type\":\"terms\", \"params\":{ \"field\":\"communication.source.geo.country_iso_code\", \"orderBy\":\"1\", \"order\":\"desc\", \"size\":5, \"otherBucket\":false, \"otherBucketLabel\":\"Other\", \"missingBucket\":false, \"missingBucketLabel\":\"Missing\" }, \"schema\":\"segment\" } ], \"params\":{ \"addTooltip\":true, \"colorSchema\":\"Yellow to Red\", \"emsHotLink\":\"?locale=en#file/world_countries\", \"isDisplayWarning\":true, \"layerChosenByUser\":\"default\", \"legendPosition\":\"bottomright\", \"mapCenter\":[ 0, 0 ], \"mapZoom\":2, \"outlineWeight\":1, \"selectedCustomJoinField\":null, \"selectedJoinField\":{ \"description\":\"ISO 3166-1 alpha-2 Code\", \"name\":\"iso2\", \"type\":\"id\" }, \"selectedLayer\":{ \"attribution\":\"Made with NaturalEarth\", \"created_at\":\"2017-04-26T17:12:15.978370\", \"fields\":[ { \"description\":\"ISO 3166-1 alpha-2 Code\", \"name\":\"iso2\", \"type\":\"id\" }, { \"description\":\"ISO 3166-1 alpha-3 Code\", \"name\":\"iso3\", \"type\":\"id\" }, { \"description\":\"Name\", \"name\":\"name\", \"type\":\"name\" } ], \"format\":{ \"type\":\"geojson\" }, \"id\":\"world_countries\", \"isEMS\":true, \"layerId\":\"elastic_maps_service.World Countries\", \"name\":\"World Countries\", \"origin\":\"elastic_maps_service\" }, \"showAllShapes\":true, \"wms\":{ \"enabled\":false, \"options\":{ \"attribution\":\"\", \"format\":\"image/png\", \"layers\":\"\", \"styles\":\"\", \"transparent\":true, \"version\":\"\" }, \"selectedTmsLayer\":{ \"attribution\":\"Map data © OpenStreetMap contributors\", \"id\":\"road_map\", \"maxZoom\":14, \"minZoom\":0, \"origin\":\"elastic_maps_service\" }, \"url\":\"\" } } }" }, "coreMigrationVersion": "7.0.0", "id": "Apache-access-unique-IPs-map-ecs", "migrationVersion": { "visualization": "7.10.0" }, "references": [ { "id": "Apache-access-logs-ecs", "name": "search_0", "type": "search" } ], "type": "visualization", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzMzcsMV0=" } -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [] }" }, "savedSearchRefName": "search_0", "title": "Operating systems breakdown ", "uiStateJSON": "{}", "version": 1, "visState": "{ \"aggs\": [ { \"enabled\": true, \"id\": \"1\", \"params\": { \"field\": \"communication.source.address.keyword\" }, \"schema\": \"metric\", \"type\": \"cardinality\" }, { \"enabled\": true, \"id\": \"2\", \"params\": { \"field\": \"http.user_agent.os.name\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"segment\", \"type\": \"terms\" }, { \"enabled\": true, \"id\": \"3\", \"params\": { \"field\": \"http.user_agent.os.version\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"segment\", \"type\": \"terms\" } ], \"listeners\": {}, \"params\": { \"addLegend\": true, \"addTooltip\": true, \"distinctColors\": true, \"isDonut\": true, \"legendPosition\": \"bottom\", \"palette\": { \"name\": \"kibana_palette\", \"type\": \"palette\" }, \"shareYAxis\": true }, \"title\": \"Apache operating systems ECS\", \"type\": \"pie\" }" }, "coreMigrationVersion": "7.0.0", "id": "Apache-operating-systems-ecs", "migrationVersion": { "visualization": "7.10.0" }, "references": [ { "id": "Apache-access-logs-ecs", "name": "search_0", "type": "search" } ], "type": "visualization", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzNDAsMV0=" } -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [] }" }, "savedSearchRefName": "search_0", "title": "Error logs over time ", "uiStateJSON": "{}", "version": 1, "visState": "{ \"aggs\": [ { \"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\" }, { \"enabled\": true, \"id\": \"2\", \"params\": { \"extended_bounds\": {}, \"field\": \"@timestamp\", \"interval\": \"auto\", \"min_doc_count\": 1 }, \"schema\": \"segment\", \"type\": \"date_histogram\" }, { \"enabled\": true, \"id\": \"3\", \"params\": { \"field\": \"severity.text.keyword\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"group\", \"type\": \"terms\" } ], \"listeners\": {}, \"params\": { \"addLegend\": true, \"addTimeMarker\": false, \"addTooltip\": true, \"defaultYExtents\": false, \"legendPosition\": \"right\", \"mode\": \"stacked\", \"scale\": \"linear\", \"setYExtents\": false, \"shareYAxis\": true, \"times\": [], \"yAxis\": {} }, \"title\": \"Apache error logs over time ECS\", \"type\": \"histogram\" }" }, "coreMigrationVersion": "7.10.0", "id": "Apache-error-logs-over-time-ecs", "migrationVersion": { "visualization": "7.10.0" }, "references": [ { "id": "Apache-errors-log-ecs", "name": "search_0", "type": "search" } ], "type": "visualization", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzNDEsMV0=" } -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [] }" }, "savedSearchRefName": "search_0", "title": "Top URLs by response code ", "uiStateJSON": "{ \"vis\": { \"colors\": { \"200\": \"#7EB26D\", \"404\": \"#EF843C\" } } }", "version": 1, "visState": "{ \"aggs\": [ { \"enabled\": true, \"id\": \"1\", \"params\": { }, \"schema\": \"metric\", \"type\": \"count\" }, { \"enabled\": true, \"id\": \"3\", \"params\": { \"customLabel\": \"URL\", \"field\": \"http.url\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"split\", \"type\": \"terms\" }, { \"enabled\": true, \"id\": \"2\", \"params\": { \"field\": \"http.response.status_code\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"segment\", \"type\": \"terms\" } ], \"listeners\": { }, \"params\": { \"addLegend\": true, \"addTooltip\": true, \"distinctColors\": true, \"isDonut\": false, \"legendPosition\": \"right\", \"palette\": { \"name\": \"kibana_palette\", \"type\": \"palette\" }, \"row\": false, \"shareYAxis\": true }, \"title\": \"Apache response codes of top URLs ECS\", \"type\": \"pie\" }" }, "coreMigrationVersion": "8.0.0", "id": "Apache-response-codes-of-top-URLs-ecs", "migrationVersion": { "visualization": "7.10.0" }, "references": [ { "id": "Apache-access-logs-ecs", "name": "search_0", "type": "search" } ], "type": "visualization", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzMzgsMV0=" } -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{ \"filter\": [] }" }, "savedSearchRefName": "search_0", "title": "Response codes over time ", "uiStateJSON": "{ \"vis\": { \"colors\": { \"200\": \"#629E51\", \"404\": \"#EF843C\" } } }", "version": 1, "visState": "{ \"aggs\": [ { \"enabled\": true, \"id\": \"1\", \"params\": {}, \"schema\": \"metric\", \"type\": \"count\" }, { \"enabled\": true, \"id\": \"2\", \"params\": { \"extended_bounds\": {}, \"field\": \"@timestamp\", \"interval\": \"auto\", \"min_doc_count\": 1 }, \"schema\": \"segment\", \"type\": \"date_histogram\" }, { \"enabled\": true, \"id\": \"3\", \"params\": { \"field\": \"http.response.status_code\", \"order\": \"desc\", \"orderBy\": \"1\", \"size\": 5 }, \"schema\": \"group\", \"type\": \"terms\" } ], \"listeners\": { }, \"params\": { \"addLegend\": true, \"addTimeMarker\": false, \"addTooltip\": true, \"defaultYExtents\": false, \"legendPosition\": \"right\", \"mode\": \"stacked\", \"scale\": \"linear\", \"setYExtents\": false, \"shareYAxis\": true, \"times\": [ ], \"yAxis\": { } }, \"title\": \"Apache response codes over time ECS\", \"type\": \"histogram\" }" }, "coreMigrationVersion": "8.0.0", "id": "Apache-response-codes-over-time-ecs", "migrationVersion": { "visualization": "7.10.0" }, "references": [ { "id": "Apache-access-logs-ecs", "name": "search_0", "type": "search" } ], "type": "visualization", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzNDIsMV0=" } -{ "attributes": { "description": "Filebeat Apache module dashboard", "hits": 0, "kibanaSavedObjectMeta": { "searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}" }, "optionsJSON": "{\"hidePanelTitles\":false,\"useMargins\":true}", "refreshInterval": { "pause": true, "value": 0 }, "timeFrom": "now-15m", "timeRestore": true, "panelsJSON": "[ { \"embeddableConfig\": { \"enhancements\": {}, \"mapBounds\": { \"bottom_right\": { \"lat\": -3.864254615721396, \"lon\": 205.3125 }, \"top_left\": { \"lat\": 67.7427590666639, \"lon\": -205.6640625 } }, \"mapCenter\": [ 40.713955826286046, -0.17578125 ], \"mapCollar\": { \"bottom_right\": { \"lat\": -39.667755, \"lon\": 180 }, \"top_left\": { \"lat\": 90, \"lon\": -180 }, \"zoom\": 2 }, \"mapZoom\": 2 }, \"gridData\": { \"h\": 12, \"i\": \"1\", \"w\": 48, \"x\": 0, \"y\": 0 }, \"panelIndex\": \"1\", \"panelRefName\": \"panel_1\", \"type\": \"visualization\", \"version\": \"7.3.0\" }, { \"embeddableConfig\": { \"enhancements\": {} }, \"gridData\": { \"h\": 12, \"i\": \"2\", \"w\": 32, \"x\": 0, \"y\": 20 }, \"panelIndex\": \"2\", \"panelRefName\": \"panel_2\", \"type\": \"visualization\", \"version\": \"7.3.0\" }, { \"embeddableConfig\": { \"enhancements\": {} }, \"gridData\": { \"h\": 12, \"i\": \"3\", \"w\": 16, \"x\": 32, \"y\": 20 }, \"panelIndex\": \"3\", \"panelRefName\": \"panel_3\", \"type\": \"visualization\", \"version\": \"7.3.0\" }, { \"embeddableConfig\": { \"enhancements\": { } }, \"gridData\": { \"h\": 8, \"i\": \"4\", \"w\": 8, \"x\": 40, \"y\": 12 }, \"panelIndex\": \"4\", \"panelRefName\": \"panel_4\", \"type\": \"visualization\", \"version\": \"7.3.0\" }, { \"embeddableConfig\": { \"enhancements\": { } }, \"gridData\": { \"h\": 8, \"i\": \"5\", \"w\": 48, \"x\": 0, \"y\": 32 }, \"panelIndex\": \"5\", \"panelRefName\": \"panel_5\", \"type\": \"visualization\", \"version\": \"7.3.0\" }, { \"embeddableConfig\": { \"enhancements\": { } }, \"gridData\": { \"h\": 8, \"i\": \"6\", \"w\": 40, \"x\": 0, \"y\": 12 }, \"panelIndex\": \"6\", \"panelRefName\": \"panel_6\", \"type\": \"visualization\", \"version\": \"7.3.0\" }, { \"embeddableConfig\": { \"columns\": [ \"communication.source.address\", \"severity.number\", \"severity.text\", \"body\" ], \"enhancements\": { }, \"sort\": [ \"@timestamp\", \"desc\" ] }, \"gridData\": { \"h\": 12, \"i\": \"7\", \"w\": 48, \"x\": 0, \"y\": 50 }, \"panelIndex\": \"7\", \"panelRefName\": \"panel_7\", \"type\": \"search\", \"version\": \"7.3.0\" } ]", "title": "Access and error logs ECS", "version": 1 }, "coreMigrationVersion": "7.9.3", "id": "Filebeat-Apache-Dashboard-ecs", "migrationVersion": { "dashboard": "7.9.3" }, "references": [ { "id": "Apache-access-unique-IPs-map-ecs", "name": "panel_1", "type": "visualization" }, { "id": "Apache-response-codes-of-top-URLs-ecs", "name": "panel_2", "type": "visualization" }, { "id": "Apache-browsers-ecs", "name": "panel_3", "type": "visualization" }, { "id": "Apache-operating-systems-ecs", "name": "panel_4", "type": "visualization" }, { "id": "Apache-error-logs-over-time-ecs", "name": "panel_5", "type": "visualization" }, { "id": "Apache-response-codes-over-time-ecs", "name": "panel_6", "type": "visualization" }, { "id": "Apache-errors-log-ecs", "name": "panel_7", "type": "search" } ], "type": "dashboard", "updated_at": "2021-08-04T16:33:55.372Z", "version": "WzQzNDUsMV0=" } -{"exportedCount":10,"missingRefCount":0,"missingReferences":[]} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/apache/data/sample.json b/server/adaptors/integrations/__data__/repository/apache/data/sample.json deleted file mode 100644 index 5d41e04c90..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/data/sample.json +++ /dev/null @@ -1,206 +0,0 @@ -[ - { - "observedTimestamp": "2023-07-21T16:52:08.000Z", - "http": { - "response": { - "status_code": 406, - "bytes": 6141 - }, - "url": "/strategize", - "flavor": "1.1", - "request": { - "method": "GET" - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": "114.0.0", - "os": { - "name": "Mac OS X", - "full": "Mac OS X 10.15.7", - "version": "10.15.7", - "device": { - "name": "Mac" - } - } - } - }, - "attributes": { - "data_stream": { - "dataset": "apache.access", - "namespace": "production", - "type": "logs" - } - }, - "event": { - "result": "success", - "category": "web", - "name": "access", - "type": "access", - "domain": "apache.access", - "kind": "event" - }, - "communication": { - "source": { - "address": "127.0.0.1", - "ip": "42.204.151.42", - "geo": { - "country": "China", - "country_iso_code": "CN" - } - } - }, - "body": "15.248.1.132 - - [21/Jun/2023:21:35:24 +0000] \"GET / HTTP/1.1\" 403 45 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36\"", - "traceId": "d09d293a27c9a754f2bf0196b5a1c9bc", - "spanId": "18ba0e515e42dad0", - "@timestamp": "2023-07-21T16:52:08.000Z" - }, - { - "observedTimestamp": "2023-07-21T16:52:08.000Z", - "http": { - "response": { - "status_code": 406, - "bytes": 6141 - }, - "url": "/strategize", - "flavor": "1.1", - "request": { - "method": "GET" - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": "114.0.0", - "os": { - "name": "Mac OS X", - "full": "Mac OS X 10.15.7", - "version": "10.15.7", - "device": { - "name": "Mac" - } - } - } - }, - "attributes": { - "data_stream": { - "dataset": "apache.access", - "namespace": "production", - "type": "logs" - } - }, - "event": { - "result": "success", - "category": "web", - "name": "access", - "type": "access", - "domain": "apache.access", - "kind": "event" - }, - "communication": { - "source": { - "address": "127.0.0.1", - "ip": "42.204.151.42", - "geo": { - "country": "China", - "country_iso_code": "CN" - } - } - }, - - "body": "15.248.1.132 - - [21/Jun/2023:21:35:24 +0000] \"GET / HTTP/1.1\" 403 45 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36\"", - "traceId": "d09d293a27c9a754f2bf0196b5a1c9bc", - "spanId": "18ba0e515e42dad0", - "@timestamp": "2023-07-21T16:52:08.000Z" - }, - { - "observedTimestamp": "2023-07-25:52:08.000Z", - "http": { - "response": { - "status_code": 400, - "bytes": 6141 - }, - "url": "/strategize", - "flavor": "1.1", - "request": { - "method": "GET" - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": "114.0.0", - "os": { - "name": "Mac OS X", - "full": "Mac OS X 10.15.7", - "version": "10.15.7", - "device": { - "name": "Mac" - } - } - } - }, - "attributes": { - "data_stream": { - "dataset": "apache.access", - "namespace": "production", - "type": "logs" - } - }, - "event": { - "result": "success", - "category": "web", - "name": "access", - "type": "access", - "domain": "apache.access", - "kind": "event" - }, - "communication": { - "source": { - "address": "127.0.0.1", - "ip": "42.204.151.42", - "geo": { - "country": "United States", - "country_iso_code": "US" - } - } - }, - "body": "15.248.1.132 - - [21/Jun/2023:21:35:24 +0000] \"GET / HTTP/1.1\" 403 45 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36\"", - "traceId": "d09d293a27c9a754f2bf0196b5a1c9bc", - "spanId": "18ba0e515e42dad0", - "@timestamp": "2023-07-21T16:52:08.000Z" - }, - { - "attributes": { - "data_stream": { - "dataset": "apache.error", - "namespace": "production", - "type": "logs" - } - }, - "observedTimestamp": "2023-07-21T16:52:08.000Z", - "@timestamp": "2023-07-21T16:52:08.000Z", - "severity": { - "text": "cgid:error" - }, - "communication": { - "source": { - "address": "127.0.0.1", - "ip": "42.204.151.42", - "geo": { - "country": "France", - "country_iso_code": "FR" - } - } - }, - "event": { - "result": "error", - "category": "web", - "name": "error", - "type": "error", - "domain": "apache.error", - "kind": "error" - }, - "traceId": "d09d293a27c9a754f2bf0196b5a1c9bc", - "spanId": "18ba0e515e42dad0", - "body": "[Sat Aug 12 04:05:51 2006] [notice] Apache/1.3.11 (Unix) mod_perl/1.21 configured -- resuming normal operations" - } -] \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/apache/info/INGESTION.md b/server/adaptors/integrations/__data__/repository/apache/info/INGESTION.md deleted file mode 100644 index 27ff56ea92..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/info/INGESTION.md +++ /dev/null @@ -1,156 +0,0 @@ -# Ingestion Pipeline - -To set up an ingestion pipeline, I used Docker to run Fluent-bit and an Apache fake log generator, along with an instance of OpenSearch. - -## FluentBit and OpenSearch Setup - -First, create a `docker-compose.yml` instance like [this](https://github.com/opensearch-project/data-prepper/blob/93d06db5cad280e2e4c53e12dfb47c7cbaa7b364/examples/log-ingestion/docker-compose.yaml). This will pull FluentBit and OpenSearch Docker images and run them in `opensearch-net` Docker network. - -Next, use an Apache log generator to generate sample logs. I used `mingrammer/flog` in my `docker-compose.yml` file: - -``` - apache: - image: mingrammer/flog - command: "--loop -d 5s -f apache_combined" - container_name: apache - networks: - - opensearch-net # All of the containers will join the same Docker bridge network - links: - - fluentbit - logging: - driver: "fluentd" - options: - fluentd-address: 127.0.0.1:24224 - tag: apache.access - fluentd-async: "true" -``` - -Then, create a `fluent-bit.conf` as follows: - -``` -[SERVICE] - Parsers_File parsers.conf - -[INPUT] - Name forward - Port 24224 - -[FILTER] - Name parser - Match apache.access - Key_Name log - Parser apache - -[FILTER] - Name lua - Match apache.access - Script otel-converter.lua - call convert_to_otel - -[OUTPUT] - Name opensearch - Match apache.access - Host opensearch - Port 9200 - Index ss4o_logs-apache-prod-sample - Suppress_Type_Name On -``` - -This creates a Fluent-Bit pipeline that forwards your generated apache logs through a parser to OpenSearch. - -Create a `parsers.conf` file as follows: - -``` -[PARSER] - Name apache - Format regex - Regex ^(?[^ ]*) [^ ]* (?[^ ]*) \[(?[^\]]*)\] "(?\S+)(?: +(?[^\"]*?)(?: +\S*)?)?" (?[^ ]*) (?[^ ]*)(?: "(?[^\"]*)" "(?[^\"]*)")?$ - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z -``` - -You can also use a [GeoIP2 Filter](https://docs.fluentbit.io/manual/pipeline/filters/geoip2-filter) to enrich the data with geolocation data. - -Finally, I used a `otel-converter.lua` script to convert the parsed data into schema-compliant data: - -```lua -local hexCharset = "0123456789abcdef" -local function randHex(length) - if length > 0 then - local index = math.random(1, #hexCharset) - return randHex(length - 1) .. hexCharset:sub(index, index) - else - return "" - end -end - -local function format_apache(c) - return string.format( - "%s - %s [%s] \"%s %s HTTP/1.1\" %s %s", - c.host, - c.user, - os.date("%d/%b/%Y:%H:%M:%S %z"), - c.method, - c.path, - c.code, - c.size, - c.referer, - c.agent - ) -end - -function convert_to_otel(tag, timestamp, record) - if tag=="apache.access" then - record.remote=record.host - end - - local data = { - traceId=randHex(32), - spanId=randHex(16), - ["@timestamp"]=(record.timestamp or os.date("!%Y-%m-%dT%H:%M:%S.000Z")), - observedTimestamp=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - body=format_apache(record), - attributes={ - data_stream={ - dataset=tag, - namespace="production", - type="logs" - } - }, - event={ - category="web", - name="access", - domain=tag, - kind="event", - result="success", - type="access" - }, - http={ - request={ - method=record.method - }, - response={ - bytes=tonumber(record.size), - status_code=tonumber(record.code) - }, - flavor="1.1", - url=record.path, - user_agent=record.agent - }, - communication={ - source={ - address="127.0.0.1", - ip=record.remote, - geo={ - country_iso_code=record.country_iso_code - -- location={ - -- lat=record.latitude, - -- lon=record.longitude - -- } - } - } - } - } - return 1, timestamp, data -end -``` diff --git a/server/adaptors/integrations/__data__/repository/apache/info/README.md b/server/adaptors/integrations/__data__/repository/apache/info/README.md deleted file mode 100644 index eb85135a5f..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/info/README.md +++ /dev/null @@ -1,17 +0,0 @@ -# Apache Integration - -## What is Apache ? - -Apache is an open source web server software for modern operating systems including UNIX and Windows. - -See additional details [here](https://httpd.apache.org/). - -## What is Apache Integration ? - -An integration is a bundle of pre-canned assets which are bundled togather in a meaningful manner. - -Apache integration includes dashboards, visualisations, queries and an index mapping. - -### Dashboards - - diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/logs_apache-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/apache/schemas/logs_apache-1.0.0.mapping.json deleted file mode 100644 index 68b5fa05b1..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/schemas/logs_apache-1.0.0.mapping.json +++ /dev/null @@ -1,238 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-apache-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-apache": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "communication", "http"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http"], - "version": 1, - "_meta": { - "description": "Simple Schema For Observability", - "catalog": "observability", - "type": "logs", - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - } -} diff --git a/server/adaptors/integrations/__data__/repository/apache/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/apache/static/dashboard1.png deleted file mode 100644 index 9b2619763a..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/apache/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/apache/static/logo.png b/server/adaptors/integrations/__data__/repository/apache/static/logo.png deleted file mode 100644 index 4a82e56ff6..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/apache/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/assets/aws_cloudfront-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_cloudfront/assets/aws_cloudfront-1.0.0.ndjson deleted file mode 100644 index 1321ef6b9c..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/assets/aws_cloudfront-1.0.0.ndjson +++ /dev/null @@ -1,31 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.c-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.c-port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-cookie\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-host\"}}},{\"count\":0,\"name\":\"aws.cloudfront.cs-method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-protocol-version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-referer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-referer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-referer\"}}},{\"count\":0,\"name\":\"aws.cloudfront.cs-uri-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-uri-stem\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-uri-stem.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-uri-stem\"}}},{\"count\":0,\"name\":\"aws.cloudfront.cs-user-agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-user-agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-user-agent\"}}},{\"count\":0,\"name\":\"aws.cloudfront.fle-encrypted-fields\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.fle-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_city\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-content-len\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-content-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-range-end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-range-start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ssl-cipher\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.ssl-cipher.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.ssl-cipher\"}}},{\"count\":0,\"name\":\"aws.cloudfront.ssl-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.time-taken\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.time-to-first-byte\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_browser\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_browser_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_device\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_os\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_os_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-detailed-result-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-request-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-request-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.x-edge-request-id\"}}},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-response-result-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-result-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-forwarded-for\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.x-forwarded-for.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.x-forwarded-for\"}}},{\"count\":0,\"name\":\"aws.cloudfront.x-host-header\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.x-host-header.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.x-host-header\"}}}]","timeFieldName":"@timestamp","title":"logs-aws-cloudfront-*"},"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-03-07T05:46:59.035Z","version":"WzIyOTk0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Total Request","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Total Request\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Requests\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"ea7381c1-6af7-40eb-ba7a-04a71ee06682","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQwLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Edge Location Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Edge Location Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-location\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"473e248b-25cf-4e57-b1d3-908939f043bb","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQxLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Request History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Request History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Request Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2021-11-23T05:38:00.000Z\",\"to\":\"2021-11-23T05:38:30.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Request Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Request Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"15a9f594-27a7-496e-b83c-cd10315d03bc","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Unique Vistors","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Unique Vistors\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"aws.cloudfront.c-ip\",\"customLabel\":\"Unique Vistors\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"478035df-9660-4dcd-bd92-03e417faf8cd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQzLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Cache Hit Rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Cache Hit Rate\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"unit\":\"\",\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\",\"numerator\":{\"query\":\"\",\"language\":\"kuery\"},\"denominator\":{\"query\":\"aws.cloudfront.x-edge-result-type:M*\",\"language\":\"kuery\"},\"percentiles\":[{\"id\":\"889c9e40-4c21-11ec-82ff-659ecaa3e9b9\",\"mode\":\"line\",\"shade\":0.2,\"value\":50}],\"metric_agg\":\"count\"},{\"id\":\"d4be2aa0-4c2b-11ec-82ff-659ecaa3e9b9\",\"type\":\"filter_ratio\",\"variables\":[{\"id\":\"d764e0a0-4c2b-11ec-82ff-659ecaa3e9b9\",\"name\":\"total\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"script\":\"\",\"denominator\":{\"query\":\"\",\"language\":\"kuery\"},\"numerator\":{\"query\":\"aws.cloudfront.x-edge-response-result-type:Hit\",\"language\":\"kuery\"}}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Request Hit %\",\"type\":\"timeseries\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"split_filters\":[{\"filter\":{\"query\":\"x-edge-result-typ\",\"language\":\"kuery\"},\"label\":\"\",\"color\":\"#68BC00\",\"id\":\"ff9b91e0-4c21-11ec-82ff-659ecaa3e9b9\"}],\"var_name\":\"\"},{\"id\":\"8ade2f30-4c34-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"unit\":\"\",\"id\":\"8ade2f31-4c34-11ec-82ff-659ecaa3e9b9\",\"type\":\"sum\",\"numerator\":{\"query\":\"\",\"language\":\"kuery\"},\"denominator\":{\"query\":\"aws.cloudfront.x-edge-result-type:M*\",\"language\":\"kuery\"},\"percentiles\":[{\"id\":\"889c9e40-4c21-11ec-82ff-659ecaa3e9b9\",\"mode\":\"line\",\"shade\":0.2,\"value\":50}],\"metric_agg\":\"count\",\"field\":\"aws.cloudfront.sc-bytes\"},{\"id\":\"8ade2f32-4c34-11ec-82ff-659ecaa3e9b9\",\"type\":\"filter_ratio\",\"variables\":[{\"id\":\"d764e0a0-4c2b-11ec-82ff-659ecaa3e9b9\",\"name\":\"total\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"script\":\"\",\"denominator\":{\"query\":\"\",\"language\":\"kuery\"},\"numerator\":{\"query\":\"aws.cloudfront.x-edge-response-result-type:Hit\",\"language\":\"kuery\"},\"metric_agg\":\"sum\",\"field\":\"aws.cloudfront.sc-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Bytes Hit %\",\"type\":\"timeseries\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"split_filters\":[{\"filter\":{\"query\":\"x-edge-result-typ\",\"language\":\"kuery\"},\"label\":\"\",\"color\":\"#68BC00\",\"id\":\"ff9b91e0-4c21-11ec-82ff-659ecaa3e9b9\"}],\"var_name\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"87071c10-4c1f-11ec-82ff-659ecaa3e9b9\"}],\"gauge_color_rules\":[{\"id\":\"93a31b40-4c1f-11ec-82ff-659ecaa3e9b9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"time_range_mode\":\"entire_time_range\",\"markdown\":\"# **{{ request_hit.last.formatted }}**\\n\\n{{ request_hit.label }}\\n\\n# **{{ bytes_hit.last.formatted }}**\\n\\n{{ bytes_hit.label }}\\n\",\"markdown_vertical_align\":\"middle\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"33846d06-3b01-4f42-9a49-722dddf39332","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Result Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Result Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-response-result-type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"93d5a98d-bfc5-4928-8428-fb2c50652ab0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ1LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudfront.x-edge-result-type:Miss\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Miss","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Miss\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-uri-stem.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Method\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"e0b656d0-4fb8-45ed-93cf-c8b9e040b886","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.c-ip\",\"orderBy\":\"4\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"2543a91d-5374-41c4-b0d8-6c7db87f999c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ3LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Bandwidth Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Bandwidth Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.cloudfront.cs-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Inbound Bytes\",\"var_name\":\"\"},{\"id\":\"7b8a8180-4c1d-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"7b8a8181-4c1d-11ec-82ff-659ecaa3e9b9\",\"type\":\"sum\",\"field\":\"aws.cloudfront.sc-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Outbound Bytes\",\"var_name\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"e1ym7hlr85xcs2-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"6aa19660-4c1d-11ec-82ff-659ecaa3e9b9\"}],\"markdown\":\"# **{{ inbound_bytes.last.formatted }}**\\n\\n{{ inbound_bytes.label }}\\n\\n\\n# **{{ outbound_bytes.last.formatted }}**\\n\\n{{ outbound_bytes.label }}\\n\",\"gauge_color_rules\":[{\"id\":\"a1655ce0-4c1d-11ec-82ff-659ecaa3e9b9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"time_range_mode\":\"entire_time_range\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"15f1facd-386e-40d5-a8cc-4b4e146597ef","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ4LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Bandwidth Chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Bandwidth Chart\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.cloudfront.cs-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Inbound\",\"type\":\"timeseries\"},{\"id\":\"7bf54b10-4c3a-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"7bf54b11-4c3a-11ec-82ff-659ecaa3e9b9\",\"type\":\"sum\",\"field\":\"aws.cloudfront.sc-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Outbound\",\"type\":\"timeseries\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"8f900fc0-4c3a-11ec-82ff-659ecaa3e9b9\"}],\"bar_color_rules\":[{\"id\":\"90ec1d50-4c3a-11ec-82ff-659ecaa3e9b9\"}],\"gauge_color_rules\":[{\"id\":\"919bbe40-4c3a-11ec-82ff-659ecaa3e9b9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"background_color\":null}}"},"id":"fb733bbd-670c-4587-8235-ff3a07bef919","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ5LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Status Code Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Status Code Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.sc-status\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"8c49d3fa-1183-4ed3-bcdd-6228cc16af57","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUwLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Status Code Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Status Code Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"target_status_code\",\"terms_exclude\":\"200\",\"filter\":{\"query\":\"aws.cloudfront.sc-status: 3*\",\"language\":\"kuery\"},\"label\":\"3xx Count\",\"hidden\":false},{\"id\":\"6f8bd0a0-48e4-11ec-8183-63eada04ff63\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"6f8bd0a1-48e4-11ec-8183-63eada04ff63\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"target_status_code\",\"terms_exclude\":\"200\",\"filter\":{\"query\":\"aws.cloudfront.sc-status: 4*\",\"language\":\"kuery\"},\"label\":\"4xx Count\"},{\"id\":\"98a6bbd0-48e4-11ec-8183-63eada04ff63\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"98a6bbd1-48e4-11ec-8183-63eada04ff63\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"target_status_code\",\"terms_exclude\":\"200\",\"filter\":{\"query\":\"aws.cloudfront.sc-status: 5*\",\"language\":\"kuery\"},\"label\":\"5xx Count\",\"hidden\":false}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"3097c980-48e4-11ec-8183-63eada04ff63\"}],\"markdown\":\"# **{{ 3_xx_count.last.formatted }}**\\n\\n{{ 3_xx_count.label }}\\n\\n\\n\\n# **{{ 4_xx_count.last.formatted }}**\\n\\n{{ 4_xx_count.label }}\\n\\n\\n\\n# **{{ 5_xx_count.last.formatted }}**\\n\\n{{ 5_xx_count.label }}\\n\\n\",\"time_range_mode\":\"entire_time_range\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"8ba922b1-dccb-42a9-9e6d-8f4d9f2c4e54","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUxLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Status History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Status History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2021-11-23T05:38:00.000Z\",\"to\":\"2021-11-23T05:38:30.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.sc-status\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"528674ba-ff99-4f08-8fde-1636ea40af38","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Http Method Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Http Method Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"aa2479f6-9fbe-4229-9262-29cc9cae9970","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUzLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Average Time Taken","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Average Time Taken\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-taken\",\"customLabel\":\"Average Time Taken (seconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"f6600d91-b9a9-450c-b584-dfd807b0f7fa","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Average Time History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Average Time History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-taken\",\"customLabel\":\"Time Taken\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2021-11-24T04:20:00.000Z\",\"to\":\"2021-11-24T04:30:00.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-to-first-byte\",\"customLabel\":\"Time to First Byte\"},\"schema\":\"metric\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Average Time\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Time Taken\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true},{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"id\":\"3\",\"label\":\"Time to First Byte\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"0afbda65-cff4-4df4-8bf4-301d2a8cbd82","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU1LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Average Time To First Byte","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Average Time To First Byte\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-to-first-byte\",\"customLabel\":\"Average Time To First Byte (seconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"a8bd39ce-6983-43c1-9bd2-798b69b7163e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Access URI","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Access URI\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-uri-stem.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Method\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"47ba5807-9e96-421e-b1c6-34ecd1fce041","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU3LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top User Agents","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top User Agents\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-user-agent.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User Agent\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"35d249bb-dd5a-4607-b891-bae20f1644f8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU4LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Access Heatmap","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Access Heatmap\",\"type\":\"heatmap\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-location\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-result-type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"heatmap\",\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":4,\"colorSchema\":\"Greens\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"linear\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"overwriteColor\":false,\"color\":\"black\"}}]}}"},"id":"850e53d2-c196-49b1-9d7a-e0e3c854a850","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU5LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Referer","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Referer\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-referer.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Referer\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"af09602c-a7c8-4a24-923a-0db49f2011d2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYwLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent OS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent OS\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_os\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"OS\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c46581ff-cf0d-4940-bdef-ce37882f7d6a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYxLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent Device","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent Device\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_device\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Device\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"08838046-1b28-4727-b8a5-6e16f750ffe2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent Browser","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent Browser\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_browser\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Browser\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"3affab90-a8cd-4be6-b377-3842861a865f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYzLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent Category","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent Category\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_category\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"ba50ff97-95bd-4a77-8148-14e6f39cc6a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDY0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Requests by Countries or Regions","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Requests by Countries or Regions\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.geo_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"1402e6dc-6e08-4bf3-bc43-f87d0ac32cab","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-07T05:49:41.659Z","version":"WzIzMDI1LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Countries or Regions","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Countries or Regions\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.geo_country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country or Region\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"acefc220-0b93-4f8f-92cb-7594e36639a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDY2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Cities","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Cities\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.geo_city\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"City\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"796eb897-07aa-4b1e-8f3a-40a48d3d59b0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDY3LDFd"} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Requests\"},\"gridData\":{\"h\":8,\"i\":\"54b3e801-8d2c-407f-a565-37ad1aacaaa5\",\"w\":12,\"x\":0,\"y\":0},\"panelIndex\":\"54b3e801-8d2c-407f-a565-37ad1aacaaa5\",\"title\":\"Total Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Edge Locations\"},\"gridData\":{\"h\":15,\"i\":\"c78247bc-61c9-4ecc-bfd4-859946fb9eed\",\"w\":12,\"x\":12,\"y\":0},\"panelIndex\":\"c78247bc-61c9-4ecc-bfd4-859946fb9eed\",\"title\":\"Edge Locations\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request History\"},\"gridData\":{\"h\":15,\"i\":\"92b78123-9b8c-45be-8c6f-5b34ad58e7f4\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"92b78123-9b8c-45be-8c6f-5b34ad58e7f4\",\"title\":\"Request History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Unique Vistors\"},\"gridData\":{\"h\":7,\"i\":\"5ceb5857-c33e-42cb-9ccd-181388c2844a\",\"w\":12,\"x\":0,\"y\":8},\"panelIndex\":\"5ceb5857-c33e-42cb-9ccd-181388c2844a\",\"title\":\"Unique Vistors\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Cache Hit Rate\"},\"gridData\":{\"h\":16,\"i\":\"c4d554ea-b763-4ca1-8b2e-eba0d670b49c\",\"w\":12,\"x\":0,\"y\":15},\"panelIndex\":\"c4d554ea-b763-4ca1-8b2e-eba0d670b49c\",\"title\":\"Cache Hit Rate\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Result Type\"},\"gridData\":{\"h\":16,\"i\":\"ab15b2bb-dde4-4c03-86d5-eb02e58e492c\",\"w\":12,\"x\":12,\"y\":15},\"panelIndex\":\"ab15b2bb-dde4-4c03-86d5-eb02e58e492c\",\"title\":\"Result Type\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Miss URI\"},\"gridData\":{\"h\":16,\"i\":\"66cc1af9-8e28-41d7-a6c2-aaa6c4939c51\",\"w\":24,\"x\":24,\"y\":15},\"panelIndex\":\"66cc1af9-8e28-41d7-a6c2-aaa6c4939c51\",\"title\":\"Top Miss URI\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Client IPs\"},\"gridData\":{\"h\":16,\"i\":\"83d82620-97a0-4d78-9a2d-c3b99d923121\",\"w\":12,\"x\":36,\"y\":31},\"panelIndex\":\"83d82620-97a0-4d78-9a2d-c3b99d923121\",\"title\":\"Top Client IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Bandwidth\"},\"gridData\":{\"h\":16,\"i\":\"0f880ddb-0156-4e2b-8ea5-159ee8471691\",\"w\":12,\"x\":0,\"y\":31},\"panelIndex\":\"0f880ddb-0156-4e2b-8ea5-159ee8471691\",\"title\":\"Bandwidth\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Bandwidth History\"},\"gridData\":{\"h\":16,\"i\":\"52f8283f-d227-440b-be76-ec874b1f4089\",\"w\":24,\"x\":12,\"y\":31},\"panelIndex\":\"52f8283f-d227-440b-be76-ec874b1f4089\",\"title\":\"Bandwidth History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code\"},\"gridData\":{\"h\":18,\"i\":\"54705f11-1f86-49bd-b824-223a4c88df1b\",\"w\":12,\"x\":36,\"y\":47},\"panelIndex\":\"54705f11-1f86-49bd-b824-223a4c88df1b\",\"title\":\"Status Code\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code Count\"},\"gridData\":{\"h\":18,\"i\":\"4baf311f-12ec-43ce-9b7b-9e954f3f674b\",\"w\":12,\"x\":0,\"y\":47},\"panelIndex\":\"4baf311f-12ec-43ce-9b7b-9e954f3f674b\",\"title\":\"Status Code Count\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status History\"},\"gridData\":{\"h\":18,\"i\":\"d1ab93e7-455f-44da-9833-0a66b5d203bd\",\"w\":24,\"x\":12,\"y\":47},\"panelIndex\":\"d1ab93e7-455f-44da-9833-0a66b5d203bd\",\"title\":\"Status History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Http Method\"},\"gridData\":{\"h\":17,\"i\":\"ff9501d6-0554-47ab-a2c3-11b8761a4f64\",\"w\":12,\"x\":36,\"y\":65},\"panelIndex\":\"ff9501d6-0554-47ab-a2c3-11b8761a4f64\",\"title\":\"Http Method\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time Taken\"},\"gridData\":{\"h\":8,\"i\":\"48e78b21-37e3-4db5-b8f6-65b48f3dbecd\",\"w\":12,\"x\":0,\"y\":65},\"panelIndex\":\"48e78b21-37e3-4db5-b8f6-65b48f3dbecd\",\"title\":\"Average Time Taken\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time History\"},\"gridData\":{\"h\":17,\"i\":\"a0966537-47da-46d6-ae07-78a7a8faa87a\",\"w\":24,\"x\":12,\"y\":65},\"panelIndex\":\"a0966537-47da-46d6-ae07-78a7a8faa87a\",\"title\":\"Average Time History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time To First Byte\"},\"gridData\":{\"h\":9,\"i\":\"7cc8bbe5-948f-4fe3-873d-9827871aea9c\",\"w\":12,\"x\":0,\"y\":73},\"panelIndex\":\"7cc8bbe5-948f-4fe3-873d-9827871aea9c\",\"title\":\"Average Time To First Byte\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Request URIs\"},\"gridData\":{\"h\":16,\"i\":\"59688130-2d56-4265-9f5c-ee052a857f70\",\"w\":24,\"x\":0,\"y\":82},\"panelIndex\":\"59688130-2d56-4265-9f5c-ee052a857f70\",\"title\":\"Top Request URIs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top User Agents\"},\"gridData\":{\"h\":16,\"i\":\"7b670607-9120-4587-9fb8-dbf1e88b9afc\",\"w\":24,\"x\":24,\"y\":82},\"panelIndex\":\"7b670607-9120-4587-9fb8-dbf1e88b9afc\",\"title\":\"Top User Agents\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Edge Location Heatmap\",\"vis\":null},\"gridData\":{\"h\":16,\"i\":\"48426ce7-df29-4c3c-8492-8c0e5d38a076\",\"w\":24,\"x\":0,\"y\":98},\"panelIndex\":\"48426ce7-df29-4c3c-8492-8c0e5d38a076\",\"title\":\"Edge Location Heatmap\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_19\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Referers\"},\"gridData\":{\"h\":16,\"i\":\"0671e4a9-d911-4ce5-8fef-6f166f3d850b\",\"w\":24,\"x\":24,\"y\":98},\"panelIndex\":\"0671e4a9-d911-4ce5-8fef-6f166f3d850b\",\"title\":\"Top Referers\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_20\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Requests by OS\"},\"gridData\":{\"h\":16,\"i\":\"4d08ff6c-7178-464b-aa96-1fbc3bd58dc5\",\"w\":12,\"x\":0,\"y\":114},\"panelIndex\":\"4d08ff6c-7178-464b-aa96-1fbc3bd58dc5\",\"title\":\"Requests by OS\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_21\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request by Device\"},\"gridData\":{\"h\":16,\"i\":\"e2bc9b34-a729-4f18-98c9-868e67428f12\",\"w\":12,\"x\":12,\"y\":114},\"panelIndex\":\"e2bc9b34-a729-4f18-98c9-868e67428f12\",\"title\":\"Request by Device\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_22\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request by Browser\"},\"gridData\":{\"h\":16,\"i\":\"88e2bd0c-5d25-4ff6-a6ff-1ad1e2e8fa79\",\"w\":12,\"x\":24,\"y\":114},\"panelIndex\":\"88e2bd0c-5d25-4ff6-a6ff-1ad1e2e8fa79\",\"title\":\"Request by Browser\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_23\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request by Category\"},\"gridData\":{\"h\":16,\"i\":\"fa00bff8-e231-42c8-82c7-69ed9936048a\",\"w\":12,\"x\":36,\"y\":114},\"panelIndex\":\"fa00bff8-e231-42c8-82c7-69ed9936048a\",\"title\":\"Request by Category\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_24\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Requests by Countries or Regions\"},\"gridData\":{\"h\":18,\"i\":\"d30bfed7-3aa6-455f-a287-b131d3c1369c\",\"w\":24,\"x\":0,\"y\":130},\"panelIndex\":\"d30bfed7-3aa6-455f-a287-b131d3c1369c\",\"title\":\"Requests by Countries or Regions\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_25\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Countries or Regions\"},\"gridData\":{\"h\":18,\"i\":\"9b9e0dcc-2d43-44c1-ace7-c8154a860d1a\",\"w\":12,\"x\":24,\"y\":130},\"panelIndex\":\"9b9e0dcc-2d43-44c1-ace7-c8154a860d1a\",\"title\":\"Top Countries or Regions\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_26\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Cities\"},\"gridData\":{\"h\":18,\"i\":\"df902fdf-2c50-4ad6-bd1c-c9eea5d1cb13\",\"w\":12,\"x\":36,\"y\":130},\"panelIndex\":\"df902fdf-2c50-4ad6-bd1c-c9eea5d1cb13\",\"title\":\"Top Cities\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_27\"}]","timeRestore":false,"title":"logs-aws-cloudfront-dashboard","version":1},"id":"43098870-c2ad-41f9-8c9d-bd375bd8e740","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"ea7381c1-6af7-40eb-ba7a-04a71ee06682","name":"panel_0","type":"visualization"},{"id":"473e248b-25cf-4e57-b1d3-908939f043bb","name":"panel_1","type":"visualization"},{"id":"15a9f594-27a7-496e-b83c-cd10315d03bc","name":"panel_2","type":"visualization"},{"id":"478035df-9660-4dcd-bd92-03e417faf8cd","name":"panel_3","type":"visualization"},{"id":"33846d06-3b01-4f42-9a49-722dddf39332","name":"panel_4","type":"visualization"},{"id":"93d5a98d-bfc5-4928-8428-fb2c50652ab0","name":"panel_5","type":"visualization"},{"id":"e0b656d0-4fb8-45ed-93cf-c8b9e040b886","name":"panel_6","type":"visualization"},{"id":"2543a91d-5374-41c4-b0d8-6c7db87f999c","name":"panel_7","type":"visualization"},{"id":"15f1facd-386e-40d5-a8cc-4b4e146597ef","name":"panel_8","type":"visualization"},{"id":"fb733bbd-670c-4587-8235-ff3a07bef919","name":"panel_9","type":"visualization"},{"id":"8c49d3fa-1183-4ed3-bcdd-6228cc16af57","name":"panel_10","type":"visualization"},{"id":"8ba922b1-dccb-42a9-9e6d-8f4d9f2c4e54","name":"panel_11","type":"visualization"},{"id":"528674ba-ff99-4f08-8fde-1636ea40af38","name":"panel_12","type":"visualization"},{"id":"aa2479f6-9fbe-4229-9262-29cc9cae9970","name":"panel_13","type":"visualization"},{"id":"f6600d91-b9a9-450c-b584-dfd807b0f7fa","name":"panel_14","type":"visualization"},{"id":"0afbda65-cff4-4df4-8bf4-301d2a8cbd82","name":"panel_15","type":"visualization"},{"id":"a8bd39ce-6983-43c1-9bd2-798b69b7163e","name":"panel_16","type":"visualization"},{"id":"47ba5807-9e96-421e-b1c6-34ecd1fce041","name":"panel_17","type":"visualization"},{"id":"35d249bb-dd5a-4607-b891-bae20f1644f8","name":"panel_18","type":"visualization"},{"id":"850e53d2-c196-49b1-9d7a-e0e3c854a850","name":"panel_19","type":"visualization"},{"id":"af09602c-a7c8-4a24-923a-0db49f2011d2","name":"panel_20","type":"visualization"},{"id":"c46581ff-cf0d-4940-bdef-ce37882f7d6a","name":"panel_21","type":"visualization"},{"id":"08838046-1b28-4727-b8a5-6e16f750ffe2","name":"panel_22","type":"visualization"},{"id":"3affab90-a8cd-4be6-b377-3842861a865f","name":"panel_23","type":"visualization"},{"id":"ba50ff97-95bd-4a77-8148-14e6f39cc6a1","name":"panel_24","type":"visualization"},{"id":"1402e6dc-6e08-4bf3-bc43-f87d0ac32cab","name":"panel_25","type":"visualization"},{"id":"acefc220-0b93-4f8f-92cb-7594e36639a7","name":"panel_26","type":"visualization"},{"id":"796eb897-07aa-4b1e-8f3a-40a48d3d59b0","name":"panel_27","type":"visualization"}],"type":"dashboard","updated_at":"2022-03-07T05:49:54.185Z","version":"WzIzMDUxLDFd"} -{"exportedCount":30,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/aws_cloudfront-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/aws_cloudfront-1.0.0.json deleted file mode 100644 index 2f4d806b2a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/aws_cloudfront-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_cloudfront", - "version": "1.0.0", - "displayName": "AWS cloudfront ", - "description": "AWS cloudfront Object Store", - "license": "Apache-2.0", - "type": "logs-aws_cloudfront", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_cloudfront/info", - "statics": { - "logo": { - "annotation": "cloudfront Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "AWS cloudfront Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_cloudfront", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs-aws_cloudfront", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_cloudfront", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/data/sample.json deleted file mode 100644 index 629930b4e5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/data/sample.json +++ /dev/null @@ -1,761 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "078d85edf7268fb4814b1b4fc9f4c64adfde218b6b489a38ecf1b269f14f3c7a centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k [31/Jan/2023:09:25:20 +0000] 35.89.52.162 arn:aws:sts::347283850106:assumed-role/CentralizedLogging-CustomCDKBucketDeployment8693BB-1X4DVR38SF7ZY/CentralizedLogging-CustomCDKBucketDeployment8693BB-kU6BAxSswmfp HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.70 Python/3.9.13 Linux/4.14.255-296-236.539.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.69\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "production", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "cloudfront-centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "Y5rIQOuGsI2vJN4hR3qLB55Cn4aoogvzPEnHhm5-0NiTtWDfTU5-vw==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 536, - "time-taken": 0.623, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.623, - "x-edge-detailed-result-type": "Miss" - } - } - }, - { - "@timestamp": "2023-07-18T09:15:07.000Z", - "body": "084e71aee5e48296d6b4e0fead4f55abcddb2cf9b6c9923f4c276b7f12f5f1a7 alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k [31/Jan/2023:10:35:30 +0000] 36.99.53.163 arn:aws:sts::347283850107:assumed-role/AlternativeBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF8ZZ/AlternativeBucket-CustomCDKBucketDeployment8693BB-lU6BBySswmfr HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 201 - 322 - 30 29 \"-\" \"aws-cli/1.25.71 Python/3.9.14 Linux/4.14.255-296-236.540.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.70\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "development", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "222222222222" - }, - "region": "ap-southeast-1", - "resource_id": "cloudfront-alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/css/main.3c74189a.css", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "IPGkM0N8_4AU6ok71zDa4twWLigSM7Ib33IwRsBHm1hDSmIvWoNjBA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 118, - "time-taken": 0.656, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.656, - "x-edge-detailed-result-type": "Miss" - } - } - }, - { - "@timestamp": "2023-07-19T10:16:09.000Z", - "body": "094f61afd5f582a7d7c5f1gfbad5g66bcded3df9c6a9934f5c367c7g13g6g2b8 testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k [31/Jan/2023:11:45:40 +0000] 37.109.54.164 arn:aws:sts::347283850108:assumed-role/TestBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9ZZ/TestBucket-CustomCDKBucketDeployment8693BB-mU6BBzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 202 - 322 - 30 29 \"-\" \"aws-cli/1.25.72 Python/3.9.15 Linux/4.14.255-296-236.541.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.71\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "testing", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "333333333333" - }, - "region": "us-east-1", - "resource_id": "cloudfront-testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 677, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/manifest.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "5sXuyCQs0mSgb2mN-KUcHW6z6LDQd12JBT0eE5E6RSJxwUZsxzT-kg==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 410, - "time-taken": 0.582, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.582, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-21T12:18:14.000Z", - "body": "123d94egf8769gh4825b1c4hc9j5k67lmdfe328l7b589b39mcf2c389p24g4d8r backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k [31/Jan/2023:13:55:60 +0000] 39.119.56.166 arn:aws:sts::347283850110:assumed-role/BackupBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9AA/BackupBucket-CustomCDKBucketDeployment8693BB-nU6CCzSswmft HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 204 - 322 - 30 29 \"-\" \"aws-cli/1.25.74 Python/3.9.17 Linux/4.14.255-296-236.543.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.73\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "backup", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "555555555555" - }, - "region": "eu-west-1", - "resource_id": "cloudfront-backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront":{ - "x-edge-location": "HKG62-C2", - "sc-bytes": 501279, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/js/main.1fce72cf.js", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "zdHQDWHvw3LXHsJ9il4jbrYX4XVaRejgVdcnuSNq4WmocHqM4wATkw==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 70, - "time-taken": 1.606, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.840, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "application/javascript" - - - - } - } - }, - { - "@timestamp": "2023-07-23T16:22:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/home.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "5FtX3W-8LR38cf05aTommPpuDAteiyix_LSSXF6T8bPJWa7eyKASpQ==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 87, - "time-taken": 0.588, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.588, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-22T10:22:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/ekslog.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "S4LYsYHTPEFsp2XCNcKGKtOyBYnoZObnkCXszEz_llNN1W9fN3Cskg==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 78, - "time-taken": 0.592, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.592, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-20T00:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 674, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/cluster.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "hVdTDiAs15WMiKmFOe-Wq0VmAiEU5QulF_qhbY4rPxOP0HbwpVcpFA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 78, - "time-taken": 0.592, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.592, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-24T08:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 677, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/servicelog.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "hrLzG-wJDS3HffJNotXAkXtbQDQz1hy-PLG8YDLJnzv1KUFwIFG6pg==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 103, - "time-taken": 0.594, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.594, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-10T11:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "@timestamp": "2023-02-22T03:22:41", - "x-edge-location": "HKG62-C2", - "sc-bytes": 703, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en-US/home.json", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Error", - "x-edge-request-id": "Bh9Z-n6bzLqlzwHGFHflVMnpjlsOC34oxMELel058PF36cTNvoCEig==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 51, - "time-taken": 1.167, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Error", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 1.167, - "x-edge-detailed-result-type": "Error" - } - } - }, - { - "@timestamp": "2023-07-25T02:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 703, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en-US/info.json", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Error", - "x-edge-request-id": "Qse_oGkdO2t-QWOXmo4BzPH-Tz-Tb2Y9e5xTekFQNxMOK5uMMHapWA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 51, - "time-taken": 0.284, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Error", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.284, - "x-edge-detailed-result-type": "Error" - } - } - }, - { - "@timestamp": "2023-07-15T00:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 162423, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/media/elbArch.dbcdcea16ace81a05c28.png", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "T2z6641ScR1RQwziiZT9s8zqrlo7YD3iaLg5WVowGzs1NkcTPdrnog==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 56, - "time-taken": 1.050, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.648, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "image/png", - "sc-content-len": 161498 - } - } - }, - { - "@timestamp": "2023-07-14T02:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 161053, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/media/wafArch.9cdccd95c4eb308461a2.png", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "WxSdG2R6oqaVNJQkue2oCkI6nU3ZXKb04KZQDgb7ZFUkX-RmAv59XA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 57, - "time-taken": 1.074, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.669, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "image/png", - "sc-content-len": 160127 - } - } - }, - { - "@timestamp": "2023-07-12T03:00:42.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 150993, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/media/rdsArch.aa17197fc8ed28ace19f.png", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "yLiCzSmstFWGLeb9NjslBLkBOpN6stNwWakqN4wKZNHAm9VTFzE2zw==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 56, - "time-taken": 1.030, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.626, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "image/png", - "sc-content-len": 150075 - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/info/README.md b/server/adaptors/integrations/__data__/repository/aws_cloudfront/info/README.md deleted file mode 100644 index 0459813357..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/info/README.md +++ /dev/null @@ -1,19 +0,0 @@ -# AWS CloudFront Integration - -## What is AWS CloudFront? - -Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds. CloudFront is integrated with other Amazon Web Services products to give developers and businesses an easy way to distribute content to end-users with low latency and high data transfer speeds. - -See additional details [here](https://aws.amazon.com/cloudfront/). - -## What is AWS CloudFront Integration? - -An integration is a bundle of pre-canned assets which are brought together in a meaningful manner. - -AWS CloudFront integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-aws-cloudfront` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_cloudfront-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_cloudfront-1.0.0.mapping.json deleted file mode 100644 index da6558aa1e..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_cloudfront-1.0.0.mapping.json +++ /dev/null @@ -1,194 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_cloudfront", - "labels": ["aws", "cloudfront"] - }, - "properties": { - "aws": { - "properties": { - "cloudfront": { - "properties": { - "c-ip": { - "type": "ip" - }, - "geo_location": { - "type": "geo_point" - }, - "geo_iso_code": { - "type": "keyword" - }, - "geo_country": { - "type": "keyword" - }, - "geo_city": { - "type": "keyword" - }, - "ua_browser": { - "type": "keyword" - }, - "ua_browser_version": { - "type": "keyword" - }, - "ua_os": { - "type": "keyword" - }, - "ua_os_version": { - "type": "keyword" - }, - "ua_device": { - "type": "keyword" - }, - "ua_category": { - "type": "keyword" - }, - "c-port": { - "type": "keyword" - }, - "cs-cookie": { - "type": "text" - }, - "cs-host": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "cs-referer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "cs-user-agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "cs-bytes": { - "type": "long" - }, - "cs-method": { - "type": "keyword" - }, - "cs-protocol": { - "type": "keyword" - }, - "cs-protocol-version": { - "type": "keyword" - }, - "cs-uri-query": { - "type": "text" - }, - "cs-uri-stem": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "fle-encrypted-fields": { - "type": "text" - }, - "fle-status": { - "type": "keyword" - }, - "sc-bytes": { - "type": "long" - }, - "sc-content-len": { - "type": "long" - }, - "sc-content-type": { - "type": "keyword" - }, - "sc-range-end": { - "type": "long" - }, - "sc-range-start": { - "type": "long" - }, - "sc-status": { - "type": "keyword" - }, - "ssl-cipher": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "ssl-protocol": { - "type": "keyword" - }, - "time-taken": { - "type": "float" - }, - "time-to-first-byte": { - "type": "float" - }, - "x-edge-detailed-result-type": { - "type": "keyword" - }, - "x-edge-location": { - "type": "keyword" - }, - "x-edge-request-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "x-edge-result-type": { - "type": "keyword" - }, - "x-edge-response-result-type": { - "type": "keyword" - }, - "x-forwarded-for": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "x-host-header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index 8057cd98ab..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/logs-aws_cloudfront-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/logs-aws_cloudfront-1.0.0.mapping.json deleted file mode 100644 index aee3e31d37..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/logs-aws_cloudfront-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_cloudfront-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-aws-cloudfront": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "cloudfront"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_s3", "aws_cloudfront", "cloud"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/dashboard.png deleted file mode 100644 index e016871e93..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/logo.png b/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/logo.png deleted file mode 100644 index 0d1c276072..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-1.0.0.ndjson deleted file mode 100644 index 9ee724da22..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-1.0.0.ndjson +++ /dev/null @@ -1,21 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.AuthenticationMethod\"}}},{\"count\":0,\"name\":\"additionalEventData.CipherSuite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.CipherSuite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.CipherSuite\"}}},{\"count\":0,\"name\":\"additionalEventData.SSEApplied\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.SSEApplied.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.SSEApplied\"}}},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.SignatureVersion\"}}},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredIn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredOut\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.x-amz-id-2\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.cloudtrail.awsRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":2,\"name\":\"errorCode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorCode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"errorCode\"}}},{\"count\":2,\"name\":\"errorMessage\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorMessage.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"errorMessage\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.eventCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"eventID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"eventID\"}}},{\"count\":2,\"name\":\"aws.cloudtrail.eventName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.cloudtrail.eventSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"managementEvent\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"readOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"recipientAccountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"recipientAccountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"recipientAccountId\"}}},{\"count\":0,\"name\":\"requestID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"requestID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"requestID\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameter.endTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameter.startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.Host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.Host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.Host\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aRN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aRN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.aRN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.accelerate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.accelerate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.accelerate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.acl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.acl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.acl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aggregateField\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aggregateField.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.aggregateField\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.architectures\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.architectures.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.architectures\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.bucketName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.bucketName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Bucket\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Bucket.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.code.s3Bucket\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.code.s3Key\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.cors\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.cors.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.cors\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.description\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.documentName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.documentName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.documentName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainNames\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainNames.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.domainNames\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.dryRun\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.durationSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryption\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.engineVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.engineVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.engineVersion\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.externalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.externalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.externalId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.startTimes.from\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.startTimes.from.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filter.startTimes.from\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filterSet.items.name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filters.name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.values\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.values.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filters.values\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.functionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.functionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.functionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.granteePrincipal\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.granteePrincipal.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.granteePrincipal\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.handler\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.handler.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.handler\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.includeAllInstances\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.itemsPerPage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.key\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.keyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keySpec\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keySpec.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.keySpec\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.layers\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.layers.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.layers\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.lifecycle\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.lifecycle.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.lifecycle\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.locale\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.locale.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.locale\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logGroupName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logGroupName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logGroupName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logStreamName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logStreamName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logStreamName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logging\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logging.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logging\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.maxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notification\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notification.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.notification\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.numberOfBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.object-lock\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.object-lock.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.object-lock\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.operations\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.operations.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.operations\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.parameters.commands\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.parameters.commands.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.parameters.commands\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.policy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policyName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policyName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.policyName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publicAccessBlock\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publicAccessBlock.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.publicAccessBlock\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publish\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.queueName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.queueName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.queueName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.replication\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.replication.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.replication\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.requestPayer\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayment\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayment.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.requestPayment\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.retiringPrincipal\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.retiringPrincipal.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.retiringPrincipal\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.role\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.role.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.role\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleSessionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleSessionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleSessionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.runtime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.runtime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.runtime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.stackName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.stackName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.stackName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.subnetId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tagging\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tagging.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tagging\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.targetGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.targetGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.targetGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.uUID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.uUID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.uUID\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.versioning\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.versioning.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.versioning\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.website\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.website.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.website\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-acl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-acl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-acl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption\"}}},{\"count\":0,\"name\":\"resources.ARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.ARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.ARN\"}}},{\"count\":0,\"name\":\"resources.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.accountId\"}}},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.type\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.architectures\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.architectures.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.architectures\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSha256\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSha256.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.codeSha256\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchOutputEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.commandId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.commandId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.commandId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.comment\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.comment.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.comment\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.completedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.deliveryTimedOutCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.documentName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.documentVersion\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.errorCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.expiresAfter\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.expiresAfter.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.expiresAfter\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxConcurrency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxConcurrency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.maxConcurrency\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxErrors\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxErrors.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.maxErrors\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3BucketName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3BucketName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3BucketName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3Region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3Region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3Region\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.parameters.commands\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.parameters.commands.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.parameters.commands\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.requestedDateTime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.requestedDateTime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.requestedDateTime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.serviceRole\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.serviceRole.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.serviceRole\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.status\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.status.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.status\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.statusDetails\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.statusDetails.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.statusDetails\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.targetCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.timeoutSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.accessKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.accessKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.expiration\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.expiration.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.expiration\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.sessionToken\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.sessionToken.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.sessionToken\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.description\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.anonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.anonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.functionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.functionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.grantId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.grantId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.grantId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.handler\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.handler.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.handler\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.isOpenSearchDomain\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.lastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.layers.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.uncompressedCodeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.notificationFilter.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.notificationFilter.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.packageType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.packageType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.packageType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.queueUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.queueUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.queueUrl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.revisionId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.revisionId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.revisionId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.role\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.role.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.role\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.runtime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.runtime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.runtime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReason\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReason.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.stateReason\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReasonCode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReasonCode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.stateReasonCode\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.tracingConfig.mode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.tracingConfig.mode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.tracingConfig.mode\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption\"}}},{\"count\":0,\"name\":\"sessionCredentialFromConsole\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"sessionCredentialFromConsole.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"sessionCredentialFromConsole\"}}},{\"count\":0,\"name\":\"sharedEventID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"sharedEventID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"sharedEventID\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.sourceIPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tlsDetails.cipherSuite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.cipherSuite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.cipherSuite\"}}},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.clientProvidedHostHeader\"}}},{\"count\":0,\"name\":\"tlsDetails.tlsVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.tlsVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.tlsVersion\"}}},{\"count\":1,\"name\":\"userAgent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"userAgent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"userAgent\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accessKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.accessKeyId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.accountId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.invokedBy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.invokedBy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.invokedBy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.principalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.principalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.principalId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.creationDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.type\"}}},{\"count\":0,\"name\":\"vpcEndpointId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"vpcEndpointId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"vpcEndpointId\"}}}]","timeFieldName":"@timestamp","title":"logs-cloudtrail-*"},"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-cloudtrail-Global Control","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Global Control\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1637912766383\",\"fieldName\":\"aws.cloudtrail.awsRegion\",\"parent\":\"\",\"label\":\"Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"2f4453a0-7656-4f9e-95f8-6f256f8bbe88","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"control_0_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODUsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"6e8d4de9-9155-439c-931b-7a132103a5ea","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event by Account ID","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event by Account ID\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.accountId.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"9d920995-e840-4a08-878d-83cea0747442","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Total Event Count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Total Event Count\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Event Count\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"03f7fe92-91c3-428f-8101-65b8f52aa407","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Event Names","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Event Names\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event Name\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"f8fc3f7e-fcff-4ff5-b77d-173bf6bed7fa","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Event Sources","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Event Sources\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventSource\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event Source\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"e59b01fc-ae37-4c01-b273-5fce7cd370d4","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event Category","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event Category\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventCategory\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c0eb6e39-632a-45f6-874b-24006109eef8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event By Region","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event By Region\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.awsRegion\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"96d86ed0-956c-4c03-a794-134a3cb641a9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Users","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Users\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":false,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.accountId.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Account Id\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"22a35f7d-94c5-4aac-964a-5f5070d3598f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"not aws.cloudtrail.sourceIPAddress:*.amazon*.com* AWS*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Source IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Source IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.sourceIPAddress\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"f79a4627-4901-41bd-acf3-e8d9dbb94487","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: s3*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-S3 Buckets","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-S3 Buckets\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"4ac6d38a-432b-4b8a-be69-28812dd3b4ce","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTUsMV0="} -{"attributes":{"columns":["_source"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"not (aws.cloudtrail.eventName: Get* Describe* List* Head*)\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-cloudtrail-Change Events","version":1},"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","migrationVersion":{"search":"7.9.3"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: s3*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-Top S3 Change Events","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top S3 Change Events\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Bucket Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"69e9b30c-3a0a-4eb7-8755-c5e5086cc794","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: ec2* and aws.cloudtrail.eventName: (RunInstances or TerminateInstances or RunInstances or StopInstances)\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-EC2 Instance Changes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-EC2 Instance Changes\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"824a6747-e2ab-4496-b7b1-d4ed2406f1d8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T07:48:05.128Z","version":"WzEwOTUyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: ec2*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-EC2 Changed By","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-EC2 Changed By\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"1454131e-9cf8-4a49-b130-e8734e7720cf","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTksMV0="} -{"attributes":{"columns":["errorCode","errorMessage","aws.cloudtrail.eventName","aws.cloudtrail.eventSource","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type","aws.cloudtrail.awsRegion","aws.cloudtrail.sourceIPAddress","userAgent","aws.cloudtrail.userIdentity.accountId"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"errorCode:*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-cloudtrail-Error Events","version":1},"id":"7510af05-211a-4a69-a31b-f7598c6a23ea","migrationVersion":{"search":"7.9.3"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk4MDAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: s3* and errorCode: AccessDenied\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-S3 Access Denied","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-S3 Access Denied\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"1a4fb640-6842-4d38-878e-f358ae539467","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7510af05-211a-4a69-a31b-f7598c6a23ea","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk4MDIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource:ec2*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-Top EC2 Change Events","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top EC2 Change Events\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0072f560-7830-11ec-b46a-9fdf870dcc8c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T07:42:35.102Z","version":"WzEwOTMwLDFd"} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Global Control\"},\"gridData\":{\"h\":7,\"i\":\"f41fba39-1664-460f-9b7f-2da72a45eea9\",\"w\":12,\"x\":0,\"y\":0},\"panelIndex\":\"f41fba39-1664-460f-9b7f-2da72a45eea9\",\"title\":\"Global Control\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event History\"},\"gridData\":{\"h\":16,\"i\":\"f00cf363-a72e-4ef7-9e87-527d86ae8be2\",\"w\":24,\"x\":12,\"y\":0},\"panelIndex\":\"f00cf363-a72e-4ef7-9e87-527d86ae8be2\",\"title\":\"Event History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event by Account ID\"},\"gridData\":{\"h\":16,\"i\":\"19a014c4-0fec-40bc-914d-b985b2b84c1b\",\"w\":12,\"x\":36,\"y\":0},\"panelIndex\":\"19a014c4-0fec-40bc-914d-b985b2b84c1b\",\"title\":\"Event by Account ID\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Event Count\"},\"gridData\":{\"h\":9,\"i\":\"ef438b13-4c77-48b9-8ae0-c28ae717e0ac\",\"w\":12,\"x\":0,\"y\":7},\"panelIndex\":\"ef438b13-4c77-48b9-8ae0-c28ae717e0ac\",\"title\":\"Total Event Count\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Event Names\"},\"gridData\":{\"h\":18,\"i\":\"22948727-ec80-4cd2-9bae-c76889332504\",\"w\":12,\"x\":0,\"y\":16},\"panelIndex\":\"22948727-ec80-4cd2-9bae-c76889332504\",\"title\":\"Top Event Names\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Event Sources\"},\"gridData\":{\"h\":18,\"i\":\"f9525bf2-311b-4767-8d84-67fa5c7bdaf3\",\"w\":12,\"x\":12,\"y\":16},\"panelIndex\":\"f9525bf2-311b-4767-8d84-67fa5c7bdaf3\",\"title\":\"Top Event Sources\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event Category\"},\"gridData\":{\"h\":18,\"i\":\"b580d134-a5e0-4550-9aeb-c6f4fab07ae9\",\"w\":12,\"x\":24,\"y\":16},\"panelIndex\":\"b580d134-a5e0-4550-9aeb-c6f4fab07ae9\",\"title\":\"Event Category\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event By Region\"},\"gridData\":{\"h\":18,\"i\":\"d097c4dc-bd4f-4789-a18e-93fcf034a73e\",\"w\":12,\"x\":36,\"y\":16},\"panelIndex\":\"d097c4dc-bd4f-4789-a18e-93fcf034a73e\",\"title\":\"Event By Region\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Users\"},\"gridData\":{\"h\":15,\"i\":\"2a5da7e5-6536-4f01-8110-a20829ac0409\",\"w\":24,\"x\":0,\"y\":34},\"panelIndex\":\"2a5da7e5-6536-4f01-8110-a20829ac0409\",\"title\":\"Top Users\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Source IPs\"},\"gridData\":{\"h\":15,\"i\":\"22ca4fe6-c0f7-4206-8b90-44b9bccf2623\",\"w\":24,\"x\":24,\"y\":34},\"panelIndex\":\"22ca4fe6-c0f7-4206-8b90-44b9bccf2623\",\"title\":\"Top Source IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"S3 Buckets\"},\"gridData\":{\"h\":15,\"i\":\"87635253-310f-4ce8-8331-ef86837b06a5\",\"w\":12,\"x\":12,\"y\":49},\"panelIndex\":\"87635253-310f-4ce8-8331-ef86837b06a5\",\"title\":\"S3 Buckets\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top S3 Change Events\"},\"gridData\":{\"h\":15,\"i\":\"10250bc9-3d7c-4d81-89ca-f1160c2ff69a\",\"w\":24,\"x\":24,\"y\":49},\"panelIndex\":\"10250bc9-3d7c-4d81-89ca-f1160c2ff69a\",\"title\":\"Top S3 Change Events\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"EC2 Change Event Count\"},\"gridData\":{\"h\":15,\"i\":\"782dc2e3-49c6-43a6-b384-38cd38d0af52\",\"w\":12,\"x\":0,\"y\":64},\"panelIndex\":\"782dc2e3-49c6-43a6-b384-38cd38d0af52\",\"title\":\"EC2 Change Event Count\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"EC2 Changed By\"},\"gridData\":{\"h\":15,\"i\":\"d3ee49b2-4822-4c29-95cf-34c2d895d0f8\",\"w\":12,\"x\":12,\"y\":64},\"panelIndex\":\"d3ee49b2-4822-4c29-95cf-34c2d895d0f8\",\"title\":\"EC2 Changed By\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Error Events\"},\"gridData\":{\"h\":17,\"i\":\"03cd460b-e704-493b-b593-e17bc5acc00d\",\"w\":48,\"x\":0,\"y\":79},\"panelIndex\":\"03cd460b-e704-493b-b593-e17bc5acc00d\",\"title\":\"Error Events\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"S3 Access Denied\"},\"gridData\":{\"h\":15,\"i\":\"13169bd6-695f-4d69-ab04-e1a8dce568c1\",\"w\":12,\"x\":0,\"y\":49},\"panelIndex\":\"13169bd6-695f-4d69-ab04-e1a8dce568c1\",\"title\":\"S3 Access Denied\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top EC2 Change Events\"},\"gridData\":{\"h\":15,\"i\":\"8220a178-d566-425d-a7bf-7b0a6e510ad7\",\"w\":24,\"x\":24,\"y\":64},\"panelIndex\":\"8220a178-d566-425d-a7bf-7b0a6e510ad7\",\"title\":\"Top EC2 Change Events\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_16\"}]","timeRestore":false,"title":"logs-cloudtrail-dashboard","version":1},"id":"58077a00-135b-4ff7-8d47-4d43d710709c","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"2f4453a0-7656-4f9e-95f8-6f256f8bbe88","name":"panel_0","type":"visualization"},{"id":"6e8d4de9-9155-439c-931b-7a132103a5ea","name":"panel_1","type":"visualization"},{"id":"9d920995-e840-4a08-878d-83cea0747442","name":"panel_2","type":"visualization"},{"id":"03f7fe92-91c3-428f-8101-65b8f52aa407","name":"panel_3","type":"visualization"},{"id":"f8fc3f7e-fcff-4ff5-b77d-173bf6bed7fa","name":"panel_4","type":"visualization"},{"id":"e59b01fc-ae37-4c01-b273-5fce7cd370d4","name":"panel_5","type":"visualization"},{"id":"c0eb6e39-632a-45f6-874b-24006109eef8","name":"panel_6","type":"visualization"},{"id":"96d86ed0-956c-4c03-a794-134a3cb641a9","name":"panel_7","type":"visualization"},{"id":"22a35f7d-94c5-4aac-964a-5f5070d3598f","name":"panel_8","type":"visualization"},{"id":"f79a4627-4901-41bd-acf3-e8d9dbb94487","name":"panel_9","type":"visualization"},{"id":"4ac6d38a-432b-4b8a-be69-28812dd3b4ce","name":"panel_10","type":"visualization"},{"id":"69e9b30c-3a0a-4eb7-8755-c5e5086cc794","name":"panel_11","type":"visualization"},{"id":"824a6747-e2ab-4496-b7b1-d4ed2406f1d8","name":"panel_12","type":"visualization"},{"id":"1454131e-9cf8-4a49-b130-e8734e7720cf","name":"panel_13","type":"visualization"},{"id":"7510af05-211a-4a69-a31b-f7598c6a23ea","name":"panel_14","type":"search"},{"id":"1a4fb640-6842-4d38-878e-f358ae539467","name":"panel_15","type":"visualization"},{"id":"0072f560-7830-11ec-b46a-9fdf870dcc8c","name":"panel_16","type":"visualization"}],"type":"dashboard","updated_at":"2022-01-18T07:53:29.943Z","version":"WzEwOTYyLDFd"} -{"exportedCount":20,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json deleted file mode 100644 index 41dbc35e80..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_cloudtrail", - "version": "1.0.0", - "displayName": "AWS CloudTrail", - "description": "AWS CloudTrail log collector", - "license": "Apache-2.0", - "type": "logs-aws_cloudtrail", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info", - "statics": { - "logo": { - "annotation": "AWS CloudTrail Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "AWS CloudTrail Log Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_cloudtrail", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs-aws_cloudtrail", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_cloudtrail", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "samples.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/data/samples.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/data/samples.json deleted file mode 100644 index fd2f0673d6..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/data/samples.json +++ /dev/null @@ -1,3772 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketAcl", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "bucketName": "aws-cloudtrail-mytrail-345678901234-059ac1d5", - "Host": "aws-cloudtrail-mytrail-345678901234-059ac1d5.s3.eu-west-1.amazonaws.com", - "acl": "" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "dNg98Ncsm0R/PygSHq0b0Qiyx2TDUq9jgC9wSxasWFiQ/hJPz1rv2RWiUWErUcWAZyJqKoxckNM=", - "bytesTransferredOut": 544 - }, - "requestID": "8RJVMXE049D1QTJ1", - "eventID": "8e6ffb2a-af42-47e6-9da9-8d90adbdc937", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "535103f5-cc74-4812-90dd-6861bfa00ff3", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-17T04:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketAcl", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "bucketName": "aws-cloudtrail-logs-345678901234-222dcf7b", - "Host": "aws-cloudtrail-logs-345678901234-222dcf7b.s3.eu-west-1.amazonaws.com", - "acl": "" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "So+s40fACXsYF+1FhABCrXEa0aVR8gVq+opzVP6cf5QM2cFHRJXgiCinvaZwka9srXZyWHdhXpk=", - "bytesTransferredOut": 544 - }, - "requestID": "8RJPPQN6E24AE3HY", - "eventID": "1b37f2f5-9b80-47a0-b3df-0ae7e531e211", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "120e2232-5d8f-4797-845d-5cae63fa2ad6", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "kms.amazonaws.com", - "eventName": "GenerateDataKey", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "keyId": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07", - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/mytrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_MTTBopRY9S74a4oz.json.gz" - }, - "keySpec": "AES_256" - }, - "responseElements": null, - "requestID": "1c50c36c-f026-4aeb-a503-fe1233629e5a", - "eventID": "139bde74-a3a8-4016-be18-e72c16f0cf3b", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "49038fb9-cc61-44e2-a093-ba9e37ba090d", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-16T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:ElasticLoadBalancingDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/ElasticLoadBalancingDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5C6HNYQPO", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:25Z", - "eventSource": "elasticloadbalancing.amazonaws.com", - "eventName": "DescribeLoadBalancers", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "6e6d4b82-eb0e-4741-955f-f89e0708a5ad", - "eventID": "e60f9221-0c7a-46d5-b92d-212afd22ce31", - "readOnly": true, - "eventType": "AwsApiCall", - "apiVersion": "2012-06-01", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "kms.amazonaws.com", - "eventName": "GenerateDataKey", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/testtrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_ypT1EKjIs0DWxgUy.json.gz" - }, - "keyId": "arn:aws:kms:eu-west-1:345678901234:key/fcf34ed2-684c-4d2d-9dae-d173e6794772", - "keySpec": "AES_256" - }, - "responseElements": null, - "requestID": "b36013b4-e873-4553-a6c2-220a8bb04f1d", - "eventID": "9805eabd-1d03-472f-933f-f4032e0fe9f2", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/fcf34ed2-684c-4d2d-9dae-d173e6794772" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "5655d7ec-f1b6-4bec-948e-c0cc072fd7f9", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "SNSDescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5I34W7W7V", - "expiration": "Dec 2, 2021 11:11:28 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession" - } - }, - "requestID": "a10348a0-c7f4-4d5a-b596-39339966b01c", - "eventID": "104a2289-b51e-4d49-99ca-8bfb90c786e5", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "c87280b6-b9ba-46af-849e-ddf7fa509848", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5KP6PYYL2B:LogHub-Pipe-bfe64-S3toOpenSearchStacklogSenderFnEB-tm2bztjl5WTH", - "arn": "arn:aws:sts::345678901234:assumed-role/LogHub-Pipe-bfe64-S3toOpenSearchStackSenderLambdaR-UNR6O2WK9FTV/LogHub-Pipe-bfe64-S3toOpenSearchStacklogSenderFnEB-tm2bztjl5WTH", - "accountId": "345678901234", - "accessKeyId": "ASIAINP7HHMSNLIOUBQA", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5KP6PYYL2B", - "arn": "arn:aws:iam::345678901234:role/LogHub-Pipe-bfe64-S3toOpenSearchStackSenderLambdaR-UNR6O2WK9FTV", - "accountId": "345678901234", - "userName": "LogHub-Pipe-bfe64-S3toOpenSearchStackSenderLambdaR-UNR6O2WK9FTV" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:55:55Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:26Z", - "eventSource": "kms.amazonaws.com", - "eventName": "Decrypt", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "encryptionAlgorithm": "SYMMETRIC_DEFAULT", - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/testtrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_ypT1EKjIs0DWxgUy.json.gz" - } - }, - "responseElements": null, - "requestID": "1680225e-b40b-4a67-8475-5ca97a54d4e4", - "eventID": "91874e34-57fa-492e-8ed0-f605ef8c684c", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/fcf34ed2-684c-4d2d-9dae-d173e6794772" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-18T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession", - "accountId": "345678901234", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:29Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "ec2.amazonaws.com", - "eventName": "DescribeNatGateways", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "DescribeNatGatewaysRequest": "" - }, - "responseElements": null, - "requestID": "591df254-404d-4a85-a2c9-df17c5706945", - "eventID": "25367e85-8135-4de4-aa45-07faf56b4024", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-19T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "EC2DescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5DDQJXD5O", - "expiration": "Dec 2, 2021 11:11:28 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession" - } - }, - "requestID": "c97d3f28-a45b-40ac-9e52-b7434aadfa91", - "eventID": "cd69c7b4-ea2f-4b7e-b36e-ea28f28a18cf", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "014a546e-de1c-4cb1-ab26-995d2a6690a1", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T01:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:25Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "ElasticLoadBalancingDescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5PRXFTYSS", - "expiration": "Dec 2, 2021 11:11:25 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:ElasticLoadBalancingDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/ElasticLoadBalancingDescribeHandlerSession" - } - }, - "requestID": "865d2e3c-24f1-49f6-b107-690ce5dfb254", - "eventID": "a7f2465a-a4d0-473c-83a6-7ba01548d364", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "00a0b0c9-b74c-44ed-b4e3-7e0cbf914fd9", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "EC2DescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5E2JWWGOX", - "expiration": "Dec 2, 2021 11:11:29 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession" - } - }, - "requestID": "0f376fbd-06ed-4788-9c9c-ea5c0aa020b2", - "eventID": "cc7c5811-204b-4483-8aba-38f87e31130d", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "f8001dce-ba63-4bed-8715-7e3446c6dfcf", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-20T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638481888699734314", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638481888699734314", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5A2ZEP66K", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5NMPY4GP3I", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAppSync" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:51:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "xray.amazonaws.com", - "eventName": "GetSamplingRules", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "009eb0aa-62c5-4354-96e6-22b99a42983a", - "eventID": "c14bdebf-495a-4aaf-8dc0-073678ad321b", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T10:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession", - "accountId": "345678901234", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "ec2.amazonaws.com", - "eventName": "DescribeEgressOnlyInternetGateways", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "DescribeEgressOnlyInternetGatewaysRequest": "" - }, - "responseElements": null, - "requestID": "c75f6f99-dcdd-4e59-86dd-10369d7b3216", - "eventID": "94aa8445-d4e4-47d4-82fd-8caccc2156f2", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5MGPHCXONO:CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "arn": "arn:aws:sts::345678901234:assumed-role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK/CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "accountId": "345678901234", - "accessKeyId": "ASIAIYLMNBUCLSGRCUEQ", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5MGPHCXONO", - "arn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "accountId": "345678901234", - "userName": "CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:05:42Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:26Z", - "eventSource": "kms.amazonaws.com", - "eventName": "Decrypt", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/mytrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_MTTBopRY9S74a4oz.json.gz" - }, - "encryptionAlgorithm": "SYMMETRIC_DEFAULT" - }, - "responseElements": null, - "requestID": "435c9405-c5ba-46f5-a619-31685eb66418", - "eventID": "1462107d-7eca-4f1b-aed2-5576c2d581d9", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "lambda.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:17Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "lambda.amazonaws.com", - "userAgent": "lambda.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "roleSessionName": "awslambda_248_20211202221117529" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5PWNBBPHJ", - "sessionToken": "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", - "expiration": "Dec 3, 2021, 10:21:17 AM" - } - }, - "requestID": "22ee1385-2d5d-4ddf-903a-b3a9ff7451fa", - "eventID": "84e2004a-7803-4421-aaf4-80049d925144", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "1473513b-ee8b-479b-a7b4-9b547b644063", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-19T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:25Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "AWSConfig-Describe" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5JFVRGKUN", - "expiration": "Dec 2, 2021 11:11:25 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe" - } - }, - "requestID": "f7f55ba9-968a-4f9d-8c85-a46eb49c1dfd", - "eventID": "b7394b83-8ad5-4141-9d26-9c225f26bac3", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "d92e1358-d0a5-4641-9067-c037acde13d6", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T11:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638482156450755254", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638482156450755254", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DT2DFC4X", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5NMPY4GP3I", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAppSync" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:55:56Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:30Z", - "eventSource": "xray.amazonaws.com", - "eventName": "GetSamplingRules", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "f96d3ba2-2d66-419a-9383-5d168e08d469", - "eventID": "2fff4ca3-0270-4024-a87d-ba2cb67925b0", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-21T05:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5DGNE5U7AI:c95c6bcfe9033cfff4d3d0c295caf16e", - "arn": "arn:aws:sts::345678901234:assumed-role/LogHub-Pipe-3a2ac-CWtoOpenSearchStackCWDestination-1WCPOGLE1YLYQ/c95c6bcfe9033cfff4d3d0c295caf16e", - "accountId": "345678901234", - "accessKeyId": "ASIAI6XAITHH276POBAA", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5DGNE5U7AI", - "arn": "arn:aws:iam::345678901234:role/LogHub-Pipe-3a2ac-CWtoOpenSearchStackCWDestination-1WCPOGLE1YLYQ", - "accountId": "345678901234", - "userName": "LogHub-Pipe-3a2ac-CWtoOpenSearchStackCWDestination-1WCPOGLE1YLYQ" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:45:50Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "logs.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:35Z", - "eventSource": "kms.amazonaws.com", - "eventName": "GenerateDataKey", - "awsRegion": "eu-west-1", - "sourceIPAddress": "logs.amazonaws.com", - "userAgent": "logs.amazonaws.com", - "requestParameters": { - "keyId": "alias/aws/kinesis", - "encryptionContext": { - "aws:kinesis:arn": "arn:aws:kinesis:eu-west-1:345678901234:stream/LogHub-Pipe-3a2ac-CWtoOpenSearchStackcwDataStream22A58C70-plrsK4s3GlGG" - }, - "numberOfBytes": 32 - }, - "responseElements": null, - "requestID": "47e3f026-346b-47f0-aa9a-6b4666774c6d", - "eventID": "bf49badb-d471-4959-9124-cbc8140a9062", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/10a963d1-db97-4382-b1ac-43dc8bd25e1d" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638481533224676745", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638481533224676745", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5JTI2Z37S", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5NMPY4GP3I", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAppSync" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:45:33Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:38Z", - "eventSource": "xray.amazonaws.com", - "eventName": "GetSamplingRules", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "d51f80cb-3781-44ad-afa3-0bed72b04d47", - "eventID": "c1c8d9e7-ca8d-4073-8a72-1ae0e5f6867b", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T01:04:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:39Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aiden-dev-bucket-eu-west-1", - "location": "", - "Host": "aiden-dev-bucket-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "PQll1iX8iROo/BXhWQBtg7OdP7nvgtJlNhG+eJ+wtDmhfUBPI9sx71NmMnoIQTWY0XukN5+oUFw=", - "bytesTransferredOut": 137 - }, - "requestID": "CCXYWDEN4MCDJVTY", - "eventID": "49ddf02f-833e-4959-b094-00b2fa985a6f", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aiden-dev-bucket-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T00:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:46Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "athena-test-345678901234", - "location": "", - "Host": "athena-test-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "XretCbctKoEzHrERRsKrZ3BpKZzcp3369pHMIncBuTfeVCyBuO0gqWXdKUDzOVYs0XWYiBNLYl0=", - "bytesTransferredOut": 137 - }, - "requestID": "WGWND0SR7ZZ7SZSY", - "eventID": "acb46a34-899d-41df-84e5-34d2f729b020", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::athena-test-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-03T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5HYW6RMIDH:LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-czSef9qts2To", - "arn": "arn:aws:sts::345678901234:assumed-role/LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-1MBVWRVD11MZY/LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-czSef9qts2To", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5KXKBYXWC", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5HYW6RMIDH", - "arn": "arn:aws:iam::345678901234:role/LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-1MBVWRVD11MZY", - "accountId": "345678901234", - "userName": "LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-1MBVWRVD11MZY" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:54:05Z", - "mfaAuthenticated": "false" - } - } - }, - "eventTime": "2021-12-02T22:11:27Z", - "eventSource": "ssm.amazonaws.com", - "eventName": "SendCommand", - "awsRegion": "eu-west-1", - "sourceIPAddress": "54.73.36.57", - "userAgent": "Boto3/1.18.55 Python/3.9.8 Linux/4.14.246-198.474.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 Botocore/1.21.55 AwsSolution/SO8025/v1.0.0", - "requestParameters": { - "instanceIds": [], - "documentName": "AWS-RunShellScript", - "parameters": { - "commands": ["curl -s http://127.0.0.1:2022/api/v1/health"] - }, - "interactive": false - }, - "responseElements": { - "command": { - "commandId": "8e3d5ca6-4cc2-46e3-b627-18d9a70fedb0", - "documentName": "AWS-RunShellScript", - "documentVersion": "$DEFAULT", - "comment": "", - "expiresAfter": "Dec 3, 2021 12:11:27 AM", - "parameters": { - "commands": ["curl -s http://127.0.0.1:2022/api/v1/health"] - }, - "instanceIds": [], - "targets": [], - "requestedDateTime": "Dec 2, 2021 10:11:27 PM", - "status": "Pending", - "statusDetails": "Pending", - "outputS3Region": "eu-west-1", - "outputS3BucketName": "", - "outputS3KeyPrefix": "", - "maxConcurrency": "50", - "maxErrors": "0", - "targetCount": 0, - "completedCount": 0, - "errorCount": 0, - "deliveryTimedOutCount": 0, - "serviceRole": "", - "notificationConfig": { - "notificationArn": "", - "notificationEvents": [], - "notificationType": "" - }, - "cloudWatchOutputConfig": { - "cloudWatchLogGroupName": "", - "cloudWatchOutputEnabled": false - }, - "interactive": false, - "timeoutSeconds": 3600 - } - }, - "requestID": "c9936d92-e4ec-45e5-a0d9-9f5276065f0e", - "eventID": "82b7e663-15c4-41e7-a631-6dbef3ef4729", - "readOnly": false, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management", - "tlsDetails": { - "tlsVersion": "TLSv1.2", - "cipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "clientProvidedHostHeader": "ssm.eu-west-1.amazonaws.com" - } - } - } - }, - { - "@timestamp": "2023-07-04T04:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:48Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-analytics-immersion-day-345678901234", - "location": "", - "Host": "aws-analytics-immersion-day-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "ZPjcMc0dDcRvfwe51SwOIJ6iUbWkwxitqwJ5rSSn7vQjNtFegUYdKzRld7RRB/lRvvzWbWQgF9k=", - "bytesTransferredOut": 137 - }, - "requestID": "QJRYXPP89ZF3BTSY", - "eventID": "3aefe5e4-28bd-4142-988c-084f28899583", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-analytics-immersion-day-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-07T07:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:48Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-athena-query-results-eu-west-1-345678901234", - "location": "", - "Host": "aws-athena-query-results-eu-west-1-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "VohwN8OUV/QqKbKju7h/ixMvx1IlxoDwV3W1EkU1Tj+QI04u9z/WU4fN4EldkMjAuupXMINOOlY=", - "bytesTransferredOut": 137 - }, - "requestID": "QJRW0RZF190KVV67", - "eventID": "a8f102f9-90a0-4dfd-a41c-f6d5f96e3106", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-athena-query-results-eu-west-1-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-08T08:08:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTopics", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "9648e71d-ccec-5021-bd07-bd3e8a3c512e", - "eventID": "44362cf0-d282-4961-8157-8552527aff01", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T09:09:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:LogHub-Alarm-d24af-AlarmTopicD01E77F9-14C8QVTFGPAVT" - }, - "responseElements": null, - "requestID": "bc3730d6-4c22-595f-bb49-6af50af21850", - "eventID": "e8bdb2f9-6085-4e75-8119-bea9babee5da", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T10:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:LogHub-Alarm-d24af-AlarmTopicD01E77F9-14C8QVTFGPAVT" - }, - "responseElements": null, - "requestID": "734ee4ff-8ba6-5c6b-87bb-bedccd765d64", - "eventID": "9d834ea8-1159-4c66-a8bd-f98ee3b20fc7", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T11:11:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:aosalert" - }, - "responseElements": null, - "requestID": "f0e55f08-27bf-5108-ab29-052b616fe007", - "eventID": "57fa9739-3c41-44cd-a7d4-4b0bacec7e1f", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T08:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:aosalert" - }, - "responseElements": null, - "requestID": "ef5c2cf2-2654-56a0-bf83-76d1608497af", - "eventID": "1a50e833-5714-4e53-ac40-58d364758d46", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T08:13:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:dynamodb" - }, - "responseElements": null, - "requestID": "1e083a45-439f-5d72-8bb7-6066054f0c7d", - "eventID": "9534b5a0-87f2-4387-bb2d-072c9d440792", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:dynamodb" - }, - "responseElements": null, - "requestID": "522d7e3e-1055-5d2e-baf3-241d56849c21", - "eventID": "1025f0ea-933f-44d4-a061-ab3cd7277872", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:test" - }, - "responseElements": null, - "requestID": "9524e443-2dd5-5094-8cbd-be606b04119b", - "eventID": "130022b8-0f54-46d5-a23e-c204a9405d95", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:test" - }, - "responseElements": null, - "requestID": "2faf9210-6118-5261-8b9f-c83327c9236e", - "eventID": "817b4334-e96d-4cd2-a62e-48b89ef0632b", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-codestar-eu-west-1-345678901234-ttt-pipe", - "location": "", - "Host": "aws-codestar-eu-west-1-345678901234-ttt-pipe.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "U2Ic6CLUmEVTRVybxggD3RcX1HEZ/+UfHaB90I/+2EVmgr8aYr5NsTwX5lwULqeInMIAPZgtPnY=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQN5WAHZZXHX33Q", - "eventID": "992cbca9-9b10-48c3-b30d-9424e1660f52", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-codestar-eu-west-1-345678901234-ttt-pipe" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-cloudtrail-logs-345678901234-222dcf7b", - "location": "", - "Host": "aws-cloudtrail-logs-345678901234-222dcf7b.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "0rOQRJtW/QlzOeECmnEBexQ2jkhxEyvqyXEXjWS1UmKIAS2ntDbFs4EmFxLxflTkFNlD08ILu7w=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQW09X84YDVPYG2", - "eventID": "b1adaa81-78ee-4ed5-943c-20b86fdcaf25", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-emr-resources-345678901234-eu-west-1", - "location": "", - "Host": "aws-emr-resources-345678901234-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "eU3mf/D7Wdus2yUrFVguHjJ1DRgUJiQOkrgEm8bAmSRKSxc6G66ahoM5RZyFP/mvsl5NddzQZsw=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQG7YS0Q6XYT60X", - "eventID": "e6a11b04-bfa3-48f0-939a-47724e5dc9d0", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-emr-resources-345678901234-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-cloudtrail-mytrail-345678901234-059ac1d5", - "location": "", - "Host": "aws-cloudtrail-mytrail-345678901234-059ac1d5.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "2dwrLUy4GRjf3hVVijBjMO+rGfi2n29Q5AiXmemZCfkO8sjwiF3/ILZbq0HaBafehJ5hqghobsk=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQS8AKBYGHKFZ1Z", - "eventID": "c66c5dcd-bdde-4a3a-911f-2eadf4bef77f", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-cloudtrail-logs-345678901234-80d2c6dc", - "location": "", - "Host": "aws-cloudtrail-logs-345678901234-80d2c6dc.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "4WZ9IIaSDDIwPc8FMZBRJlT9TaL5OTDBBTqveOZFyCcdKd1gAsr00AxrDBHaPfLKMRRjosQxPpI=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQY9MDFEQXNGDWB", - "eventID": "bd772ba6-6000-48bc-a6b6-7cd1ae4b3aa2", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-80d2c6dc" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:50Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-lambda-12843845950", - "location": "", - "Host": "aws-lambda-12843845950.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "kac0MeC/LpQeiXDfklblUFBidNtGh5Z0I2uLXOqIqsp42zkcAk2Hpw2Zr58LIYOe+seQiUjBKho=", - "bytesTransferredOut": 137 - }, - "requestID": "KZQWJKKVB05YS0WM", - "eventID": "306357ab-fb96-4661-afd7-7ef92e1bef96", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-lambda-12843845950" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:50Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-lakeformation-129390405", - "location": "", - "Host": "aws-lakeformation-129390405.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "Zuwt3yDJ6v0ya438cDnKfNUok6QxEr9OG7uyMsuNF9v2tnIrcJLD5VTzGsciCcr5GNE60/Gacyk=", - "bytesTransferredOut": 137 - }, - "requestID": "KZQPN6GKTXMJ68YD", - "eventID": "20486240-5fc0-4318-975c-6771fbf4d0a3", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-lakeformation-129390405" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-sam-cli-managed-default-samclisourcebucket-13z2c2q3lq9gf", - "location": "", - "Host": "aws-sam-cli-managed-default-samclisourcebucket-13z2c2q3lq9gf.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "cznqhERGOHEJD5kNY4rS6tg3VSDMGJ5krr4z6LC+vgsouCapkAwSlO115HKXmhaGAUA3J1Ycm1k=", - "bytesTransferredOut": 137 - }, - "requestID": "G2VCQDS9MJ461PSC", - "eventID": "10e9d7bd-031e-4f23-9f70-68c3be3520e9", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-sam-cli-managed-default-samclisourcebucket-13z2c2q3lq9gf" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "cdk-hnb659fds-assets-345678901234-eu-west-1", - "location": "", - "Host": "cdk-hnb659fds-assets-345678901234-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "Q/Hx/3kBvUKHLt7hBdXQHrBRfK5yO3BTgUT/g8bjlOKvfbIW51wByEBm2JuojIgX+aBlu1zgFAg=", - "bytesTransferredOut": 137 - }, - "requestID": "G2V9PP7YF2NXTP9P", - "eventID": "3976c07a-b5da-489e-bad3-85c800885a45", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::cdk-hnb659fds-assets-345678901234-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-08T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:50Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-logs-345678901234-eu-west-1", - "location": "", - "Host": "aws-logs-345678901234-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "+FlNNjS6V286Tut7CPrk9m96a0vhvWFo7m/f8W0oFl+rWIDvRV/jlw11hFbIvEbC4wrfkNHGfVk=", - "bytesTransferredOut": 137 - }, - "requestID": "KZQSBQ3F2B0MN5AX", - "eventID": "2f718b0c-a3c3-4799-b4db-71e76d786f5e", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-logs-345678901234-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-07T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5LHWXI4D6J:AutoScaling", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAutoScaling/AutoScaling", - "accountId": "345678901234", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5LHWXI4D6J", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAutoScaling" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:49:58Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "autoscaling.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "ec2.amazonaws.com", - "eventName": "DescribeInstanceStatus", - "awsRegion": "eu-west-1", - "sourceIPAddress": "autoscaling.amazonaws.com", - "userAgent": "autoscaling.amazonaws.com", - "requestParameters": { - "instancesSet": { - "items": [ - { - "instanceId": "i-0b0ce43d329fca1f4" - }, - { - "instanceId": "i-05b3592bd89e5b189" - } - ] - }, - "filterSet": {}, - "includeAllInstances": true - }, - "responseElements": null, - "requestID": "1bc0d851-91a3-40d3-9cad-3c7ece4b04eb", - "eventID": "387141dd-43bf-440f-ab39-7ffc5eb90a83", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-06T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5LHWXI4D6J:AutoScaling", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAutoScaling/AutoScaling", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5JGPGGIHJ", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5LHWXI4D6J", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAutoScaling" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:49:58Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "autoscaling.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "elasticloadbalancing.amazonaws.com", - "eventName": "DescribeTargetHealth", - "awsRegion": "eu-west-1", - "sourceIPAddress": "autoscaling.amazonaws.com", - "userAgent": "autoscaling.amazonaws.com", - "requestParameters": { - "targetGroupArn": "arn:aws:elasticloadbalancing:eu-west-1:345678901234:targetgroup/LogHu-LoadB-12VYXWEUPWAXC/305585e75190679b", - "targets": [] - }, - "responseElements": null, - "requestID": "c17abcd8-daa0-4209-af14-d15fad4ca5be", - "eventID": "b3053862-7a5c-4765-9c71-f4fb5b1433d5", - "readOnly": true, - "eventType": "AwsApiCall", - "apiVersion": "2015-12-01", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-05T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:58Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "cf-templates-1u5skpqfeees8-eu-west-1", - "location": "", - "Host": "cf-templates-1u5skpqfeees8-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "pyZhEd+wolkH6ZUy7ZU5nnzsIyjlnSO7zi6gA8R9GtmEl7MxWhXpbRmDntivRAWn1rUPhCIuHF8=", - "bytesTransferredOut": 137 - }, - "requestID": "7D7FR0D0TBSB4FED", - "eventID": "f9a7d9ec-3ffd-492a-be33-44aa9a4e825f", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::cf-templates-1u5skpqfeees8-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-04T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:54Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "roleSessionName": "xray-daemon-1638483114921406273", - "durationSeconds": 3600 - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5EZSWT2UV", - "expiration": "Dec 2, 2021 11:11:54 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638483114921406273", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638483114921406273" - } - }, - "requestID": "eb91a628-e311-4425-bd0e-f62c2e016a5b", - "eventID": "ad1664dc-7b3e-4983-a9b5-1fbc77c346d2", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "d39f1780-7857-437e-96b5-e6374dd73648", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-03T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:12:01Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "config-bucket-345678901234", - "location": "", - "Host": "config-bucket-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "0aIyxjqrw+4q7wSZJ4lPtHAIME142K9BJM71kt8NivdbIdjf0fAgBG4tU7c+dEJnw5Bhduyz7P0=", - "bytesTransferredOut": 137 - }, - "requestID": "79KTRM4E1FT4RXHF", - "eventID": "26f909a5-ae64-4d3d-9cbe-f77e5aeaead4", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::config-bucket-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-02T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "lambda.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:46Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "lambda.amazonaws.com", - "userAgent": "lambda.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "roleSessionName": "awslambda_198_20211202221146461" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5P2F5Z6HL", - "sessionToken": "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", - "expiration": "Dec 3, 2021, 10:21:46 AM" - } - }, - "requestID": "b9c11daf-8414-4fe5-8336-0bd381f230c4", - "eventID": "a3731201-bf60-458f-8ace-643ed7a510b4", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "58eec27e-5418-4ff7-bcfc-d79cbb8d48af", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5MGPHCXONO:CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "arn": "arn:aws:sts::345678901234:assumed-role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK/CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "accountId": "345678901234", - "accessKeyId": "ASIAJCK5XCYKUUIL4LHQ", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5MGPHCXONO", - "arn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "accountId": "345678901234", - "userName": "CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:05:42Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:12:03Z", - "eventSource": "kms.amazonaws.com", - "eventName": "Decrypt", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/mytrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_CZFG6hKgcknqRdCV.json.gz" - }, - "encryptionAlgorithm": "SYMMETRIC_DEFAULT" - }, - "responseElements": null, - "requestID": "5dbc9731-abc3-4119-a143-48d7cdf19f7f", - "eventID": "357d36d4-7ff6-413c-80aa-72c495b0dbe5", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info/README.md b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info/README.md deleted file mode 100644 index ebe70b8a7f..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info/README.md +++ /dev/null @@ -1,30 +0,0 @@ -# AWS CloudTrail Log Integration - -## What is AWS CloudTrail? - -AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. - -CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services. - -CloudTrail can be used for a number of tasks, such as: - -- Simplifying compliance auditing -- Tracking changes to AWS resources -- Troubleshooting operational issues -- Identifying unwanted actions or unexpected patterns in behavior - -CloudTrail's event log data is delivered to an S3 bucket, and does not affect network throughput or latency. You can create or delete CloudTrail logs without any risk of impact to system performance. - -See additional details [here](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html). - -## What is AWS CloudTrail Log Integration? - -An integration is a set of pre-configured assets which are bundled together in a meaningful manner. - -AWS CloudTrail log integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-cloudtrail` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_cloudtrail-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_cloudtrail-1.0.0.mapping.json deleted file mode 100644 index 11e5eb3796..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_cloudtrail-1.0.0.mapping.json +++ /dev/null @@ -1,87 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_cloudtrail", - "labels": ["aws", "cloudtrail"] - }, - "properties": { - "aws": { - "type": "object", - "properties": { - "cloudtrail": { - "type": "object", - "properties": { - "eventVersion": { - "type": "keyword" - }, - "eventName": { - "type": "keyword" - }, - "eventSource": { - "type": "keyword" - }, - "eventTime": { - "type": "date" - }, - "eventType": { - "type": "keyword" - }, - "eventCategory": { - "type": "keyword" - }, - "sourceIPAddress": { - "type": "keyword" - }, - "apiVersion": { - "type": "keyword" - }, - "awsRegion": { - "type": "keyword" - }, - "requestParameter": { - "properties": { - "endTime": { - "type": "date" - }, - "startTime": { - "type": "date" - } - } - }, - "responseElements": { - "properties": { - "version": { - "type": "keyword" - }, - "lastModified": { - "type": "date" - } - } - }, - "userIdentity": { - "properties": { - "sessionContext": { - "properties": { - "attributes": { - "properties": { - "creationDate": { - "type": "date" - } - } - } - } - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index 8057cd98ab..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/logs-aws_cloudtrail-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/logs-aws_cloudtrail-1.0.0.mapping.json deleted file mode 100644 index 013792ee4e..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/logs-aws_cloudtrail-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_cloudtrail-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-cloudtrail": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "cloudtrail"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["cloud", "aws_cloudtrail", "aws_s3"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/dashboard.png deleted file mode 100644 index e01f638c68..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/logo.png b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/logo.png deleted file mode 100644 index 46e71685d5..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/assets/aws_elb-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_elb/assets/aws_elb-1.0.0.ndjson deleted file mode 100644 index 3489b2b6ac..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/assets/aws_elb-1.0.0.ndjson +++ /dev/null @@ -1,22 +0,0 @@ -{"attributes": {"fields": "[{\"name\": \"_index\", \"type\": \"string\", \"esTypes\": [\"_index\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"_score\", \"type\": \"number\", \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"_source\", \"type\": \"_source\", \"esTypes\": [\"_source\"], \"count\": 0, \"scripted\": false, \"searchable\": false, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"_type\", \"type\": \"string\", \"esTypes\": [\"_type\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"severity.number\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"severity.text\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"severity.text.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"severity.text\"}}}, {\"name\": \"attributes.data_stream.dataset\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"attributes.data_stream.namespace\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"attributes.data_stream.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"body\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"@message\", \"type\": \"string\", \"esTypes\": [\"alias\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"@timestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"observedTimestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"observerTime\", \"type\": \"string\", \"esTypes\": [\"alias\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"traceId\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"spanId\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"schemaUrl\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"schemaUrl.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"schemaUrl\"}}}, {\"name\": \"instrumentationScope.name\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.name.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.name\"}}}, {\"name\": \"instrumentationScope.version\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.version.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.version\"}}}, {\"name\": \"instrumentationScope.dropped_attributes_count\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"instrumentationScope.schemaUrl\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.schemaUrl.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.schemaUrl\"}}}, {\"name\": \"event.domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.source\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.category\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.kind\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.result\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.message\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.stacktrace\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.status_code\", \"type\": \"number\", \"esTypes\": [\"short\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.client.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.client.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.connection_time\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.destination.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.destination.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.elb_status_code\", \"type\": \"number\", \"esTypes\": [\"short\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.http.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.http.version\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.matched_rule_priority\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.received_bytes\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.request_creation_time\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.request_processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.response_processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.sent_bytes\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.ssl_protocol\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.ssl_cipher\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_status_code\", \"type\": \"number\", \"esTypes\": [\"short\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.timestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.flavor\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.url\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.schema\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.target\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.route\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.client.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.resent_count\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.id\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"http.request.id.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"http.request.id\"}}}, {\"name\": \"http.request.body.content\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.method\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.referrer\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.mime_type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.id\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"http.response.id.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"http.response.id\"}}}, {\"name\": \"http.response.body.content\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.status_code\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.sock.family\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.address\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.source.address.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.source.address\"}}}, {\"name\": \"communication.source.domain\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.source.domain.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.source.domain\"}}}, {\"name\": \"communication.source.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.mac\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.packets\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.city_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.country_iso_code\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.country_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.location\", \"type\": \"geo_point\", \"esTypes\": [\"geo_point\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.address\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.destination.address.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.destination.address\"}}}, {\"name\": \"communication.destination.domain\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.destination.domain.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.destination.domain\"}}}, {\"name\": \"communication.destination.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.mac\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.packets\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.city_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.country_iso_code\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.country_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.location\", \"type\": \"geo_point\", \"esTypes\": [\"geo_point\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.provider\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.availability_zone\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.region\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.machine.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.account.id\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.account.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.service.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.project.id\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.project.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.instance.id\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.instance.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.original\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.full\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.scheme\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.registered_domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.top_level_domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.subdomain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.path\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.query\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.extension\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.fragment\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.username\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.password\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.original\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.version\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.device.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}]", "timeFieldName": "@timestamp", "title": "ss4o_logs-*-*"}, "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "migrationVersion": {"index-pattern": "7.6.0"}, "references": [], "type": "index-pattern", "updated_at": "2023-07-21T09:40:35", "version": "WzE0LDFd"} -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}" }, "title": "ELB - Controls", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1606466378089\",\"fieldName\":\"event.module\",\"parent\":\"\",\"label\":\"ELB\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1606466402867\",\"fieldName\":\"cloud.account.id\",\"parent\":\"\",\"label\":\"AWS Account\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1606466482419\",\"fieldName\":\"cloud.region\",\"parent\":\"\",\"label\":\"AWS Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false},\"title\":\"ELB - Controls\"}" }, "id": "8643b130-308c-11eb-9df7-6b7b0da6e7ae", "migrationVersion": { "visualization": "7.7.0" }, "references": [ { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "control_0_index_pattern", "type": "index-pattern" }, { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "control_1_index_pattern", "type": "index-pattern" }, { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "control_2_index_pattern", "type": "index-pattern" } ], "type": "visualization", "updated_at": "2020-12-13T00:16:08.380Z", "version": "WzU0ODcsMV0=" } -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - AWS Account(Bar)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - AWS Account(Bar)\"}"},"id": "b6bb3950-308c-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0ODgsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Region(Bar)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - Region(Bar)\"}"},"id": "00407b80-308d-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0ODksMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - HTTP Response Code(PIE)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Response Code(PIE)\"}"},"id": "ed4009a0-320e-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTAsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - HTTP Response Code Trend","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - HTTP Response Code Trend\"}"},"id": "5c46e3a0-320f-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTEsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Transfer Size(MB)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"http.request.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.request.bytes'].value / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Request Size\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"http.response.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.response.bytes'].value / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Response Size\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Request Size\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Response Size\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Sum of http.request.bytes\"},\"type\":\"value\"}]},\"title\":\"ELB - Transfer Size(MB)\"}"},"id": "bc0f2620-321a-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTIsMV0="} -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}" }, "title": "ELB - User Agent Name(PIE)", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.user_agent.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Protocol(PIE)\"}" }, "id": "398dc100-3217-11eb-9df7-6b7b0da6e7ae", "migrationVersion": { "visualization": "7.7.0" }, "references": [ { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "kibanaSavedObjectMeta.searchSourceJSON.index", "type": "index-pattern" } ], "type": "visualization", "updated_at": "2020-12-13T00:16:08.380Z", "version": "WzU0OTMsMV0=" } -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - HTTP Request Method(PIE)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.request.method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Request Method(PIE)\"}"},"id": "d26adc60-3216-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTQsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - SSL Protocol(PIE)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"aws.elb.ssl_protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - SSL Protocol(PIE)\"}"},"id": "7ce2b140-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTUsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - SSL Cipher","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"aws.elb.ssl_cipher\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"},\"title\":\"ELB - SSL Cipher\"}"},"id": "9acb8d80-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTYsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - URL Domain","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.domain\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"ELB - URL Domain\"}"},"id": "d1ec9960-3b92-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTcsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - URL Path","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.path\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - URL Path\"}"},"id": "0358e220-3219-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTgsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - User Agent","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"http.user_agent.original\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - User Agent\"}"},"id": "360cc5b0-3219-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTksMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Source IP Country","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"communication.source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - Source IP Country\"}"},"id": "891bb040-3214-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDAsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Source Countries Geo Map","uiStateJSON": "{\"mapCenter\":[30.14512718337613,3.6917208421022094],\"mapZoom\":2}","version": 1,"visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"communication.source.geo.country_iso_code\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"order\":\"desc\",\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"size\":100},\"schema\":\"segment\",\"type\":\"terms\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"ELB - Source Countries Geo Map\",\"type\":\"region_map\"}"},"id": "a322d3b0-308e-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDEsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Source IP","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"communication.source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"},\"title\":\"ELB - Source IP\"}"},"id": "bf1fa930-3214-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDIsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Destination IP","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"communication.destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - Destination IP\"}"},"id": "de91c0b0-3218-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDMsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Processing TIme","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"aws.elb.request_processing_time\",\"customLabel\":\"Request\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"NOT aws.elb.request_processing_time<0 AND NOT aws.elb.response_processing_time<0\",\"language\":\"kuery\"},\"label\":\" \"}]}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"aws.elb.response_processing_time\",\"customLabel\":\"Response\"}}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Processing Time (Seconds)\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Request\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true},{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"id\":\"4\",\"label\":\"Response\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"row\":true},\"title\":\"ELB - Processing TIme\"}"},"id": "9205d000-3ba1-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDQsMV0="} -{"attributes": {"columns": ["cloud.account.id","cloud.region","communication.destination.ip","communication.source.ip","communication.source.geo.country_name","aws.elb.elb_status_code","http.request.method","http.request.body.content","http.user_agent.original"],"description": "","hits": 0,"kibanaSavedObjectMeta": {"searchSourceJSON": "{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort": [],"title": "search - ELB","version": 1},"id": "cb2c8f20-3211-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"search": "7.4.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "search","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDUsMV0="} -{"attributes": {"description": "","hits": 0,"kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON": "{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON": "[{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":5,\"i\":\"65ad5100-9919-47dd-8aae-1925f72dc6c2\"},\"panelIndex\":\"65ad5100-9919-47dd-8aae-1925f72dc6c2\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_0\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":5,\"w\":24,\"h\":7,\"i\":\"13602aba-c307-4018-814e-44ae6094e641\"},\"panelIndex\":\"13602aba-c307-4018-814e-44ae6094e641\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":5,\"w\":24,\"h\":7,\"i\":\"e8eb12e8-018e-430b-b64d-bcdfebf16165\"},\"panelIndex\":\"e8eb12e8-018e-430b-b64d-bcdfebf16165\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":12,\"w\":16,\"h\":10,\"i\":\"2fd7684e-f022-4a8e-8486-efcb22010f17\"},\"panelIndex\":\"2fd7684e-f022-4a8e-8486-efcb22010f17\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":16,\"y\":12,\"w\":32,\"h\":10,\"i\":\"5baf885b-3a6c-4a37-b0c2-f0d957aa2b24\"},\"panelIndex\":\"5baf885b-3a6c-4a37-b0c2-f0d957aa2b24\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":48,\"h\":13,\"i\":\"b0a4dd94-155e-4a11-928c-c9e813701bae\"},\"panelIndex\":\"b0a4dd94-155e-4a11-928c-c9e813701bae\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":35,\"w\":12,\"h\":12,\"i\":\"c99b3456-37d9-4dc1-8584-e1e172d75fb2\"},\"panelIndex\":\"c99b3456-37d9-4dc1-8584-e1e172d75fb2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":12,\"y\":35,\"w\":12,\"h\":12,\"i\":\"53ac67cf-842a-473a-ac36-cbc8b774fb95\"},\"panelIndex\":\"53ac67cf-842a-473a-ac36-cbc8b774fb95\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":35,\"w\":12,\"h\":12,\"i\":\"02dee2c1-ba4e-495f-9307-60275629a0a0\"},\"panelIndex\":\"02dee2c1-ba4e-495f-9307-60275629a0a0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":36,\"y\":35,\"w\":12,\"h\":12,\"i\":\"4f8a1c78-fbe7-44cb-938f-9f3a4121d5fe\"},\"panelIndex\":\"4f8a1c78-fbe7-44cb-938f-9f3a4121d5fe\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":47,\"w\":10,\"h\":15,\"i\":\"bf78a176-879b-4e60-8e1a-d3888b8c6678\"},\"panelIndex\":\"bf78a176-879b-4e60-8e1a-d3888b8c6678\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":10,\"y\":47,\"w\":14,\"h\":15,\"i\":\"065889f8-2a52-4305-99b3-39fbcf840ded\"},\"panelIndex\":\"065889f8-2a52-4305-99b3-39fbcf840ded\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":47,\"w\":24,\"h\":15,\"i\":\"e68d21d8-fb4a-4268-b3ea-1dad7c5f5c42\"},\"panelIndex\":\"e68d21d8-fb4a-4268-b3ea-1dad7c5f5c42\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":62,\"w\":13,\"h\":11,\"i\":\"21f540ca-5524-4b28-a534-7619c1274f2c\"},\"panelIndex\":\"21f540ca-5524-4b28-a534-7619c1274f2c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":13,\"y\":62,\"w\":35,\"h\":21,\"i\":\"6fe30837-fe94-4a5c-8b3d-085ba337e5ae\"},\"panelIndex\":\"6fe30837-fe94-4a5c-8b3d-085ba337e5ae\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"panelRefName\":\"panel_14\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":73,\"w\":13,\"h\":10,\"i\":\"0e25b5f6-8744-473c-b426-f8d5850d6519\"},\"panelIndex\":\"0e25b5f6-8744-473c-b426-f8d5850d6519\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":83,\"w\":10,\"h\":15,\"i\":\"96ec06ba-2f21-4db4-a13c-527ea26f74a0\"},\"panelIndex\":\"96ec06ba-2f21-4db4-a13c-527ea26f74a0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":10,\"y\":83,\"w\":38,\"h\":15,\"i\":\"e3caa6de-d408-4216-b6bd-6b230d28d195\"},\"panelIndex\":\"e3caa6de-d408-4216-b6bd-6b230d28d195\",\"embeddableConfig\":{},\"panelRefName\":\"panel_17\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":98,\"w\":48,\"h\":15,\"i\":\"ccd7b879-7013-4219-87dd-8ba436177671\"},\"panelIndex\":\"ccd7b879-7013-4219-87dd-8ba436177671\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"}]","timeRestore": false,"title": "ELB Summary","version": 1},"id": "48d6b4b0-308b-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"dashboard": "7.3.0"},"references": [{"id": "8643b130-308c-11eb-9df7-6b7b0da6e7ae","name": "panel_0","type": "visualization"},{"id": "b6bb3950-308c-11eb-9df7-6b7b0da6e7ae","name": "panel_1","type": "visualization"},{"id": "00407b80-308d-11eb-9df7-6b7b0da6e7ae","name": "panel_2","type": "visualization"},{"id": "ed4009a0-320e-11eb-9df7-6b7b0da6e7ae","name": "panel_3","type": "visualization"},{"id": "5c46e3a0-320f-11eb-9df7-6b7b0da6e7ae","name": "panel_4","type": "visualization"},{"id": "bc0f2620-321a-11eb-9df7-6b7b0da6e7ae","name": "panel_5","type": "visualization"},{"id": "398dc100-3217-11eb-9df7-6b7b0da6e7ae","name": "panel_6","type": "visualization"},{"id": "d26adc60-3216-11eb-9df7-6b7b0da6e7ae","name": "panel_7","type": "visualization"},{"id": "7ce2b140-3217-11eb-9df7-6b7b0da6e7ae","name": "panel_8","type": "visualization"},{"id": "9acb8d80-3217-11eb-9df7-6b7b0da6e7ae","name": "panel_9","type": "visualization"},{"id": "d1ec9960-3b92-11eb-9df7-6b7b0da6e7ae","name": "panel_10","type": "visualization"},{"id": "0358e220-3219-11eb-9df7-6b7b0da6e7ae","name": "panel_11","type": "visualization"},{"id": "360cc5b0-3219-11eb-9df7-6b7b0da6e7ae","name": "panel_12","type": "visualization"},{"id": "891bb040-3214-11eb-9df7-6b7b0da6e7ae","name": "panel_13","type": "visualization"},{"id": "a322d3b0-308e-11eb-9df7-6b7b0da6e7ae","name": "panel_14","type": "visualization"},{"id": "bf1fa930-3214-11eb-9df7-6b7b0da6e7ae","name": "panel_15","type": "visualization"},{"id": "de91c0b0-3218-11eb-9df7-6b7b0da6e7ae","name": "panel_16","type": "visualization"},{"id": "9205d000-3ba1-11eb-9df7-6b7b0da6e7ae","name": "panel_17","type": "visualization"},{"id": "cb2c8f20-3211-11eb-9df7-6b7b0da6e7ae","name": "panel_18","type": "search"}],"type": "dashboard","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDYsMV0="} -{"exportedCount": 21,"missingRefCount": 0,"missingReferences": []} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_mv-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_mv-1.0.0.sql deleted file mode 100644 index 86a23f32f9..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_mv-1.0.0.sql +++ /dev/null @@ -1,47 +0,0 @@ -CREATE MATERIALIZED VIEW {table_name}_mview AS -SELECT - type as `aws.elb.elb_type`, - time as `@timestamp`, - elb as `aws.elb.elb_name`, - split_part (client_ip, ':', 1) as `communication.source.ip`, - split_part (client_ip, ':', 2) as `communication.source.port`, - split_part (target_ip, ':', 1) as `communication.destination.ip`, - split_part (target_ip, ':', 2) as `communication.destination.port`, - request_processing_time as `aws.elb.request_processing_time`, - target_processing_time as `aws.elb.target_processing_time`, - response_processing_time as `aws.elb.response_processing_time`, - elb_status_code as `http.response.status_code`, - target_status_code as `aws.elb.target_status_code`, - received_bytes as `aws.elb.received_bytes`, - sent_bytes as `aws.elb.sent_bytes`, - split_part (request, ' ', 1) as `http.request.method`, - split_part (request, ' ', 2) as `url.full`, - parse_url (split_part (request, ' ', 2), 'HOST') as `url.domain`, - parse_url (split_part (request, ' ', 2), 'PATH') as `url.path`, - split_part (request, ' ', 3) as `url.schema`, - request AS `http.request.body.content`, - user_agent as `http.user_agent.original`, - user_agent as `http.user_agent.name`, - ssl_cipher as `aws.elb.ssl_cipher`, - ssl_protocol as `aws.elb.ssl_protocol`, - split_part (target_group_arn, ':', 4) as `cloud.region`, - split_part (target_group_arn, ':', 5) as `cloud.account.id`, - trace_id as `traceId`, - chosen_cert_arn as `aws.elb.chosen_cert_arn`, - matched_rule_priority as `aws.elb.matched_rule_priority`, - request_creation_time as `aws.elb.request_creation_time`, - actions_executed as `aws.elb.actions_executed`, - redirect_url as `aws.elb.redirect_url`, - lambda_error_reason as `aws.elb.lambda_error_reason`, - target_port_list as `aws.elb.target_port_list`, - target_status_code_list as `aws.elb.target_status_code_list`, - classification as `aws.elb.classification`, - classification_reason as `aws.elb.classification_reason` -FROM - {table_name} -WITH ( - auto_refresh = 'true', - checkpoint_location = '{s3_bucket_location}/checkpoint', - watermark_delay = '1 Minute', - extra_options = '{ "{table_name}": { "maxFilesPerTrigger": "10" }}' -); diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_table-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_table-1.0.0.sql deleted file mode 100644 index 3a5ed53f2d..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_table-1.0.0.sql +++ /dev/null @@ -1,36 +0,0 @@ -CREATE EXTERNAL TABLE IF NOT EXISTS {table_name} ( - type string, - time timestamp, - elb string, - client_ip string, - target_ip string, - request_processing_time double, - target_processing_time double, - response_processing_time double, - elb_status_code int, - target_status_code string, - received_bytes bigint, - sent_bytes bigint, - request string, - user_agent string, - ssl_cipher string, - ssl_protocol string, - target_group_arn string, - trace_id string, - domain_name string, - chosen_cert_arn string, - matched_rule_priority string, - request_creation_time timestamp, - actions_executed string, - redirect_url string, - lambda_error_reason string, - target_port_list string, - target_status_code_list string, - classification string, - classification_reason string -) -USING csv -LOCATION '{s3_bucket_location}' -OPTIONS ( - sep=' ' -); diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/aws_elb-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_elb/aws_elb-1.0.0.json deleted file mode 100644 index 6fbc6714fe..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/aws_elb-1.0.0.json +++ /dev/null @@ -1,70 +0,0 @@ -{ - "name": "aws_elb", - "version": "1.0.0", - "displayName": "AWS ELB", - "description": "AWS Elastic Load Balancer collector", - "license": "Apache-2.0", - "type": "logs_elb", - "labels": ["Observability", "Logs", "AWS", "Flint S3", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_elb/info", - "statics": { - "logo": { - "annotation": "ELB Logo", - "path": "logo.svg" - }, - "gallery": [ - { - "annotation": "ELB Dashboard", - "path": "dashboard1.png" - } - ] - }, - "components": [ - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "http", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "aws_elb", - "version": "1.0.0" - }, - { - "name": "url", - "version": "1.0.0" - }, - { - "name": "logs_elb", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_elb", - "version": "1.0.0" - }, - "queries": [ - { - "name": "create_table", - "version": "1.0.0", - "language": "sql" - }, - { - "name": "create_mv", - "version": "1.0.0", - "language": "sql" - } - ] - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_elb/data/sample.json deleted file mode 100644 index 0389cc41e5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/data/sample.json +++ /dev/null @@ -1,4370 +0,0 @@ -[ - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.188.82.156:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 471 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "1.14.7.100", - "ip": "1.14.7.100", - "port": 43430, - "geo": { - "country_name": "China", - "country_iso_code": "CN" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "1.14.7.100", - "port": 43430 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 471, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:45:13.427000Z" - } - }, - "traceId": "Root=1-64937d79-5051b6825367dff7279a6ab7", - "url": { - "domain": "54.188.82.156", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 382, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.188.82.156:80/docker-compose.yml HTTP/1.1" - }, - "bytes": 252 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; CrOS x86_64 14526.89.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.133 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Chrome OS" - } - } - }, - "communication": { - "source": { - "address": "212.224.107.53", - "ip": "212.224.107.53", - "port": 50760, - "geo": { - "country_name": "Germany", - "country_iso_code": "DE" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "212.224.107.53", - "port": 50760 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 252, - "sent_bytes": 382, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:13:14.679000Z" - } - }, - "traceId": "Root=1-649a37aa-2d0007242be74a111c44e631", - "url": { - "domain": "54.188.82.156", - "path": "/docker-compose.yml" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.149.97.75:80/.env HTTP/1.1" - }, - "bytes": 230 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 60186, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 60186 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 230, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:19:20.970000Z" - } - }, - "traceId": "Root=1-649a3918-3d47bc5b3f3939562cc43631", - "url": { - "domain": "54.149.97.75", - "path": "/.env" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.149.97.75:80/ HTTP/1.1" - }, - "bytes": 316 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 60642, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 60642 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 316, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:19:21.313000Z" - } - }, - "traceId": "Root=1-649a3919-144dd9eb215b55f058c94753", - "url": { - "domain": "54.149.97.75", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.188.82.156:80/.git/config HTTP/1.1" - }, - "bytes": 155 - }, - "user_agent": { - "original": "python-requests/2.28.1", - "name": "Python Requests", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "95.214.27.80", - "ip": "95.214.27.80", - "port": 65460, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "95.214.27.80", - "port": 65460 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 155, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:16:15.418000Z" - } - }, - "traceId": "Root=1-649a2a4f-2ab52d1118a5cb5a1fbd00dd", - "url": { - "domain": "54.188.82.156", - "path": "/.git/config" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.149.97.75:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 470 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "43.154.141.71", - "ip": "43.154.141.71", - "port": 39526, - "geo": { - "country_name": "Hong Kong", - "country_iso_code": "HK" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "43.154.141.71", - "port": 39526 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 470, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:02:26.996000Z" - } - }, - "traceId": "Root=1-64937372-7e7c25e57b986ca76cc813f9", - "url": { - "domain": "54.149.97.75", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 521 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 521, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:46.563000Z" - } - }, - "traceId": "Root=1-6493707a-062e3d077d0e7f5759a83c88", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 221, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 579, - "sent_bytes": 221, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:21.030000Z" - } - }, - "traceId": "Root=1-64937061-40a294a94461434e69dc73d7", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:21.449000Z" - } - }, - "traceId": "Root=1-64937061-79a1996859288ce92d44003f", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:21.667000Z" - } - }, - "traceId": "Root=1-64937061-05e8a706396a62621b99debb", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.014000Z" - } - }, - "traceId": "Root=1-64937062-686a5a2027b24753384bafa4", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.226000Z" - } - }, - "traceId": "Root=1-64937062-5ca0fd387005cdb527631d68", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.402000Z" - } - }, - "traceId": "Root=1-64937062-40ce96b9439c166d6e90877b", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.571000Z" - } - }, - "traceId": "Root=1-64937062-5bfc788b20198493251caebb", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:23.666000Z" - } - }, - "traceId": "Root=1-64937063-0951fdb60649542f6e1df423", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:24.529000Z" - } - }, - "traceId": "Root=1-64937064-5d9e75005adc9d4f5e9cc257", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:25.221000Z" - } - }, - "traceId": "Root=1-64937065-60772b0a181805dc6800edd3", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 277 - }, - "user_agent": { - "original": "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot-LinkExpanding", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "52.73.199.9", - "ip": "52.73.199.9", - "port": 39894, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "52.73.199.9", - "port": 39894 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 277, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.224000Z" - } - }, - "traceId": "Root=1-6493755e-43ea9b1c186d7e7c69340533", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 828, - "status_code": 206 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 267 - }, - "user_agent": { - "original": "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot-LinkExpanding", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "54.224.51.171", - "ip": "54.224.51.171", - "port": 49166, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "54.224.51.171", - "port": 49166 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 206, - "target_status_code": 206, - "received_bytes": 267, - "sent_bytes": 828, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.256000Z" - } - }, - "traceId": "Root=1-6493755e-383d9d6435b8c33513e8ea15", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/favicon.ico HTTP/1.1" - }, - "bytes": 242 - }, - "user_agent": { - "original": "Slackbot 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "3.86.48.136", - "ip": "3.86.48.136", - "port": 33698, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "3.86.48.136", - "port": 33698 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 242, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.389000Z" - } - }, - "traceId": "Root=1-6493755e-305240137716dba935ee0722", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/favicon.ico" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.149.97.75:80/.env HTTP/1.1" - }, - "bytes": 230 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 37770, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 37770 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 230, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:21:00.211000Z" - } - }, - "traceId": "Root=1-649a2b6c-2b64f3f93a14873724a6b2e9", - "url": { - "domain": "54.149.97.75", - "path": "/.env" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.149.97.75:80/ HTTP/1.1" - }, - "bytes": 316 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 38202, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 38202 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 316, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:21:00.538000Z" - } - }, - "traceId": "Root=1-649a2b6c-13a203d2404d2b794ea078b1", - "url": { - "domain": "54.149.97.75", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.188.82.156:80/boaform/admin/formLogin HTTP/1.1" - }, - "bytes": 533 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0", - "name": "Firefox", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "79.124.56.98", - "ip": "79.124.56.98", - "port": 46898, - "geo": { - "country_name": "Bulgaria", - "country_iso_code": "BG" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "79.124.56.98", - "port": 46898 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 533, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T23:36:38.398000Z" - } - }, - "traceId": "Root=1-64938986-058003e73813c30977c8b9f1", - "url": { - "domain": "54.188.82.156", - "path": "/boaform/admin/formLogin" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 0, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "79.124.56.98", - "ip": "79.124.56.98", - "port": 46898, - "geo": { - "country_name": "Bulgaria", - "country_iso_code": "BG" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "79.124.56.98", - "port": 46898 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 0, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T23:36:38.399000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.149.97.75:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 470 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "43.154.141.71", - "ip": "43.154.141.71", - "port": 58164, - "geo": { - "country_name": "Hong Kong", - "country_iso_code": "HK" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "43.154.141.71", - "port": 58164 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 470, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:38:53.303000Z" - } - }, - "traceId": "Root=1-649a2f9d-0960c8f64de617691a98950e", - "url": { - "domain": "54.149.97.75", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 783, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.003, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 783, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:45.626000Z" - } - }, - "traceId": "Root=1-649370b5-0253431f2042833a26460a7f", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:45.652000Z" - } - }, - "traceId": "Root=1-649370b5-7038a772150016f3770a50d4", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:46.958000Z" - } - }, - "traceId": "Root=1-649370b6-236a58f701ba34757a1af86d", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:46.980000Z" - } - }, - "traceId": "Root=1-649370b6-2b159d6829dd1eae6b2f5c19", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 555 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 555, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:52.790000Z" - } - }, - "traceId": "Root=1-649370bc-54228dd62baa096941578372", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:52.817000Z" - } - }, - "traceId": "Root=1-649370bc-0dc848167afad15140784d07", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 555 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 555, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:54.995000Z" - } - }, - "traceId": "Root=1-649370be-6d97b012401869d74a3b834e", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:55.016000Z" - } - }, - "traceId": "Root=1-649370bf-43c26c9b5c91ce8c4be528db", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 555 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 555, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:57.703000Z" - } - }, - "traceId": "Root=1-649370c1-6430b9e91900b7dd63abfdb8", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:57.725000Z" - } - }, - "traceId": "Root=1-649370c1-3823d52567099a7f2c9016c5", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 272, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "45.137.206.172", - "ip": "45.137.206.172", - "port": 34396, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "45.137.206.172", - "port": 34396 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 272, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T21:53:25.232000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.004000Z" - } - }, - "traceId": "Root=1-64937158-1703bbd3663398a56d532757", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.032000Z" - } - }, - "traceId": "Root=1-64937158-00902f3646247501721d0f0b", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.462000Z" - } - }, - "traceId": "Root=1-64937158-0631b61b1c06fbf1223e488a", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.485000Z" - } - }, - "traceId": "Root=1-64937158-0e12592764512ef94953ef26", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.734000Z" - } - }, - "traceId": "Root=1-64937158-41563bb6495a89296514be1d", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.760000Z" - } - }, - "traceId": "Root=1-64937158-6dd7546671aa320379907f7a", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.936000Z" - } - }, - "traceId": "Root=1-64937158-6d020d7f7f6c40233e18032c", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.960000Z" - } - }, - "traceId": "Root=1-64937158-4a5ac41b6bb2a2d01f665491", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:29.111000Z" - } - }, - "traceId": "Root=1-64937159-2683dd2f5fc313c23c673fa5", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:29.132000Z" - } - }, - "traceId": "Root=1-64937159-46c280b6129f43b96948071a", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 382, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.188.82.156:80/.env HTTP/1.1" - }, - "bytes": 236 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "31.172.80.202", - "ip": "31.172.80.202", - "port": 49728, - "geo": { - "country_name": "Germany", - "country_iso_code": "DE" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "31.172.80.202", - "port": 49728 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 236, - "sent_bytes": 382, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:02:44.586000Z" - } - }, - "traceId": "Root=1-649a3534-57a9376d7ccfa2da7869721b", - "url": { - "domain": "54.188.82.156", - "path": "/.env" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 272, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "162.142.125.223", - "ip": "162.142.125.223", - "port": 51092, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "162.142.125.223", - "port": 51092 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 272, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T23:20:16.597000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.149.97.75:80/boaform/admin/formLogin HTTP/1.1" - }, - "bytes": 526 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0", - "name": "Firefox", - "version": ".", - "os": { - "family": "Ubuntu" - } - } - }, - "communication": { - "source": { - "address": "193.35.18.52", - "ip": "193.35.18.52", - "port": 46566, - "geo": { - "country_name": "Netherlands", - "country_iso_code": "NL" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "193.35.18.52", - "port": 46566 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 526, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:15:40.730000Z" - } - }, - "traceId": "Root=1-6493768c-78f0b50f583816db3131bbaa", - "url": { - "domain": "54.149.97.75", - "path": "/boaform/admin/formLogin" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 0, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "193.35.18.52", - "ip": "193.35.18.52", - "port": 46566, - "geo": { - "country_name": "Netherlands", - "country_iso_code": "NL" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "193.35.18.52", - "port": 46566 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 0, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T22:15:40.731000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.149.97.75:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 470 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "43.154.141.71", - "ip": "43.154.141.71", - "port": 38868, - "geo": { - "country_name": "Hong Kong", - "country_iso_code": "HK" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "43.154.141.71", - "port": 38868 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 470, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T23:19:47.448000Z" - } - }, - "traceId": "Root=1-64938593-3256282f7da0efa967807a4a", - "url": { - "domain": "54.149.97.75", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 272, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "198.235.24.93", - "ip": "198.235.24.93", - "port": 62452, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "198.235.24.93", - "port": 62452 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 272, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-27T01:40:50.631000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 828, - "status_code": 206 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 267 - }, - "user_agent": { - "original": "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot-LinkExpanding", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "44.201.184.49", - "ip": "44.201.184.49", - "port": 40064, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "44.201.184.49", - "port": 40064 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 206, - "target_status_code": 206, - "received_bytes": 267, - "sent_bytes": 828, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.220000Z" - } - }, - "traceId": "Root=1-6493755e-3ca8a7935bd41bde6e7df23c", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/favicon.ico HTTP/1.1" - }, - "bytes": 242 - }, - "user_agent": { - "original": "Slackbot 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "54.146.175.252", - "ip": "54.146.175.252", - "port": 33818, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "54.146.175.252", - "port": 33818 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 242, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.365000Z" - } - }, - "traceId": "Root=1-6493755e-5ebf89d86685fc932929f452", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/favicon.ico" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 215, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.149.97.75:80/info.php HTTP/1.1" - }, - "bytes": 230 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "79.133.51.240", - "ip": "79.133.51.240", - "port": 55476, - "geo": { - "country_name": "Germany", - "country_iso_code": "DE" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "79.133.51.240", - "port": 55476 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.002, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 230, - "sent_bytes": 215, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:13:56.143000Z" - } - }, - "traceId": "Root=1-64937624-642d3f727d9fde3c2f55e35c", - "url": { - "domain": "54.149.97.75", - "path": "/info.php" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.188.82.156:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 471 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "1.14.7.100", - "ip": "1.14.7.100", - "port": 40138, - "geo": { - "country_name": "China", - "country_iso_code": "CN" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "1.14.7.100", - "port": 40138 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 471, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:07:35.848000Z" - } - }, - "traceId": "Root=1-649a3657-39104fcd5ee623ba3fd12290", - "url": { - "domain": "54.188.82.156", - "path": "/Core/Skin/Login.aspx" - } - } -] \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/info/INGESTION.md b/server/adaptors/integrations/__data__/repository/aws_elb/info/INGESTION.md deleted file mode 100644 index 459b2806db..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/info/INGESTION.md +++ /dev/null @@ -1,163 +0,0 @@ -# Sample Ingestion Pipeline - -This is a brief overview of a sample ingestion pipeline for the AWS ELB integration. - -## List of Components - -- An OpenSearch domain running through Docker -- A FluentBit agent running through Docker -- An ELB instance generating logs (not covered in this sample) - -### OpenSearch and FluentBit Setup - -1. Look at [docker-compose.yaml](<[docker-compose.yaml](https://github.com/opensearch-project/data-prepper/blob/93d06db5cad280e2e4c53e12dfb47c7cbaa7b364/examples/log-ingestion/docker-compose.yaml)https://github.com/opensearch-project/data-prepper/blob/93d06db5cad280e2e4c53e12dfb47c7cbaa7b364/examples/log-ingestion/docker-compose.yaml>) to create FluentBit and OpenSearch Docker images and run them in the `opensearch-net` Docker network. -2. Create the FluentBit as follows: - -``` -[SERVICE] - Parsers_File parsers.conf - -[INPUT] - [YOUR INPUT HERE] - -[FILTER] - Name parser - Match aws.elb - Key_Name log - Parser aws-elb - -[FILTER] - Name lua - Match aws.elb - Script otel-converter.lua - call convert_to_otel - -[OUTPUT] - Name opensearch - Match aws.elb - Host opensearch - Port 9200 - Index ss4o_logs-aws_elb-prod-sample - Suppress_Type_Name On -``` - -You would set INPUT as however you are ingesting your AWS ELB logs, more info [here](https://docs.fluentbit.io/manual/pipeline/inputs). - -3. Create your `parsers.conf` as follows: - -``` -[PARSER] - Name aws-elb - Format regex - Regex ^(?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*):(?[0-9]*) (?[^ ]*)[:-](?[0-9]*) (?[-.0-9]*) (?[-.0-9]*) (?[-.0-9]*) (?|[-0-9]*) (?-|[-0-9]*) (?[-0-9]*) (?[-0-9]*) \"(?(-|(?\w+)) (-|(?\w*)://\[?(?[^/]+?)\]?:(?\d+)(-|(?/[^?]*?))(\?(?.*?))?) (-?|\w+/(?[0-9\.]*)))\" \"(|(?[^\"]+))\" (?[()A-Z0-9-]+) (?[A-Za-z0-9.-]*) (?[^ ]*) \"(?[^\"]*)\" \"(?[^\"]*)\" \"(?[^\"]*)\" (?[-.0-9]*) (?[^ ]*) \"(?[^\"]*)\" \"(?[^\"]*)\" \"(?[^ ]*)\" \"(?[^\s]+)\" \"(?[^\s]+)\"( \"(?[^\s]+)\" \"(?[^\s]+)\")? - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z -``` - -4. Create your `otel-converter.lua` as follows: - -```lua -local function format_aws_elb(c) - return string.format( - "%s %s %s %s:%s %s:%s %s %s %s %s %s %s %s \"%s\" \"%s\" %s %s %s \"%s\" \"%s\" \"%s\" %s %s \"%s\" \"%s\" \"%s\" \"%s\" \"%s\" \"%s\" \"%s\"", - c.request_type, c.timestamp, c.elb, c.client_ip c.client_port, c.target_ip, c.target_port, c.request_processing_time, c.target_processing_time, c.response_processing_time, c.elb_status_code, c.target_status_code, c.received_bytes, c.sent_bytes, c.request, c.useragent, c.ssl_cipher, c.ssl_protocol, c.target_group_arn, c.trace_id, c.domain_name c.chosen_cert_arn, c.matched_rule_priority, c.request_creation_time, c.actions_executed, c.redirect_url, c.lambda_error_reason, c.target_port_list, c.target_status_code_list, c.classification, c.classification_reason - ) -end - -function convert_to_otel(tag, timestamp, record) - local data = { - traceId=record.trace_id, - ["@timestamp"]=(record.timestamp or os.date("!%Y-%m-%dT%H:%M:%S.000Z")), - observedTimestamp=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - body=format_aws_elb(record), - attributes={ - data_stream={ - dataset="aws_elb", - namespace="production", - type="logs" - } - }, - event={ - category="web", - name="access", - domain="aws_elb", - kind="event", - result="success", - type="access" - }, - http={ - request={ - method=record.http_method, - bytes=tonumber(record.received_bytes) - body={ - content=record.request - } - }, - response={ - bytes=tonumber(record.sent_bytes), - status_code=tonumber(record.elb_status_code) - }, - schema=record.request_type - user_agent={ - original=record.useragent - } - }, - communication={ - source={ - address=record.client_ip, - ip=record.client_ip, - port=tonumber(record.client_port) - geo={ - country_name=record.response.country.name, - country_iso_code=record.response.country.iso_code - } - }, - destination={ - address=record.target_ip, - ip=record.target_ip, - port=tonumber(record.target_port), - } - }, - cloud={ - provider="AWS", - service={ - name="ELB" - } - -- account={ - -- id=? - -- }, - -- region=? - }, - aws={ - elb={ - client={ - ip=record.client_ip, - port=tonumber(record.client_port) - }, - target_ip=record.target_ip, - target_port=tonumber(record.target_port), - request_processing_time=tonumber(record.request_processing_time), - target_processing_time: tonumber(record.target_processing_time), - response_processing_time: tonumber(record.response_processing_time), - elb_status_code: tonumber(record.elb_status_code), - target_status_code: tonumber(record.target_status_code), - received_bytes: tonumber(record.received_bytes), - sent_bytes:tonumber(record.sent_bytes), - http: { - port: tonumber(record.http_port), - version: record.http_version - }, - ssl_cipher: record.ssl_cipher, - ssl_protocol: record.ssl_protocol, - matched_rule_priority: tonumber(record.matched_rule_priority), - request_creation_time: record.request_creation_time, - } - }, - url={ - domain=record.http_host, - path=record.http_path - } - } - return 1, timestamp, data -end -``` diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/info/README.md b/server/adaptors/integrations/__data__/repository/aws_elb/info/README.md deleted file mode 100644 index b3affc4114..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/info/README.md +++ /dev/null @@ -1,31 +0,0 @@ -# AWS ELB Access Logs Integrations - -## What is AWS ELB Access Logs ? - -ELB Access Logs is a feature that allows you to capture information about requests sent to your load balancer. - -Access logs can help with a number of tasks, such as: - -- Optimizing performance by showing response and processing times - -- Security analysis by monitoring unusual request patterns or user agents - -- Understanding traffic patterns and peak loads - -While disabled by default, you can [enable storing access logs](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-access-logging.html) for your load balancer in an AWS S3 bucket. - -See additional details [here](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html). - -Flow log data is collected outside of the path of your network traffic, and therefore does not affect network throughput or latency. You can create or delete flow logs without any risk of impact to network performance. - -See additional details [here](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). - -## What is AWS ELB Access Logs Integration ? - -An integration is a bundle of pre-canned assets which are bundled togather in a meaningful manner. - -AWS ELB access logs integration includes dashboards, visualisations, queries and index mapping - -### Dashboard - - diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/aws_elb-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/aws_elb-1.0.0.mapping.json deleted file mode 100644 index 646857956f..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/aws_elb-1.0.0.mapping.json +++ /dev/null @@ -1,99 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_elb", - "labels": ["aws", "elb"] - }, - "properties": { - "aws": { - "type": "object", - "properties": { - "elb": { - "properties": { - "backend.ip": { - "type": "ip" - }, - "backend.port": { - "type": "integer" - }, - "backend.processing_time": { - "type": "half_float" - }, - "backend.status_code": { - "type": "short" - }, - "client.ip": { - "type": "ip" - }, - "client.port": { - "type": "integer" - }, - "connection_time": { - "type": "integer" - }, - "destination.ip": { - "type": "ip" - }, - "destination.port": { - "type": "integer" - }, - "elb_status_code": { - "type": "short" - }, - "http.port": { - "type": "integer" - }, - "http.version": { - "type": "keyword" - }, - "matched_rule_priority": { - "type": "integer" - }, - "received_bytes": { - "type": "integer" - }, - "request_creation_time": { - "type": "date" - }, - "request_processing_time": { - "type": "half_float" - }, - "response_processing_time": { - "type": "half_float" - }, - "sent_bytes": { - "type": "integer" - }, - "ssl_protocol": { - "type": "keyword" - }, - "ssl_cipher": { - "type": "keyword" - }, - "target_ip": { - "type": "ip" - }, - "target_port": { - "type": "integer" - }, - "target_processing_time": { - "type": "half_float" - }, - "target_status_code": { - "type": "short" - }, - "timestamp": { - "type": "date" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/http-1.0.0.mapping.json deleted file mode 100644 index 5fec510cb8..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/logs_elb-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/logs_elb-1.0.0.mapping.json deleted file mode 100644 index 773d2a5f5d..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/logs_elb-1.0.0.mapping.json +++ /dev/null @@ -1,225 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_elb-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-elb": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "communication", "http", "cloud", "elb", "url"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http", "cloud", "aws_elb", "url"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/url-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/url-1.0.0.mapping.json deleted file mode 100644 index 12961efd34..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/url-1.0.0.mapping.json +++ /dev/null @@ -1,61 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "url", - "labels": ["url"] - }, - "properties": { - "url": { - "properties": { - "original": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "scheme": { - "type": "keyword" - }, - "domain": { - "type": "keyword" - }, - "registered_domain": { - "type": "keyword" - }, - "top_level_domain": { - "type": "keyword" - }, - "subdomain": { - "type": "keyword" - }, - "port": { - "type": "long" - }, - "path": { - "type": "keyword" - }, - "query": { - "type": "keyword" - }, - "extension": { - "type": "keyword" - }, - "fragment": { - "type": "keyword" - }, - "username": { - "type": "keyword" - }, - "password": { - "type": "keyword" - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/aws_elb/static/dashboard1.png deleted file mode 100644 index 2d49f663c5..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_elb/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/static/logo.svg b/server/adaptors/integrations/__data__/repository/aws_elb/static/logo.svg deleted file mode 100644 index ec7edda561..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/static/logo.svg +++ /dev/null @@ -1,6 +0,0 @@ - - - - - - diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/assets/README.md b/server/adaptors/integrations/__data__/repository/aws_rds/assets/README.md deleted file mode 100644 index 36fac9aea5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/assets/README.md +++ /dev/null @@ -1,38 +0,0 @@ -# AWS RDS Integration Assets - -API: http://osd:5601/api/saved_objects/_import?overwrite=true - -- [Assets](aws_rds-1.0.0.ndjson) - -## Asset List - -The next table details the assets - -| Name | Type | Description | -| ------------------------------------------- | :-----------: | :--------------------------------------------------------------------------------------------------------: | -| `ss4o_logs_rds-*-*` | index-pattern | The Index Pattern | -| `AWS RDS Log Event Overview` | dashboard | The pre-canned dashboard for AWS RDS | -| `[AWS RDS] Filters` | visualization | [Controls] Interactive controls for easy dashboard manipulation | -| `[AWS RDS] Slowquery` | visualization | [Metric] Shows the latest slow queries that took more time than specified in the slow query parameters. | -| `[AWS RDS] Slow Query History` | visualization | [Vertical Bar] Presents a timeline representation of slow queries over a specified period. | -| `[AWS RDS] Average Slow Query Time History` | visualization | [Pie] : Provides a historical trend of average execution times for slow queries. | -| `[AWS RDS] Total Slow Queries` | visualization | [Metric] Depicts the total count of slow queries within a specified time frame. | -| `[AWS RDS] Top Slow Query IP Table` | visualization | [Line] Lists the IP addresses that initiated the most slow queries | -| `[AWS RDS] Slow Query Scatter Plot` | visualization | [Line] A scatter plot illustrating slow queries against two different parameters such as time and duration | -| `[AWS RDS] Average Slow Query Duration` | visualization | [Metric] Represents the average time taken by slow queries to execute | -| `[AWS RDS] Slow Query Pie` | visualization | [Pie] A pie chart showing the distribution of slow queries | -| `[AWS RDS] Slow Query Table Pie` | visualization | [Table] A pie chart showing the distribution of slow queries | -| `[AWS RDS] Top Slow Query` | visualization | [Table] Top 10 source showing the slowest queries | -| `[AWS RDS] Lock` | visualization | [Table] A visualization showing the number of active locks in your RDS instance | -| `[AWS RDS] Total Deadlock Queries` | visualization | [Table] Represents the total count of deadlock scenarios encountered in the database | -| `[AWS RDS] Deadlock History` | visualization | [Table] Provides a timeline showing occurrences of deadlock scenarios | -| `[AWS RDS] Error Data` | visualization | [Table] Represents data related to various errors occurred in your RDS instance | -| `[AWS RDS] Audit Data` | visualization | [Table] overview of audit logs, showing actions that have been tracked for review | -| `[AWS RDS] Total Error Logs` | visualization | [Line] Displays the total count of error logs recorded within a specific time frame | -| `[AWS RDS] Error History` | visualization | [Line] Provides a timeline representation of the errors occurred over a certain period. | -| `[AWS RDS] Audoit History` | visualization | [Line] Provides a timeline representation of the audited events occurred over a certain period. | -| `[AWS RDS] General Search` | search | The pre-canned search for AWS RDS | - -## Dashboard - - diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/assets/aws_rds-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_rds/assets/aws_rds-1.0.0.ndjson deleted file mode 100644 index 253bb7053a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/assets/aws_rds-1.0.0.ndjson +++ /dev/null @@ -1,22 +0,0 @@ -{"attributes":{"fieldFormatMap":"{\"deadlock-integrate-ip\":{\"id\":\"string\",\"params\":{\"parsedUrl\":{\"origin\":\"https://localhost:9200\",\"pathname\":\"/_dashboards/app/management\",\"basePath\":\"/_dashboards\"}}}}","fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-connection-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-connection-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-connection-id\"}}},{\"count\":0,\"name\":\"aws.rds.audit-db-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-host-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-host-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-host-name\"}}},{\"count\":0,\"name\":\"aws.rds.audit-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.audit-operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-operation\"}}},{\"count\":0,\"name\":\"aws.rds.audit-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-query-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-query-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-query-id\"}}},{\"count\":0,\"name\":\"aws.rds.audit-retcode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-user\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-user.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-user\"}}},{\"count\":0,\"name\":\"aws.rds.db-identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.db-identifier.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-action-1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-action-2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-ip-1\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-ip-2\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-os-thread-handle-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-os-thread-handle-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-os-thread-handle-1\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-os-thread-handle-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-os-thread-handle-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-os-thread-handle-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-query-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-1\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-query-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-query-id-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-id-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-id-1\"}}},{\"count\":1,\"name\":\"deadlock-query-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-id-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-thread-id-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-thread-id-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-thread-id-1\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-thread-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-thread-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-thread-id-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-user-1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.deadlock-user-2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.err-code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-code\"}}},{\"count\":0,\"name\":\"aws.rds.err-detail\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-label\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-label.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-label\"}}},{\"count\":0,\"name\":\"aws.rds.err-sub-system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-sub-system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-sub-system\"}}},{\"count\":0,\"name\":\"aws.rds.err-thread\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-thread.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-thread\"}}},{\"count\":0,\"name\":\"aws.rds.general-action\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.general-action.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.general-action\"}}},{\"count\":0,\"name\":\"aws.rds.general-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.general-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.log-detail\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-db-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-db-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-db-name\"}}},{\"count\":0,\"name\":\"aws.rds.sq-duration\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-host-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-host-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-host-name\"}}},{\"count\":0,\"name\":\"aws.rds.sq-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-id\"}}},{\"count\":0,\"name\":\"aws.rds.sq-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-ip.keyword\",\"type\":\"ip\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-lock-wait\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-query.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-query\"}}},{\"count\":0,\"name\":\"aws.rds.sq-rows-examined\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-rows-sent\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-table-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-table-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-table-name\"}}},{\"count\":0,\"name\":\"aws.rds.sq-timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-user\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-user.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-user\"}}},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"ss4o_logs-aws_rds-sample-sample"},"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"title":"logs-aws-rds-Controller","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Controller\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1642652265092\",\"fieldName\":\"aws.rds.db-identifier.keyword\",\"parent\":\"\",\"label\":\"Database Identifier\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1642652947950\",\"fieldName\":\"aws.rds.sq-table-name.keyword\",\"parent\":\"1642652265092\",\"label\":\"Table Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":true,\"pinFilters\":false}}"},"id":"4ab9b1cf-9724-499d-aeea-0c4f511102b8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"control_0_index_pattern","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"control_1_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-rds-Log Event Overview","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Log Event Overview\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Log Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-2h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.db-identifier.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Log Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Log Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"80d85a4e-fd94-4739-beab-b490cde705f5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MiwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.sq-db-name","aws.rds.sq-table-name","aws.rds.sq-user","aws.rds.sq-query","aws.rds.sq-ip","aws.rds.sq-host-name","aws.rds.sq-rows-examined","aws.rds.sq-rows-sent","aws.rds.sq-id","aws.rds.sq-duration","aws.rds.sq-lock-wait"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"aws.rds.sq-duration > 0\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["sq-lock-wait","asc"]],"title":"logs-aws-rds-slowquery-data","version":1},"id":"05103629-66db-4c1c-b0bb-e855708ec9be","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Slow Query History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Slow Query History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/d\",\"to\":\"now/d\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"9e3ffdc2-7f7f-4e1e-9231-5a1d2c43c2c8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Average Slow Query Time History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Average Slow Query Time History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.rds.sq-duration\",\"customLabel\":\"Slow Query Time Taken\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15m\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Slow Query Time Taken\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Slow Query Time Taken\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"48c19a1b-b353-4b0d-b2c1-223b5ae53a72","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":" logs-aws-rds-Top Slow Query IP Table","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\" logs-aws-rds-Top Slow Query IP Table\",\"type\":\"table\",\"aggs\":[{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.rds.sq-duration\",\"customLabel\":\"Average Duration\"},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-ip.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"338679b0-7179-416d-a6a5-6be8a55dba50","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Top Slow Query","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-rds-Top Slow Query\",\"type\":\"table\",\"aggs\":[{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.rds.sq-duration\",\"customLabel\":\"Average Query duration\"},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-query.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Slow Query\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"f25733ef-8c66-49c6-93ea-14c1a2bc2491","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":" logs-aws-rds-Slow Query Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\" logs-aws-rds-Slow Query Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-query.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"137ba0ed-03fe-493b-9f54-9dc39fda9533","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":" logs-aws-rds-Slow Query Table Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\" logs-aws-rds-Slow Query Table Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-table-name.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"43602db4-6562-4f4d-92f1-147bb83481b6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Total Slow Queries","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Total Slow Queries\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Slow Queries\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"1e652ded-a6bf-4cdc-9be8-86c5eb3dd93e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"title":"logs-aws-rds-Average Slow Query Duration","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Average Slow Query Duration\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"aws.rds.sq-duration\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"ms,ms,\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Average Slow Query Duration\",\"var_name\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-rds-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"nginx-dev-0110--*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"aws.rds.sq-duration > 0\",\"language\":\"kuery\"},\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\",\"markdown\":\"# **{{ average_slow_query_duration.last.formatted }}**\\n\\n{{ average_slow_query_duration.label }}\\n\",\"ignore_global_filter\":0,\"time_range_mode\":\"entire_time_range\"}}"},"id":"f13a7bb0-029f-4ad6-8191-c12de56669a9","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0OSwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.log-detail","aws.rds.deadlock-ip-1","aws.rds.deadlock-action-1","aws.rds.deadlock-os-thread-handle-1","aws.rds.deadlock-query-1","aws.rds.deadlock-query-id-1","aws.rds.deadlock-thread-id-1","aws.rds.deadlock-user-1","aws.rds.deadlock-action-2","aws.rds.deadlock-ip-2","aws.rds.deadlock-os-thread-handle-2","aws.rds.deadlock-query-2","aws.rds.deadlock-query-id-2","aws.rds.deadlock-thread-id-2","aws.rds.deadlock-user-2"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"aws.rds.deadlock-query-1\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"aws.rds.deadlock-query-1\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-rds-lock-data","version":1},"id":"0b0b7618-efd8-4680-b927-453ac44cb989","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Total Deadlock Queries","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Total Deadlock Queries\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Deadlock Queries\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"a90bdf8c-842f-4254-8120-57615a63d3a5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b0b7618-efd8-4680-b927-453ac44cb989","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Deadlock History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Deadlock History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/w\",\"to\":\"now/w\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"200cc6af-892a-42cf-ae6b-f937141944b0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b0b7618-efd8-4680-b927-453ac44cb989","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NSwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.err-label","aws.rds.err-code","aws.rds.err-detail","aws.rds.err-sub-system","aws.rds.err-thread"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"aws.rds.err-label.keyword\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"aws.rds.err-label.keyword\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-rds-Error Data","version":1},"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Total Error Logs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Total Error Logs\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Error Logs\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"95315992-e8c4-44ed-b46a-f18e98e9b8f0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1OCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Error History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Error History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/d\",\"to\":\"now/d\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"929f4595-61bb-4ecc-b380-b79208ab2ab8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1OSwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.audit-operation","aws.rds.audit-ip","aws.rds.audit-query","aws.rds.audit-retcode","aws.rds.audit-connection-id","aws.rds.audit-host-name","aws.rds.audit-query-id","aws.rds.audit-user"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"aws.rds.audit-operation.keyword\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"aws.rds.audit-operation.keyword\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-rds-Audit Data","version":1},"id":"4b9906f0-3b82-4522-9911-766f7632b4db","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Audit History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Audit History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/d\",\"to\":\"now/d\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"d39307b4-6309-4f5d-86a6-c8bc63420fce","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4b9906f0-3b82-4522-9911-766f7632b4db","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc2MCwxXQ=="} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"d9a4a2d5-3fa9-4d67-aecc-3592b45da718\"},\"panelIndex\":\"d9a4a2d5-3fa9-4d67-aecc-3592b45da718\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Controller\",\"panelRefName\":\"panel_0\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"bdd894b1-49c5-451a-8c85-53ae5e6d4d65\"},\"panelIndex\":\"bdd894b1-49c5-451a-8c85-53ae5e6d4d65\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Log Events Overview\",\"panelRefName\":\"panel_1\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":7,\"w\":24,\"h\":15,\"i\":\"cfed55c2-cf94-43c4-9551-48e77078fa80\"},\"panelIndex\":\"cfed55c2-cf94-43c4-9551-48e77078fa80\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query History\",\"panelRefName\":\"panel_2\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":7,\"w\":24,\"h\":15,\"i\":\"353c8024-cfbe-4036-9aaa-267c24e75a67\"},\"panelIndex\":\"353c8024-cfbe-4036-9aaa-267c24e75a67\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Average Slow Query Time History\",\"panelRefName\":\"panel_3\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":24,\"h\":15,\"i\":\"f6f989a2-c34d-4b00-a0be-b9a101858172\"},\"panelIndex\":\"f6f989a2-c34d-4b00-a0be-b9a101858172\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Top Slow Query IP\",\"panelRefName\":\"panel_4\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":22,\"w\":24,\"h\":15,\"i\":\"ff6c2123-49cb-40b3-91de-561acd661968\"},\"panelIndex\":\"ff6c2123-49cb-40b3-91de-561acd661968\",\"embeddableConfig\":{\"hidePanelTitles\":false,\"table\":null,\"vis\":{\"params\":{\"sort\":{\"columnIndex\":2,\"direction\":\"asc\"}}}},\"title\":\"Top Slow Query\",\"panelRefName\":\"panel_5\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":37,\"w\":20,\"h\":15,\"i\":\"16597129-58fe-40de-bb63-e07ce3607ef2\"},\"panelIndex\":\"16597129-58fe-40de-bb63-e07ce3607ef2\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query Pie\",\"panelRefName\":\"panel_6\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":20,\"y\":37,\"w\":21,\"h\":15,\"i\":\"bd82d45f-08ae-48a0-a42a-484e0821e0cf\"},\"panelIndex\":\"bd82d45f-08ae-48a0-a42a-484e0821e0cf\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query Table Name Pie\",\"panelRefName\":\"panel_7\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":41,\"y\":37,\"w\":7,\"h\":8,\"i\":\"b558fc11-88e7-4c07-8d02-d43c2edc8ae6\"},\"panelIndex\":\"b558fc11-88e7-4c07-8d02-d43c2edc8ae6\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Slow Queries\",\"panelRefName\":\"panel_8\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":41,\"y\":45,\"w\":7,\"h\":7,\"i\":\"54685e26-7269-4072-a80d-685ff764a9e6\"},\"panelIndex\":\"54685e26-7269-4072-a80d-685ff764a9e6\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Average Slow Query Duration\",\"panelRefName\":\"panel_9\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":52,\"w\":48,\"h\":15,\"i\":\"7e67c9ad-b300-4ec4-80ab-d9111eca62bb\"},\"panelIndex\":\"7e67c9ad-b300-4ec4-80ab-d9111eca62bb\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query Logs\",\"panelRefName\":\"panel_10\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":67,\"w\":7,\"h\":15,\"i\":\"1868514c-2bb2-4f97-83bd-b30390bc7fb1\"},\"panelIndex\":\"1868514c-2bb2-4f97-83bd-b30390bc7fb1\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Deadlock Queries\",\"panelRefName\":\"panel_11\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":7,\"y\":67,\"w\":17,\"h\":15,\"i\":\"db57c4d2-c429-40fa-b681-c121d3efb569\"},\"panelIndex\":\"db57c4d2-c429-40fa-b681-c121d3efb569\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Deadlock History\",\"panelRefName\":\"panel_12\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":67,\"w\":24,\"h\":15,\"i\":\"2b401b1c-9d8d-4b96-9123-571a6b4047f5\"},\"panelIndex\":\"2b401b1c-9d8d-4b96-9123-571a6b4047f5\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Deadlock Query Logs\",\"panelRefName\":\"panel_13\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":82,\"w\":7,\"h\":15,\"i\":\"e75f0e28-0ed2-428f-8b84-0ddf376ec992\"},\"panelIndex\":\"e75f0e28-0ed2-428f-8b84-0ddf376ec992\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Error Logs\",\"panelRefName\":\"panel_14\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":7,\"y\":82,\"w\":17,\"h\":15,\"i\":\"31d43fb1-68cc-43d5-9859-f7b15469164f\"},\"panelIndex\":\"31d43fb1-68cc-43d5-9859-f7b15469164f\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Error History\",\"panelRefName\":\"panel_15\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":82,\"w\":24,\"h\":15,\"i\":\"887710fb-2582-4540-bd0d-b98b6144473f\"},\"panelIndex\":\"887710fb-2582-4540-bd0d-b98b6144473f\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Error Logs\",\"panelRefName\":\"panel_16\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":97,\"w\":24,\"h\":15,\"i\":\"71008d33-ed91-45fb-ad78-7266f7684545\"},\"panelIndex\":\"71008d33-ed91-45fb-ad78-7266f7684545\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Audit History\",\"panelRefName\":\"panel_17\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":97,\"w\":24,\"h\":15,\"i\":\"6cfb4406-d581-4fec-bd7a-13c8ecfe5ca4\"},\"panelIndex\":\"6cfb4406-d581-4fec-bd7a-13c8ecfe5ca4\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Audit Logs\",\"panelRefName\":\"panel_18\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-15m","timeRestore":true,"timeTo":"now","title":"logs-aws-rds-dashboard","version":1},"id":"de58196f-b660-4099-a996-f07d65cfdd70","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"4ab9b1cf-9724-499d-aeea-0c4f511102b8","name":"panel_0","type":"visualization"},{"id":"80d85a4e-fd94-4739-beab-b490cde705f5","name":"panel_1","type":"visualization"},{"id":"9e3ffdc2-7f7f-4e1e-9231-5a1d2c43c2c8","name":"panel_2","type":"visualization"},{"id":"48c19a1b-b353-4b0d-b2c1-223b5ae53a72","name":"panel_3","type":"visualization"},{"id":"338679b0-7179-416d-a6a5-6be8a55dba50","name":"panel_4","type":"visualization"},{"id":"f25733ef-8c66-49c6-93ea-14c1a2bc2491","name":"panel_5","type":"visualization"},{"id":"137ba0ed-03fe-493b-9f54-9dc39fda9533","name":"panel_6","type":"visualization"},{"id":"43602db4-6562-4f4d-92f1-147bb83481b6","name":"panel_7","type":"visualization"},{"id":"1e652ded-a6bf-4cdc-9be8-86c5eb3dd93e","name":"panel_8","type":"visualization"},{"id":"f13a7bb0-029f-4ad6-8191-c12de56669a9","name":"panel_9","type":"visualization"},{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"panel_10","type":"search"},{"id":"a90bdf8c-842f-4254-8120-57615a63d3a5","name":"panel_11","type":"visualization"},{"id":"200cc6af-892a-42cf-ae6b-f937141944b0","name":"panel_12","type":"visualization"},{"id":"0b0b7618-efd8-4680-b927-453ac44cb989","name":"panel_13","type":"search"},{"id":"95315992-e8c4-44ed-b46a-f18e98e9b8f0","name":"panel_14","type":"visualization"},{"id":"929f4595-61bb-4ecc-b380-b79208ab2ab8","name":"panel_15","type":"visualization"},{"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","name":"panel_16","type":"search"},{"id":"d39307b4-6309-4f5d-86a6-c8bc63420fce","name":"panel_17","type":"visualization"},{"id":"4b9906f0-3b82-4522-9911-766f7632b4db","name":"panel_18","type":"search"}],"type":"dashboard","updated_at":"2023-07-26T17:06:23.797Z","version":"Wzc2MywxXQ=="} -{"exportedCount":21,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/aws_rds-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_rds/aws_rds-1.0.0.json deleted file mode 100644 index ca46d616ca..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/aws_rds-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_rds", - "version": "1.0.0", - "displayName": "AWS RDS", - "description": "AWS RDS", - "license": "Apache-2.0", - "type": "logs_rds", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_rds/info", - "statics": { - "logo": { - "annotation": "AWS RDS Logo", - "path": "aws-rds-icon.png" - }, - "gallery": [ - { - "annotation": "AWS RDS Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_rds", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs_rds", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_rds", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_rds/data/sample.json deleted file mode 100644 index ac8428b9c7..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/data/sample.json +++ /dev/null @@ -1,272 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "rds_log", - "domain": "aws.rds" - }, - "attributes": { - "data_stream": { - "dataset": "aws.rds", - "namespace": "production", - "type": "logs" - } - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "rds": { - "db-identifier": "db1", - "sq-user": "admin", - "sq-db-name": "testDB", - "sq-host-name": "host1", - "sq-ip": "192.0.2.0", - "sq-id": "sq123", - "sq-duration": 1.23, - "sq-lock-wait": 0.12, - "sq-rows-sent": 100, - "sq-rows-examined": 500, - "sq-table-name": "table1", - "sq-timestamp": "2023-07-22T11:22:33Z", - "sq-query": "SELECT * FROM table1", - "err-thread": "thread1", - "err-label": "error1", - "err-code": "err123", - "err-sub-system": "sub1", - "err-detail": "Error detail message", - "general-id": "gen123", - "general-action": "insert", - "general-query": "INSERT INTO table1 VALUES ('value1', 'value2')", - "audit-ip": "192.0.2.1", - "audit-user": "auditUser", - "audit-host-name": "host2", - "audit-connection-id": "conn123", - "audit-query-id": "query123", - "audit-operation": "SELECT", - "audit-db-name": "auditDB", - "audit-query": "SELECT * FROM auditDB", - "audit-retcode": "ret123", - "deadlock-thread-id-1": "thread2", - "deadlock-os-thread-handle-1": "osThread1", - "deadlock-query-id-1": "dq1", - "deadlock-ip-1": "192.0.2.2", - "deadlock-user-1": "user2", - "deadlock-action-1": "select", - "deadlock-query-1": "SELECT * FROM table2 WHERE column1 = 'value3'", - "deadlock-thread-id-2": "thread3", - "deadlock-os-thread-handle-2": "osThread2", - "deadlock-query-id-2": "dq2", - "deadlock-ip-2": "192.0.2.3", - "deadlock-user-2": "user3", - "deadlock-action-2": "update", - "deadlock-query-2": "UPDATE table2 SET column1 = 'value4' WHERE column1 = 'value3'", - "log-detail": "Log detail message" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_rds" - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes": 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } - }, - { - "@timestamp": "2023-07-18T09:15:06.000Z", - "body": "3 111111111112 eni-0e250409d410e1291 162.142.125.178 10.0.0.201 38472 12314 6 2 45 1674898497 1674898508 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "rds_log", - "domain": "aws.rds" - }, - "attributes": { - "data_stream": { - "dataset": "aws.rds", - "namespace": "production", - "type": "logs" - } - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c3", - "key": "AWSLogs/111111111112/vpcflowlogs/us-east-2/2023/01/28/111111111112_vpcflowlogs_us-east-2_fl-023c6afa025ee5a05_20230128T0940Z_3a9dfd9e.log.gz" - }, - "rds": { - "db-identifier": "db2", - "sq-user": "admin2", - "sq-db-name": "testDB2", - "sq-host-name": "host2", - "sq-ip": "192.0.2.1", - "sq-id": "sq124", - "sq-duration": 1.24, - "sq-lock-wait": 0.13, - "sq-rows-sent": 101, - "sq-rows-examined": 501, - "sq-table-name": "table2", - "sq-timestamp": "2023-07-22T12:23:34Z", - "sq-query": "SELECT * FROM table2", - "err-thread": "thread2", - "err-label": "error2", - "err-code": "err124", - "err-sub-system": "sub2", - "err-detail": "Error detail message 2", - "general-id": "gen124", - "general-action": "update", - "general-query": "UPDATE table2 SET column1 = 'value3', column2 = 'value4'", - "audit-ip": "192.0.2.2", - "audit-user": "auditUser2", - "audit-host-name": "host3", - "audit-connection-id": "conn124", - "audit-query-id": "query124", - "audit-operation": "UPDATE", - "audit-db-name": "auditDB2", - "audit-query": "UPDATE auditDB2 SET column1 = 'value5'", - "audit-retcode": "ret124", - "deadlock-thread-id-1": "thread3", - "deadlock-os-thread-handle-1": "osThread2", - "deadlock-query-id-1": "dq2", - "deadlock-ip-1": "192.0.2.3", - "deadlock-user-1": "user3", - "deadlock-action-1": "update", - "deadlock-query-1": "UPDATE table3 SET column1 = 'value6' WHERE column1 = 'value5'", - "deadlock-thread-id-2": "thread4", - "deadlock-os-thread-handle-2": "osThread3", - "deadlock-query-id-2": "dq3", - "deadlock-ip-2": "192.0.2.4", - "deadlock-user-2": "user4", - "deadlock-action-2": "insert", - "deadlock-query-2": "INSERT INTO table4 VALUES ('value7', 'value8')", - "log-detail": "Log detail message 2" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111112" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743528", - "platform": "aws_rds" - }, - "communication": { - "source": { - "address": "162.142.125.178", - "port": 38472, - "packets": 2, - "bytes": 45 - }, - "destination": { - "address": "10.0.0.201", - "port": 12314 - } - } - }, - { - "@timestamp": "2023-07-19T10:16:07.000Z", - "body": "4 111111111113 eni-0e250409d410e1292 162.142.125.179 10.0.0.202 38473 12315 6 3 46 1674898498 1674898509 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "rds_log", - "domain": "aws.rds" - }, - "attributes": { - "data_stream": { - "dataset": "aws.rds", - "namespace": "production", - "type": "logs" - } - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c4", - "key": "AWSLogs/111111111113/vpcflowlogs/us-east-2/2023/01/28/111111111113_vpcflowlogs_us-east-2_fl-023c6afa025ee5a06_20230128T0950Z_3a9dfd9f.log.gz" - }, - "rds": { - "db-identifier": "db3", - "sq-user": "admin3", - "sq-db-name": "testDB3", - "sq-host-name": "host3", - "sq-ip": "192.0.2.2", - "sq-id": "sq125", - "sq-duration": 1.25, - "sq-lock-wait": 0.14, - "sq-rows-sent": 102, - "sq-rows-examined": 502, - "sq-table-name": "table3", - "sq-timestamp": "2023-07-22T13:24:35Z", - "sq-query": "SELECT * FROM table3", - "err-thread": "thread3", - "err-label": "error3", - "err-code": "err125", - "err-sub-system": "sub3", - "err-detail": "Error detail message 3", - "general-id": "gen125", - "general-action": "delete", - "general-query": "DELETE FROM table3 WHERE column1 = 'value9'", - "audit-ip": "192.0.2.3", - "audit-user": "auditUser3", - "audit-host-name": "host4", - "audit-connection-id": "conn125", - "audit-query-id": "query125", - "audit-operation": "DELETE", - "audit-db-name": "auditDB3", - "audit-query": "DELETE FROM auditDB3 WHERE column1 = 'value10'", - "audit-retcode": "ret125", - "deadlock-thread-id-1": "thread4", - "deadlock-os-thread-handle-1": "osThread3", - "deadlock-query-id-1": "dq3", - "deadlock-ip-1": "192.0.2.4", - "deadlock-user-1": "user4", - "deadlock-action-1": "delete", - "deadlock-query-1": "DELETE FROM table4 WHERE column1 = 'value11'", - "deadlock-thread-id-2": "thread5", - "deadlock-os-thread-handle-2": "osThread4", - "deadlock-query-id-2": "dq4", - "deadlock-ip-2": "192.0.2.5", - "deadlock-user-2": "user5", - "deadlock-action-2": "select", - "deadlock-query-2": "SELECT * FROM table5", - "log-detail": "Log detail message 3" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111113" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743529", - "platform": "aws_rds" - }, - "communication": { - "source": { - "address": "162.142.125.179", - "port": 38473, - "packets": 3, - "bytes": 46 - }, - "destination": { - "address": "10.0.0.202", - "port": 12315 - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/info/README.md b/server/adaptors/integrations/__data__/repository/aws_rds/info/README.md deleted file mode 100644 index 9c087f6c64..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/info/README.md +++ /dev/null @@ -1,29 +0,0 @@ -# AWS RDS Integrations - -## What is AWS RDS? - -AWS RDS (Relational Database Service) is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud. - -RDS helps you perform tasks such as: - -- Managing database instances -- Scaling compute resources and storage capacity -- Automating time-consuming administration tasks including hardware provisioning, database setup, patching, and backups - -RDS keeps your database up-to-date with the latest patches, and it also provides automatic backups and disaster recovery capabilities. You can make database instances available in multiple regions to enhance availability and reliability for your data. - -See additional details [here](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html). - -## What is AWS RDS Integration? - -An integration is a collection of predefined assets which are combined in a meaningful manner. - -AWS RDS integration includes dashboards, visualizations, queries, and index mapping to help you manage and monitor your database services more effectively. - -### Dashboards - -The Dashboard uses the index alias `logs-aws-rds` for shortening the index name - be advised. - - - -This integration provides you with a comprehensive view of your RDS instances, enabling you to monitor performance and resources effectively, troubleshoot problems quickly, and make data-driven decisions. diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_rds-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_rds-1.0.0.mapping.json deleted file mode 100644 index 220abe36ec..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_rds-1.0.0.mapping.json +++ /dev/null @@ -1,299 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_rds", - "labels": ["aws", "rds"] - }, - "properties": { - "aws": { - "properties": { - "rds": { - "properties": { - "db-identifier": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-user": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-db-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-host-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-ip": { - "type": "ip" - }, - "sq-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-duration": { - "type": "double" - }, - "sq-lock-wait": { - "type": "double" - }, - "sq-rows-sent": { - "type": "long" - }, - "sq-rows-examined": { - "type": "long" - }, - "sq-table-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-timestamp": { - "type": "date" - }, - "sq-query": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "err-thread": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-label": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-code": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-sub-system": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-detail": { - "type": "text" - }, - "general-id": { - "type": "text" - }, - "general-action": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "general-query": { - "type": "text" - }, - "audit-ip": { - "type": "ip" - }, - "audit-user": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-host-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-connection-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-query-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-operation": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-db-name": { - "type": "text" - }, - "audit-query": { - "type": "text" - }, - "audit-retcode": { - "type": "text" - }, - "deadlock-thread-id-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-os-thread-handle-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-query-id-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-ip-1": { - "type": "ip" - }, - "deadlock-user-1": { - "type": "keyword" - }, - "deadlock-action-1": { - "type": "keyword" - }, - "deadlock-query-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-thread-id-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-os-thread-handle-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-query-id-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-ip-2": { - "type": "ip" - }, - "deadlock-user-2": { - "type": "keyword" - }, - "deadlock-action-2": { - "type": "keyword" - }, - "deadlock-query-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "log-detail": { - "type": "text" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index ca32e104a0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/logs_rds-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/logs_rds-1.0.0.mapping.json deleted file mode 100644 index 8f2faf6979..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/logs_rds-1.0.0.mapping.json +++ /dev/null @@ -1,230 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_rds-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-aws-rds": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "rds"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "time": { - "type": "alias", - "path": "@timestamp" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_rds", "cloud", "aws_s3"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/static/aws-rds-icon.png b/server/adaptors/integrations/__data__/repository/aws_rds/static/aws-rds-icon.png deleted file mode 100644 index e24f0c9633..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_rds/static/aws-rds-icon.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_rds/static/dashboard.png deleted file mode 100644 index f1a4c14b5e..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_rds/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/assets/aws_s3-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_s3/assets/aws_s3-1.0.0.ndjson deleted file mode 100644 index 268ec7a4d4..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/assets/aws_s3-1.0.0.ndjson +++ /dev/null @@ -1,17 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.authentication_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.bucket\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.bucket.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.bucket\"}}},{\"count\":0,\"name\":\"aws.s3.bucket_owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.bytes_sent\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.cipher_suite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.cipher_suite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.cipher_suite\"}}},{\"count\":1,\"name\":\"aws.s3.error_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.host_header\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.host_header.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.host_header\"}}},{\"count\":0,\"name\":\"aws.s3.host_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.host_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.host_id\"}}},{\"count\":3,\"name\":\"aws.s3.http_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":3,\"name\":\"aws.s3.key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.key\"}}},{\"count\":2,\"name\":\"aws.s3.object_size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":3,\"name\":\"aws.s3.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.referrer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.referrer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.referrer\"}}},{\"count\":3,\"name\":\"aws.s3.remote_ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.remote_ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.remote_ip\"}}},{\"count\":0,\"name\":\"aws.s3.request_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.request_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.request_id\"}}},{\"count\":2,\"name\":\"aws.s3.request_uri\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.request_uri.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.request_uri\"}}},{\"count\":0,\"name\":\"aws.s3.requester\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.requester.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.requester\"}}},{\"count\":0,\"name\":\"aws.s3.signature_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.tls_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.total_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.turn_around_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.user_agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.user_agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.user_agent\"}}},{\"count\":2,\"name\":\"aws.s3.version_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"logs-aws-s3-*"},"id":"61510775-2cb7-4e94-9cd8-de970acc891b","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNTcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Total Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Total Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"a6afb5cc-99f6-4f8d-86a7-cce5c715529d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNTgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Access History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Access History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1M\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Requests\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"53ac018c-7baf-47f3-800b-5127cb4751fa","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNTksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Request By aws.s3.operation","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Request By aws.s3.operation\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.operation\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"aws.s3.operation\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"c273e75f-d4e0-40fd-af89-0e27eb704307","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Unique Vistors","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Unique Vistors\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"aws.s3.remote_ip.keyword\",\"customLabel\":\"Unique Vistors\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"2bb3f1fe-ab43-4919-a95f-3c2da1cfb233","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-s3-Status Code Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Status Code Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"aws.s3.http_status:3*\",\"language\":\"kuery\"},\"label\":\"3xx Count\"},{\"id\":\"10419b40-4c5c-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"10419b41-4c5c-11ec-82ff-659ecaa3e9b9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"aws.s3.http_status:4*\",\"language\":\"kuery\"},\"label\":\"4xx Count\"},{\"id\":\"1166e160-4c5c-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"1166e161-4c5c-11ec-82ff-659ecaa3e9b9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"aws.s3.http_status:5*\",\"language\":\"kuery\"},\"label\":\"5xx Count\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-s3-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-s3-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"b88445d0-4c4a-11ec-856b-618fe2d1666a\"}],\"time_range_mode\":\"entire_time_range\",\"bar_color_rules\":[{\"id\":\"41b0c9d0-4c5c-11ec-82ff-659ecaa3e9b9\"}],\"markdown\":\"# **{{ 3_xx_count.last.formatted }}**\\n\\n{{ 3_xx_count.label }}\\n\\n# **{{ 4_xx_count.last.formatted }}**\\n\\n{{ 4_xx_count.label }}\\n\\n# **{{ 5_xx_count.last.formatted }}**\\n\\n{{ 5_xx_count.label }}\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"36a551c3-7973-4f2a-85d0-c6c8cc6d93c4","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Status Code History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Status Code History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1M\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.http_status\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"8f3173b9-5c54-497b-8b8d-d091079a1f5c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Status Code Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Status Code Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.http_status\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"f1addcc8-d4a1-4205-9f41-3041b199a7fe","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Top IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-s3-Top IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.remote_ip.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP\"},\"schema\":\"aws.s3.bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0be63d84-235e-4f34-aa8f-033d85d59153","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Average Time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Average Time\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.s3.total_time\",\"customLabel\":\"Average Time (Milliseconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"c4b84900-8ee5-4c94-8941-c883681fe825","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-05-05T03:26:58.860Z","version":"WzI0MTQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-s3-Data Transfer","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Data Transfer\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.s3.bytes_sent\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Bytes Sent\",\"type\":\"timeseries\"},{\"id\":\"39538980-4ccf-11ec-a982-fba6b677ed57\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"39538981-4ccf-11ec-a982-fba6b677ed57\",\"type\":\"sum\",\"field\":\"aws.s3.object_size\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Get Size\",\"type\":\"timeseries\",\"filter\":{\"query\":\"aws.s3.operation:*GET*\",\"language\":\"kuery\"}},{\"id\":\"3a186020-4ccf-11ec-a982-fba6b677ed57\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"metrics\":[{\"id\":\"3a186021-4ccf-11ec-a982-fba6b677ed57\",\"type\":\"sum\",\"field\":\"aws.s3.object_size\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Put Size\",\"type\":\"timeseries\",\"filter\":{\"query\":\"aws.s3.operation:*PUT*\",\"language\":\"kuery\"}}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-s3-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-s3-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"\",\"language\":\"kuery\"}}}"},"id":"a08321a0-1bfa-4803-acaa-2ad352dd124f","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Average Turn Around Time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Average Turn Around Time\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.s3.turn_around_time\",\"customLabel\":\"Average Turn Around Time (Milliseconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"fd031444-891d-42a6-b649-4d6953f77152","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-05-05T03:28:51.812Z","version":"WzI0MzYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Top Request Keys","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-s3-Top Request Keys\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.key.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Key\"},\"schema\":\"aws.s3.bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.object_size\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Object Size\"},\"schema\":\"aws.s3.bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b2ca3aa4-6445-4f2d-a8ec-aba88a83d527","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjksMV0="} -{"attributes":{"columns":["aws.s3.operation","aws.s3.key","aws.s3.version_id","aws.s3.object_size","aws.s3.remote_ip","aws.s3.http_status","aws.s3.error_code"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"aws.s3.operation:*DELETE*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-s3-Delete Events","version":1},"id":"fa6dc531-7228-44e7-9162-0ab4be958be7","migrationVersion":{"search":"7.9.3"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNzAsMV0="} -{"attributes":{"columns":["aws.s3.operation","aws.s3.key","aws.s3.http_status","aws.s3.remote_ip","aws.s3.error_code"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"not aws.s3.http_status:2*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-s3-Access Failures","version":1},"id":"07c35fbd-5dd4-4c2a-ab97-cf1deaf6c57a","migrationVersion":{"search":"7.9.3"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNzEsMV0="} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Requests\"},\"gridData\":{\"h\":8,\"i\":\"1c156fb1-41e8-4f40-97bc-fa230f47f9d3\",\"w\":11,\"x\":0,\"y\":0},\"panelIndex\":\"1c156fb1-41e8-4f40-97bc-fa230f47f9d3\",\"title\":\"Total Requests\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Access History\"},\"gridData\":{\"h\":16,\"i\":\"10c06583-55cc-4747-b915-c5c337d3660a\",\"w\":24,\"x\":11,\"y\":0},\"panelIndex\":\"10c06583-55cc-4747-b915-c5c337d3660a\",\"title\":\"Access History\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request By aws.s3.operation\"},\"gridData\":{\"h\":16,\"i\":\"67598b31-05de-4940-9f13-01858eca0ddf\",\"w\":13,\"x\":35,\"y\":0},\"panelIndex\":\"67598b31-05de-4940-9f13-01858eca0ddf\",\"title\":\"Request By aws.s3.operation\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Unique Vistors\"},\"gridData\":{\"h\":8,\"i\":\"e3a37fda-460d-4ee3-b76d-8eaf214684d4\",\"w\":11,\"x\":0,\"y\":8},\"panelIndex\":\"e3a37fda-460d-4ee3-b76d-8eaf214684d4\",\"title\":\"Unique Vistors\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code\"},\"gridData\":{\"h\":18,\"i\":\"f1fad13e-9062-4645-972b-a1171844a4d9\",\"w\":11,\"x\":0,\"y\":16},\"panelIndex\":\"f1fad13e-9062-4645-972b-a1171844a4d9\",\"title\":\"Status Code\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code History\"},\"gridData\":{\"h\":18,\"i\":\"3ed78cca-6e3f-4fb3-8ed4-a39a15f89d2b\",\"w\":24,\"x\":11,\"y\":16},\"panelIndex\":\"3ed78cca-6e3f-4fb3-8ed4-a39a15f89d2b\",\"title\":\"Status Code History\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code Pie\"},\"gridData\":{\"h\":18,\"i\":\"3ea9b13d-59fb-45e2-b9f9-628c2b50d776\",\"w\":13,\"x\":35,\"y\":16},\"panelIndex\":\"3ea9b13d-59fb-45e2-b9f9-628c2b50d776\",\"title\":\"Status Code Pie\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Client IPs\"},\"gridData\":{\"h\":16,\"i\":\"61b5cfbd-072a-400c-988a-1a4d443dc41f\",\"w\":13,\"x\":35,\"y\":34},\"panelIndex\":\"61b5cfbd-072a-400c-988a-1a4d443dc41f\",\"title\":\"Top Client IPs\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time\"},\"gridData\":{\"h\":8,\"i\":\"9cd8de66-de15-4619-8a7f-da3bbc86ae53\",\"w\":11,\"x\":0,\"y\":34},\"panelIndex\":\"9cd8de66-de15-4619-8a7f-da3bbc86ae53\",\"title\":\"Average Time\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Data Transfer\"},\"gridData\":{\"h\":16,\"i\":\"63a56e52-0b21-44ef-8151-eb84b0ca17b2\",\"w\":24,\"x\":11,\"y\":34},\"panelIndex\":\"63a56e52-0b21-44ef-8151-eb84b0ca17b2\",\"title\":\"Data Transfer\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Turn Around Time\"},\"gridData\":{\"h\":8,\"i\":\"e552454c-633a-4715-b56e-faa8c503371f\",\"w\":11,\"x\":0,\"y\":42},\"panelIndex\":\"e552454c-633a-4715-b56e-faa8c503371f\",\"title\":\"Average Turn Around Time\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Request Keys\"},\"gridData\":{\"h\":16,\"i\":\"7eeabbb9-1e06-4d6d-b2ab-4d67c40c70e5\",\"w\":24,\"x\":0,\"y\":50},\"panelIndex\":\"7eeabbb9-1e06-4d6d-b2ab-4d67c40c70e5\",\"title\":\"Top Request Keys\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Delete Events\"},\"gridData\":{\"h\":16,\"i\":\"d67f7a50-9fcc-443b-9be7-512fbd8d5b3a\",\"w\":24,\"x\":24,\"y\":50},\"panelIndex\":\"d67f7a50-9fcc-443b-9be7-512fbd8d5b3a\",\"title\":\"Delete Events\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Access Failures\"},\"gridData\":{\"h\":18,\"i\":\"fd64d623-d263-4177-ab5e-a40d1114e7ec\",\"w\":48,\"x\":0,\"y\":66},\"panelIndex\":\"fd64d623-d263-4177-ab5e-a40d1114e7ec\",\"title\":\"Access Failures\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_13\"}]","timeRestore":false,"title":"logs-aws-s3-dashboard","version":1},"id":"79a9137e-6966-49d9-8921-3517699d4ecc","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"a6afb5cc-99f6-4f8d-86a7-cce5c715529d","name":"panel_0","type":"visualization"},{"id":"53ac018c-7baf-47f3-800b-5127cb4751fa","name":"panel_1","type":"visualization"},{"id":"c273e75f-d4e0-40fd-af89-0e27eb704307","name":"panel_2","type":"visualization"},{"id":"2bb3f1fe-ab43-4919-a95f-3c2da1cfb233","name":"panel_3","type":"visualization"},{"id":"36a551c3-7973-4f2a-85d0-c6c8cc6d93c4","name":"panel_4","type":"visualization"},{"id":"8f3173b9-5c54-497b-8b8d-d091079a1f5c","name":"panel_5","type":"visualization"},{"id":"f1addcc8-d4a1-4205-9f41-3041b199a7fe","name":"panel_6","type":"visualization"},{"id":"0be63d84-235e-4f34-aa8f-033d85d59153","name":"panel_7","type":"visualization"},{"id":"c4b84900-8ee5-4c94-8941-c883681fe825","name":"panel_8","type":"visualization"},{"id":"a08321a0-1bfa-4803-acaa-2ad352dd124f","name":"panel_9","type":"visualization"},{"id":"fd031444-891d-42a6-b649-4d6953f77152","name":"panel_10","type":"visualization"},{"id":"b2ca3aa4-6445-4f2d-a8ec-aba88a83d527","name":"panel_11","type":"visualization"},{"id":"fa6dc531-7228-44e7-9162-0ab4be958be7","name":"panel_12","type":"search"},{"id":"07c35fbd-5dd4-4c2a-ab97-cf1deaf6c57a","name":"panel_13","type":"search"}],"type":"dashboard","updated_at":"2023-05-05T03:29:28.271Z","version":"WzI0NTUsMV0="} -{"exportedCount":16,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/aws_s3-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_s3/aws_s3-1.0.0.json deleted file mode 100644 index c519e57b76..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/aws_s3-1.0.0.json +++ /dev/null @@ -1,46 +0,0 @@ -{ - "name": "aws_s3", - "version": "1.0.0", - "displayName": "AWS S3 ", - "description": "AWS S3 Object Store", - "license": "Apache-2.0", - "type": "logs_s3", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_s3/info", - "statics": { - "logo": { - "annotation": "S3 Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "AWS S3 Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_s3", - "version": "1.0.0" - }, - { - "name": "logs_s3", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_s3", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_s3/data/sample.json deleted file mode 100644 index 089edd8e50..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/data/sample.json +++ /dev/null @@ -1,262 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "078d85edf7268fb4814b1b4fc9f4c64adfde218b6b489a38ecf1b269f14f3c7a centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k [31/Jan/2023:09:25:20 +0000] 35.89.52.162 arn:aws:sts::347283850106:assumed-role/CentralizedLogging-CustomCDKBucketDeployment8693BB-1X4DVR38SF7ZY/CentralizedLogging-CustomCDKBucketDeployment8693BB-kU6BAxSswmfp HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.70 Python/3.9.13 Linux/4.14.255-296-236.539.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.69\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "production", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "s3-centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "078d85edf7268fb4814b1b4fc9f4c64adfde218b6b489a38ecf1b269f14f3c7a", - "bucket": "centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850106:assumed-role/CentralizedLogging-CustomCDKBucketDeployment8693BB-1X4DVR38SF7ZY/CentralizedLogging-CustomCDKBucketDeployment8693BB-kU6BAxSswmfp", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "200", - "error_code": "-", - "bytes_sent": 322, - "object_size": 120, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.70 Python/3.9.13 Linux/4.14.255-296-236.539.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.69", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k.s3.us-west-2.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-18T09:15:07.000Z", - "body": "084e71aee5e48296d6b4e0fead4f55abcddb2cf9b6c9923f4c276b7f12f5f1a7 alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k [31/Jan/2023:10:35:30 +0000] 36.99.53.163 arn:aws:sts::347283850107:assumed-role/AlternativeBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF8ZZ/AlternativeBucket-CustomCDKBucketDeployment8693BB-lU6BBySswmfr HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 201 - 322 - 30 29 \"-\" \"aws-cli/1.25.71 Python/3.9.14 Linux/4.14.255-296-236.540.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.70\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "development", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "222222222222" - }, - "region": "ap-southeast-1", - "resource_id": "s3-alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "084e71aee5e48296d6b4e0fead4f55abcddb2cf9b6c9923f4c276b7f12f5f1a7", - "bucket": "alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850107:assumed-role/AlternativeBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF8ZZ/AlternativeBucket-CustomCDKBucketDeployment8693BB-lU6BBySswmfr", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "201", - "error_code": "-", - "bytes_sent": 322, - "object_size": 234, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.71 Python/3.9.14 Linux/4.14.255-296-236.540.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.70", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k.s3.ap-southeast-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-19T10:16:09.000Z", - "body": "094f61afd5f582a7d7c5f1gfbad5g66bcded3df9c6a9934f5c367c7g13g6g2b8 testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k [31/Jan/2023:11:45:40 +0000] 37.109.54.164 arn:aws:sts::347283850108:assumed-role/TestBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9ZZ/TestBucket-CustomCDKBucketDeployment8693BB-mU6BBzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 202 - 322 - 30 29 \"-\" \"aws-cli/1.25.72 Python/3.9.15 Linux/4.14.255-296-236.541.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.71\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "testing", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "333333333333" - }, - "region": "us-east-1", - "resource_id": "s3-testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "094f61afd5f582a7d7c5f1gfbad5g66bcded3df9c6a9934f5c367c7g13g6g2b8", - "bucket": "testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850108:assumed-role/TestBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9ZZ/TestBucket-CustomCDKBucketDeployment8693BB-mU6BBzSswmfs", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "202", - "error_code": "-", - "bytes_sent": 322, - "object_size": 345, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.72 Python/3.9.15 Linux/4.14.255-296-236.541.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.71", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k.s3.us-east-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-21T12:18:14.000Z", - "body": "123d94egf8769gh4825b1c4hc9j5k67lmdfe328l7b589b39mcf2c389p24g4d8r backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k [31/Jan/2023:13:55:60 +0000] 39.119.56.166 arn:aws:sts::347283850110:assumed-role/BackupBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9AA/BackupBucket-CustomCDKBucketDeployment8693BB-nU6CCzSswmft HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 204 - 322 - 30 29 \"-\" \"aws-cli/1.25.74 Python/3.9.17 Linux/4.14.255-296-236.543.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.73\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "backup", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "555555555555" - }, - "region": "eu-west-1", - "resource_id": "s3-backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "123d94egf8769gh4825b1c4hc9j5k67lmdfe328l7b589b39mcf2c389p24g4d8r", - "bucket": "backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850110:assumed-role/BackupBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9AA/BackupBucket-CustomCDKBucketDeployment8693BB-nU6CCzSswmft", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "204", - "error_code": "-", - "bytes_sent": 322, - "object_size": 7, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.74 Python/3.9.17 Linux/4.14.255-296-236.543.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.73", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k.s3.eu-west-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-23T16:22:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "s3-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s", - "bucket": "dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "200", - "error_code": "-", - "bytes_sent": 322, - "object_size": 34, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p.s3.us-east-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/info/README.md b/server/adaptors/integrations/__data__/repository/aws_s3/info/README.md deleted file mode 100644 index b91fbf4c25..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/info/README.md +++ /dev/null @@ -1,19 +0,0 @@ -# AWS S3 Integration - -## What is AWS S3? - -Amazon S3 (Simple Storage Service) is an object storage service that offers industry-leading scalability, data availability, security, and performance. It is designed to make web-scale computing easier for developers. - -See additional details [here](https://aws.amazon.com/s3/). - -## What is AWS S3 Integration? - -An integration is a bundle of pre-canned assets which are brought together in a meaningful manner. - -AWS S3 integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-aws-s3` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_s3/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index 8057cd98ab..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_s3/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/logs_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_s3/schemas/logs_s3-1.0.0.mapping.json deleted file mode 100644 index 3d1e48d26b..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/logs_s3-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_s3-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-aws-s3": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_s3", "cloud"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_s3/static/dashboard.png deleted file mode 100644 index 7b1be885f0..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_s3/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/static/logo.png b/server/adaptors/integrations/__data__/repository/aws_s3/static/logo.png deleted file mode 100644 index 3c1b6a5d1e..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_s3/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md deleted file mode 100644 index fb5ff8ce8c..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md +++ /dev/null @@ -1,33 +0,0 @@ -# AWS VPC Flow Logs Integration Assets - -API: http://osd:5601/api/saved_objects/_import?overwrite=true - -- [Assets](aws_vpc_flow-1.0.0.ndjson) - -## Asset List - -The next table details the assets - -| Name | Type | Description | -| -------------------------------------------------- | :-----------: | :-------------------------------------------------------------------------: | -| `ss4o_logs_vpc-aws_vpc_flow-*-*` | index-pattern | The Index Pattern | -| `AWS VPC Flow Logs Overview` | dashboard | The pre-canned dashboard for AWS VPC flow logs | -| `[AWS VPC Flow Logs] Filters` | visualization | [Controls] Interactive controls for easy dashboard manipulation | -| `[AWS VPC Flow Logs] Total Requests` | visualization | [Metric] Total requests through the VPC | -| `[AWS VPC Flow Logs] Request History` | visualization | [Vertical Bar] Number of Requests counted against time | -| `[AWS VPC Flow Logs] Requests by VPC ID` | visualization | [Pie] Compare parts of Requests from each VPC ID | -| `[AWS VPC Flow Logs] Total Requests By Action` | visualization | [Metric] Number of Accept/Reject requests | -| `[AWS VPC Flow Logs] Bytes` | visualization | [Line] Trend of bytes transferred during the flow | -| `[AWS VPC Flow Logs] Packets` | visualization | [Line] Trend of Packets transferred during the flow | -| `[AWS VPC Flow Logs] Bytes Metric` | visualization | [Metric] Total ingress/egress bytes transferred during the flow | -| `[AWS VPC Flow Logs] Requests by Direction` | visualization | [Pie] Compare parts of ingress/egress requests | -| `[AWS VPC Flow Logs] Requests by Direction Metric` | visualization | [Metric] Number of ingress/egress requests | -| `[AWS VPC Flow Logs] Top Source Bytes` | visualization | [Table] Top 10 source with number of bytes transferred during the flow | -| `[AWS VPC Flow Logs] Top Destination Bytes` | visualization | [Table] Top 10 destination with number of bytes transferred during the flow | -| `[AWS VPC Flow Logs] Top Sources` | visualization | [Table] Top 10 source with number of requests send during the flow | -| `[AWS VPC Flow Logs] Top Destinations` | visualization | [Table] Top 10 destination with number of requests send during the flow | -| `[AWS VPC Flow Logs] Flow` | visualization | [Vega] Illustrates the flow from Source to Destination | -| `[AWS VPC Flow Logs] Heat Map` | visualization | [Heat Map] Heat Map of source and destination | -| `[AWS VPC Flow Logs] Top Source AWS Services` | visualization | [Pie] Compare parts of AWS service as flow source | -| `[AWS VPC Flow Logs] Top Destination AWS Services` | visualization | [Pie] Compare parts of AWS service as flow destination | -| `[AWS VPC Flow Logs] General Search` | search | The pre-canned search for AWS VPC flow logs | diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/aws_vpc_flow-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/aws_vpc_flow-1.0.0.ndjson deleted file mode 100644 index b83c619d2a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/aws_vpc_flow-1.0.0.ndjson +++ /dev/null @@ -1,22 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":2,\"name\":\"aws.s3.bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.copy_source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.delete\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.part_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.upload_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.account-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.az-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.az-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.az-id\"}}},{\"count\":1,\"name\":\"aws.vpc.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":3,\"name\":\"aws.vpc.dstaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.dstport\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.flow-direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.flow-direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.flow-direction\"}}},{\"count\":0,\"name\":\"aws.vpc.instance-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.instance-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.instance-id\"}}},{\"count\":0,\"name\":\"aws.vpc.interface-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.log-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.pkt-dst-aws-service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.pkt-dst-aws-service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.pkt-dst-aws-service\"}}},{\"count\":1,\"name\":\"aws.vpc.pkt-src-aws-service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.pkt-src-aws-service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.pkt-src-aws-service\"}}},{\"count\":0,\"name\":\"aws.vpc.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.region\"}}},{\"count\":1,\"name\":\"aws.vpc.srcaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.srcport\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.subnet-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.subnet-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.subnet-id\"}}},{\"count\":0,\"name\":\"aws.vpc.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.vpc-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.vpc-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.vpc-id\"}}},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.resource_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.address\"}}},{\"count\":0,\"name\":\"communication.destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.domain\"}}},{\"count\":0,\"name\":\"communication.destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.sock.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.address\"}}},{\"count\":0,\"name\":\"communication.source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.domain\"}}},{\"count\":0,\"name\":\"communication.source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.exception.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.result\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.dropped_attributes_count\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.schemaUrl\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"observedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observerTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"severity.number\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severity.text.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severity.text\"}}},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"ss4o_logs_vpc-aws_vpc_flow-*-*"},"id":"508c299d-6380-4420-abb5-aed2ab24d676","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-07-20T06:42:29.133Z","version":"WzI3MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"[AWS VPC Flow Logs 1.0] Filters","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Filters\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1689743740550\",\"fieldName\":\"aws.vpc.account-id\",\"parent\":\"\",\"label\":\"Account ID\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1689745980222\",\"fieldName\":\"cloud.resource_id\",\"parent\":\"\",\"label\":\"VPC ID\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1689743798842\",\"fieldName\":\"aws.vpc.action\",\"parent\":\"\",\"label\":\"Action\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1689745214045\",\"fieldName\":\"aws.vpc.log-status\",\"parent\":\"\",\"label\":\"Status\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"},{\"id\":\"1689745255475\",\"fieldName\":\"aws.vpc.protocol\",\"parent\":\"\",\"label\":\"Protocal\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_4_index_pattern\"},{\"id\":\"1689745303238\",\"fieldName\":\"communication.source.address.keyword\",\"parent\":\"\",\"label\":\"Source\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_5_index_pattern\"},{\"id\":\"1689745349390\",\"fieldName\":\"communication.destination.address.keyword\",\"parent\":\"\",\"label\":\"Destination\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_6_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"e8fa7848-820d-4dd1-963f-c33f5812d3da","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_0_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_1_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_2_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_3_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_4_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_5_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_6_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIwOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Total Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Total Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Requests\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"b3918e7d-0fa4-4cdd-ae92-ea1f720dd786","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Request History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Request History\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2023-07-19T02:48:00.000Z\",\"to\":\"2023-07-19T02:48:10.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"895af4b0-811c-4209-bf37-52db55afe190","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Requests by VPC ID","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Requests by VPC ID\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.resource_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"VPC ID\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"b7ee9d6e-183f-4b80-81e9-72798a195886","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Total Requests By Action","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Total Requests By Action\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Requests By Action\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"f1a8ff0c-65db-4ca4-9597-49c0205e704b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Bytes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Bytes\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Bytes\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Bytes\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"0c6f4294-06da-4d93-9363-87c4a1f5ce7e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Packets","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Packets\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.packets\",\"customLabel\":\"Packets\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Packets\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Packets\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"c783ca94-2545-4761-b88d-14761ebec321","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"[AWS VPC Flow Logs 1.0] Bytes Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Bytes Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"default_index_pattern\":\"ss4o_logs-nginx-sample-sample\",\"default_timefield\":\"@timestamp\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"index_pattern\":\"ss4o_logs_vpc-*-*\",\"interval\":\"\",\"isModelInvalid\":false,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#54B399\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"line_width\":1,\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.vpc.bytes\"}],\"point_size\":1,\"separate_axis\":0,\"split_color_mode\":\"opensearchDashboards\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"label\":\"\",\"terms_field\":\"aws.vpc.flow-direction\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"override_index_pattern\":1,\"time_range_mode\":\"entire_time_range\",\"series_index_pattern\":\"ss4o_logs_vpc-*-*\",\"series_time_field\":\"@timestamp\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"type\":\"markdown\",\"background_color_rules\":[{\"id\":\"7bebf3d0-26ae-11ee-b650-5ffaae65d796\"}],\"markdown\":\"{{#if ingress}}\\n\\n# **{{ ingress.last.formatted }}**\\n\\nIngress Bytes\\n\\n{{/if}}\\n\\n{{#if egress}}\\n\\n# **{{ egress.last.formatted }}**\\n\\nEgress Bytes\\n\\n{{/if}}\\n\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"237f9f10-26b0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-07-20T03:47:24.673Z","version":"WzIyNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Requests by Direction","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Requests by Direction\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.flow-direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"99f27f50-26b0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T03:50:43.397Z","version":"WzIyOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Requests by Direction Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Requests by Direction Metric\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.flow-direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"008b7370-26b1-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T03:53:35.527Z","version":"WzIzMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Source Bytes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Source Bytes\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.srcaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"c5470900-26bf-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:43:44.560Z","version":"WzI0MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Destination Bytes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Destination Bytes\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.dstaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0c67f560-26c0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:43:32.606Z","version":"WzI0MCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Sources","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Sources\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.srcaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"4e074660-26c0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:43:07.974Z","version":"WzIzOCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Destinations","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Destinations\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.dstaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8b94b8a0-26c0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:44:51.242Z","version":"WzI0MywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"[AWS VPC Flow Logs 1.0] Flow","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Flow\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{ \\n $schema: https://vega.github.io/schema/vega/v5.json\\n data: [\\n\\t{\\n \\t// query OpenSearch based on the currently selected time range and filter string\\n \\tname: rawData\\n \\turl: {\\n \\tindex: ss4o_logs_vpc-*-*\\n \\tbody: {\\n \\tsize: 0\\n \\taggs: {\\n \\ttable: {\\n \\tcomposite: {\\n \\tsize: 10000\\n \\tsources: [\\n \\t{\\n \\tstk1: {\\n \\tterms: {field: \\\"aws.vpc.srcaddr\\\"}\\n \\t}\\n \\t}\\n \\t{\\n \\tstk2: {\\n \\tterms: {field: \\\"aws.vpc.dstaddr\\\"}\\n \\t}\\n \\t}\\n \\t]\\n \\t}\\n \\t}\\n \\t}\\n \\t}\\n \\t}\\n \\t// From the result, take just the data we are interested in\\n \\tformat: {property: \\\"aggregations.table.buckets\\\"}\\n \\t// Convert key.stk1 -> stk1 for simpler access below\\n \\ttransform: [\\n \\t{type: \\\"formula\\\", expr: \\\"datum.key.stk1\\\", as: \\\"stk1\\\"}\\n \\t{type: \\\"formula\\\", expr: \\\"datum.key.stk2\\\", as: \\\"stk2\\\"}\\n \\t{type: \\\"formula\\\", expr: \\\"datum.doc_count\\\", as: \\\"size\\\"}\\n \\t]\\n\\t}\\n\\t{\\n \\tname: nodes\\n \\tsource: rawData\\n \\ttransform: [\\n \\t// when a country is selected, filter out unrelated data\\n \\t{\\n \\ttype: filter\\n \\texpr: !groupSelector || groupSelector.stk1 == datum.stk1 || groupSelector.stk2 == datum.stk2\\n \\t}\\n \\t// Set new key for later lookups - identifies each node\\n \\t{type: \\\"formula\\\", expr: \\\"datum.stk1+datum.stk2\\\", as: \\\"key\\\"}\\n \\t// instead of each table row, create two new rows,\\n \\t// one for the source (stack=stk1) and one for destination node (stack=stk2).\\n \\t// The country code stored in stk1 and stk2 fields is placed into grpId field.\\n \\t{\\n \\ttype: fold\\n \\tfields: [\\\"stk1\\\", \\\"stk2\\\"]\\n \\tas: [\\\"stack\\\", \\\"grpId\\\"]\\n \\t}\\n \\t// Create a sortkey, different for stk1 and stk2 stacks.\\n \\t{\\n \\ttype: formula\\n \\texpr: datum.stack == 'stk1' ? datum.stk1+datum.stk2 : datum.stk2+datum.stk1\\n \\tas: sortField\\n \\t}\\n \\t// Calculate y0 and y1 positions for stacking nodes one on top of the other,\\n \\t// independently for each stack, and ensuring they are in the proper order,\\n \\t// alphabetical from the top (reversed on the y axis)\\n \\t{\\n \\ttype: stack\\n \\tgroupby: [\\\"stack\\\"]\\n \\tsort: {field: \\\"sortField\\\", order: \\\"descending\\\"}\\n \\tfield: size\\n \\t}\\n \\t// calculate vertical center point for each node, used to draw edges\\n \\t{type: \\\"formula\\\", expr: \\\"(datum.y0+datum.y1)/2\\\", as: \\\"yc\\\"}\\n \\t]\\n\\t}\\n\\t{\\n \\tname: groups\\n \\tsource: nodes\\n \\ttransform: [\\n \\t// combine all nodes into country groups, summing up the doc counts\\n \\t{\\n \\ttype: aggregate\\n \\tgroupby: [\\\"stack\\\", \\\"grpId\\\"]\\n \\tfields: [\\\"size\\\"]\\n \\tops: [\\\"sum\\\"]\\n \\tas: [\\\"total\\\"]\\n \\t}\\n \\t// re-calculate the stacking y0,y1 values\\n \\t{\\n \\ttype: stack\\n \\tgroupby: [\\\"stack\\\"]\\n \\tsort: {field: \\\"grpId\\\", order: \\\"descending\\\"}\\n \\tfield: total\\n \\t}\\n \\t// project y0 and y1 values to screen coordinates\\n \\t// doing it once here instead of doing it several times in marks\\n \\t{type: \\\"formula\\\", expr: \\\"scale('y', datum.y0)\\\", as: \\\"scaledY0\\\"}\\n \\t{type: \\\"formula\\\", expr: \\\"scale('y', datum.y1)\\\", as: \\\"scaledY1\\\"}\\n \\t// boolean flag if the label should be on the right of the stack\\n \\t{type: \\\"formula\\\", expr: \\\"datum.stack == 'stk1'\\\", as: \\\"rightLabel\\\"}\\n \\t// Calculate traffic percentage for this country using \\\"y\\\" scale\\n \\t// domain upper bound, which represents the total traffic\\n \\t{\\n \\ttype: formula\\n \\texpr: datum.total/domain('y')[1]\\n \\tas: percentage\\n \\t}\\n \\t]\\n\\t}\\n\\t{\\n \\t// This is a temp lookup table with all the 'stk2' stack nodes\\n \\tname: destinationNodes\\n \\tsource: nodes\\n \\ttransform: [\\n \\t{type: \\\"filter\\\", expr: \\\"datum.stack == 'stk2'\\\"}\\n \\t]\\n\\t}\\n\\t{\\n \\tname: edges\\n \\tsource: nodes\\n \\ttransform: [\\n \\t// we only want nodes from the left stack\\n \\t{type: \\\"filter\\\", expr: \\\"datum.stack == 'stk1'\\\"}\\n \\t// find corresponding node from the right stack, keep it as \\\"target\\\"\\n \\t{\\n \\ttype: lookup\\n \\tfrom: destinationNodes\\n \\tkey: key\\n \\tfields: [\\\"key\\\"]\\n \\tas: [\\\"target\\\"]\\n \\t}\\n \\t// calculate SVG link path between stk1 and stk2 stacks for the node pair\\n \\t{\\n \\ttype: linkpath\\n \\torient: horizontal\\n \\tshape: diagonal\\n \\tsourceY: {expr: \\\"scale('y', datum.yc)\\\"}\\n \\tsourceX: {expr: \\\"scale('x', 'stk1') + bandwidth('x')\\\"}\\n \\ttargetY: {expr: \\\"scale('y', datum.target.yc)\\\"}\\n \\ttargetX: {expr: \\\"scale('x', 'stk2')\\\"}\\n \\t}\\n \\t// A little trick to calculate the thickness of the line.\\n \\t// The value needs to be the same as the hight of the node, but scaling\\n \\t// size to screen's height gives inversed value because screen's Y\\n \\t// coordinate goes from the top to the bottom, whereas the graph's Y=0\\n \\t// is at the bottom. So subtracting scaled doc count from screen height\\n \\t// (which is the \\\"lower\\\" bound of the \\\"y\\\" scale) gives us the right value\\n \\t{\\n \\ttype: formula\\n \\texpr: range('y')[0]-scale('y', datum.size)\\n \\tas: strokeWidth\\n \\t}\\n \\t// Tooltip needs individual link's percentage of all traffic\\n \\t{\\n \\ttype: formula\\n \\texpr: datum.size/domain('y')[1]\\n \\tas: percentage\\n \\t}\\n \\t]\\n\\t}\\n ]\\n scales: [\\n\\t{\\n \\t// calculates horizontal stack positioning\\n \\tname: x\\n \\ttype: band\\n \\trange: width\\n \\tdomain: [\\\"stk1\\\", \\\"stk2\\\"]\\n \\tpaddingOuter: 0.05\\n \\tpaddingInner: 0.95\\n\\t}\\n\\t{\\n \\t// this scale goes up as high as the highest y1 value of all nodes\\n \\tname: y\\n \\ttype: linear\\n \\trange: height\\n \\tdomain: {data: \\\"nodes\\\", field: \\\"y1\\\"}\\n\\t}\\n\\t{\\n \\t// use rawData to ensure the colors stay the same when clicking.\\n \\tname: color\\n \\ttype: ordinal\\n \\trange: category\\n \\tdomain: {data: \\\"rawData\\\", field: \\\"stk1\\\"}\\n\\t}\\n\\t{\\n \\t// this scale is used to map internal ids (stk1, stk2) to stack names\\n \\tname: stackNames\\n \\ttype: ordinal\\n \\trange: [\\\"Source\\\", \\\"Destination\\\"]\\n \\tdomain: [\\\"stk1\\\", \\\"stk2\\\"]\\n\\t}\\n ]\\n axes: [\\n\\t{\\n \\t// x axis should use custom label formatting to print proper stack names\\n \\torient: bottom\\n \\tscale: x\\n \\tencode: {\\n \\tlabels: {\\n \\tupdate: {\\n \\ttext: {scale: \\\"stackNames\\\", field: \\\"value\\\"}\\n \\t}\\n \\t}\\n \\t}\\n\\t}\\n\\t{orient: \\\"left\\\", scale: \\\"y\\\"}\\n ]\\n marks: [\\n\\t{\\n \\t// draw the connecting line between stacks\\n \\ttype: path\\n \\tname: edgeMark\\n \\tfrom: {data: \\\"edges\\\"}\\n \\t// this prevents some autosizing issues with large strokeWidth for paths\\n \\tclip: true\\n \\tencode: {\\n \\tupdate: {\\n \\t// By default use color of the left node, except when showing traffic\\n \\t// from just one country, in which case use destination color.\\n \\tstroke: [\\n \\t{\\n \\ttest: groupSelector && groupSelector.stack=='stk1'\\n \\tscale: color\\n \\tfield: stk2\\n \\t}\\n \\t{scale: \\\"color\\\", field: \\\"stk1\\\"}\\n \\t]\\n \\tstrokeWidth: {field: \\\"strokeWidth\\\"}\\n \\tpath: {field: \\\"path\\\"}\\n \\t// when showing all traffic, and hovering over a country,\\n \\t// highlight the traffic from that country.\\n \\tstrokeOpacity: {\\n \\tsignal: !groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 0.9 : 0.3\\n \\t}\\n \\t// Ensure that the hover-selected edges show on top\\n \\tzindex: {\\n \\tsignal: !groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 1 : 0\\n \\t}\\n \\t// format tooltip string\\n \\ttooltip: {\\n \\tsignal: datum.stk1 + ' → ' + datum.stk2 + '\\t' + format(datum.size, ',.0f') + ' (' + format(datum.percentage, '.1%') + ')'\\n \\t}\\n \\t}\\n \\t// Simple mouseover highlighting of a single line\\n \\thover: {\\n \\tstrokeOpacity: {value: 1}\\n \\t}\\n \\t}\\n\\t}\\n\\t{\\n \\t// draw stack groups (countries)\\n \\ttype: rect\\n \\tname: groupMark\\n \\tfrom: {data: \\\"groups\\\"}\\n \\tencode: {\\n \\tenter: {\\n \\tfill: {scale: \\\"color\\\", field: \\\"grpId\\\"}\\n \\twidth: {scale: \\\"x\\\", band: 1}\\n \\t}\\n \\tupdate: {\\n \\tx: {scale: \\\"x\\\", field: \\\"stack\\\"}\\n \\ty: {field: \\\"scaledY0\\\"}\\n \\ty2: {field: \\\"scaledY1\\\"}\\n \\tfillOpacity: {value: 0.6}\\n \\ttooltip: {\\n \\tsignal: datum.grpId + ' ' + format(datum.total, ',.0f') + ' (' + format(datum.percentage, '.1%') + ')'\\n \\t}\\n \\t}\\n \\thover: {\\n \\tfillOpacity: {value: 1}\\n \\t}\\n \\t}\\n\\t}\\n\\t{\\n \\t// draw country code labels on the inner side of the stack\\n \\ttype: text\\n \\tfrom: {data: \\\"groups\\\"}\\n \\t// don't process events for the labels - otherwise line mouseover is unclean\\n \\tinteractive: false\\n \\tencode: {\\n \\tupdate: {\\n \\t// depending on which stack it is, position x with some padding\\n \\tx: {\\n \\tsignal: scale('x', datum.stack) + (datum.rightLabel ? bandwidth('x') + 8 : -8)\\n \\t}\\n \\t// middle of the group\\n \\tyc: {signal: \\\"(datum.scaledY0 + datum.scaledY1)/2\\\"}\\n \\talign: {signal: \\\"datum.rightLabel ? 'left' : 'right'\\\"}\\n \\tbaseline: {value: \\\"middle\\\"}\\n \\tfontWeight: {value: \\\"bold\\\"}\\n \\t// only show text label if the group's height is large enough\\n \\ttext: {signal: \\\"abs(datum.scaledY0-datum.scaledY1) > 13 ? datum.grpId : ''\\\"}\\n \\t}\\n \\t}\\n\\t}\\n\\t{\\n \\t// Create a \\\"show all\\\" button. Shown only when a country is selected.\\n \\ttype: group\\n \\tdata: [\\n \\t// We need to make the button show only when groupSelector signal is true.\\n \\t// Each mark is drawn as many times as there are elements in the backing data.\\n \\t// Which means that if values list is empty, it will not be drawn.\\n \\t// Here I create a data source with one empty object, and filter that list\\n \\t// based on the signal value. This can only be done in a group.\\n \\t{\\n \\tname: dataForShowAll\\n \\tvalues: [{}]\\n \\ttransform: [{type: \\\"filter\\\", expr: \\\"groupSelector\\\"}]\\n \\t}\\n \\t]\\n \\t// Set button size and positioning\\n \\tencode: {\\n \\tenter: {\\n \\txc: {signal: \\\"width/2\\\"}\\n \\ty: {value: 30}\\n \\twidth: {value: 80}\\n \\theight: {value: 30}\\n \\t}\\n \\t}\\n \\tmarks: [\\n \\t{\\n \\t// This group is shown as a button with rounded corners.\\n \\ttype: group\\n \\t// mark name allows signal capturing\\n \\tname: groupReset\\n \\t// Only shows button if dataForShowAll has values.\\n \\tfrom: {data: \\\"dataForShowAll\\\"}\\n \\tencode: {\\n \\tenter: {\\n \\tcornerRadius: {value: 6}\\n \\tfill: {value: \\\"#F5F7FA\\\"}\\n \\tstroke: {value: \\\"#c1c1c1\\\"}\\n \\tstrokeWidth: {value: 2}\\n \\t// use parent group's size\\n \\theight: {\\n \\tfield: {group: \\\"height\\\"}\\n \\t}\\n \\twidth: {\\n \\tfield: {group: \\\"width\\\"}\\n \\t}\\n \\t}\\n \\tupdate: {\\n \\t// groups are transparent by default\\n \\topacity: {value: 1}\\n \\t}\\n \\thover: {\\n \\topacity: {value: 0.7}\\n \\t}\\n \\t}\\n \\tmarks: [\\n \\t{\\n \\ttype: text\\n \\t// if true, it will prevent clicking on the button when over text.\\n \\tinteractive: false\\n \\tencode: {\\n \\tenter: {\\n \\t// center text in the paren group\\n \\txc: {\\n \\tfield: {group: \\\"width\\\"}\\n \\tmult: 0.5\\n \\t}\\n \\tyc: {\\n \\tfield: {group: \\\"height\\\"}\\n \\tmult: 0.5\\n \\toffset: 2\\n \\t}\\n \\talign: {value: \\\"center\\\"}\\n \\tbaseline: {value: \\\"middle\\\"}\\n \\tfontWeight: {value: \\\"bold\\\"}\\n \\ttext: {value: \\\"Show All\\\"}\\n \\t}\\n \\t}\\n \\t}\\n \\t]\\n \\t}\\n \\t]\\n\\t}\\n ]\\n signals: [\\n\\t{\\n \\t// used to highlight traffic to/from the same country\\n \\tname: groupHover\\n \\tvalue: {}\\n \\ton: [\\n \\t{\\n \\tevents: @groupMark:mouseover\\n \\tupdate: \\\"{stk1:datum.stack=='stk1' && datum.grpId, stk2:datum.stack=='stk2' && datum.grpId}\\\"\\n \\t}\\n \\t{events: \\\"mouseout\\\", update: \\\"{}\\\"}\\n \\t]\\n\\t}\\n\\t// used to filter only the data related to the selected country\\n\\t{\\n \\tname: groupSelector\\n \\tvalue: false\\n \\ton: [\\n \\t{\\n \\t// Clicking groupMark sets this signal to the filter values\\n \\tevents: @groupMark:click!\\n \\tupdate: \\\"{stack:datum.stack, stk1:datum.stack=='stk1' && datum.grpId, stk2:datum.stack=='stk2' && datum.grpId}\\\"\\n \\t}\\n \\t{\\n \\t// Clicking \\\"show all\\\" button, or double-clicking anywhere resets it\\n \\tevents: [\\n \\t{type: \\\"click\\\", markname: \\\"groupReset\\\"}\\n \\t{type: \\\"dblclick\\\"}\\n \\t]\\n \\tupdate: \\\"false\\\"\\n \\t}\\n \\t]\\n\\t}\\n ]\\n}\\n\"}}"},"id":"8cd7f4c0-26c5-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-07-20T06:20:40.844Z","version":"WzI0OSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Source AWS Services","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Source AWS Services\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.pkt-src-aws-service\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"2e7f34e0-26c7-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T06:34:36.883Z","version":"WzI1NiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Destination AWS Services","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Destination AWS Services\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.pkt-dst-aws-service\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"6f8998e0-26c7-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T06:34:10.670Z","version":"WzI1NSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Heat Map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Heat Map\",\"type\":\"heatmap\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.dstaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Destination Address\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.srcaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Address\"},\"schema\":\"group\"}],\"params\":{\"type\":\"heatmap\",\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":4,\"colorSchema\":\"Greens\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"linear\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"overwriteColor\":false,\"color\":\"black\"}}]}}"},"id":"4fcdc6d0-26c6-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T06:26:07.933Z","version":"WzI1MSwxXQ=="} -{"attributes":{"columns":["aws.vpc.account-id","aws.vpc.vpc-id","aws.vpc.flow-direction","aws.vpc.action","aws.vpc.srcaddr","aws.vpc.srcport","aws.vpc.dstaddr","aws.vpc.dstport","aws.vpc.bytes","aws.vpc.log-status"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"[AWS VPC Flow Logs 1.0] General Search","version":1},"id":"ae8f36c0-26c8-11ee-b585-f9feb9f3e8dd","migrationVersion":{"search":"7.9.3"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-20T06:43:05.899Z","version":"WzI3MiwxXQ=="} -{"attributes":{"description":"VPC Flow Logs dashboard with basic Observability","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":10,\"i\":\"20fb32e0-40f1-40fe-8664-5cacff5f59e2\"},\"panelIndex\":\"20fb32e0-40f1-40fe-8664-5cacff5f59e2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":10,\"w\":11,\"h\":8,\"i\":\"ea07e9f4-6719-4c34-bfb8-ca48e9fda75b\"},\"panelIndex\":\"ea07e9f4-6719-4c34-bfb8-ca48e9fda75b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":11,\"y\":10,\"w\":24,\"h\":16,\"i\":\"9931d8df-e493-4649-9934-0a24c8b091f8\"},\"panelIndex\":\"9931d8df-e493-4649-9934-0a24c8b091f8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":35,\"y\":10,\"w\":13,\"h\":16,\"i\":\"7f29c46b-a690-457e-952b-a987c118dbf2\"},\"panelIndex\":\"7f29c46b-a690-457e-952b-a987c118dbf2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":18,\"w\":11,\"h\":8,\"i\":\"59486bb7-af73-4594-a588-bd823d954b6a\"},\"panelIndex\":\"59486bb7-af73-4594-a588-bd823d954b6a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":26,\"w\":24,\"h\":15,\"i\":\"6b04df64-559d-4d48-b454-ddeec66690d1\"},\"panelIndex\":\"6b04df64-559d-4d48-b454-ddeec66690d1\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":26,\"w\":24,\"h\":15,\"i\":\"fb0eb25c-f2b3-484c-9125-4bc201e97b3f\"},\"panelIndex\":\"fb0eb25c-f2b3-484c-9125-4bc201e97b3f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":41,\"w\":12,\"h\":15,\"i\":\"bb01b5c1-bb5b-4a9f-baf7-4d606772ef93\"},\"panelIndex\":\"bb01b5c1-bb5b-4a9f-baf7-4d606772ef93\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":12,\"y\":41,\"w\":12,\"h\":15,\"i\":\"816b48d0-7c09-42e9-97be-a19c17634fc5\"},\"panelIndex\":\"816b48d0-7c09-42e9-97be-a19c17634fc5\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":41,\"w\":24,\"h\":15,\"i\":\"4ea77bab-a48b-4ccf-b8e0-6b2f5b5c337a\"},\"panelIndex\":\"4ea77bab-a48b-4ccf-b8e0-6b2f5b5c337a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":56,\"w\":12,\"h\":15,\"i\":\"8844e89c-9c06-4141-899f-b1f6fdde901b\"},\"panelIndex\":\"8844e89c-9c06-4141-899f-b1f6fdde901b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":12,\"y\":56,\"w\":12,\"h\":15,\"i\":\"d9e75376-2d8c-49f4-babb-335e73c99dee\"},\"panelIndex\":\"d9e75376-2d8c-49f4-babb-335e73c99dee\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":56,\"w\":12,\"h\":15,\"i\":\"b4d94532-59cf-454e-98a2-beb15b8a752f\"},\"panelIndex\":\"b4d94532-59cf-454e-98a2-beb15b8a752f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":36,\"y\":56,\"w\":12,\"h\":15,\"i\":\"505c0278-0d96-4617-9976-7bd9a8787e3a\"},\"panelIndex\":\"505c0278-0d96-4617-9976-7bd9a8787e3a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":71,\"w\":24,\"h\":30,\"i\":\"fb0edb10-2e2a-4b3f-99a5-22ffe95e3250\"},\"panelIndex\":\"fb0edb10-2e2a-4b3f-99a5-22ffe95e3250\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":71,\"w\":12,\"h\":15,\"i\":\"79b5d7c5-7e66-4f92-b8ad-80a42167d181\"},\"panelIndex\":\"79b5d7c5-7e66-4f92-b8ad-80a42167d181\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":36,\"y\":71,\"w\":12,\"h\":15,\"i\":\"8bbe7594-e52c-4fa6-8432-f265d0db5fd8\"},\"panelIndex\":\"8bbe7594-e52c-4fa6-8432-f265d0db5fd8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":86,\"w\":24,\"h\":15,\"i\":\"5392e5cd-13cc-4904-abe7-1e183dc59478\"},\"panelIndex\":\"5392e5cd-13cc-4904-abe7-1e183dc59478\",\"embeddableConfig\":{\"vis\":null},\"panelRefName\":\"panel_17\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":101,\"w\":48,\"h\":15,\"i\":\"aa4d1311-3a80-417e-9f52-54db9f6acdca\"},\"panelIndex\":\"aa4d1311-3a80-417e-9f52-54db9f6acdca\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"}]","timeRestore":false,"title":"AWS VPC Flow Logs Overview","version":1},"id":"978a3ffb-c7b4-4071-8c33-c7107e2148b8","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"e8fa7848-820d-4dd1-963f-c33f5812d3da","name":"panel_0","type":"visualization"},{"id":"b3918e7d-0fa4-4cdd-ae92-ea1f720dd786","name":"panel_1","type":"visualization"},{"id":"895af4b0-811c-4209-bf37-52db55afe190","name":"panel_2","type":"visualization"},{"id":"b7ee9d6e-183f-4b80-81e9-72798a195886","name":"panel_3","type":"visualization"},{"id":"f1a8ff0c-65db-4ca4-9597-49c0205e704b","name":"panel_4","type":"visualization"},{"id":"0c6f4294-06da-4d93-9363-87c4a1f5ce7e","name":"panel_5","type":"visualization"},{"id":"c783ca94-2545-4761-b88d-14761ebec321","name":"panel_6","type":"visualization"},{"id":"237f9f10-26b0-11ee-b585-f9feb9f3e8dd","name":"panel_7","type":"visualization"},{"id":"99f27f50-26b0-11ee-b585-f9feb9f3e8dd","name":"panel_8","type":"visualization"},{"id":"008b7370-26b1-11ee-b585-f9feb9f3e8dd","name":"panel_9","type":"visualization"},{"id":"c5470900-26bf-11ee-b585-f9feb9f3e8dd","name":"panel_10","type":"visualization"},{"id":"0c67f560-26c0-11ee-b585-f9feb9f3e8dd","name":"panel_11","type":"visualization"},{"id":"4e074660-26c0-11ee-b585-f9feb9f3e8dd","name":"panel_12","type":"visualization"},{"id":"8b94b8a0-26c0-11ee-b585-f9feb9f3e8dd","name":"panel_13","type":"visualization"},{"id":"8cd7f4c0-26c5-11ee-b585-f9feb9f3e8dd","name":"panel_14","type":"visualization"},{"id":"2e7f34e0-26c7-11ee-b585-f9feb9f3e8dd","name":"panel_15","type":"visualization"},{"id":"6f8998e0-26c7-11ee-b585-f9feb9f3e8dd","name":"panel_16","type":"visualization"},{"id":"4fcdc6d0-26c6-11ee-b585-f9feb9f3e8dd","name":"panel_17","type":"visualization"},{"id":"ae8f36c0-26c8-11ee-b585-f9feb9f3e8dd","name":"panel_18","type":"search"}],"type":"dashboard","updated_at":"2023-07-20T06:45:19.959Z","version":"WzI3NSwxXQ=="} -{"exportedCount":21,"missingRefCount":0,"missingReferences":[]} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_mv_vpc-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_mv_vpc-1.0.0.sql deleted file mode 100644 index 0706db3b5a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_mv_vpc-1.0.0.sql +++ /dev/null @@ -1,30 +0,0 @@ -CREATE MATERIALIZED VIEW {table_name}_mview AS - SELECT - CAST(FROM_UNIXTIME(start) AS TIMESTAMP) as `@timestamp`, - version as `aws.vpc.version`, - account_id as `aws.vpc.account-id`, - interface_id as `aws.vpc.interface-id`, - srcaddr as `aws.vpc.srcaddr`, - dstaddr as `aws.vpc.dstaddr`, - CAST(srcport AS LONG) as `aws.vpc.srcport`, - CAST(dstport AS LONG) as `aws.vpc.dstport`, - protocol as `aws.vpc.protocol`, - CAST(packets AS LONG) as `aws.vpc.packets`, - CAST(bytes AS LONG) as `aws.vpc.bytes`, - CAST(FROM_UNIXTIME(start) AS TIMESTAMP) as `aws.vpc.start`, - CAST(FROM_UNIXTIME(end) AS TIMESTAMP) as `aws.vpc.end`, - action as `aws.vpc.action`, - log_status as `aws.vpc.log-status`, - CASE - WHEN regexp(dstaddr, '(10\\..*)|(192\\.168\\..*)|(172\\.1[6-9]\\..*)|(172\\.2[0-9]\\..*)|(172\\.3[0-1]\\.*)') - THEN 'ingress' - ELSE 'egress' - END AS `aws.vpc.flow-direction` -FROM - {table_name} -WITH ( - auto_refresh = 'true', - checkpoint_location = '{s3_bucket_location}/checkpoint', - watermark_delay = '1 Minute', - extra_options = '{ "{table_name}": { "maxFilesPerTrigger": "10" }}' -) diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_table_vpc-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_table_vpc-1.0.0.sql deleted file mode 100644 index bb73fa9340..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_table_vpc-1.0.0.sql +++ /dev/null @@ -1,20 +0,0 @@ -CREATE EXTERNAL TABLE IF NOT EXISTS {table_name} ( - version INT, - account_id STRING, - interface_id STRING, - srcaddr STRING, - dstaddr STRING, - srcport STRING, - dstport STRING, - protocol STRING, - packets STRING, - bytes STRING, - start BIGINT, - end BIGINT, - action STRING, - log_status STRING -) USING csv -LOCATION '{s3_bucket_location}' -OPTIONS ( - sep=' ' -); diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/aws_vpc_flow-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/aws_vpc_flow-1.0.0.json deleted file mode 100644 index 6720e0be93..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/aws_vpc_flow-1.0.0.json +++ /dev/null @@ -1,66 +0,0 @@ -{ - "name": "aws_vpc_flow", - "version": "1.0.0", - "displayName": "AWS VPC Flow", - "description": "AWS VPC Flow log collector", - "license": "Apache-2.0", - "type": "logs_vpc", - "labels": ["Observability", "Logs", "AWS", "Cloud", "Flint S3"], - "author": "Haidong Wang", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info", - "statics": { - "logo": { - "annotation": "AWS VPC Logo", - "path": "logo.svg" - }, - "gallery": [ - { - "annotation": "AWS VPC Flow Log Dashboard", - "path": "dashboard1.png" - } - ] - }, - "components": [ - { - "name": "aws_vpc_flow", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "logs_vpc", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_vpc_flow", - "version": "1.0.0" - }, - "queries": [ - { - "name": "create_table_vpc", - "version": "1.0.0", - "language": "sql" - }, - { - "name": "create_mv_vpc", - "version": "1.0.0", - "language": "sql" - } - ] - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/data/sample.json deleted file mode 100644 index 8f0f644d7c..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/data/sample.json +++ /dev/null @@ -1,1467 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info/README.md b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info/README.md deleted file mode 100644 index 7997141e3d..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info/README.md +++ /dev/null @@ -1,29 +0,0 @@ -# AWS VPC Flow Logs Integration - -## What is AWS VPC Flow Logs ? - -VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. - -Flow logs can help you with a number of tasks, such as: - -- Diagnosing overly restrictive security group rules - -- Monitoring the traffic that is reaching your instance - -- Determining the direction of the traffic to and from the network interfaces - -Flow log data is collected outside of the path of your network traffic, and therefore does not affect network throughput or latency. You can create or delete flow logs without any risk of impact to network performance. - -See additional details [here](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). - -## What is AWS VPC FLow Logs Integration ? - -An integration is a bundle of pre-canned assets which are bundled togather in a meaningful manner. - -AWS VPC flow logs integration includes dashboards, visualisations, queries and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-vpc` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index ca32e104a0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_vpc_flow-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_vpc_flow-1.0.0.mapping.json deleted file mode 100644 index 2369f953d7..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_vpc_flow-1.0.0.mapping.json +++ /dev/null @@ -1,115 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_vpc_flow", - "labels": ["aws", "vpc"] - }, - "properties": { - "aws": { - "properties": { - "vpc": { - "properties": { - "version": { - "type": "keyword" - }, - "account-id": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "az-id": { - "type": "keyword" - }, - "vpc-id": { - "type": "keyword" - }, - "subnet-id": { - "type": "keyword" - }, - "tcp-flags": { - "type": "keyword" - }, - "type": { - "type": "keyword" - }, - "interface-id": { - "type": "keyword" - }, - "instance-id": { - "type": "keyword" - }, - "srcaddr": { - "type": "keyword" - }, - "dstaddr": { - "type": "keyword" - }, - "srcport": { - "type": "long" - }, - "dstport": { - "type": "long" - }, - "protocol": { - "type": "keyword" - }, - "protocol-code": { - "type": "keyword" - }, - "packets": { - "type": "long" - }, - "bytes": { - "type": "long" - }, - "start": { - "type": "date", - "format": "epoch_second" - }, - "end": { - "type": "date", - "format": "epoch_second" - }, - "flow-direction": { - "type": "keyword" - }, - "pkt-src-aws-service": { - "type": "keyword" - }, - "pkt-srcaddr": { - "type": "keyword" - }, - "pkt-dst-aws-service": { - "type": "keyword" - }, - "pkt-dstaddr": { - "type": "keyword" - }, - "traffic-path": { - "type": "keyword" - }, - "action": { - "type": "keyword" - }, - "log-status": { - "type": "keyword" - }, - "sublocation-id": { - "type": "keyword" - }, - "sublocation-type": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/logs_vpc-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/logs_vpc-1.0.0.mapping.json deleted file mode 100644 index 6b07534115..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/logs_vpc-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_vpc-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-vpc": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "communication", "vpc"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_vpc_flow", "aws_s3", "cloud", "communication"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/dashboard1.png deleted file mode 100644 index 0d75b3bfc3..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/logo.svg b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/logo.svg deleted file mode 100644 index 60ed1fe260..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/logo.svg +++ /dev/null @@ -1,3 +0,0 @@ - - - diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/assets/aws_waf-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_waf/assets/aws_waf-1.0.0.ndjson deleted file mode 100644 index fdbe42a5e5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/assets/aws_waf-1.0.0.ndjson +++ /dev/null @@ -1,24 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.formatVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.args\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.clientIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.headers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.headers.value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.headers.value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.headers.value\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.httpMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.requestId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.requestId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.requestId\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.uri\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.uri.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.uri\"}}},{\"count\":0,\"name\":\"aws.waf.httpSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.labels.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.labels.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.labels.name\"}}},{\"count\":0,\"name\":\"aws.waf.ruleGroupList.ruleGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.ruleGroupList.terminatingRule.aws.waf.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.ruleGroupList.terminatingRule.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.terminatingRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.terminatingRuleType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userAgent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"userAgent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"userAgent\"}}},{\"count\":0,\"name\":\"aws.waf.webaclId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.webaclId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.webaclId\"}}},{\"count\":0,\"name\":\"webaclName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"logs-waf-*"},"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MTgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Client IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Client IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.clientIp\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"71b2a6fc-6c2e-42d4-82b6-4f5a2741f63f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MTksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Total Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Total Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"}],\"params\":{\"addLegend\":false,\"addTooltip\":true,\"metric\":{\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"invertColors\":false,\"aws.waf.labels\":{\"show\":false},\"metricColorMode\":\"None\",\"percentageMode\":false,\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":60,\"labelColor\":false,\"subText\":\"\"},\"useRanges\":false},\"type\":\"metric\"}}"},"id":"58bb62ff-66e4-4dab-9b64-c8cf812c46a2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.waf.action:BLOCK\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Total Blocked Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Total Blocked Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"aws.waf.labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"1e59055f-d033-4e25-985c-2902e5d138ea","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Country or Region By Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Country or Region By Requests\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"segment\"}],\"params\":{\"legendPosition\":\"bottomright\",\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"selectedLayer\":{\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\",\"id\":\"world_countries\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"attribution\":\"Made with NaturalEarth | Elastic Maps Service\",\"fields\":[{\"type\":\"id\",\"name\":\"iso2\",\"description\":\"ISO 3166-1 alpha-2 code\"},{\"type\":\"id\",\"name\":\"iso3\",\"description\":\"ISO 3166-1 alpha-3 code\"},{\"type\":\"property\",\"name\":\"name\",\"description\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"layerId\":\"elastic_maps_service.World Countries\",\"isEMS\":true},\"emsHotLink\":\"https://maps.elastic.co/v6.7?locale=en#file/world_countries\",\"selectedJoinField\":{\"type\":\"id\",\"name\":\"iso2\",\"description\":\"ISO 3166-1 alpha-2 code\"},\"isDisplayWarning\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"default\":true,\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"\",\"id\":\"TMS in config/kibana.yml\",\"origin\":\"self_hosted\"}},\"mapZoom\":2,\"mapCenter\":[0,0],\"outlineWeight\":1,\"showAllShapes\":true}}"},"id":"3cb53d17-ac34-45db-aaeb-97791c9d82d2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Executed WAF Rules","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Executed WAF Rules\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.terminatingRuleId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"912530c2-48a6-4618-8010-b8007e44ed2c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[]}"},"title":"logs-waf-Filters","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Filters\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"fieldName\":\"webaclName\",\"id\":\"1565169719620\",\"label\":\"WebACL\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1565775477773\",\"fieldName\":\"aws.waf.terminatingRuleType\",\"parent\":\"\",\"label\":\"Rule Type\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"fieldName\":\"aws.waf.action\",\"id\":\"1565169899571\",\"label\":\"aws.waf.action\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_2_index_pattern\"},{\"fieldName\":\"aws.waf.httpRequest.country\",\"id\":\"1565170498755\",\"label\":\"Country or Region\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_3_index_pattern\"},{\"id\":\"1565182161719\",\"fieldName\":\"host.keyword\",\"parent\":\"\",\"label\":\"Host\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_4_index_pattern\"},{\"fieldName\":\"aws.waf.httpRequest.clientIp\",\"id\":\"1565170536048\",\"label\":\"Client IP\",\"options\":{\"dynamicOptions\":true,\"multiselect\":false,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_5_index_pattern\"},{\"id\":\"1647912414472\",\"fieldName\":\"aws.waf.httpSourceId\",\"parent\":\"\",\"label\":\"Source\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_6_index_pattern\"},{\"fieldName\":\"aws.waf.ruleGroupList.ruleGroupId\",\"id\":\"1565169760470\",\"label\":\"Rule\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_7_index_pattern\"},{\"id\":\"1647911642407\",\"fieldName\":\"aws.waf.labels.name.keyword\",\"parent\":\"\",\"label\":\"Label\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_8_index_pattern\"}],\"pinFilters\":true,\"updateFiltersOnChange\":true,\"useTimeFilter\":false}}"},"id":"4394f245-57e6-475e-ad33-cd29742e2b8a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_0_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_1_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_2_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_3_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_4_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_5_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_6_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_7_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_8_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-22T01:29:36.328Z","version":"WzEyMzc3LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Countries or Regions","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Countries or Regions\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country or Region\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"ecc648d9-2b36-46c4-a527-7fbccad61ba8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjUsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top User-Agents","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":0,\"direction\":\"asc\"}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top User-Agents\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"userAgent.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User-Agent\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b12eee40-37c6-436e-bcfb-d993d3a51aca","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-HTTP Methods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-HTTP Methods\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.httpMethod\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c02eb336-6502-4ac4-aa53-91de17910031","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Unique Client IPs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Unique Client IPs\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"aws.waf.httpRequest.clientIp\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"aws.waf.labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"866d8631-5f43-4246-8c7d-ed39d70c9a9f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Hosts","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Hosts\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"host.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"exclude\":\"\",\"include\":\"\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"e9522627-5bf8-4a3e-b995-0037300bb082","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top WebACLs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top WebACLs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"webaclName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WebACL Name\"},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.webaclId.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WebACL ID\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"1935ea3d-8155-44d4-b837-8a1397f00980","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Rules","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Rules\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.terminatingRuleId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Rule Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"3fa73516-89de-41c8-bacf-035da4e959af","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Request URIs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":0,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Request URIs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.uri.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"URI\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":0,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"a0cac454-18c9-4099-91bb-93a76512bb93","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzQsMV0="} -{"attributes":{"columns":["aws.waf.httpRequest.clientIp","aws.waf.httpRequest.args","aws.waf.httpRequest.uri","host","aws.waf.httpRequest.country","aws.waf.action","aws.waf.labels","terminatingRuleMatchDetails","aws.waf.terminatingRuleId"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["timestamp","desc"]],"title":"logs-waf-Matched Details","version":1},"id":"d0ee6b41-8ebb-44a2-9ea7-86251ae7e089","migrationVersion":{"search":"7.9.3"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-03-22T01:57:25.407Z","version":"WzEyNDQ4LDFd"} -{"attributes":{"columns":["aws.waf.httpRequest.clientIp","terminatingRuleMatchDetails","aws.waf.labels","aws.waf.ruleGroupList","rateBasedRuleList","aws.waf.httpRequest.args","aws.waf.terminatingRuleId","aws.waf.action","nonTerminatingMatchingRules"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"aws.waf.terminatingRuleId:*\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["timestamp","desc"]],"title":"logs-waf-Terminating Matching Rule","version":1},"id":"712af10a-14a8-4eca-b791-ea701f80529f","migrationVersion":{"search":"7.9.3"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-03-21T02:29:23.065Z","version":"WzExNTE2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Web ACLs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Web ACLs\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"webaclName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"f3400632-1596-403b-a447-57bc3971246e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Requests History","uiStateJSON":"{\"vis\":{\"colors\":{\"BLOCK\":\"#E24D42\",\"ALLOW\":\"#629E51\"}}}","version":1,"visState":"{\"title\":\"logs-waf-Requests History\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2022-03-22T19:00:00.000Z\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Time\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"aws.waf.labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"aws.waf.labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"aws.waf.labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"3390bff0-ab15-11ec-b721-5f83aa22d08e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-24T02:02:37.452Z","version":"WzEzMDI2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Requests by Source","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Requests by Source\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpSourceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"9b152580-ab15-11ec-b721-5f83aa22d08e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-24T01:57:39.337Z","version":"WzEyODMyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Block Allow Host Uri","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"asc\"}}}}","version":1,"visState":"{\"title\":\"logs-waf-Block Allow Host Uri\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"host.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.uri.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":3,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"aws.waf.action\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"fb588f28-934f-4476-94f4-cd99ad90be69","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top aws.waf.labels","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":4,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top aws.waf.labels\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.labels.name.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Label\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"host.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.uri.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"642534d0-72c0-11ec-acf9-63f0c6197356","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-12T01:39:20.829Z","version":"WzU0NzgsMV0="} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"table\":null,\"title\":\"Top Client IPs\",\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}},\"gridData\":{\"h\":17,\"i\":\"1\",\"w\":12,\"x\":12,\"y\":63},\"panelIndex\":\"1\",\"title\":\"Top Client IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Requests\"},\"gridData\":{\"h\":6,\"i\":\"2\",\"w\":12,\"x\":0,\"y\":8},\"panelIndex\":\"2\",\"title\":\"Total Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Blocked Requests\"},\"gridData\":{\"h\":6,\"i\":\"3\",\"w\":12,\"x\":0,\"y\":14},\"panelIndex\":\"3\",\"title\":\"Total Blocked Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Country or Region By Requests\"},\"gridData\":{\"h\":22,\"i\":\"6\",\"w\":36,\"x\":0,\"y\":26},\"panelIndex\":\"6\",\"title\":\"Country or Region By Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"WAF Rules\"},\"gridData\":{\"h\":12,\"i\":\"8\",\"w\":12,\"x\":36,\"y\":12},\"panelIndex\":\"8\",\"title\":\"WAF Rules\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Filters\"},\"gridData\":{\"h\":8,\"i\":\"9\",\"w\":36,\"x\":0,\"y\":0},\"panelIndex\":\"9\",\"title\":\"Filters\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Countries or Regions\"},\"gridData\":{\"h\":15,\"i\":\"10\",\"w\":12,\"x\":36,\"y\":48},\"panelIndex\":\"10\",\"title\":\"Top Countries or Regions\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top User Agents\"},\"gridData\":{\"h\":17,\"i\":\"11\",\"w\":24,\"x\":24,\"y\":63},\"panelIndex\":\"11\",\"title\":\"Top User Agents\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"HTTP Methods\"},\"gridData\":{\"h\":12,\"i\":\"12\",\"w\":12,\"x\":36,\"y\":36},\"panelIndex\":\"12\",\"title\":\"HTTP Methods\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Unique Client IPs\"},\"gridData\":{\"h\":6,\"i\":\"14\",\"w\":12,\"x\":0,\"y\":20},\"panelIndex\":\"14\",\"title\":\"Unique Client IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Hosts\"},\"gridData\":{\"h\":15,\"i\":\"16\",\"w\":12,\"x\":12,\"y\":48},\"panelIndex\":\"16\",\"title\":\"Top Hosts\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top WebACLs\"},\"gridData\":{\"h\":15,\"i\":\"17\",\"w\":12,\"x\":0,\"y\":48},\"panelIndex\":\"17\",\"title\":\"Top WebACLs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Rules\"},\"gridData\":{\"h\":17,\"i\":\"18\",\"w\":12,\"x\":0,\"y\":63},\"panelIndex\":\"18\",\"title\":\"Top Rules\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Request URIs\"},\"gridData\":{\"h\":15,\"i\":\"19\",\"w\":12,\"x\":24,\"y\":48},\"panelIndex\":\"19\",\"title\":\"Top Request URIs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"View by aws.waf.httpRequest args,uri,path\"},\"gridData\":{\"h\":18,\"i\":\"20\",\"w\":48,\"x\":0,\"y\":118},\"panelIndex\":\"20\",\"title\":\"View by aws.waf.httpRequest args,uri,path\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"View by Matching Rule\"},\"gridData\":{\"h\":20,\"i\":\"21\",\"w\":48,\"x\":0,\"y\":98},\"panelIndex\":\"21\",\"title\":\"View by Matching Rule\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Web ACLs\"},\"gridData\":{\"h\":12,\"i\":\"4e8b942b-3972-4139-915d-521de2e22574\",\"w\":12,\"x\":36,\"y\":0},\"panelIndex\":\"4e8b942b-3972-4139-915d-521de2e22574\",\"title\":\"Web ACLs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Requests History\",\"vis\":{\"colors\":{\"ALLOW\":\"#629E51\",\"BLOCK\":\"#BF1B00\"}}},\"gridData\":{\"h\":18,\"i\":\"61ab1f0a-1eb6-4a0a-9673-83506e61ecef\",\"w\":24,\"x\":12,\"y\":8},\"panelIndex\":\"61ab1f0a-1eb6-4a0a-9673-83506e61ecef\",\"title\":\"Requests History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Sources\"},\"gridData\":{\"h\":12,\"i\":\"82f50929-a6d5-455d-a3a7-4434b508b749\",\"w\":12,\"x\":36,\"y\":24},\"panelIndex\":\"82f50929-a6d5-455d-a3a7-4434b508b749\",\"title\":\"Sources\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"table\":null,\"title\":\"Block Allow Host Uri\",\"vis\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":\"desc\"}}}},\"gridData\":{\"h\":18,\"i\":\"e48a3b9d-d533-4c45-9263-9f1c946d0e82\",\"w\":24,\"x\":0,\"y\":80},\"panelIndex\":\"e48a3b9d-d533-4c45-9263-9f1c946d0e82\",\"title\":\"Block Allow Host Uri\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_19\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top aws.waf.labels with Host, Uri\"},\"gridData\":{\"h\":18,\"i\":\"0d730c5b-bdc3-4ff7-9cd5-2a729303b66d\",\"w\":24,\"x\":24,\"y\":80},\"panelIndex\":\"0d730c5b-bdc3-4ff7-9cd5-2a729303b66d\",\"title\":\"Top aws.waf.labels with Host, Uri\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_20\"}]","timeRestore":false,"title":"logs-waf-dashboard","version":1},"id":"3ce97e1e-b385-4841-8152-c3bce7d68d1f","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"71b2a6fc-6c2e-42d4-82b6-4f5a2741f63f","name":"panel_0","type":"visualization"},{"id":"58bb62ff-66e4-4dab-9b64-c8cf812c46a2","name":"panel_1","type":"visualization"},{"id":"1e59055f-d033-4e25-985c-2902e5d138ea","name":"panel_2","type":"visualization"},{"id":"3cb53d17-ac34-45db-aaeb-97791c9d82d2","name":"panel_3","type":"visualization"},{"id":"912530c2-48a6-4618-8010-b8007e44ed2c","name":"panel_4","type":"visualization"},{"id":"4394f245-57e6-475e-ad33-cd29742e2b8a","name":"panel_5","type":"visualization"},{"id":"ecc648d9-2b36-46c4-a527-7fbccad61ba8","name":"panel_6","type":"visualization"},{"id":"b12eee40-37c6-436e-bcfb-d993d3a51aca","name":"panel_7","type":"visualization"},{"id":"c02eb336-6502-4ac4-aa53-91de17910031","name":"panel_8","type":"visualization"},{"id":"866d8631-5f43-4246-8c7d-ed39d70c9a9f","name":"panel_9","type":"visualization"},{"id":"e9522627-5bf8-4a3e-b995-0037300bb082","name":"panel_10","type":"visualization"},{"id":"1935ea3d-8155-44d4-b837-8a1397f00980","name":"panel_11","type":"visualization"},{"id":"3fa73516-89de-41c8-bacf-035da4e959af","name":"panel_12","type":"visualization"},{"id":"a0cac454-18c9-4099-91bb-93a76512bb93","name":"panel_13","type":"visualization"},{"id":"d0ee6b41-8ebb-44a2-9ea7-86251ae7e089","name":"panel_14","type":"search"},{"id":"712af10a-14a8-4eca-b791-ea701f80529f","name":"panel_15","type":"search"},{"id":"f3400632-1596-403b-a447-57bc3971246e","name":"panel_16","type":"visualization"},{"id":"3390bff0-ab15-11ec-b721-5f83aa22d08e","name":"panel_17","type":"visualization"},{"id":"9b152580-ab15-11ec-b721-5f83aa22d08e","name":"panel_18","type":"visualization"},{"id":"fb588f28-934f-4476-94f4-cd99ad90be69","name":"panel_19","type":"visualization"},{"id":"642534d0-72c0-11ec-acf9-63f0c6197356","name":"panel_20","type":"visualization"}],"type":"dashboard","updated_at":"2022-03-24T02:00:22.332Z","version":"WzEyOTI4LDFd"} -{"exportedCount":23,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/aws_waf-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_waf/aws_waf-1.0.0.json deleted file mode 100644 index 2075aecf66..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/aws_waf-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_waf", - "version": "1.0.0", - "displayName": "AWS waf", - "description": "AWS waf log collector", - "license": "Apache-2.0", - "type": "logs_waf", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_waf/info", - "statics": { - "logo": { - "annotation": "AWS waf Logo", - "path": "logo.jpg" - }, - "gallery": [ - { - "annotation": "AWS waf Log Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_waf", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs_waf", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_waf", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "samples.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/data/samples.json b/server/adaptors/integrations/__data__/repository/aws_waf/data/samples.json deleted file mode 100644 index 0a40b21e2e..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/data/samples.json +++ /dev/null @@ -1,4594 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "image" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/favicon.ico", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "a8i7U3kgh9ZgC-i_-vuB9ycuY1yXZA2C93SommMJO-NSZ8w1EfbQTA==" - } - } - } - }, - { - "@timestamp": "2023-07-17T04:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "text/css,*/*;q=0.1" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "style" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/css/main.3c74189a.css", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "Nwcv2BEFdfsvUgaBa878YM2DqeOJvjgYTi_D1OZ7zsluZDCsscmgig==" - } - } - } - }, - { - "@timestamp": "2023-07-13T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/cluster.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "9EBB1jusDQ4BJHy7Im56e5obUGBHLcJ0-d6PwMZ1DCoEApsumJFKCw==" - } - } - } - }, - { - "@timestamp": "2023-07-16T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/704.0fc9620b.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "PCylxlN5B7WYLr9E-FsDoRtynBLm6s5aKn-gYhFFn74KV0H6mtM2bA==" - } - } - } - }, - { - "@timestamp": "2023-07-12T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/info.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "KtWGg2zob530o7N5bNUT2zRbco11OGdsdYgcCmFAzUluNx3QgSQEJw==" - } - } - } - }, - { - "@timestamp": "2023-07-10T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/common.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "_F-SWxrC9nZ22jplLSvC7_ox2Jx2xPFE9HYT4tQtOcAYJwBrg1v6NQ==" - } - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "pytY5ev4ebR05f9mQGOnwufqXpk_FbsgRuFjd9cihOg42IqyE9Gx0Q==" - } - } - } - }, - { - "@timestamp": "2023-07-18T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/ekslog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "y34C69VSSUEMC3BippLVEXzZnQoBttgRdH6R1rZExLwc2lZIt6X2sA==" - } - } - } - }, - { - "@timestamp": "2023-07-19T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/applog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "W2b9qzn-ubH9iI-8NUXzC0WFMWmfO5A7cOEEDqzBzbdfpSUKdv2Mfw==" - } - } - } - }, - { - "@timestamp": "2023-07-12T01:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/resource.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "r0JWgRulEiWPnFXo0Kcu-nBQeaIX1X9f2EfUdvFFQMXsxBKkc27J0A==" - } - } - } - }, - { - "@timestamp": "2023-07-13T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/cluster.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "9F8xi5ujMH1et6Ysh_-2VQhiIAgLYJkA6bejtXBuIl7lx1QKDxUxtQ==" - } - } - } - }, - { - "@timestamp": "2023-07-20T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/home.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "iPfEWiMKyaM6iFv3XGLK9hvQt7ZchJXnV-hBr-DFdWnYlH04h0ZRzw==" - } - } - } - }, - { - "@timestamp": "2023-07-11T10:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/171.b2862bb4.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "imCy2Tz9QYBNeRoKSbwnueyJbqltF52pBw6RRoQ95TyTtmbC8R_vvg==" - } - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/main.1fce72cf.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "YF_xCzvlSslgoa6sHVY78bbK9JyI5xZv4ofP-o3FcwLtCjDho4VtOQ==" - } - } - } - }, - { - "@timestamp": "2023-07-01T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/common.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "3hCiWgV0BpwLCt1e9nvpFQGM7QMSj-g40cb5pTvi3Z_5diK-0TaUJQ==" - } - } - } - }, - { - "@timestamp": "2023-07-19T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/servicelog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "MEkdaSTQMtuUA_whHiIM3l3wpPthbiFLV5GHVIfx39O8dKRrotcZew==" - } - } - } - }, - { - "@timestamp": "2023-07-13T11:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/resource.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "wbUO-9AVJzjhJHFdjd5cmouNp4ulDmm4hYbAQqdKRAS3o59mlwo9pA==" - } - } - } - }, - { - "@timestamp": "2023-07-21T05:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/home.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "MTcYuStUpGv5GcTKzDVKrpTO1P91eESO0K3dkDJ87a6MzAWK33ZKww==" - } - } - } - }, - { - "@timestamp": "2023-07-11T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/applog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "MP4ldvR5h-k1hYZyNUe3npEQdNsF1upPYgZDAUBAfpTY6ydjehgszQ==" - } - } - } - }, - { - "@timestamp": "2023-07-12T01:04:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/156.e12ab3ef.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "ZEec9twgKzh-7M5mBk31JG1cgpZaq6JCEvJ0P7rss0q66ID-NRorWw==" - } - } - } - }, - { - "@timestamp": "2023-07-10T00:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/42.a78e6cdc.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "vfGrNbR3NHPIb8i1sDwZXapumeCzZ44Vo9T3wYXyXX5Eqntn2gBzvA==" - } - } - } - }, - { - "@timestamp": "2023-07-03T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/info.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "tyQN06m_gBa9rAP3gsxpoBt7TSbaByGd341sms_h8Rx5ZuuStXe0Yw==" - } - } - } - }, - { - "@timestamp": "2023-07-04T04:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/servicelog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "qD11sEL_uV0sX3XjNEwkB74nGIUy5nefHwn7REK3nU-xYtAEEtCf3w==" - } - } - } - }, - { - "@timestamp": "2023-07-07T07:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/ekslog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "iBmLjtAsp6KQkYMEnSHHdX_4OQ66cG993XlSoMEMBbO6SuvySzuQXQ==" - } - } - } - }, - { - "@timestamp": "2023-07-08T08:08:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/54.66e91f12.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "fmndmvBBD1sko0pOCapAyqaPOD1YSuqzw_8gwkHGtVnQ0KxDnBf9sQ==" - } - } - } - }, - { - "@timestamp": "2023-07-09T09:09:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548658747", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "HM4AuFrQ0scez_PTg9Ie_mtTkcTed0wa6u5Otl7MoYTO7uWEvwHHDw==" - } - } - } - }, - { - "@timestamp": "2023-07-10T10:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/289.f9fcf639.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "AvozC55PQVeSjj18F5Pl00PIOaImVS6EGoMLWpT84xstY0BaO55hzQ==" - } - } - } - }, - { - "@timestamp": "2023-07-11T11:11:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548665916", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "SZqmcXIZ9PBSamzQowJBc2bV5eVmhJVJA-wxDSRdP6Gqqnnm6Ll4zw==" - } - } - } - }, - { - "@timestamp": "2023-07-12T08:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/592.57113085.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "ILEgkYBAGPgRq6uo82mbIV6QxFhy4bZVkpel-9AoHEkQNhSX68WpZw==" - } - } - } - }, - { - "@timestamp": "2023-07-13T08:13:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "LZEvUnDWadacvKLRROO1NHZBGpwozTNadZSOAnrJcicJqrHoBUJP0w==" - } - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "yr4cC1IFd6ZHD6UmTw_QTayDWwqmyuqce7Q6VqTjFBPpLIybmfcIxg==" - } - } - } - }, - { - "@timestamp": "2023-07-01T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "jPbv-RPsxtsQ5k9xxyWSKvE9bFlJLTarzMBVDy2xukWleaMpjZh72A==" - } - } - } - }, - { - "@timestamp": "2023-07-10T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "KBDRxdNLJ5vN4EN6E7fHA0qqnReXb-hZTYkMV5Qi77DU63I0pjOfsg==" - } - } - } - }, - { - "@timestamp": "2023-07-13T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548672251", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "6fz1cJxE2PYMUoi1Y0OIyqNUAZqwiftW5oay3fNrnaBahCkFc-4VCA==" - } - } - } - }, - { - "@timestamp": "2023-07-12T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548669562", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "AiaVoelxpsweW5RAwvj2v37T0Qdzb-YT8PxndPpbJMAFZ3LH8oRElw==" - } - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548678928", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "PM2dHUCB05rj_5pWg6pLfvU-Iu2WcoaNI1HvpPe3_S4pX5As56TRqA==" - } - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548675203", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "HLBUYRzP8ll-I-2qOho5h8AUrzSjlvWw7DJrDk4VeYx92FugehT68w==" - } - } - } - }, - { - "@timestamp": "2023-07-01T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "QL4r6nTLZ0zEwDNyrrv64BYG6nrLGwQx1WPAsdPeQai6cecRr83rFQ==" - } - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/info/README.md b/server/adaptors/integrations/__data__/repository/aws_waf/info/README.md deleted file mode 100644 index f4620fbece..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/info/README.md +++ /dev/null @@ -1,28 +0,0 @@ -# AWS WAF Log Integration - -## What is AWS WAF? - -AWS WAF (Web Application Firewall) is a web application firewall service that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF provides firewall rules to filter and monitor HTTP/HTTPS requests based on specific conditions. - -AWS WAF can be used for various purposes, such as: - -- Mitigating web application layer DDoS attacks -- Blocking common web attack patterns like SQL injection and cross-site scripting (XSS) -- Filtering traffic based on IP addresses or geographic locations -- Controlling access to specific parts of your application - -AWS WAF allows you to define rules to match specific conditions and then take actions, such as allowing, blocking, or rate-limiting requests, based on those rules. - -See additional details [here](https://aws.amazon.com/waf/). - -## What is AWS WAF Log Integration? - -An integration is a set of pre-configured assets bundled together to facilitate monitoring and analysis. - -AWS WAF log integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-waf` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index ca32e104a0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_waf-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_waf-1.0.0.mapping.json deleted file mode 100644 index 5722911f10..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_waf-1.0.0.mapping.json +++ /dev/null @@ -1,144 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_waf", - "labels": ["aws", "waf"] - }, - "properties": { - "aws": { - "type": "object", - "properties": { - "waf": { - "type": "object", - "properties": { - "action": { - "type": "keyword" - }, - "formatVersion": { - "type": "keyword" - }, - "httpRequest": { - "properties": { - "args": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "clientIp": { - "type": "ip" - }, - "country": { - "type": "keyword" - }, - "headers": { - "properties": { - "name": { - "type": "keyword" - }, - "value": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "httpMethod": { - "type": "keyword" - }, - "httpVersion": { - "type": "keyword" - }, - "requestId": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "httpSourceId": { - "type": "keyword" - }, - "httpSourceName": { - "type": "keyword" - }, - "labels": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "ruleGroupList": { - "properties": { - "ruleGroupId": { - "type": "keyword" - }, - "terminatingRule": { - "properties": { - "action": { - "type": "keyword" - }, - "ruleId": { - "type": "keyword" - } - } - } - } - }, - "terminatingRuleId": { - "type": "keyword" - }, - "terminatingRuleType": { - "type": "keyword" - }, - "webaclId": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "webaclName": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/logs_waf-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/logs_waf-1.0.0.mapping.json deleted file mode 100644 index f79b80dfa0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/logs_waf-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_waf-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-waf": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "waf"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["cloud", "aws_waf", "aws_s3"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_waf/static/dashboard.png deleted file mode 100644 index 8f268e106a..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_waf/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/static/logo.jpg b/server/adaptors/integrations/__data__/repository/aws_waf/static/logo.jpg deleted file mode 100644 index e944bea26a..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_waf/static/logo.jpg and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/assets/haproxy-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/haproxy/assets/haproxy-1.0.0.ndjson deleted file mode 100644 index e74be47adf..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/assets/haproxy-1.0.0.ndjson +++ /dev/null @@ -1,11 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.address\"}}},{\"count\":0,\"name\":\"communication.destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.domain\"}}},{\"count\":0,\"name\":\"communication.destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.sock.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.address\"}}},{\"count\":0,\"name\":\"communication.source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.domain\"}}},{\"count\":0,\"name\":\"communication.source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.exception.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.result\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.client.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.request.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"http.request.id\"}}},{\"count\":0,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.mime_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.resent_count\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.response.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"http.response.id\"}}},{\"count\":0,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.schema\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.dropped_attributes_count\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.schemaUrl\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"observedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observerTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"severity.number\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severity.text.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severity.text\"}}},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"span_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"span_id\"}}},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trace_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"trace_id\"}}}]","timeFieldName":"@timestamp","title":"ss4o_logs-haproxy-sample-sample"},"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-11-06T06:10:10.775Z","version":"WzExOSwxXQ=="} -{"attributes":{"columns":["http.request.method","http.response.status_code"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"event.domain:haproxy.access\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"[HAProxy Core Logs 1.0] HAProxy Access Logs","version":1},"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","migrationVersion":{"search":"7.9.3"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"[HAProxy Core Logs 1.0] Response codes over time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[HAProxy Core Logs 1.0] Response codes over time\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-24h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"http.response.status_code:[200 TO 299]\",\"language\":\"lucene\"},\"label\":\"200s\"},{\"input\":{\"query\":\"http.response.status_code:[300 TO 399]\",\"language\":\"lucene\"},\"label\":\"300s\"},{\"input\":{\"query\":\"http.response.status_code:[400 TO 499]\",\"language\":\"lucene\"},\"label\":\"400s\"},{\"input\":{\"query\":\"http.response.status_code:[500 TO 599]\",\"language\":\"lucene\"},\"label\":\"500s\"},{\"input\":{\"query\":\"http.response.status_code:0\",\"language\":\"lucene\"},\"label\":\"0\"}]},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"feb24bf8-f5e4-4f24-a9e0-c6618a8db3c3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMSwxXQ=="} -{"attributes":{"columns":["_source"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"query\":{\"query\":\"http.response.status_code >= 300 and event.domain:haproxy.access\",\"language\":\"kuery\"},\"version\":true,\"highlight\":{\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"pre_tags\":[\"@kibana-highlighted-field@\"],\"require_field_match\":false,\"fragment_size\":2147483647},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"[HAProxy Core Logs 1.0] HAProxy Error Logs","version":1},"id":"aae90f71-83e6-4154-83f8-80185a58cde7","migrationVersion":{"search":"7.9.3"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"[HAProxy Core Logs 1.0] Errors over time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[HAProxy Core Logs 1.0] Errors over time\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-24h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"bfa0e172-75fa-485d-aebd-b623713359b3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"aae90f71-83e6-4154-83f8-80185a58cde7","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"HTTP Top URLs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"HTTP Top URLs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.url\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"69b27677-9127-4581-9f1a-cc3a84822354","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"Data Volume","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Data Volume\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"http.response.bytes\",\"customLabel\":\"Response Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15m\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Response Bytes\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Response Bytes\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"de792cf1-b1f1-4705-890d-4206709c7360","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyNCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Status code dropdown","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Status code dropdown\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1700045798676\",\"fieldName\":\"http.response.status_code\",\"parent\":\"\",\"label\":\"Dropdown\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"c4fcd310-83a5-11ee-8c8a-a1faaf8536ee","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"control_0_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2023-11-15T10:57:29.280Z","version":"WzEyNywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"Transactions by API","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Transactions by API\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.url\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0e69fad0-76ec-11ee-8c8a-a1faaf8536ee","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-16T05:08:59.573Z","version":"WzEzMCwxXQ=="} -{"attributes":{"description":"HAProxy dashboard with basic Observability on access / error logs","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":8,\"i\":\"1f31e50b-06e3-41e6-972e-e4e5fe1a9872\",\"w\":48,\"x\":0,\"y\":15},\"panelIndex\":\"1f31e50b-06e3-41e6-972e-e4e5fe1a9872\",\"title\":\"HTTP Status Codes over Time\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":9,\"i\":\"d91a8da4-b34b-470a-aca6-9c76b47cd6fb\",\"w\":24,\"x\":0,\"y\":23},\"panelIndex\":\"d91a8da4-b34b-470a-aca6-9c76b47cd6fb\",\"title\":\"HTTP Errors over Time\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"vis\":{\"sortColumn\":{\"colIndex\":0,\"direction\":\"asc\"}}},\"gridData\":{\"h\":15,\"i\":\"8e658e0d-7b64-4be8-8ad9-3b28eadf30f0\",\"w\":24,\"x\":24,\"y\":23},\"panelIndex\":\"8e658e0d-7b64-4be8-8ad9-3b28eadf30f0\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"4d8c2aa7-159c-4a1a-80ff-00a9299056ce\",\"w\":24,\"x\":0,\"y\":32},\"panelIndex\":\"4d8c2aa7-159c-4a1a-80ff-00a9299056ce\",\"title\":\"HTTP Data Volume\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"742783de-3ed5-4ba8-aafd-948220697bc6\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"742783de-3ed5-4ba8-aafd-948220697bc6\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"8f9de824-cffd-43d1-b59e-8912ec9da1c5\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"8f9de824-cffd-43d1-b59e-8912ec9da1c5\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_5\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-90d","timeRestore":true,"timeTo":"now","title":"HAProxy Logs Overview","version":1},"id":"49e36499-ca0a-4636-9216-6db5095cc96e","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"feb24bf8-f5e4-4f24-a9e0-c6618a8db3c3","name":"panel_0","type":"visualization"},{"id":"bfa0e172-75fa-485d-aebd-b623713359b3","name":"panel_1","type":"visualization"},{"id":"69b27677-9127-4581-9f1a-cc3a84822354","name":"panel_2","type":"visualization"},{"id":"de792cf1-b1f1-4705-890d-4206709c7360","name":"panel_3","type":"visualization"},{"id":"c4fcd310-83a5-11ee-8c8a-a1faaf8536ee","name":"panel_4","type":"visualization"},{"id":"0e69fad0-76ec-11ee-8c8a-a1faaf8536ee","name":"panel_5","type":"visualization"}],"type":"dashboard","updated_at":"2023-11-16T05:16:26.850Z","version":"WzEzMiwxXQ=="} -{"exportedCount":10,"missingRefCount":0,"missingReferences":[]} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/data/sample.json b/server/adaptors/integrations/__data__/repository/haproxy/data/sample.json deleted file mode 100644 index 05e7bd1726..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/data/sample.json +++ /dev/null @@ -1 +0,0 @@ -[{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T06:46:14.029Z","observedTimestamp":"2023-11-20T06:46:14.029Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:06:46:14 +0000] \"GET /monitor HTTP/1.1\" 200 23741 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"300","bytes":23741},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:24.734Z","observedTimestamp":"2023-11-20T07:10:24.734Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:24 +0000] \"GET /monitor HTTP/1.1\" 200 23881 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"400","bytes":23881},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:19.628Z","observedTimestamp":"2023-11-20T07:10:19.628Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:19 +0000] \"GET /monitor HTTP/1.1\" 200 23881 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23881},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:14.505Z","observedTimestamp":"2023-11-20T07:10:14.505Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:14 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:09.302Z","observedTimestamp":"2023-11-20T07:10:09.302Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:09 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:04.151Z","observedTimestamp":null,"body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:04 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:04.151Z","observedTimestamp":"2023-11-20T07:10:04.000Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:04 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"404","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-21T08:57:33.000Z","observedTimestamp":"2023-11-21T08:57:43.000Z","body":"10.81.1.1:61108 stats stats/-1/-1/-1/-1/10009a 1/1/0/0/00/0--cR--[21/Nov/2023:08:57:43 +0000] \" HTTP/1.1\" 408 0 \"\"\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{},"response":{"status_code":"408","bytes":1},"url":"/monitor"}}] \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/haproxy-1.0.0.json b/server/adaptors/integrations/__data__/repository/haproxy/haproxy-1.0.0.json deleted file mode 100644 index 74dafe701f..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/haproxy-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "haproxy", - "version": "1.0.0", - "displayName": "HAProxy Dashboard", - "description": "HAProxy logs collector", - "license": "Apache-2.0", - "type": "logs", - "labels": ["Observability", "Logs"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/haproxy/info", - "statics": { - "logo": { - "annotation": "HAProxy Logo", - "path": "logo.svg" - }, - "gallery": [ - { - "annotation": "HAProxy Dashboard", - "path": "dashboard1.png" - }, - { - "annotation": "HAProxy Dashboard view", - "path": "dashboard2.png" - } - ] - }, - "components": [ - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "http", - "version": "1.0.0" - }, - { - "name": "logs", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "haproxy", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/README.md b/server/adaptors/integrations/__data__/repository/haproxy/info/README.md deleted file mode 100644 index 7373d5da94..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/README.md +++ /dev/null @@ -1,18 +0,0 @@ -# HAProxy Integration - -## What is HAProxy? - -HAProxy is open-source software that provides a high availability load balancer and proxy server for TCP and HTTP-based applications. - -See additional details [here](http://www.haproxy.org/). - -## What is HAProxy Integration? - -An integration is a bundle of pre-canned assets that are packaged together in a meaningful manner. -HAProxy integration includes dashboards, visualisations, queries and an index mapping. - -### Dashboards - - - - diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/docker-compose.yaml b/server/adaptors/integrations/__data__/repository/haproxy/info/test/docker-compose.yaml deleted file mode 100644 index 731bba55de..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/docker-compose.yaml +++ /dev/null @@ -1,90 +0,0 @@ -version: '3' - -services: - opensearch: - image: opensearchstaging/opensearch:3.0.0 - container_name: opensearch - environment: - - cluster.name=opensearch-cluster # Name the cluster - - node.name=opensearch # Name the node that will run in this container - - discovery.seed_hosts=opensearch # Nodes to look for when discovering the cluster - - cluster.initial_cluster_manager_nodes=opensearch # Nodes eligibile to serve as cluster manager - - bootstrap.memory_lock=true # Disable JVM heap memory swapping - - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # Set min and max JVM heap sizes to at least 50% of system RAM - - "DISABLE_INSTALL_DEMO_CONFIG=true" # Prevents execution of bundled demo script which installs demo certificates and security configurations to OpenSearch - - "DISABLE_SECURITY_PLUGIN=true" # Disables security plugin - ulimits: - memlock: - soft: -1 # Set memlock to unlimited (no soft or hard limit) - hard: -1 - nofile: - soft: 65536 # Maximum number of open files for the opensearch user - set to at least 65536 - hard: 65536 - volumes: - - opensearch:/usr/share/opensearch/data # Creates volume called opensearch-data1 and mounts it to the container - ports: - - 9200:9200 - - 9600:9600 - expose: - - "9200" - healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9200/_cluster/health?wait_for_status=yellow"] - interval: 5s - timeout: 25s - retries: 4 - networks: - - opensearch-net # All of the containers will join the same Docker bridge network - haproxy: - container_name: haproxy - image: haproxytech/haproxy-alpine:2.4 - volumes: - # - ./haproxy-otel/opentelemetry_module.conf:/etc/nginx/conf.d/opentelemetry_module.conf - - ./haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro - ports: - - 8405:8405 - depends_on: - - flask-app - - fluentbit - networks: - - opensearch-net # All of the containers will join the same Docker bridge network - links: - - fluentbit - logging: - driver: "fluentd" - options: - fluentd-address: 127.0.0.1:24224 - tag: haproxy.access - fluentbit: - container_name: fluentbit - image: fluent/fluent-bit:latest - volumes: - - ./fluent-bit:/fluent-bit/etc - ports: - - "24224:24224" - - "24224:24224/udp" - depends_on: - - opensearch - networks: - - opensearch-net - redis: - image: redis - ports: - - 6357:6357 - networks: - - opensearch-net - flask-app: - build: flask-app - ports: - - 5000:5000 - depends_on: - - redis - volumes: - - ./flask-app/app.py:/code/app.py - networks: - - opensearch-net - -volumes: - opensearch: - -networks: - opensearch-net: diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/Dockerfile b/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/Dockerfile deleted file mode 100644 index bb172b4af6..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/Dockerfile +++ /dev/null @@ -1,9 +0,0 @@ -FROM python:latest -ADD . /code -WORKDIR /code -RUN pip install -r requirements.txt - -RUN mkdir -p /run/haproxy/ -RUN export VALUE=$(id -u haproxy) - -CMD ["flask", "run", "-h", "0.0.0.0", "-p", "5000", "--debug"] diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/app.py b/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/app.py deleted file mode 100644 index 26f0647700..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/app.py +++ /dev/null @@ -1,20 +0,0 @@ -from random import random, randint -from flask import Flask -from redis import Redis - -app = Flask(__name__) -redis = Redis(host='redis', port=6379) - - -@app.route("/") -def hits(): - if random() < 0.20: - return "Random error", 500 - h = redis.incr('hits') - return f"This page has been viewed {h} time(s)" - -@app.route("/dice") -def roll_dice(): - if random() < 0.05: - return "Random error", 500 - return str(randint(1, 6)) diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/requirements.txt b/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/requirements.txt deleted file mode 100644 index 56c1ce66b5..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/requirements.txt +++ /dev/null @@ -1,2 +0,0 @@ -flask==2.3.2 -redis \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/fluent-bit.conf b/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/fluent-bit.conf deleted file mode 100644 index 991f747923..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/fluent-bit.conf +++ /dev/null @@ -1,30 +0,0 @@ -[SERVICE] - Parsers_File parsers.conf - -[INPUT] - Name forward - Port 24224 - -[FILTER] - Name parser - Match haproxy.access - Key_Name log - Parser haproxy - -[FILTER] - Name lua - Match haproxy.access - Script otel-converter.lua - call convert_to_otel - -[OUTPUT] - Name opensearch - Match haproxy.access - Host opensearch - Port 9200 - Index ss4o_logs-haproxy-dev - Suppress_Type_Name On - -[OUTPUT] - Name stdout - Match haproxy.access \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/otel-converter.lua b/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/otel-converter.lua deleted file mode 100644 index 178f4bb8c8..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/otel-converter.lua +++ /dev/null @@ -1,84 +0,0 @@ -local hexCharset = "0123456789abcdef" -local function randHex(length) - if length > 0 then - local index = math.random(1, #hexCharset) - return randHex(length - 1) .. hexCharset:sub(index, index) - else - return "" - end -end - -local function format_haproxy(c) - if c.error then - return string.format( - "%s [%s] \"%s HTTP/1.1\" %s %s \"%s\"", - c.remote, - os.date("%d/%b/%Y:%H:%M:%S %z"), - c.method, - c.code, - c.size, - c.error - ) - else - return string.format( - "%s [%s] \"%s %s HTTP/1.1\" %s %s \"%s\"", - c.remote, - os.date("%d/%b/%Y:%H:%M:%S %z"), - c.method, - c.path, - c.code, - c.size, - c.agent - ) - end -end - -local formats = { - ["haproxy.access"] = format_haproxy - -} - -function convert_to_otel(tag, timestamp, record) - local data = { - traceId=randHex(32), - spanId=randHex(16), - ["@timestamp"]=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - observedTimestamp=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - body=formats[tag](record), - attributes={ - data_stream={ - dataset=tag, - namespace="production", - type="logs" - } - }, - event={ - category="web", - name="access", - domain=tag, - kind="event", - result="success", - type="access" - }, - http={ - request={ - method=record.method - }, - response={ - bytes=tonumber(record.size), - status_code=tonumber(record.code) - }, - flavor="1.1", - url=record.path - }, - communication={ - source={ - address=record.remote - } - } - } - if record.remote then - data.communication.source.ip = string.match(record.remote, "%d+%.%d+%.%d+%.%d+") - end - return 1, timestamp, data -end \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/parsers.conf b/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/parsers.conf deleted file mode 100644 index fb5c26a460..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/parsers.conf +++ /dev/null @@ -1,6 +0,0 @@ -[PARSER] - Name haproxy - Format regex - Regex ^(?[^ ]*) \[(?[^\]]*)\] (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (((?[^\"]*) "(?\S+)(?: +(?[^\"]*?)(?: +\S*)?)?)|(?[^ ]*))?" - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S.%L diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg b/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg deleted file mode 100644 index 51fbadb559..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg +++ /dev/null @@ -1,23 +0,0 @@ -global - stats socket /var/run/api.sock user haproxy group haproxy mode 660 level admin expose-fd listeners - log stdout format raw local0 info - -defaults - mode http - option httplog - timeout client 10s - timeout connect 5s - timeout server 10s - timeout http-request 10s - log global - -frontend frontend - bind *:8405 - stats enable - stats refresh 5s - capture request header User-Agent len 128 - default_backend webservers - -backend webservers - server s1 flask-app:5000 check - diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh b/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh deleted file mode 100644 index 6528480efb..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh +++ /dev/null @@ -1,2 +0,0 @@ -# Copy access.log, error.log, metrics.log, parsers.conf, and fluent-bit.conf into the /tmp directory -sudo docker run -it -v /tmp/:/tmp/ fluent/fluent-bit /bin/fluent-bit -R /tmp/parsers.conf -c /tmp/fluent-bit.conf \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index 2bd5dadfa6..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json deleted file mode 100644 index fd1082432a..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json deleted file mode 100644 index 958842e97f..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json +++ /dev/null @@ -1,223 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-*-*"], - "priority": 900, - "data_stream": {}, - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "http", "communication"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http"], - "version": 1 - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png deleted file mode 100644 index 305a8e8410..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png b/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png deleted file mode 100644 index 8bb8972422..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg b/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg deleted file mode 100644 index ae734d7522..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg +++ /dev/null @@ -1,51 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/server/adaptors/integrations/__data__/repository/k8s/assets/README.md b/server/adaptors/integrations/__data__/repository/k8s/assets/README.md deleted file mode 100644 index f970c5334e..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/assets/README.md +++ /dev/null @@ -1,55 +0,0 @@ -# K8s Dashboard Explained - -The following queries are used for the k8s dashboard: - -- Deployment names Graph: - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.name` - -- Available pods per deployment (done per deployment aggregation) - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.name` - -- Desired pod - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.desired` - -- Available pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.available` - -- Unavailable pods - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.unavailable` -- Unavailable pods per deployment ( done per deployment aggregation) - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.unavailable` - -- CPU usage by node - - - Filter: `event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)` - - Query: `kubernetes.node.name` , `kubernetes.container.cpu.usage.nanocores`, `kubernetes.node.cpu.capacity.cores` - -- Top memory intensive pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.container` - - Query: `kubernetes.container._module.pod.name`, `kubernetes.container.memory.usage.bytes` - -- Top CPU intensive pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.container` - - Query: `kubernetes.container._module.pod.name`, `kubernetes.container.cpu.usage.core.ns` - -- Network in by node - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.pod` - - Query: `kubernetes.pod.network.rx.bytes` - -- Network out by node - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.pod` - - Query: `kubernetes.pod.network.tx.bytes` diff --git a/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson deleted file mode 100644 index 655af5bf34..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson +++ /dev/null @@ -1,16 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.dataset\"}}},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.namespace\"}}},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.type\"}}},{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.dataset.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"event.dataset\"}}},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.module.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"event.module\"}}},{\"count\":0,\"name\":\"kubernetes.container.cpu.limit.cores\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.cpu.request.cores\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.id\"}}},{\"count\":0,\"name\":\"kubernetes.container.image\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.image.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.image\"}}},{\"count\":0,\"name\":\"kubernetes.container.memory.limit.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.memory.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.name\"}}},{\"count\":0,\"name\":\"kubernetes.container.status.phase\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.status.phase.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.status.phase\"}}},{\"count\":0,\"name\":\"kubernetes.container.status.ready\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.status.restarts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.deployment.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.deployment.name\"}}},{\"count\":0,\"name\":\"kubernetes.deployment.paused\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.available\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.desired\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.unavailable\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.updated\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.labels.app\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.app.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.app\"}}},{\"count\":0,\"name\":\"kubernetes.labels.controller-revision-hash\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.controller-revision-hash.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.controller-revision-hash\"}}},{\"count\":0,\"name\":\"kubernetes.labels.eks.amazonaws.com/component\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.eks.amazonaws.com/component.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.eks.amazonaws.com/component\"}}},{\"count\":0,\"name\":\"kubernetes.labels.io.kompose.service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.io.kompose.service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.io.kompose.service\"}}},{\"count\":0,\"name\":\"kubernetes.labels.k8s-app\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.k8s-app.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.k8s-app\"}}},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.pod-template-generation\"}}},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-hash\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-hash.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.pod-template-hash\"}}},{\"count\":0,\"name\":\"kubernetes.namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.namespace\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/os\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/arch\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/hostname\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/hostname.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/hostname\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/os\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.kubernetes.io/region\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node.cpu.allocatable.cores\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.cpu.capacity.cores\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.memory.allocatable.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.memory.capacity.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node.name\"}}},{\"count\":0,\"name\":\"kubernetes.node.pod.allocatable.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.pod.capacity.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.status.ready\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node.status.ready.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node.status.ready\"}}},{\"count\":0,\"name\":\"kubernetes.node.status.unschedulable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.pod.host_ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.host_ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.host_ip\"}}},{\"count\":0,\"name\":\"kubernetes.pod.ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.ip\"}}},{\"count\":0,\"name\":\"kubernetes.pod.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.name\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.phase\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.phase.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.phase\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.ready\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.ready.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.ready\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.scheduled\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.scheduled.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.scheduled\"}}},{\"count\":0,\"name\":\"kubernetes.pod.uid\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.uid.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.uid\"}}}]","timeFieldName":"@timestamp","title":"ss4o_logs-k8s-*"},"id":"677d1880-3710-11ee-9c99-1babb143e8dd","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-08-09T23:56:49.032Z","version":"WzQ2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Nodes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Nodes\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"kubernetes.node.name\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Nodes\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.node\",\"language\":\"kuery\"},\"background_color_rules\":[{\"id\":\"79ccad80-48ff-11ec-b39b-33a1da97fd00\"}],\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"35410fad-e9d9-4df0-b88b-380347b6673c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzU5OSwxXQ=="} -{"attributes":{"description":"Deployment Table","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"Kubernetes - Deployments","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Deployments\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"289c1980-48fc-11ec-b39b-33a1da97fd00\"}],\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"index_pattern\":\"\",\"interval\":\"\",\"isModelInvalid\":false,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"bar\",\"color\":\"#68BC00\",\"fill\":\"0.6\",\"filter\":{\"language\":\"kuery\",\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\"},\"formatter\":\"number\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"label\":\"Deployments\",\"line_width\":\"0\",\"metrics\":[{\"field\":\"kubernetes.deployment.name\",\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"override_index_pattern\":1,\"point_size\":1,\"separate_axis\":0,\"series_index_pattern\":\"logs-k8s\",\"series_time_field\":\"@timestamp\",\"split_color_mode\":\"opensearchDashboards\",\"split_filters\":[{\"color\":\"#68BC00\",\"filter\":{\"language\":\"kuery\",\"query\":\"\"},\"id\":\"e2942b00-3795-11ee-98d8-576c351e07b5\"}],\"split_mode\":\"terms\",\"stacked\":\"stacked_within_series\",\"terms_field\":\"kubernetes.deployment.name\",\"terms_order_by\":\"_count\",\"terms_size\":\"100\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"type\":\"timeseries\",\"bar_color_rules\":[{\"id\":\"f4541fc0-3796-11ee-8af2-45ce6d9f36cb\"}],\"pivot_id\":\"kubernetes.deployment.name\",\"pivot_type\":\"string\"}}"},"id":"d9a10a4a-a344-4acf-81c5-f3fbdea773e0","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Available pods per deployment [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Available pods per deployment [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"label\":\"Available pods\",\"type\":\"timeseries\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"terms_field\":\"kubernetes.deployment.name\",\"terms_size\":\"100\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"\",\"index_pattern\":\"\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false}}"},"id":"c1403f7e-9ce1-41c6-a571-a5fe09455067","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Desired pods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Desired pods\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(96,146,192,1)\",\"split_mode\":\"everything\",\"split_color_mode\":\"rainbow\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.desired\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked_within_series\",\"override_index_pattern\":0,\"series_index_pattern\":\"logs-k8s\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"series_time_field\":\"@timestamp\",\"label\":\"Desired Pods\",\"type\":\"timeseries\",\"series_interval\":\"auto\",\"offset_time\":\"\",\"hide_in_legend\":0}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"10s\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"fe4117c0-48fc-11ec-b39b-33a1da97fd00\"}],\"gauge_color_rules\":[{\"id\":\"173ca960-48fd-11ec-b39b-33a1da97fd00\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"}}}"},"id":"ca4afa09-317d-43e0-8587-bc8023eaccab","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Available pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Available pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(84,179,153,1)\",\"split_mode\":\"terms\",\"split_color_mode\":\"gradient\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":\"0.8\",\"stacked\":\"stacked\",\"label\":\"Available Pods\",\"type\":\"timeseries\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"10s\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"fc647630-49c5-11ec-bdfd-3b80d430f4ad\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"45b57c4e-8ac9-4103-bc31-89668017349d","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Unavailable pods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Unavailable pods\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(231,102,76,1)\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Unavailable Pods\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"b43829d0-4900-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"021c0b61-3ac1-46cf-856a-63f4c5764554","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Unavailable pods per deployment [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Unavailable pods per deployment [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"label\":\"Unavailable pods\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.deployment.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"}}}"},"id":"300d6e9c-c915-4bb4-98cf-4b5968523ccf","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CPU usage by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU usage by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.usage.nanocores\"},{\"id\":\"d39f5b30-4faf-11ec-9d5a-59f0e2391052\",\"type\":\"avg\",\"field\":\"event.duration\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"},\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.node.name\",\"offset_time\":\"10s\"},{\"id\":\"faee71b0-48f9-11ec-b39b-33a1da97fd00\",\"color\":\"\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\",\"type\":\"avg\",\"field\":\"kubernetes.node.cpu.capacity.cores\"},{\"id\":\"c1c04570-48fa-11ec-b39b-33a1da97fd00\",\"type\":\"math\",\"variables\":[{\"id\":\"cbc40d90-48fa-11ec-b39b-33a1da97fd00\",\"name\":\"cores\",\"field\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\"}],\"script\":\"params.cores * 1000000000\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"1000\",\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"},\"terms_order_by\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\",\"value_template\":\"{{value}} nanocores\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"\",\"index_pattern\":\"\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"198ab4e0-48f9-11ec-b39b-33a1da97fd00\"}],\"bar_color_rules\":[{\"id\":\"1b9e79b0-48f9-11ec-b39b-33a1da97fd00\"}],\"gauge_color_rules\":[{\"id\":\"1c00e500-48f9-11ec-b39b-33a1da97fd00\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"}}"},"id":"6bf080cf-6b7a-4c13-a30b-f17146c44633","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory usage by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory usage by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"},{\"id\":\"c7a3a880-48fd-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"10s\",\"id\":\"cf2e0c30-48fd-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"c7a3a880-48fd-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\",\"terms_size\":\"1000\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"id\":\"08b86cc0-48fe-11ec-b39b-33a1da97fd00\",\"color\":\"\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"sum\",\"field\":\"kubernetes.node.memory.capacity.bytes\"},{\"id\":\"35fe8b10-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\"},{\"unit\":\"10s\",\"id\":\"3c89ce40-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"35fe8b10-48fe-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Node capacity\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.node.name\",\"hidden\":false,\"terms_order_by\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"}}}"},"id":"dc7c955e-cfe9-48b4-bfb9-57d7c6a8cb0a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top memory intensive pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top memory intensive pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"},{\"unit\":\"\",\"id\":\"7103e0f0-4900-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"10s\",\"id\":\"7ab85090-4900-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"7103e0f0-4900-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":null}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"bar_color_rules\":[{\"id\":\"39e57750-4900-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.container\",\"language\":\"kuery\"}}}"},"id":"1d928d8c-d17a-4a1a-916a-d899735bd638","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:36:49.991Z","version":"WzYxOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top CPU intensive pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top CPU intensive pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.request.cores\"},{\"unit\":\"1s\",\"id\":\"eeea0fe0-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"count\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0 a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.container.name\",\"value_template\":\"{{value}} ns\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"label\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"bar_color_rules\":[{\"id\":\"c8d782b0-48ff-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.container\",\"language\":\"kuery\"},\"background_color_rules\":[{\"id\":\"cf2799e0-37a3-11ee-bfde-4b4fbdcc71b7\"}]}}"},"id":"ae948f51-9848-4e95-ad47-07c0a5ed4abe","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:35:15.998Z","version":"WzYxNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network in by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network in by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.rx.bytes\"},{\"unit\":\"\",\"id\":\"a1742800-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"\",\"id\":\"aa9b72d0-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"positive_only\",\"field\":\"a1742800-48fe-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.pod\",\"language\":\"kuery\"}}}"},"id":"b4426454-e43b-4fc3-bcc4-a277d31c6888","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYxMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network out by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network out by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.tx.bytes\"},{\"unit\":\"\",\"id\":\"17284c20-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"\",\"id\":\"1bbe7610-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"positive_only\",\"field\":\"17284c20-48ff-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.pod\",\"language\":\"kuery\"}}}"},"id":"4606d976-2d24-41fb-bf1d-557b0e6cc9f6","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYxMSwxXQ=="} -{"attributes":{"description":"Overview of Kubernetes cluster metrics","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"80c8564d-6611-4937-8641-377f7a90c240\",\"w\":9,\"x\":0,\"y\":0},\"panelIndex\":\"80c8564d-6611-4937-8641-377f7a90c240\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"5ba4ba5a-e98a-4729-9cbf-318244b46ad1\",\"w\":15,\"x\":9,\"y\":0},\"panelIndex\":\"5ba4ba5a-e98a-4729-9cbf-318244b46ad1\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"2aa6bf34-48cf-41a2-9d28-7dce46945f85\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"2aa6bf34-48cf-41a2-9d28-7dce46945f85\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"8b2b9250-64c3-4e58-b956-ea5d9065a942\",\"w\":8,\"x\":0,\"y\":9},\"panelIndex\":\"8b2b9250-64c3-4e58-b956-ea5d9065a942\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"988b264c-2bb5-4668-977b-c6fe6db705c7\",\"w\":8,\"x\":8,\"y\":9},\"panelIndex\":\"988b264c-2bb5-4668-977b-c6fe6db705c7\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"d690d7b2-9e5f-4b35-bff5-0d833e02e757\",\"w\":8,\"x\":16,\"y\":9},\"panelIndex\":\"d690d7b2-9e5f-4b35-bff5-0d833e02e757\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"5c92a579-d535-4423-84cf-af779084634d\",\"w\":24,\"x\":24,\"y\":9},\"panelIndex\":\"5c92a579-d535-4423-84cf-af779084634d\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"e0fa93dc-1008-4a51-bfd8-be72f06346c2\",\"w\":24,\"x\":0,\"y\":18},\"panelIndex\":\"e0fa93dc-1008-4a51-bfd8-be72f06346c2\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"8160fabe-70d6-414f-8a4d-b5f785e96b0f\",\"w\":24,\"x\":24,\"y\":18},\"panelIndex\":\"8160fabe-70d6-414f-8a4d-b5f785e96b0f\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"448c759d-2fb9-4c51-bcf2-e7792dc7e05b\",\"w\":24,\"x\":0,\"y\":29},\"panelIndex\":\"448c759d-2fb9-4c51-bcf2-e7792dc7e05b\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"9cd02619-6df4-4273-8098-8de6839495af\",\"w\":24,\"x\":24,\"y\":29},\"panelIndex\":\"9cd02619-6df4-4273-8098-8de6839495af\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"4bd4e0ba-49c5-4d4d-8305-07bbe4413451\",\"w\":24,\"x\":0,\"y\":40},\"panelIndex\":\"4bd4e0ba-49c5-4d4d-8305-07bbe4413451\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"d0162880-bc2d-42ea-87b1-f64ec7cdb5cc\",\"w\":24,\"x\":24,\"y\":40},\"panelIndex\":\"d0162880-bc2d-42ea-87b1-f64ec7cdb5cc\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_12\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-30m","timeRestore":true,"timeTo":"now","title":"[Kubernetes] Overview ","version":1},"id":"85ae304f-f545-432a-82d6-eebd6afcdb0c","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"35410fad-e9d9-4df0-b88b-380347b6673c","name":"panel_0","type":"visualization"},{"id":"d9a10a4a-a344-4acf-81c5-f3fbdea773e0","name":"panel_1","type":"visualization"},{"id":"c1403f7e-9ce1-41c6-a571-a5fe09455067","name":"panel_2","type":"visualization"},{"id":"ca4afa09-317d-43e0-8587-bc8023eaccab","name":"panel_3","type":"visualization"},{"id":"45b57c4e-8ac9-4103-bc31-89668017349d","name":"panel_4","type":"visualization"},{"id":"021c0b61-3ac1-46cf-856a-63f4c5764554","name":"panel_5","type":"visualization"},{"id":"300d6e9c-c915-4bb4-98cf-4b5968523ccf","name":"panel_6","type":"visualization"},{"id":"6bf080cf-6b7a-4c13-a30b-f17146c44633","name":"panel_7","type":"visualization"},{"id":"dc7c955e-cfe9-48b4-bfb9-57d7c6a8cb0a","name":"panel_8","type":"visualization"},{"id":"1d928d8c-d17a-4a1a-916a-d899735bd638","name":"panel_9","type":"visualization"},{"id":"ae948f51-9848-4e95-ad47-07c0a5ed4abe","name":"panel_10","type":"visualization"},{"id":"b4426454-e43b-4fc3-bcc4-a277d31c6888","name":"panel_11","type":"visualization"},{"id":"4606d976-2d24-41fb-bf1d-557b0e6cc9f6","name":"panel_12","type":"visualization"}],"type":"dashboard","updated_at":"2023-08-10T17:36:54.857Z","version":"WzYyMCwxXQ=="} -{"exportedCount":14,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json deleted file mode 100644 index 10d21c7335..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json +++ /dev/null @@ -1,1156 +0,0 @@ -[ - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://f163fdbf0d4016e6d6fcbc5549cffebf8ca4c034e281f5aaf49dd6caa2afc867", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0dbbb0c3-3a16-40b2-91b4-5e1a7714293d", - "name": "kube-proxy-8nmp6" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 69905933, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://2c970452b041f7476f00b2e36029837bcaebbc1bb80575769a755b7e4939829e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "d7953b0a-02d8-4941-b66a-41180fcdbc2e", - "name": "aws-node-4nfll" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 69953818, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T08:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T05:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://37d8b94ab34b11832cda800ee724a16cf4740e210b003ae6215f961e599b40ac", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "e2e35438-0e8c-4632-80d3-9b20ac5abad8", - "name": "aws-node-n46pw" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 70092857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://6f345a8bab999eb86c4360be306bdefc785780ec4e29ebc72e84c41b1b5ef6e2", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "28ce8b99-3c7b-44a8-a163-feff47fbf600", - "name": "kube-proxy-wnvrv" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 70146837, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T06:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T11:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T04:09:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:53:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T03:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7d585cda8ad6ec372b49a2cb4d956e992dbc72a37e12b45760d8caa699da88b8", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70384450, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-attacher:v4.0.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-attacher", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://25982c97d991e241cc7647ecea3f58c8e957096e9f389f921d9bc9cc87171006", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70435988, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://342f5713722df91ae371e61942b46267a21d7c8439074976236292f2adc8752f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70443736, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "k8s.gcr.io/metrics-server/metrics-server:v0.6.2", - "memory": { - "request": { - "bytes": 209715200 - } - }, - "name": "metrics-server", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://0c486c46da5d9c45578a381b3ce629f44b7eae3bc96247a591fbee6fc18a3e6f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "621887e4-8c1e-4b61-a34e-56067e61f766", - "name": "metrics-server-679799879f-9vkg2" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "679799879f", - "k8s-app": "metrics-server" - } - }, - "event": { - "duration": 70471081, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T08:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json deleted file mode 100644 index f5f1a02d5d..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json +++ /dev/null @@ -1,1120 +0,0 @@ -[ - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-accountingservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "accountingservice", - "id": "containerd://44278f999d015af7ab0f0a65394dec0f78a8b12b58d3d7712b02d99212460473", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-accountingservice-59668979bc-xprrw" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69908658, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-emailservice", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 104857600 - } - }, - "name": "emailservice", - "id": "containerd://8389347773f5b54e54c505f79e7b4ebb82ab01b10e5404b1af483f54db2e5682", - "status": { - "phase": "running", - "ready": true, - "restarts": 129 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-emailservice-7654879b-rd6nn" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69912518, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "usage": { - "bytes": 20971520 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-recommendationservice", - "memory": { - "usage": { - "bytes": 524288000 - }, - "request": { - "bytes": 524288000 - }, - "limit": { - "bytes": 524288000 - } - }, - "name": "recommendationservice", - "id": "containerd://c233d6baed9ffcd7cc3b2228f83d5d9cbfa61dca94cf728e5b955957e72d5bce", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-recommendationservice-748d97d5b7-lf2xr" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69983602, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "usage": { - "bytes": 131072000 - }, - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - }, - "usage": { - "bytes": 128801888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-quoteservice", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 41943040 - } - }, - "name": "quoteservice", - "id": "containerd://d1ea28ba00206c8361686429fd0810f265872f324a2e8ada12cc0df87dc12901", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-quoteservice-9467f9c67-x5c5m" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70030857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-loadgenerator", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "loadgenerator", - "id": "containerd://16655ff17d25d160d96515765a5a89bf31cabcf1bc6807046510f6ad044e8548", - "status": { - "phase": "running", - "ready": true, - "restarts": 18 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-loadgenerator-7b96dddb88-jnkc6" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70073822, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "usage": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-productcatalogservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "productcatalogservice", - "id": "containerd://123b9452ee5ba869fd4c68a7c38e692333f8755903da2891006ceffe07ce664c", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-productcatalogservice-7f8666fc8-kbp44" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70202138, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T19:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "usage": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-paymentservice", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "paymentservice", - "id": "containerd://a7c006d4b2a28f7b225f0520efb1798296c93f602d9e213a5d80ef4d30529382", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-paymentservice-7dcd5bcbb5-9vbbt" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70257222, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-21T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-frauddetectionservice", - "memory": { - "request": { - "bytes": 209715200 - }, - "usage": { - "bytes": 209715200 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "frauddetectionservice", - "id": "containerd://33c247d008adca74bb71fd12191e503a9564ffc2a0825ae7dc00e3cfd7ca6d3f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-frauddetectionservice-f6dbdfd8c-t4kcm" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70300352, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:22:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "usage": { - "bytes": 41943040 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json deleted file mode 100644 index 84ea683271..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json +++ /dev/null @@ -1,562 +0,0 @@ -[ - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44305569, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-checkoutservice" - } - }, - "event": { - "duration": 44318865, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "metrics-server" - } - }, - "event": { - "duration": 44321565, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "logstash", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "logstash-deployment" - } - }, - "event": { - "duration": 44366876, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "ebs-csi-controller" - } - }, - "event": { - "duration": 44369244, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-loadgenerator" - } - }, - "event": { - "duration": 44371283, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "aws-load-balancer-controller" - } - }, - "event": { - "duration": 44391882, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-emailservice" - } - }, - "event": { - "duration": 44395238, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-accountingservice" - } - }, - "event": { - "duration": 44397268, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-ffspostgres" - } - }, - "event": { - "duration": 44417515, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "langchain" - } - }, - "event": { - "duration": 44419548, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44421849, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-featureflagservice" - } - }, - "event": { - "duration": 44443165, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger" - } - }, - "event": { - "duration": 44445153, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "coredns" - } - }, - "event": { - "duration": 44446989, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-redis" - } - }, - "event": { - "duration": 44470444, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "data-prepper" - } - }, - "event": { - "duration": 44472410, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-frontend" - } - }, - "event": { - "duration": 44474346, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-cartservice" - } - }, - "event": { - "duration": 44493728, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-currencyservice" - } - }, - "event": { - "duration": 44495707, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json deleted file mode 100644 index 12f5a80d90..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json +++ /dev/null @@ -1,2002 +0,0 @@ -[ - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32121077, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32130296, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32285801, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39578002, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39596213, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39604819, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34395346, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34403890, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34408303, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37378781, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37395055, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37399957, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41680053, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41697038, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41701949, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38799399, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38805143, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38807723, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41176924, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41185746, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample.json deleted file mode 100644 index 973150e14f..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample.json +++ /dev/null @@ -1,4835 +0,0 @@ -[ - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32121077, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32130296, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32285801, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39578002, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39596213, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39604819, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34395346, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34403890, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34408303, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37378781, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37395055, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37399957, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41680053, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41697038, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41701949, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38799399, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38805143, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38807723, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41176924, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41185746, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44305569, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-checkoutservice" - } - }, - "event": { - "duration": 44318865, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "metrics-server" - } - }, - "event": { - "duration": 44321565, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "logstash", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "logstash-deployment" - } - }, - "event": { - "duration": 44366876, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "ebs-csi-controller" - } - }, - "event": { - "duration": 44369244, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-loadgenerator" - } - }, - "event": { - "duration": 44371283, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "aws-load-balancer-controller" - } - }, - "event": { - "duration": 44391882, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-emailservice" - } - }, - "event": { - "duration": 44395238, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-accountingservice" - } - }, - "event": { - "duration": 44397268, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-ffspostgres" - } - }, - "event": { - "duration": 44417515, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "langchain" - } - }, - "event": { - "duration": 44419548, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44421849, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-featureflagservice" - } - }, - "event": { - "duration": 44443165, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger" - } - }, - "event": { - "duration": 44445153, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "coredns" - } - }, - "event": { - "duration": 44446989, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-redis" - } - }, - "event": { - "duration": 44470444, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "data-prepper" - } - }, - "event": { - "duration": 44472410, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-frontend" - } - }, - "event": { - "duration": 44474346, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-cartservice" - } - }, - "event": { - "duration": 44493728, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-currencyservice" - } - }, - "event": { - "duration": 44495707, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-accountingservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "accountingservice", - "id": "containerd://44278f999d015af7ab0f0a65394dec0f78a8b12b58d3d7712b02d99212460473", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-accountingservice-59668979bc-xprrw" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69908658, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-emailservice", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 104857600 - } - }, - "name": "emailservice", - "id": "containerd://8389347773f5b54e54c505f79e7b4ebb82ab01b10e5404b1af483f54db2e5682", - "status": { - "phase": "running", - "ready": true, - "restarts": 129 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-emailservice-7654879b-rd6nn" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69912518, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "usage": { - "bytes": 20971520 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-recommendationservice", - "memory": { - "usage": { - "bytes": 524288000 - }, - "request": { - "bytes": 524288000 - }, - "limit": { - "bytes": 524288000 - } - }, - "name": "recommendationservice", - "id": "containerd://c233d6baed9ffcd7cc3b2228f83d5d9cbfa61dca94cf728e5b955957e72d5bce", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-recommendationservice-748d97d5b7-lf2xr" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69983602, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "usage": { - "bytes": 131072000 - }, - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - }, - "usage": { - "bytes": 128801888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-quoteservice", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 41943040 - } - }, - "name": "quoteservice", - "id": "containerd://d1ea28ba00206c8361686429fd0810f265872f324a2e8ada12cc0df87dc12901", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-quoteservice-9467f9c67-x5c5m" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70030857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-loadgenerator", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "loadgenerator", - "id": "containerd://16655ff17d25d160d96515765a5a89bf31cabcf1bc6807046510f6ad044e8548", - "status": { - "phase": "running", - "ready": true, - "restarts": 18 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-loadgenerator-7b96dddb88-jnkc6" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70073822, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "usage": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-productcatalogservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "productcatalogservice", - "id": "containerd://123b9452ee5ba869fd4c68a7c38e692333f8755903da2891006ceffe07ce664c", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-productcatalogservice-7f8666fc8-kbp44" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70202138, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T19:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "usage": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-paymentservice", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "paymentservice", - "id": "containerd://a7c006d4b2a28f7b225f0520efb1798296c93f602d9e213a5d80ef4d30529382", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-paymentservice-7dcd5bcbb5-9vbbt" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70257222, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-21T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-frauddetectionservice", - "memory": { - "request": { - "bytes": 209715200 - }, - "usage": { - "bytes": 209715200 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "frauddetectionservice", - "id": "containerd://33c247d008adca74bb71fd12191e503a9564ffc2a0825ae7dc00e3cfd7ca6d3f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-frauddetectionservice-f6dbdfd8c-t4kcm" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70300352, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:22:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "usage": { - "bytes": 41943040 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://f163fdbf0d4016e6d6fcbc5549cffebf8ca4c034e281f5aaf49dd6caa2afc867", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0dbbb0c3-3a16-40b2-91b4-5e1a7714293d", - "name": "kube-proxy-8nmp6" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 69905933, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://2c970452b041f7476f00b2e36029837bcaebbc1bb80575769a755b7e4939829e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "d7953b0a-02d8-4941-b66a-41180fcdbc2e", - "name": "aws-node-4nfll" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 69953818, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T08:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T05:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://37d8b94ab34b11832cda800ee724a16cf4740e210b003ae6215f961e599b40ac", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "e2e35438-0e8c-4632-80d3-9b20ac5abad8", - "name": "aws-node-n46pw" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 70092857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://6f345a8bab999eb86c4360be306bdefc785780ec4e29ebc72e84c41b1b5ef6e2", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "28ce8b99-3c7b-44a8-a163-feff47fbf600", - "name": "kube-proxy-wnvrv" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 70146837, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T06:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T11:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T04:09:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:53:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T03:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7d585cda8ad6ec372b49a2cb4d956e992dbc72a37e12b45760d8caa699da88b8", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70384450, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-attacher:v4.0.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-attacher", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://25982c97d991e241cc7647ecea3f58c8e957096e9f389f921d9bc9cc87171006", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70435988, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://342f5713722df91ae371e61942b46267a21d7c8439074976236292f2adc8752f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70443736, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "k8s.gcr.io/metrics-server/metrics-server:v0.6.2", - "memory": { - "request": { - "bytes": 209715200 - } - }, - "name": "metrics-server", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://0c486c46da5d9c45578a381b3ce629f44b7eae3bc96247a591fbee6fc18a3e6f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "621887e4-8c1e-4b61-a34e-56067e61f766", - "name": "metrics-server-679799879f-9vkg2" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "679799879f", - "k8s-app": "metrics-server" - } - }, - "event": { - "duration": 70471081, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T08:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] - diff --git a/server/adaptors/integrations/__data__/repository/k8s/info/README.md b/server/adaptors/integrations/__data__/repository/k8s/info/README.md deleted file mode 100644 index 94e9aaaae6..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/info/README.md +++ /dev/null @@ -1,90 +0,0 @@ -# Kubernetes Integration - -## What is Kubernetes? - -Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications. It provides a robust and scalable infrastructure for running applications in a cloud-native environment. - -See additional details [here](https://kubernetes.io/). - -## What is Kubernetes Integration? - -An integration is a collection of pre-configured assets that are bundled together to streamline monitoring and analysis. - -Kubernetes integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - - - -With the Kubernetes integration, you can gain valuable insights into the health and performance of your containerized applications. The pre-configured dashboards and visualizations help you monitor key metrics, track resource utilization, and identify potential issues within your Kubernetes clusters. This integration empowers you to efficiently manage your containerized workloads, scale applications as needed, and ensure the reliability and availability of your Kubernetes environment. - -### Collecting K8s - -The next OpenTelemetry [page](https://opentelemetry.io/docs/kubernetes/collector/components/) describes the K8s attributes and other components - -#### Kubernetes Attributes Processor - -The Kubernetes Attributes Processor automatically discovers Kubernetes pods, extracts their metadata, and adds the extracted metadata to spans, metrics, and logs as resource attributes. - -The following attributes are added by default: - -**Cluster** - -- `k8s.cluster.name` -- `k8s.cluster.uid` - -**Namespace** - -- `k8s.namespace.name` - -**Pod** - -- `k8s.pod.name` -- `k8s.pod.uid` -- `k8s.pod.start_time` -- `k8s.deployment.name` - -**Node** - -- `k8s.node.name` -- `k8s.node.uid` - -**Container** - -- `k8s.container.name` -- `k8s.container.restart_count` - -**ReplicaSet** - -- `k8s.replicaset.name` -- `k8s.replicaset.uid` - -**Deployment** - -- `k8s.deployment.name` -- `k8s.deployment.uid` - -**StatefulSet** - -- `k8s.statefulset.name` -- `k8s.statefulset.uid` - -**DaemonSet** - -- `k8s.daemon.name` -- `k8s.daemon.uid` - -**DaemonSet** - -- `k8s.job.name` -- `k8s.job.uid` - -> All these fields are represented in the k8s-1.0.0.mapping schema and are aliased with the existing ECS based fields - -### Important Components for Kubernetes - -- [Kubeletstats Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubeletstats-receiver): pulls pod metrics from the API server on a kubelet. -- [Filelog Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#filelog-receiver): collects Kubernetes logs and application logs written to stdout/stderr. -- [Kubernetes Cluster Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubernetes-cluster-receiver): collects cluster-level metrics and entity events. -- [Kubernetes Objects Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubernetes-objects-receiver): collects objects, such as events, from the Kubernetes API server. -- [Host Metrics Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#host-metrics-receiver): scrapes host metrics from Kubernetes nodes. diff --git a/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md b/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md deleted file mode 100644 index 198e8a9558..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md +++ /dev/null @@ -1,42 +0,0 @@ -# Setting Fluent Bit Ingestion Deployment in Kubernetes - -Fluent Bit is an open-source and multi-platform Log Processor and Forwarder. It allows you to unify the data collection and logging of your system. This particular YAML configuration deploys Fluent Bit in a Kubernetes cluster for monitoring purposes. - -## Components - -The YAML consists of four primary components: - -**ClusterRole:** For defining permissions. -**ClusterRoleBinding:** To bind the permissions to a specific service account. -**ConfigMap:** To store the configuration details for Fluent Bit. -**DaemonSet:** For deploying Fluent Bit on all nodes in the cluster. - -1. **ClusterRole** - This part of the YAML file defines a ClusterRole named fluent-bit-read. It sets the permissions for accessing various resources in the cluster: -2. **ClusterRoleBinding** - This binds the above ClusterRole to a ServiceAccount named fluent-bit in the logging namespace. It ensures the permissions defined in the ClusterRole are applied to this service account. -3. **ConfigMap** - The fluent-bit-config ConfigMap stores the Fluent Bit configuration, including service, input, filter, output, and parser details. Configuration related to different aspects of log collection and forwarding is included in this section. -4. **DaemonSet** - Fluent Bit is deployed as a DaemonSet, which means a Fluent Bit container will run on every node in the cluster. This ensures that logs from all nodes are collected and processed. - -This Fluent Bit deployment in Kubernetes is instrumental in gathering, processing, and forwarding logs from different parts of the cluster. -It can be integrated with various log analytics tools and used for monitoring the behavior of the cluster, facilitating prompt insights and responses to system events. Make sure to tailor the configuration to match your specific requirements and infrastructure. - -### References - -- [K8s Filter Plugin](https://docs.fluentbit.io/manual/pipeline/filters/kubernetes) - -**Kubernetes filter performs the following operations:** - -Analyzes the data and extracts the metadata such as `Pod name`, `namespace`, `container name`, and `container ID` . -Queries Kubernetes API server to get extra metadata for the given Pod including the `Pod ID`, `labels`, `annotations`. - -This metadata is then appended to each record (log message). -This data is cached locally in memory and is appended to each log record. - -The following parameters represent a minimum configuration for this filter used in the ConfigMap above: - -- `Name` — the name of the filter plugin. -- `Kube_URL` — API Server end-point. E.g https://kubernetes.default.svc.cluster.local/ -- `Match` — a tag to match filtering against. diff --git a/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml b/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml deleted file mode 100644 index 687cf6da9e..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml +++ /dev/null @@ -1,174 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: fluent-bit-read -rules: -- apiGroups: [""] - resources: - - namespaces - - pods - - pods/logs - - nodes - - nodes/proxy - verbs: ["get", "list", "watch"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: fluent-bit-read -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: fluent-bit-read -subjects: -- kind: ServiceAccount - name: fluent-bit - namespace: logging ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: fluent-bit-config - namespace: logging - labels: - k8s-app: fluent-bit -data: - # Configuration files: server, input, filters and output - # ====================================================== - fluent-bit.conf: | - [SERVICE] - Flush 5 - Log_Level info - Daemon off - Parsers_File parsers.conf - HTTP_Server On - HTTP_Listen 0.0.0.0 - HTTP_Port 2020 - storage.path /var/log/flb-storage/ - storage.sync normal - storage.checksum off - storage.backlog.mem_limit 100M - - @INCLUDE input-kubernetes.conf - @INCLUDE filter-kubernetes.conf - @INCLUDE output-opensearch.conf - - input-kubernetes.conf: | - [INPUT] - Name tail - Tag kube.* - Path /var/log/containers/*.log - Exclude_Path /var/log/containers/*_fluent-bit-*.log,/var/log/containers/*_kube-system_*.log - Parser docker - DB /var/log/flb_kube.db - Mem_Buf_Limit 100MB - Skip_Long_Lines On - Refresh_Interval 10 - - filter-kubernetes.conf: | - [FILTER] - Name kubernetes - Match kube.* - Kube_URL https://kubernetes.default.svc:443 - Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token - Kube_Tag_Prefix kube.var.log.containers. - Merge_Log On - Merge_Log_Key log_processed - K8S-Logging.Parser On - K8S-Logging.Exclude Off - - output-opensearch.conf: | - [OUTPUT] - Name opensearch - Match * - Host { endpoint } - Port 443 - TLS On - Replace_Dots On - AWS_Auth On - AWS_Region { region } - Retry_Limit 6 - Logstash_Format On - Logstash_Prefix fluent-bit - Logstash_DateFormat %U.%Y - - parsers.conf: | - [PARSER] - Name json - Format json - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z - - [PARSER] - Name docker - Format json - Time_Key time - Time_Format %Y-%m-%dT%H:%M:%S.%L - Time_Keep On - # Command | Decoder | Field | Optional Action - # =============|==================|================= - Decode_Field_As escaped log try_next - Decode_Field_As json log - - [PARSER] - # http://rubular.com/r/tjUt3Awgg4 - Name cri - Format regex - Regex ^(?[^ ]+) (?stdout|stderr) (?[^ ]*) (?.*)$ - Time_Key time - Time_Format %Y-%m-%dT%H:%M:%S.%L%z - - --- -apiVersion: apps/v1 -kind: DaemonSet -metadata: - name: fluent-bit - namespace: logging - labels: - k8s-app: fluent-bit-logging - version: v1 - kubernetes.io/cluster-service: "true" - -spec: - selector: - matchLabels: - k8s-app: fluent-bit-logging - template: - metadata: - labels: - k8s-app: fluent-bit-logging - version: v1 - kubernetes.io/cluster-service: "true" - annotations: - prometheus.io/scrape: "true" - prometheus.io/port: "2020" - prometheus.io/path: /api/v1/metrics/prometheus - spec: - containers: - - name: fluent-bit - image: amazon/aws-for-fluent-bit:latest - imagePullPolicy: Always - ports: - - containerPort: 2020 - volumeMounts: - - name: varlog - mountPath: /var/log - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: fluent-bit-config - mountPath: /fluent-bit/etc/ - terminationGracePeriodSeconds: 10 - volumes: - - name: varlog - hostPath: - path: /var/log - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: fluent-bit-config - configMap: - name: fluent-bit-config - serviceAccountName: fluent-bit diff --git a/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json b/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json deleted file mode 100644 index d359ffe8ee..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "k8s", - "version": "1.0.0", - "displayName": "Kubernetes Dashboard", - "description": "Kubernetes web logs collector", - "license": "Apache-2.0", - "type": "logs-k8s", - "labels": ["Observability", "Logs", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/k8s/info", - "statics": { - "logo": { - "annotation": "Kubernetes Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "Kubernetes Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "k8s", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "container", - "version": "1.0.0" - }, - { - "name": "logs-k8s", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "k8s", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json deleted file mode 100644 index e8fd9ec763..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json +++ /dev/null @@ -1,68 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "container", - "labels": ["container"] - }, - "properties": { - "container": { - "properties": { - "image": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - }, - "tag": { - "type": "keyword" - }, - "hash": { - "type": "keyword" - } - } - }, - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "labels": { - "type": "keyword" - }, - "runtime": { - "type": "keyword" - }, - "memory.usage": { - "type": "float" - }, - "network": { - "type": "object", - "properties": { - "ingress.bytes": { - "type": "long" - }, - "egress.bytes": { - "type": "long" - } - } - }, - "cpu.usage": { - "type": "float" - }, - "disk.read.bytes": { - "type": "long" - }, - "disk.write.bytes": { - "type": "long" - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json deleted file mode 100644 index 7d88aab2f2..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json +++ /dev/null @@ -1,2286 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "k8s", - "labels": ["k8s"] - }, - "properties": { - "kubernetes": { - "type": "object", - "properties": { - "annotations": { - "type": "object" - }, - "apiserver": { - "properties": { - "request": { - "properties": { - "client": { - "type": "keyword", - "ignore_above": 256 - }, - "count": { - "type": "long" - }, - "latency": { - "properties": { - "bucket": { - "properties": { - "*": { - "type": "object" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - }, - "resource": { - "type": "keyword", - "ignore_above": 256 - }, - "scope": { - "type": "keyword", - "ignore_above": 256 - }, - "subresource": { - "type": "keyword", - "ignore_above": 256 - }, - "verb": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "container": { - "properties": { - "cpu": { - "properties": { - "limit": { - "properties": { - "cores": { - "type": "float" - }, - "nanocores": { - "type": "long" - } - } - }, - "request": { - "properties": { - "cores": { - "type": "float" - }, - "nanocores": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "nanocores": { - "type": "long" - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - } - } - }, - "id": { - "type": "keyword", - "ignore_above": 256 - }, - "image": { - "type": "keyword", - "ignore_above": 256 - }, - "logs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "limit": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "request": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "rootfs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "phase": { - "type": "keyword", - "ignore_above": 256 - }, - "ready": { - "type": "boolean" - }, - "reason": { - "type": "keyword", - "ignore_above": 256 - }, - "restarts": { - "type": "long" - } - } - } - } - }, - "controllermanager": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "leader": { - "properties": { - "is_master": { - "type": "boolean" - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "node": { - "properties": { - "collector": { - "properties": { - "count": { - "type": "long" - }, - "eviction": { - "properties": { - "count": { - "type": "long" - } - } - }, - "health": { - "properties": { - "pct": { - "type": "long" - } - } - }, - "unhealthy": { - "properties": { - "count": { - "type": "long" - } - } - } - } - } - } - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "workqueue": { - "properties": { - "adds": { - "properties": { - "count": { - "type": "long" - } - } - }, - "depth": { - "properties": { - "count": { - "type": "long" - } - } - }, - "longestrunning": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "retries": { - "properties": { - "count": { - "type": "long" - } - } - }, - "unfinished": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "zone": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "deployment": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "paused": { - "type": "boolean" - }, - "replicas": { - "properties": { - "available": { - "type": "long" - }, - "desired": { - "type": "long" - }, - "unavailable": { - "type": "long" - }, - "updated": { - "type": "long" - } - } - } - } - }, - "event": { - "properties": { - "count": { - "type": "long" - }, - "involved_object": { - "properties": { - "api_version": { - "type": "keyword", - "ignore_above": 256 - }, - "kind": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "resource_version": { - "type": "keyword", - "ignore_above": 256 - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "message": { - "type": "keyword", - "ignore_above": 256, - "copy_to": ["message"] - }, - "metadata": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "namespace": { - "type": "keyword", - "ignore_above": 256 - }, - "resource_version": { - "type": "keyword", - "ignore_above": 256 - }, - "self_link": { - "type": "keyword", - "ignore_above": 256 - }, - "timestamp": { - "properties": { - "created": { - "type": "date" - } - } - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "reason": { - "type": "keyword", - "ignore_above": 256 - }, - "timestamp": { - "properties": { - "first_occurrence": { - "type": "date" - }, - "last_occurrence": { - "type": "date" - } - } - }, - "type": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "labels": { - "properties": { - "app": { - "properties": { - "kubernetes": { - "properties": { - "io/component": { - "type": "keyword", - "ignore_above": 256 - }, - "io/instance": { - "type": "keyword", - "ignore_above": 256 - }, - "io/managed-by": { - "type": "keyword", - "ignore_above": 256 - }, - "io/name": { - "type": "keyword", - "ignore_above": 256 - }, - "io/version": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "value": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "controller-revision-hash": { - "type": "keyword", - "ignore_above": 256 - }, - "eks": { - "properties": { - "amazonaws": { - "properties": { - "com/component": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "helm": { - "properties": { - "sh/chart": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "io": { - "properties": { - "kompose": { - "properties": { - "service": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "k8s-app": { - "type": "keyword", - "ignore_above": 256 - }, - "pod-template-generation": { - "type": "keyword", - "ignore_above": 256 - }, - "pod-template-hash": { - "type": "keyword", - "ignore_above": 256 - }, - "statefulset": { - "properties": { - "kubernetes": { - "properties": { - "io/pod-name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "namespace": { - "type": "keyword", - "ignore_above": 256 - }, - "node": { - "properties": { - "_module": { - "properties": { - "labels": { - "properties": { - "beta": { - "properties": { - "kubernetes": { - "properties": { - "io/arch": { - "type": "keyword", - "ignore_above": 256 - }, - "io/instance-type": { - "type": "keyword", - "ignore_above": 256 - }, - "io/os": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "eks": { - "properties": { - "amazonaws": { - "properties": { - "com/capacityType": { - "type": "keyword", - "ignore_above": 256 - }, - "com/nodegroup": { - "type": "keyword", - "ignore_above": 256 - }, - "com/nodegroup-image": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "failure-domain": { - "properties": { - "beta": { - "properties": { - "kubernetes": { - "properties": { - "io/region": { - "type": "keyword", - "ignore_above": 256 - }, - "io/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "k8s": { - "properties": { - "io/cloud-provider-aws": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "kubernetes": { - "properties": { - "io/arch": { - "type": "keyword", - "ignore_above": 256 - }, - "io/hostname": { - "type": "keyword", - "ignore_above": 256 - }, - "io/os": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "node": { - "properties": { - "kubernetes": { - "properties": { - "io/instance-type": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "topology": { - "properties": { - "ebs": { - "properties": { - "csi": { - "properties": { - "aws": { - "properties": { - "com/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "kubernetes": { - "properties": { - "io/region": { - "type": "keyword", - "ignore_above": 256 - }, - "io/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - }, - "cpu": { - "properties": { - "allocatable": { - "properties": { - "cores": { - "type": "float" - } - } - }, - "capacity": { - "properties": { - "cores": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "nanocores": { - "type": "long" - } - } - } - } - }, - "fs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "allocatable": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "network": { - "properties": { - "rx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - }, - "tx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - } - } - }, - "pod": { - "properties": { - "allocatable": { - "properties": { - "total": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "total": { - "type": "long" - } - } - } - } - }, - "runtime": { - "properties": { - "imagefs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "ready": { - "type": "keyword", - "ignore_above": 256 - }, - "unschedulable": { - "type": "boolean" - } - } - } - } - }, - "pod": { - "properties": { - "cpu": { - "properties": { - "usage": { - "properties": { - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "nanocores": { - "type": "long" - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - } - } - }, - "host_ip": { - "type": "ip" - }, - "ip": { - "type": "ip" - }, - "memory": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "major_page_faults": { - "type": "long" - }, - "page_faults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - }, - "working_set": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "network": { - "properties": { - "rx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - }, - "tx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "phase": { - "type": "keyword", - "ignore_above": 256 - }, - "ready": { - "type": "keyword", - "ignore_above": 256 - }, - "scheduled": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "proxy": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "sync": { - "properties": { - "networkprogramming": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "0": { - "type": "long" - }, - "250000": { - "type": "long" - }, - "500000": { - "type": "long" - }, - "1000000": { - "type": "long" - }, - "2000000": { - "type": "long" - }, - "3000000": { - "type": "long" - }, - "4000000": { - "type": "long" - }, - "5000000": { - "type": "long" - }, - "6000000": { - "type": "long" - }, - "7000000": { - "type": "long" - }, - "8000000": { - "type": "long" - }, - "9000000": { - "type": "long" - }, - "10000000": { - "type": "long" - }, - "11000000": { - "type": "long" - }, - "12000000": { - "type": "long" - }, - "13000000": { - "type": "long" - }, - "14000000": { - "type": "long" - }, - "15000000": { - "type": "long" - }, - "16000000": { - "type": "long" - }, - "17000000": { - "type": "long" - }, - "18000000": { - "type": "long" - }, - "19000000": { - "type": "long" - }, - "20000000": { - "type": "long" - }, - "21000000": { - "type": "long" - }, - "22000000": { - "type": "long" - }, - "23000000": { - "type": "long" - }, - "24000000": { - "type": "long" - }, - "25000000": { - "type": "long" - }, - "26000000": { - "type": "long" - }, - "27000000": { - "type": "long" - }, - "28000000": { - "type": "long" - }, - "29000000": { - "type": "long" - }, - "30000000": { - "type": "long" - }, - "31000000": { - "type": "long" - }, - "32000000": { - "type": "long" - }, - "33000000": { - "type": "long" - }, - "34000000": { - "type": "long" - }, - "35000000": { - "type": "long" - }, - "36000000": { - "type": "long" - }, - "37000000": { - "type": "long" - }, - "38000000": { - "type": "long" - }, - "39000000": { - "type": "long" - }, - "40000000": { - "type": "long" - }, - "41000000": { - "type": "long" - }, - "42000000": { - "type": "long" - }, - "43000000": { - "type": "long" - }, - "44000000": { - "type": "long" - }, - "45000000": { - "type": "long" - }, - "46000000": { - "type": "long" - }, - "47000000": { - "type": "long" - }, - "48000000": { - "type": "long" - }, - "49000000": { - "type": "long" - }, - "50000000": { - "type": "long" - }, - "51000000": { - "type": "long" - }, - "52000000": { - "type": "long" - }, - "53000000": { - "type": "long" - }, - "54000000": { - "type": "long" - }, - "55000000": { - "type": "long" - }, - "56000000": { - "type": "long" - }, - "57000000": { - "type": "long" - }, - "58000000": { - "type": "long" - }, - "59000000": { - "type": "long" - }, - "60000000": { - "type": "long" - }, - "65000000": { - "type": "long" - }, - "70000000": { - "type": "long" - }, - "75000000": { - "type": "long" - }, - "80000000": { - "type": "long" - }, - "85000000": { - "type": "long" - }, - "90000000": { - "type": "long" - }, - "95000000": { - "type": "long" - }, - "100000000": { - "type": "long" - }, - "105000000": { - "type": "long" - }, - "110000000": { - "type": "long" - }, - "115000000": { - "type": "long" - }, - "120000000": { - "type": "long" - }, - "150000000": { - "type": "long" - }, - "180000000": { - "type": "long" - }, - "210000000": { - "type": "long" - }, - "240000000": { - "type": "long" - }, - "270000000": { - "type": "long" - }, - "300000000": { - "type": "long" - }, - "*": { - "type": "object" - }, - "+Inf": { - "type": "long" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "rules": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "1000": { - "type": "long" - }, - "2000": { - "type": "long" - }, - "4000": { - "type": "long" - }, - "8000": { - "type": "long" - }, - "16000": { - "type": "long" - }, - "32000": { - "type": "long" - }, - "64000": { - "type": "long" - }, - "128000": { - "type": "long" - }, - "256000": { - "type": "long" - }, - "512000": { - "type": "long" - }, - "1024000": { - "type": "long" - }, - "2048000": { - "type": "long" - }, - "4096000": { - "type": "long" - }, - "8192000": { - "type": "long" - }, - "16384000": { - "type": "long" - }, - "*": { - "type": "object" - }, - "+Inf": { - "type": "long" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - } - } - }, - "replicaset": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "replicas": { - "properties": { - "available": { - "type": "long" - }, - "desired": { - "type": "long" - }, - "labeled": { - "type": "long" - }, - "observed": { - "type": "long" - }, - "ready": { - "type": "long" - } - } - } - } - }, - "scheduler": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "leader": { - "properties": { - "is_master": { - "type": "boolean" - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "operation": { - "type": "keyword", - "ignore_above": 256 - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "result": { - "type": "keyword", - "ignore_above": 256 - }, - "scheduling": { - "properties": { - "duration": { - "properties": { - "seconds": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "e2e": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "*": { - "type": "object" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "pod": { - "properties": { - "attempts": { - "properties": { - "count": { - "type": "long" - } - } - }, - "preemption": { - "properties": { - "victims": { - "properties": { - "count": { - "type": "long" - } - } - } - } - } - } - } - } - } - } - }, - "statefulset": { - "properties": { - "created": { - "type": "long" - }, - "generation": { - "properties": { - "desired": { - "type": "long" - }, - "observed": { - "type": "long" - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "replicas": { - "properties": { - "desired": { - "type": "long" - }, - "observed": { - "type": "long" - } - } - } - } - }, - "system": { - "properties": { - "container": { - "type": "keyword", - "ignore_above": 256 - }, - "cpu": { - "properties": { - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "nanocores": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - } - } - }, - "volume": { - "properties": { - "fs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "k8s": { - "properties": { - "namespace": { - "properties": { - "name": { - "type": "alias", - "path": "kubernetes.namespace" - } - } - }, - "cluster": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "node": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.node.name" - } - } - }, - "pod": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.pod.name" - } - } - }, - "container": { - "properties": { - "restart_count": { - "type": "long" - }, - "name": { - "type": "alias", - "path": "kubernetes.container.name" - } - } - }, - "replicaset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.replicaset.name" - } - } - }, - "deployment": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.deployment.name" - } - } - }, - "statefulset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.statefulset.name" - } - } - }, - "daemonset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "job": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json deleted file mode 100644 index 6be0d25228..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json +++ /dev/null @@ -1,245 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-k8s-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-k8s": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "duration": { - "type": "long" - }, - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["k8s", "container", "cloud"], - "version": 1, - "_meta": { - "description": "Simple Schema For Observability", - "catalog": "observability", - "type": "logs", - "labels": ["log", "k8s", "cloud", "container"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png b/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png deleted file mode 100644 index 07995f7eae..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/k8s/static/logo.png b/server/adaptors/integrations/__data__/repository/k8s/static/logo.png deleted file mode 100644 index 4c6716706d..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/k8s/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json deleted file mode 100644 index 5fec510cb8..0000000000 --- a/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/create_mv-1.0.0.sql b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_mv-1.0.0.sql similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/create_mv-1.0.0.sql rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_mv-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/create_table-1.0.0.sql b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_table-1.0.0.sql similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/create_table-1.0.0.sql rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_table-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/nginx-1.0.0.ndjson b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/nginx-1.0.0.ndjson similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/nginx-1.0.0.ndjson rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/nginx-1.0.0.ndjson diff --git a/server/adaptors/integrations/__data__/repository/nginx/data/sample.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/data/sample.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/data/sample.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/data/sample.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/info/README.md b/server/adaptors/integrations/__test__/__data__/repository/nginx/info/README.md similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/info/README.md rename to server/adaptors/integrations/__test__/__data__/repository/nginx/info/README.md diff --git a/server/adaptors/integrations/__data__/repository/nginx/nginx-1.0.0.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/nginx-1.0.0.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/nginx-1.0.0.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/nginx-1.0.0.json diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/apache/schemas/communication-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/http-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/apache/schemas/http-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/http-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/dashboard1.png b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard1.png similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/dashboard1.png rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard1.png diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/dashboard2.png b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard2.png similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/dashboard2.png rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard2.png diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/logo.svg b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/logo.svg similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/logo.svg rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/logo.svg diff --git a/server/adaptors/integrations/__test__/json_repository.test.ts b/server/adaptors/integrations/__test__/json_repository.test.ts index 0e777b3eca..1d3296f56f 100644 --- a/server/adaptors/integrations/__test__/json_repository.test.ts +++ b/server/adaptors/integrations/__test__/json_repository.test.ts @@ -15,7 +15,7 @@ import { JsonCatalogDataAdaptor } from '../repository/json_data_adaptor'; import { deepCheck, foldResults } from '../repository/utils'; const fetchSerializedIntegrations = async (): Promise> => { - const directory = path.join(__dirname, '../__data__/repository'); + const directory = path.join(__dirname, '../__test__/__data__/repository'); const folders = await fs.readdir(directory); const readers = await Promise.all( folders.map(async (folder) => { @@ -42,10 +42,9 @@ describe('The Local Serialized Catalog', () => { it('Should pass deep validation for all serialized integrations', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); for (const integ of await repository.getIntegrationList()) { const validationResult = await deepCheck(integ); @@ -55,10 +54,9 @@ describe('The Local Serialized Catalog', () => { it('Should correctly retrieve a logo', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); const integration = (await repository.getIntegration('nginx')) as IntegrationReader; const logoStatic = await integration.getStatic('logo.svg'); @@ -68,10 +66,9 @@ describe('The Local Serialized Catalog', () => { it('Should correctly retrieve a gallery image', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); const integration = (await repository.getIntegration('nginx')) as IntegrationReader; const logoStatic = await integration.getStatic('dashboard1.png'); diff --git a/server/adaptors/integrations/__test__/local_fs_repository.test.ts b/server/adaptors/integrations/__test__/local_fs_repository.test.ts index dcacf02bbb..be0afeb16e 100644 --- a/server/adaptors/integrations/__test__/local_fs_repository.test.ts +++ b/server/adaptors/integrations/__test__/local_fs_repository.test.ts @@ -12,10 +12,15 @@ import { IntegrationReader } from '../repository/integration_reader'; import path from 'path'; import * as fs from 'fs/promises'; import { deepCheck } from '../repository/utils'; +import { FileSystemDataAdaptor } from '../repository/fs_data_adaptor'; + +const repository: TemplateManager = new TemplateManager([ + new FileSystemDataAdaptor(path.join(__dirname, './__data__/repository')), +]); describe('The local repository', () => { it('Should only contain valid integration directories or files.', async () => { - const directory = path.join(__dirname, '../__data__/repository'); + const directory = path.join(__dirname, './__data__/repository'); const folders = await fs.readdir(directory); await Promise.all( folders.map(async (folder) => { @@ -32,9 +37,6 @@ describe('The local repository', () => { }); it('Should pass deep validation for all local integrations.', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integrations: IntegrationReader[] = await repository.getIntegrationList(); await Promise.all( integrations.map(async (i) => { @@ -50,18 +52,12 @@ describe('The local repository', () => { describe('Local Nginx Integration', () => { it('Should serialize without errors', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integration = await repository.getIntegration('nginx'); await expect(integration?.serialize()).resolves.toHaveProperty('ok', true); }); it('Should serialize to include the config', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integration = await repository.getIntegration('nginx'); const config = await integration!.getConfig(); const serialized = await integration!.serialize(); diff --git a/server/adaptors/integrations/integrations_manager.ts b/server/adaptors/integrations/integrations_manager.ts index c516d3fc78..13834c8424 100644 --- a/server/adaptors/integrations/integrations_manager.ts +++ b/server/adaptors/integrations/integrations_manager.ts @@ -3,12 +3,12 @@ * SPDX-License-Identifier: Apache-2.0 */ -import path from 'path'; import { addRequestToMetric } from '../../common/metrics/metrics_helper'; import { IntegrationsAdaptor } from './integrations_adaptor'; import { SavedObject, SavedObjectsClientContract } from '../../../../../src/core/server/types'; import { IntegrationInstanceBuilder } from './integrations_builder'; import { TemplateManager } from './repository/repository'; +import { IndexDataAdaptor } from './repository/index_data_adaptor'; export class IntegrationsManager implements IntegrationsAdaptor { client: SavedObjectsClientContract; @@ -17,22 +17,21 @@ export class IntegrationsManager implements IntegrationsAdaptor { constructor(client: SavedObjectsClientContract, repository?: TemplateManager) { this.client = client; - this.repository = - repository ?? new TemplateManager(path.join(__dirname, '__data__/repository')); + this.repository = repository ?? new TemplateManager([new IndexDataAdaptor(this.client)]); this.instanceBuilder = new IntegrationInstanceBuilder(this.client); } deleteIntegrationInstance = async (id: string): Promise => { - let children: any; + let children: SavedObject; try { children = await this.client.get('integration-instance', id); - } catch (err: any) { + } catch (err) { return err.output?.statusCode === 404 ? Promise.resolve([id]) : Promise.reject(err); } const toDelete = children.attributes.assets - .filter((i: any) => i.assetId) - .map((i: any) => { + .filter((i: AssetReference) => i.assetId) + .map((i: AssetReference) => { return { id: i.assetId, type: i.assetType }; }); toDelete.push({ id, type: 'integration-instance' }); @@ -43,7 +42,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { try { await this.client.delete(asset.type, asset.id); return Promise.resolve(asset.id); - } catch (err: any) { + } catch (err) { addRequestToMetric('integrations', 'delete', err); return err.output?.statusCode === 404 ? Promise.resolve(asset.id) : Promise.reject(err); } @@ -101,20 +100,22 @@ export class IntegrationsManager implements IntegrationsAdaptor { query?: IntegrationInstanceQuery ): Promise => { addRequestToMetric('integrations', 'get', 'count'); - const result = await this.client.get('integration-instance', `${query!.id}`); + const result = (await this.client.get('integration-instance', `${query!.id}`)) as SavedObject< + IntegrationInstance + >; return Promise.resolve(this.buildInstanceResponse(result)); }; buildInstanceResponse = async ( - savedObj: SavedObject + savedObj: SavedObject ): Promise => { - const assets: AssetReference[] | undefined = (savedObj.attributes as any)?.assets; + const assets: AssetReference[] | undefined = savedObj.attributes.assets; const status: string = assets ? await this.getAssetStatus(assets) : 'available'; return { id: savedObj.id, status, - ...(savedObj.attributes as any), + ...savedObj.attributes, }; }; @@ -124,7 +125,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { try { await this.client.get(asset.assetType, asset.assetId); return { id: asset.assetId, status: 'available' }; - } catch (err: any) { + } catch (err) { const statusCode = err.output?.statusCode; if (statusCode && 400 <= statusCode && statusCode < 500) { return { id: asset.assetId, status: 'unavailable' }; @@ -166,7 +167,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { }); const test = await this.client.create('integration-instance', result); return Promise.resolve({ ...result, id: test.id }); - } catch (err: any) { + } catch (err) { addRequestToMetric('integrations', 'create', err); return Promise.reject({ message: err.message, @@ -213,7 +214,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { }); }; - getAssets = async (templateName: string): Promise<{ savedObjects?: any }> => { + getAssets = async (templateName: string): Promise => { const integration = await this.repository.getIntegration(templateName); if (integration === null) { return Promise.reject({ diff --git a/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts b/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts new file mode 100644 index 0000000000..6ab7f77b73 --- /dev/null +++ b/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts @@ -0,0 +1,105 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { IntegrationReader } from '../integration_reader'; +import { JsonCatalogDataAdaptor } from '../json_data_adaptor'; +import { TEST_INTEGRATION_CONFIG } from '../../../../../test/constants'; +import { savedObjectsClientMock } from '../../../../../../../src/core/server/mocks'; +import { IndexDataAdaptor } from '../index_data_adaptor'; +import { SavedObjectsClientContract } from '../../../../../../../src/core/server'; + +// Simplified catalog for integration searching -- Do not use for full deserialization tests. +const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample1', + }, + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample2', + }, + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample2', + version: '2.1.0', + }, +]; + +// Copy of json_data_adaptor.test.ts with new reader type +// Since implementation at time of writing is to defer to json adaptor +describe('Index Data Adaptor', () => { + let mockClient: SavedObjectsClientContract; + + beforeEach(() => { + mockClient = savedObjectsClientMock.create(); + mockClient.find = jest.fn().mockResolvedValue({ + saved_objects: TEST_CATALOG_NO_SERIALIZATION.map((item) => ({ + attributes: item, + })), + }); + }); + + it('Should correctly identify repository type', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + await expect(adaptor.getDirectoryType()).resolves.toBe('repository'); + }); + + it('Should correctly identify integration type after filtering', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const joined = await adaptor.join('sample1'); + await expect(joined.getDirectoryType()).resolves.toBe('integration'); + }); + + it('Should correctly retrieve integration versions', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const versions = await adaptor.findIntegrationVersions('sample2'); + expect((versions as { value: string[] }).value).toHaveLength(2); + }); + + it('Should correctly supply latest integration version for IntegrationReader', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const reader = new IntegrationReader('sample2', adaptor.join('sample2')); + const version = await reader.getLatestVersion(); + expect(version).toBe('2.1.0'); + }); + + it('Should find integration names', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const integResult = await adaptor.findIntegrations(); + const integs = (integResult as { value: string[] }).value; + integs.sort(); + + expect(integs).toEqual(['sample1', 'sample2']); + }); + + it('Should reject any attempts to read a file with a type', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const result = await adaptor.readFile('logs-1.0.0.json', 'schemas'); + await expect(result.error?.message).toBe( + 'JSON adaptor does not support subtypes (isConfigLocalized: true)' + ); + }); + + it('Should reject any attempts to read a raw file', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const result = await adaptor.readFileRaw('logo.svg', 'static'); + await expect(result.error?.message).toBe( + 'JSON adaptor does not support raw files (isConfigLocalized: true)' + ); + }); + + it('Should reject nested directory searching', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const result = await adaptor.findIntegrations('sample1'); + await expect(result.error?.message).toBe( + 'Finding integrations for custom dirs not supported for JSONreader' + ); + }); + + it('Should report unknown directory type if integration list is empty', async () => { + const adaptor = new JsonCatalogDataAdaptor([]); + await expect(adaptor.getDirectoryType()).resolves.toBe('unknown'); + }); +}); diff --git a/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts b/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts index 8c703b7516..89a994ffd8 100644 --- a/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts +++ b/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts @@ -8,6 +8,7 @@ import { IntegrationReader } from '../integration_reader'; import path from 'path'; import { JsonCatalogDataAdaptor } from '../json_data_adaptor'; import { TEST_INTEGRATION_CONFIG } from '../../../../../test/constants'; +import { FileSystemDataAdaptor } from '../fs_data_adaptor'; // Simplified catalog for integration searching -- Do not use for full deserialization tests. const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ @@ -28,9 +29,9 @@ const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ describe('JSON Data Adaptor', () => { it('Should be able to deserialize a serialized integration', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../../__data__/repository') - ); + const repository: TemplateManager = new TemplateManager([ + new FileSystemDataAdaptor(path.join(__dirname, '../../__test__/__data__/repository')), + ]); const fsIntegration: IntegrationReader = (await repository.getIntegration('nginx'))!; const fsConfig = await fsIntegration.getConfig(); const serialized = await fsIntegration.serialize(); @@ -112,4 +113,13 @@ describe('JSON Data Adaptor', () => { const adaptor = new JsonCatalogDataAdaptor([]); await expect(adaptor.getDirectoryType()).resolves.toBe('unknown'); }); + + // Bug: a previous regex for version finding counted the `8` in `k8s-1.0.0.json` as the version + it('Should correctly read a config with a number in the name', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + await expect(adaptor.readFile('sample2-2.1.0.json')).resolves.toMatchObject({ + ok: true, + value: TEST_CATALOG_NO_SERIALIZATION[2], + }); + }); }); diff --git a/server/adaptors/integrations/repository/__test__/repository.test.ts b/server/adaptors/integrations/repository/__test__/repository.test.ts index 816b44eaa0..ae0698ffad 100644 --- a/server/adaptors/integrations/repository/__test__/repository.test.ts +++ b/server/adaptors/integrations/repository/__test__/repository.test.ts @@ -8,6 +8,7 @@ import { TemplateManager } from '../repository'; import { IntegrationReader } from '../integration_reader'; import { Dirent, Stats } from 'fs'; import path from 'path'; +import { FileSystemDataAdaptor } from '../fs_data_adaptor'; jest.mock('fs/promises'); @@ -15,7 +16,7 @@ describe('Repository', () => { let repository: TemplateManager; beforeEach(() => { - repository = new TemplateManager('path/to/directory'); + repository = new TemplateManager([new FileSystemDataAdaptor('path/to/directory')]); }); afterEach(() => { diff --git a/server/adaptors/integrations/repository/fs_data_adaptor.ts b/server/adaptors/integrations/repository/fs_data_adaptor.ts index 52c5dff6d5..5687749ca2 100644 --- a/server/adaptors/integrations/repository/fs_data_adaptor.ts +++ b/server/adaptors/integrations/repository/fs_data_adaptor.ts @@ -21,7 +21,7 @@ const safeIsDirectory = async (maybeDirectory: string): Promise => { * A CatalogDataAdaptor that reads from the local filesystem. * Used to read default Integrations shipped in the in-product catalog at `__data__`. */ -export class FileSystemCatalogDataAdaptor implements CatalogDataAdaptor { +export class FileSystemDataAdaptor implements CatalogDataAdaptor { isConfigLocalized = false; directory: string; @@ -131,7 +131,7 @@ export class FileSystemCatalogDataAdaptor implements CatalogDataAdaptor { return hasSchemas ? 'integration' : 'repository'; } - join(filename: string): FileSystemCatalogDataAdaptor { - return new FileSystemCatalogDataAdaptor(path.join(this.directory, filename)); + join(filename: string): FileSystemDataAdaptor { + return new FileSystemDataAdaptor(path.join(this.directory, filename)); } } diff --git a/server/adaptors/integrations/repository/index_data_adaptor.ts b/server/adaptors/integrations/repository/index_data_adaptor.ts new file mode 100644 index 0000000000..3344dd0720 --- /dev/null +++ b/server/adaptors/integrations/repository/index_data_adaptor.ts @@ -0,0 +1,56 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { CatalogDataAdaptor, IntegrationPart } from './catalog_data_adaptor'; +import { SavedObjectsClientContract } from '../../../../../../src/core/server/types'; +import { JsonCatalogDataAdaptor } from './json_data_adaptor'; + +export class IndexDataAdaptor implements CatalogDataAdaptor { + isConfigLocalized = true; + directory?: string; + client: SavedObjectsClientContract; + + constructor(client: SavedObjectsClientContract, directory?: string) { + this.directory = directory; + this.client = client; + } + + private async asJsonAdaptor(): Promise { + const results = await this.client.find({ type: 'integration-template' }); + const filteredIntegrations: SerializedIntegration[] = results.saved_objects + .map((obj) => obj.attributes as SerializedIntegration) + .filter((obj) => this.directory === undefined || this.directory === obj.name); + return new JsonCatalogDataAdaptor(filteredIntegrations); + } + + async findIntegrationVersions(dirname?: string | undefined): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.findIntegrationVersions(dirname); + } + + async readFile(filename: string, type?: IntegrationPart): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.readFile(filename, type); + } + + async readFileRaw(filename: string, type?: IntegrationPart): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.readFileRaw(filename, type); + } + + async findIntegrations(dirname: string = '.'): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.findIntegrations(dirname); + } + + async getDirectoryType(dirname?: string): Promise<'integration' | 'repository' | 'unknown'> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.getDirectoryType(dirname); + } + + join(filename: string): IndexDataAdaptor { + return new IndexDataAdaptor(this.client, filename); + } +} diff --git a/server/adaptors/integrations/repository/integration_reader.ts b/server/adaptors/integrations/repository/integration_reader.ts index 0f28c5d420..ea3acbe77b 100644 --- a/server/adaptors/integrations/repository/integration_reader.ts +++ b/server/adaptors/integrations/repository/integration_reader.ts @@ -6,7 +6,7 @@ import path from 'path'; import semver from 'semver'; import { validateTemplate } from '../validators'; -import { FileSystemCatalogDataAdaptor } from './fs_data_adaptor'; +import { FileSystemDataAdaptor } from './fs_data_adaptor'; import { CatalogDataAdaptor, IntegrationPart } from './catalog_data_adaptor'; import { foldResults, pruneConfig } from './utils'; @@ -23,7 +23,7 @@ export class IntegrationReader { constructor(directory: string, reader?: CatalogDataAdaptor) { this.directory = directory; this.name = path.basename(directory); - this.reader = reader ?? new FileSystemCatalogDataAdaptor(directory); + this.reader = reader ?? new FileSystemDataAdaptor(directory); } /** @@ -178,17 +178,7 @@ export class IntegrationReader { * @param version The version of the integration to retrieve assets for. * @returns An object containing the different types of assets. */ - async getAssets( - version?: string - ): Promise< - Result<{ - savedObjects?: object[]; - queries?: Array<{ - query: string; - language: string; - }>; - }> - > { + async getAssets(version?: string): Promise> { const configResult = await this.getRawConfig(version); if (!configResult.ok) { return configResult; diff --git a/server/adaptors/integrations/repository/json_data_adaptor.ts b/server/adaptors/integrations/repository/json_data_adaptor.ts index 05c0b11104..2ab1547e16 100644 --- a/server/adaptors/integrations/repository/json_data_adaptor.ts +++ b/server/adaptors/integrations/repository/json_data_adaptor.ts @@ -16,7 +16,7 @@ export class JsonCatalogDataAdaptor implements CatalogDataAdaptor { /** * Creates a new FileSystemCatalogDataAdaptor instance. * - * @param directory The base directory from which to read files. This is not sanitized. + * @param integrationsList The list of JSON-serialized integrations to use as a pseudo-directory. */ constructor(integrationsList: SerializedIntegration[]) { this.integrationsList = integrationsList; @@ -41,10 +41,9 @@ export class JsonCatalogDataAdaptor implements CatalogDataAdaptor { }; } - const name = filename.split('-')[0]; - const version = filename.match(/\d+(\.\d+)*/); + const filenameParts = filename.match(/([\w]+)-(\d+(\.\d+)*)\.json/); for (const integ of this.integrationsList) { - if (integ.name === name && integ.version === version?.[0]) { + if (integ.name === filenameParts?.[1] && integ.version === filenameParts?.[2]) { return { ok: true, value: integ }; } } diff --git a/server/adaptors/integrations/repository/repository.ts b/server/adaptors/integrations/repository/repository.ts index 0337372049..4f418daac6 100644 --- a/server/adaptors/integrations/repository/repository.ts +++ b/server/adaptors/integrations/repository/repository.ts @@ -3,44 +3,56 @@ * SPDX-License-Identifier: Apache-2.0 */ -import * as path from 'path'; import { IntegrationReader } from './integration_reader'; -import { FileSystemCatalogDataAdaptor } from './fs_data_adaptor'; import { CatalogDataAdaptor } from './catalog_data_adaptor'; export class TemplateManager { - reader: CatalogDataAdaptor; - directory: string; + readers: CatalogDataAdaptor[]; - constructor(directory: string, reader?: CatalogDataAdaptor) { - this.directory = directory; - this.reader = reader ?? new FileSystemCatalogDataAdaptor(directory); + constructor(readers: CatalogDataAdaptor[]) { + this.readers = readers; } async getIntegrationList(): Promise { - // TODO in the future, we want to support traversing nested directory structures. - const folders = await this.reader.findIntegrations(); + const lists = await Promise.all( + this.readers.map((reader) => this.getReaderIntegrationList(reader)) + ); + return lists.flat(); + } + + private async getReaderIntegrationList(reader: CatalogDataAdaptor): Promise { + const folders = await reader.findIntegrations(); if (!folders.ok) { - console.error(`Error reading integration directories in: ${this.directory}`, folders.error); return []; } const integrations = await Promise.all( - folders.value.map((i) => - this.getIntegration(path.relative(this.directory, path.join(this.directory, i))) - ) + folders.value.map((integrationName) => this.getReaderIntegration(reader, integrationName)) ); return integrations.filter((x) => x !== null) as IntegrationReader[]; } - async getIntegration(integPath: string): Promise { - if ((await this.reader.getDirectoryType(integPath)) !== 'integration') { - console.error(`Requested integration '${integPath}' does not exist`); + async getIntegration(integrationName: string): Promise { + const maybeIntegrations = await Promise.all( + this.readers.map((reader) => this.getReaderIntegration(reader, integrationName)) + ); + for (const maybeIntegration of maybeIntegrations) { + if (maybeIntegration !== null) { + return maybeIntegration; + } + } + return null; + } + + private async getReaderIntegration( + reader: CatalogDataAdaptor, + integrationName: string + ): Promise { + if ((await reader.getDirectoryType(integrationName)) !== 'integration') { return null; } - const integ = new IntegrationReader(integPath, this.reader.join(integPath)); + const integ = new IntegrationReader(integrationName, reader.join(integrationName)); const checkResult = await integ.getConfig(); if (!checkResult.ok) { - console.error(`Integration '${integPath}' is invalid:`, checkResult.error); return null; } return integ; diff --git a/server/adaptors/integrations/types.ts b/server/adaptors/integrations/types.ts index 5e7565a133..7868faee83 100644 --- a/server/adaptors/integrations/types.ts +++ b/server/adaptors/integrations/types.ts @@ -62,6 +62,14 @@ interface IntegrationAssets { }>; } +interface ParsedIntegrationAssets { + savedObjects?: object[]; + queries?: Array<{ + query: string; + language: string; + }>; +} + interface SerializedIntegrationAssets extends IntegrationAssets { savedObjects?: { name: string; diff --git a/server/plugin.ts b/server/plugin.ts index 8efee24159..303a99e52e 100644 --- a/server/plugin.ts +++ b/server/plugin.ts @@ -12,6 +12,7 @@ import { Logger, Plugin, PluginInitializerContext, + SavedObject, SavedObjectsType, } from '../../../src/core/server'; import { OpenSearchObservabilityPlugin } from './adaptors/opensearch_observability_plugin'; @@ -90,7 +91,10 @@ export class ObservabilityPlugin migrations: { '3.0.0': (doc) => ({ ...doc, description: '' }), '3.0.1': (doc) => ({ ...doc, description: 'Some Description Text' }), - '3.0.2': (doc) => ({ ...doc, dateCreated: parseInt(doc.dateCreated || '0', 10) }), + '3.0.2': (doc) => ({ + ...doc, + dateCreated: parseInt((doc as { dateCreated?: string }).dateCreated || '0', 10), + }), }, }; @@ -98,6 +102,18 @@ export class ObservabilityPlugin name: 'integration-instance', hidden: false, namespaceType: 'single', + management: { + importableAndExportable: true, + getInAppUrl(obj: SavedObject) { + return { + path: `/app/integrations#/installed/${obj.id}`, + uiCapabilitiesPath: 'advancedSettings.show', + }; + }, + getTitle(obj: SavedObject) { + return obj.attributes.name; + }, + }, mappings: { dynamic: false, properties: { @@ -120,8 +136,71 @@ export class ObservabilityPlugin }, }; + const integrationTemplateType: SavedObjectsType = { + name: 'integration-template', + hidden: false, + namespaceType: 'single', + management: { + importableAndExportable: true, + getInAppUrl(obj: SavedObject) { + return { + path: `/app/integrations#/available/${obj.attributes.name}`, + uiCapabilitiesPath: 'advancedSettings.show', + }; + }, + getTitle(obj: SavedObject) { + return obj.attributes.displayName ?? obj.attributes.name; + }, + }, + mappings: { + dynamic: false, + properties: { + name: { + type: 'text', + }, + version: { + type: 'text', + }, + displayName: { + type: 'text', + }, + license: { + type: 'text', + }, + type: { + type: 'text', + }, + labels: { + type: 'text', + }, + author: { + type: 'text', + }, + description: { + type: 'text', + }, + sourceUrl: { + type: 'text', + }, + statics: { + type: 'nested', + }, + components: { + type: 'nested', + }, + assets: { + type: 'nested', + }, + sampleData: { + type: 'nested', + }, + }, + }, + }; + core.savedObjects.registerType(obsPanelType); core.savedObjects.registerType(integrationInstanceType); + core.savedObjects.registerType(integrationTemplateType); // Register server side APIs setupRoutes({ router, client: openSearchObservabilityClient, config }); diff --git a/server/routes/integrations/__tests__/integrations_router.test.ts b/server/routes/integrations/__tests__/integrations_router.test.ts index 15d2bac28b..5f6a7c39e5 100644 --- a/server/routes/integrations/__tests__/integrations_router.test.ts +++ b/server/routes/integrations/__tests__/integrations_router.test.ts @@ -26,12 +26,12 @@ describe('Data wrapper', () => { const result = await handleWithCallback( adaptorMock as IntegrationsAdaptor, responseMock as OpenSearchDashboardsResponseFactory, - callback + (callback as unknown) as (a: IntegrationsAdaptor) => Promise ); expect(callback).toHaveBeenCalled(); expect(responseMock.ok).toHaveBeenCalled(); - expect(result.body.data).toEqual({ test: 'data' }); + expect((result as { body?: unknown }).body).toEqual({ data: { test: 'data' } }); }); it('passes callback errors through', async () => { @@ -46,6 +46,6 @@ describe('Data wrapper', () => { expect(callback).toHaveBeenCalled(); expect(responseMock.custom).toHaveBeenCalled(); - expect(result.body).toEqual('test error'); + expect((result as { body?: unknown }).body).toEqual('test error'); }); }); diff --git a/server/routes/integrations/integrations_router.ts b/server/routes/integrations/integrations_router.ts index 46fe47768f..fba05b7b04 100644 --- a/server/routes/integrations/integrations_router.ts +++ b/server/routes/integrations/integrations_router.ts @@ -11,6 +11,7 @@ import { INTEGRATIONS_BASE } from '../../../common/constants/shared'; import { IntegrationsAdaptor } from '../../adaptors/integrations/integrations_adaptor'; import { OpenSearchDashboardsRequest, + OpenSearchDashboardsResponse, OpenSearchDashboardsResponseFactory, } from '../../../../../src/core/server/http/router'; import { IntegrationsManager } from '../../adaptors/integrations/integrations_manager'; @@ -29,19 +30,19 @@ import { IntegrationsManager } from '../../adaptors/integrations/integrations_ma * @callback callback A callback that will invoke a request on a provided adaptor. * @returns {Promise} An `OpenSearchDashboardsResponse` with the return data from the callback. */ -export const handleWithCallback = async ( +export const handleWithCallback = async ( adaptor: IntegrationsAdaptor, response: OpenSearchDashboardsResponseFactory, - callback: (a: IntegrationsAdaptor) => any -): Promise => { + callback: (a: IntegrationsAdaptor) => Promise +): Promise> => { try { const data = await callback(adaptor); return response.ok({ body: { data, }, - }); - } catch (err: any) { + }) as OpenSearchDashboardsResponse<{ data: T }>; + } catch (err) { console.error(`handleWithCallback: callback failed with error "${err.message}"`); return response.custom({ statusCode: err.statusCode || 500, @@ -63,7 +64,7 @@ export function registerIntegrationsRoute(router: IRouter) { path: `${INTEGRATIONS_BASE}/repository`, validate: false, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationTemplates() @@ -84,7 +85,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => { return a.loadIntegrationInstance( @@ -105,7 +106,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback( adaptor, @@ -130,7 +131,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); try { const requestPath = sanitize(request.params.path); @@ -141,7 +142,7 @@ export function registerIntegrationsRoute(router: IRouter) { }, body: result, }); - } catch (err: any) { + } catch (err) { return response.custom({ statusCode: err.statusCode ? err.statusCode : 500, body: err.message, @@ -159,7 +160,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getSchemas(request.params.id) @@ -176,7 +177,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getAssets(request.params.id) @@ -193,7 +194,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getSampleData(request.params.id) @@ -206,7 +207,7 @@ export function registerIntegrationsRoute(router: IRouter) { path: `${INTEGRATIONS_BASE}/store`, validate: false, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationInstances({}) @@ -223,7 +224,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.deleteIntegrationInstance(request.params.id) @@ -240,7 +241,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationInstance({
+ You can get bundles from + + + the OpenSearch Catalog. + +
+ You can get bundles from{' '} + + the OpenSearch Catalog. + +
Loading Integrations...
[^ ]*) (?[^ ]*)(?: "(?[^\"]*)" "(?[^\"]*)")?$ - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z -``` - -You can also use a [GeoIP2 Filter](https://docs.fluentbit.io/manual/pipeline/filters/geoip2-filter) to enrich the data with geolocation data. - -Finally, I used a `otel-converter.lua` script to convert the parsed data into schema-compliant data: - -```lua -local hexCharset = "0123456789abcdef" -local function randHex(length) - if length > 0 then - local index = math.random(1, #hexCharset) - return randHex(length - 1) .. hexCharset:sub(index, index) - else - return "" - end -end - -local function format_apache(c) - return string.format( - "%s - %s [%s] \"%s %s HTTP/1.1\" %s %s", - c.host, - c.user, - os.date("%d/%b/%Y:%H:%M:%S %z"), - c.method, - c.path, - c.code, - c.size, - c.referer, - c.agent - ) -end - -function convert_to_otel(tag, timestamp, record) - if tag=="apache.access" then - record.remote=record.host - end - - local data = { - traceId=randHex(32), - spanId=randHex(16), - ["@timestamp"]=(record.timestamp or os.date("!%Y-%m-%dT%H:%M:%S.000Z")), - observedTimestamp=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - body=format_apache(record), - attributes={ - data_stream={ - dataset=tag, - namespace="production", - type="logs" - } - }, - event={ - category="web", - name="access", - domain=tag, - kind="event", - result="success", - type="access" - }, - http={ - request={ - method=record.method - }, - response={ - bytes=tonumber(record.size), - status_code=tonumber(record.code) - }, - flavor="1.1", - url=record.path, - user_agent=record.agent - }, - communication={ - source={ - address="127.0.0.1", - ip=record.remote, - geo={ - country_iso_code=record.country_iso_code - -- location={ - -- lat=record.latitude, - -- lon=record.longitude - -- } - } - } - } - } - return 1, timestamp, data -end -``` diff --git a/server/adaptors/integrations/__data__/repository/apache/info/README.md b/server/adaptors/integrations/__data__/repository/apache/info/README.md deleted file mode 100644 index eb85135a5f..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/info/README.md +++ /dev/null @@ -1,17 +0,0 @@ -# Apache Integration - -## What is Apache ? - -Apache is an open source web server software for modern operating systems including UNIX and Windows. - -See additional details [here](https://httpd.apache.org/). - -## What is Apache Integration ? - -An integration is a bundle of pre-canned assets which are bundled togather in a meaningful manner. - -Apache integration includes dashboards, visualisations, queries and an index mapping. - -### Dashboards - - diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/logs_apache-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/apache/schemas/logs_apache-1.0.0.mapping.json deleted file mode 100644 index 68b5fa05b1..0000000000 --- a/server/adaptors/integrations/__data__/repository/apache/schemas/logs_apache-1.0.0.mapping.json +++ /dev/null @@ -1,238 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-apache-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-apache": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "communication", "http"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http"], - "version": 1, - "_meta": { - "description": "Simple Schema For Observability", - "catalog": "observability", - "type": "logs", - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - } -} diff --git a/server/adaptors/integrations/__data__/repository/apache/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/apache/static/dashboard1.png deleted file mode 100644 index 9b2619763a..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/apache/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/apache/static/logo.png b/server/adaptors/integrations/__data__/repository/apache/static/logo.png deleted file mode 100644 index 4a82e56ff6..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/apache/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/assets/aws_cloudfront-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_cloudfront/assets/aws_cloudfront-1.0.0.ndjson deleted file mode 100644 index 1321ef6b9c..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/assets/aws_cloudfront-1.0.0.ndjson +++ /dev/null @@ -1,31 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.c-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.c-port\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-cookie\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-host\"}}},{\"count\":0,\"name\":\"aws.cloudfront.cs-method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-protocol-version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.cs-referer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-referer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-referer\"}}},{\"count\":0,\"name\":\"aws.cloudfront.cs-uri-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-uri-stem\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-uri-stem.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-uri-stem\"}}},{\"count\":0,\"name\":\"aws.cloudfront.cs-user-agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.cs-user-agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.cs-user-agent\"}}},{\"count\":0,\"name\":\"aws.cloudfront.fle-encrypted-fields\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.fle-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_city\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.geo_location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-content-len\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-content-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-range-end\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-range-start\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.sc-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ssl-cipher\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.ssl-cipher.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.ssl-cipher\"}}},{\"count\":0,\"name\":\"aws.cloudfront.ssl-protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.time-taken\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.time-to-first-byte\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_browser\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_browser_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_device\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_os\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.ua_os_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-detailed-result-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-location\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-request-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-request-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.x-edge-request-id\"}}},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-response-result-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-edge-result-type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudfront.x-forwarded-for\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.x-forwarded-for.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.x-forwarded-for\"}}},{\"count\":0,\"name\":\"aws.cloudfront.x-host-header\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudfront.x-host-header.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudfront.x-host-header\"}}}]","timeFieldName":"@timestamp","title":"logs-aws-cloudfront-*"},"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-03-07T05:46:59.035Z","version":"WzIyOTk0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Total Request","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Total Request\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Requests\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"ea7381c1-6af7-40eb-ba7a-04a71ee06682","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQwLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Edge Location Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Edge Location Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-location\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"473e248b-25cf-4e57-b1d3-908939f043bb","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQxLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Request History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Request History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Request Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2021-11-23T05:38:00.000Z\",\"to\":\"2021-11-23T05:38:30.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Request Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Request Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"15a9f594-27a7-496e-b83c-cd10315d03bc","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Unique Vistors","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Unique Vistors\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"aws.cloudfront.c-ip\",\"customLabel\":\"Unique Vistors\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"478035df-9660-4dcd-bd92-03e417faf8cd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQzLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Cache Hit Rate","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Cache Hit Rate\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"unit\":\"\",\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\",\"numerator\":{\"query\":\"\",\"language\":\"kuery\"},\"denominator\":{\"query\":\"aws.cloudfront.x-edge-result-type:M*\",\"language\":\"kuery\"},\"percentiles\":[{\"id\":\"889c9e40-4c21-11ec-82ff-659ecaa3e9b9\",\"mode\":\"line\",\"shade\":0.2,\"value\":50}],\"metric_agg\":\"count\"},{\"id\":\"d4be2aa0-4c2b-11ec-82ff-659ecaa3e9b9\",\"type\":\"filter_ratio\",\"variables\":[{\"id\":\"d764e0a0-4c2b-11ec-82ff-659ecaa3e9b9\",\"name\":\"total\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"script\":\"\",\"denominator\":{\"query\":\"\",\"language\":\"kuery\"},\"numerator\":{\"query\":\"aws.cloudfront.x-edge-response-result-type:Hit\",\"language\":\"kuery\"}}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Request Hit %\",\"type\":\"timeseries\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"split_filters\":[{\"filter\":{\"query\":\"x-edge-result-typ\",\"language\":\"kuery\"},\"label\":\"\",\"color\":\"#68BC00\",\"id\":\"ff9b91e0-4c21-11ec-82ff-659ecaa3e9b9\"}],\"var_name\":\"\"},{\"id\":\"8ade2f30-4c34-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"unit\":\"\",\"id\":\"8ade2f31-4c34-11ec-82ff-659ecaa3e9b9\",\"type\":\"sum\",\"numerator\":{\"query\":\"\",\"language\":\"kuery\"},\"denominator\":{\"query\":\"aws.cloudfront.x-edge-result-type:M*\",\"language\":\"kuery\"},\"percentiles\":[{\"id\":\"889c9e40-4c21-11ec-82ff-659ecaa3e9b9\",\"mode\":\"line\",\"shade\":0.2,\"value\":50}],\"metric_agg\":\"count\",\"field\":\"aws.cloudfront.sc-bytes\"},{\"id\":\"8ade2f32-4c34-11ec-82ff-659ecaa3e9b9\",\"type\":\"filter_ratio\",\"variables\":[{\"id\":\"d764e0a0-4c2b-11ec-82ff-659ecaa3e9b9\",\"name\":\"total\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"script\":\"\",\"denominator\":{\"query\":\"\",\"language\":\"kuery\"},\"numerator\":{\"query\":\"aws.cloudfront.x-edge-response-result-type:Hit\",\"language\":\"kuery\"},\"metric_agg\":\"sum\",\"field\":\"aws.cloudfront.sc-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Bytes Hit %\",\"type\":\"timeseries\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"split_filters\":[{\"filter\":{\"query\":\"x-edge-result-typ\",\"language\":\"kuery\"},\"label\":\"\",\"color\":\"#68BC00\",\"id\":\"ff9b91e0-4c21-11ec-82ff-659ecaa3e9b9\"}],\"var_name\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"87071c10-4c1f-11ec-82ff-659ecaa3e9b9\"}],\"gauge_color_rules\":[{\"id\":\"93a31b40-4c1f-11ec-82ff-659ecaa3e9b9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"time_range_mode\":\"entire_time_range\",\"markdown\":\"# **{{ request_hit.last.formatted }}**\\n\\n{{ request_hit.label }}\\n\\n# **{{ bytes_hit.last.formatted }}**\\n\\n{{ bytes_hit.label }}\\n\",\"markdown_vertical_align\":\"middle\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"33846d06-3b01-4f42-9a49-722dddf39332","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Result Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Result Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-response-result-type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"93d5a98d-bfc5-4928-8428-fb2c50652ab0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ1LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudfront.x-edge-result-type:Miss\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Miss","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Miss\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-uri-stem.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Method\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"e0b656d0-4fb8-45ed-93cf-c8b9e040b886","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.c-ip\",\"orderBy\":\"4\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"2543a91d-5374-41c4-b0d8-6c7db87f999c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ3LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Bandwidth Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Bandwidth Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.cloudfront.cs-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Inbound Bytes\",\"var_name\":\"\"},{\"id\":\"7b8a8180-4c1d-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"7b8a8181-4c1d-11ec-82ff-659ecaa3e9b9\",\"type\":\"sum\",\"field\":\"aws.cloudfront.sc-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Outbound Bytes\",\"var_name\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"e1ym7hlr85xcs2-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"6aa19660-4c1d-11ec-82ff-659ecaa3e9b9\"}],\"markdown\":\"# **{{ inbound_bytes.last.formatted }}**\\n\\n{{ inbound_bytes.label }}\\n\\n\\n# **{{ outbound_bytes.last.formatted }}**\\n\\n{{ outbound_bytes.label }}\\n\",\"gauge_color_rules\":[{\"id\":\"a1655ce0-4c1d-11ec-82ff-659ecaa3e9b9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"time_range_mode\":\"entire_time_range\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"15f1facd-386e-40d5-a8cc-4b4e146597ef","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ4LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Bandwidth Chart","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Bandwidth Chart\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.cloudfront.cs-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Inbound\",\"type\":\"timeseries\"},{\"id\":\"7bf54b10-4c3a-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"7bf54b11-4c3a-11ec-82ff-659ecaa3e9b9\",\"type\":\"sum\",\"field\":\"aws.cloudfront.sc-bytes\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Outbound\",\"type\":\"timeseries\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"8f900fc0-4c3a-11ec-82ff-659ecaa3e9b9\"}],\"bar_color_rules\":[{\"id\":\"90ec1d50-4c3a-11ec-82ff-659ecaa3e9b9\"}],\"gauge_color_rules\":[{\"id\":\"919bbe40-4c3a-11ec-82ff-659ecaa3e9b9\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"background_color\":null}}"},"id":"fb733bbd-670c-4587-8235-ff3a07bef919","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDQ5LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Status Code Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Status Code Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.sc-status\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"8c49d3fa-1183-4ed3-bcdd-6228cc16af57","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUwLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"logs-aws-cloudfront-Status Code Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Status Code Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"target_status_code\",\"terms_exclude\":\"200\",\"filter\":{\"query\":\"aws.cloudfront.sc-status: 3*\",\"language\":\"kuery\"},\"label\":\"3xx Count\",\"hidden\":false},{\"id\":\"6f8bd0a0-48e4-11ec-8183-63eada04ff63\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"6f8bd0a1-48e4-11ec-8183-63eada04ff63\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"target_status_code\",\"terms_exclude\":\"200\",\"filter\":{\"query\":\"aws.cloudfront.sc-status: 4*\",\"language\":\"kuery\"},\"label\":\"4xx Count\"},{\"id\":\"98a6bbd0-48e4-11ec-8183-63eada04ff63\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"98a6bbd1-48e4-11ec-8183-63eada04ff63\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"target_status_code\",\"terms_exclude\":\"200\",\"filter\":{\"query\":\"aws.cloudfront.sc-status: 5*\",\"language\":\"kuery\"},\"label\":\"5xx Count\",\"hidden\":false}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-cloudfront-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-cloudfront-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"3097c980-48e4-11ec-8183-63eada04ff63\"}],\"markdown\":\"# **{{ 3_xx_count.last.formatted }}**\\n\\n{{ 3_xx_count.label }}\\n\\n\\n\\n# **{{ 4_xx_count.last.formatted }}**\\n\\n{{ 4_xx_count.label }}\\n\\n\\n\\n# **{{ 5_xx_count.last.formatted }}**\\n\\n{{ 5_xx_count.label }}\\n\\n\",\"time_range_mode\":\"entire_time_range\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"8ba922b1-dccb-42a9-9e6d-8f4d9f2c4e54","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUxLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Status History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Status History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2021-11-23T05:38:00.000Z\",\"to\":\"2021-11-23T05:38:30.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.sc-status\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"528674ba-ff99-4f08-8fde-1636ea40af38","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Http Method Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Http Method Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"aa2479f6-9fbe-4229-9262-29cc9cae9970","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDUzLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Average Time Taken","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Average Time Taken\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-taken\",\"customLabel\":\"Average Time Taken (seconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"f6600d91-b9a9-450c-b584-dfd807b0f7fa","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Average Time History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Average Time History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-taken\",\"customLabel\":\"Time Taken\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2021-11-24T04:20:00.000Z\",\"to\":\"2021-11-24T04:30:00.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-to-first-byte\",\"customLabel\":\"Time to First Byte\"},\"schema\":\"metric\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Average Time\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Time Taken\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true},{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"id\":\"3\",\"label\":\"Time to First Byte\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"0afbda65-cff4-4df4-8bf4-301d2a8cbd82","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU1LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Average Time To First Byte","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Average Time To First Byte\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.cloudfront.time-to-first-byte\",\"customLabel\":\"Average Time To First Byte (seconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"a8bd39ce-6983-43c1-9bd2-798b69b7163e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Access URI","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Access URI\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-uri-stem.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Method\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"47ba5807-9e96-421e-b1c6-34ecd1fce041","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU3LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top User Agents","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top User Agents\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-user-agent.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User Agent\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"35d249bb-dd5a-4607-b891-bae20f1644f8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU4LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Access Heatmap","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Access Heatmap\",\"type\":\"heatmap\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-location\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.x-edge-result-type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"heatmap\",\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":4,\"colorSchema\":\"Greens\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"linear\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"overwriteColor\":false,\"color\":\"black\"}}]}}"},"id":"850e53d2-c196-49b1-9d7a-e0e3c854a850","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDU5LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Referer","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Referer\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.cs-referer.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Referer\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"af09602c-a7c8-4a24-923a-0db49f2011d2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYwLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent OS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent OS\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_os\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"OS\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c46581ff-cf0d-4940-bdef-ce37882f7d6a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYxLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent Device","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent Device\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_device\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Device\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"08838046-1b28-4727-b8a5-6e16f750ffe2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent Browser","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent Browser\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_browser\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Browser\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"3affab90-a8cd-4be6-b377-3842861a865f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDYzLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-User Agent Category","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-User Agent Category\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.ua_category\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"ba50ff97-95bd-4a77-8148-14e6f39cc6a1","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDY0LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Requests by Countries or Regions","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Requests by Countries or Regions\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.geo_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"1402e6dc-6e08-4bf3-bc43-f87d0ac32cab","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-07T05:49:41.659Z","version":"WzIzMDI1LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Countries or Regions","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Countries or Regions\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.geo_country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country or Region\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"acefc220-0b93-4f8f-92cb-7594e36639a7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDY2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-cloudfront-Top Cities","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-cloudfront-Top Cities\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudfront.geo_city\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"City\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"796eb897-07aa-4b1e-8f3a-40a48d3d59b0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"03112a2b-2e5e-4ab2-bbf5-8cb35582708d","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-03T07:49:59.051Z","version":"WzIyNDY3LDFd"} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Requests\"},\"gridData\":{\"h\":8,\"i\":\"54b3e801-8d2c-407f-a565-37ad1aacaaa5\",\"w\":12,\"x\":0,\"y\":0},\"panelIndex\":\"54b3e801-8d2c-407f-a565-37ad1aacaaa5\",\"title\":\"Total Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Edge Locations\"},\"gridData\":{\"h\":15,\"i\":\"c78247bc-61c9-4ecc-bfd4-859946fb9eed\",\"w\":12,\"x\":12,\"y\":0},\"panelIndex\":\"c78247bc-61c9-4ecc-bfd4-859946fb9eed\",\"title\":\"Edge Locations\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request History\"},\"gridData\":{\"h\":15,\"i\":\"92b78123-9b8c-45be-8c6f-5b34ad58e7f4\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"92b78123-9b8c-45be-8c6f-5b34ad58e7f4\",\"title\":\"Request History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Unique Vistors\"},\"gridData\":{\"h\":7,\"i\":\"5ceb5857-c33e-42cb-9ccd-181388c2844a\",\"w\":12,\"x\":0,\"y\":8},\"panelIndex\":\"5ceb5857-c33e-42cb-9ccd-181388c2844a\",\"title\":\"Unique Vistors\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Cache Hit Rate\"},\"gridData\":{\"h\":16,\"i\":\"c4d554ea-b763-4ca1-8b2e-eba0d670b49c\",\"w\":12,\"x\":0,\"y\":15},\"panelIndex\":\"c4d554ea-b763-4ca1-8b2e-eba0d670b49c\",\"title\":\"Cache Hit Rate\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Result Type\"},\"gridData\":{\"h\":16,\"i\":\"ab15b2bb-dde4-4c03-86d5-eb02e58e492c\",\"w\":12,\"x\":12,\"y\":15},\"panelIndex\":\"ab15b2bb-dde4-4c03-86d5-eb02e58e492c\",\"title\":\"Result Type\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Miss URI\"},\"gridData\":{\"h\":16,\"i\":\"66cc1af9-8e28-41d7-a6c2-aaa6c4939c51\",\"w\":24,\"x\":24,\"y\":15},\"panelIndex\":\"66cc1af9-8e28-41d7-a6c2-aaa6c4939c51\",\"title\":\"Top Miss URI\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Client IPs\"},\"gridData\":{\"h\":16,\"i\":\"83d82620-97a0-4d78-9a2d-c3b99d923121\",\"w\":12,\"x\":36,\"y\":31},\"panelIndex\":\"83d82620-97a0-4d78-9a2d-c3b99d923121\",\"title\":\"Top Client IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Bandwidth\"},\"gridData\":{\"h\":16,\"i\":\"0f880ddb-0156-4e2b-8ea5-159ee8471691\",\"w\":12,\"x\":0,\"y\":31},\"panelIndex\":\"0f880ddb-0156-4e2b-8ea5-159ee8471691\",\"title\":\"Bandwidth\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Bandwidth History\"},\"gridData\":{\"h\":16,\"i\":\"52f8283f-d227-440b-be76-ec874b1f4089\",\"w\":24,\"x\":12,\"y\":31},\"panelIndex\":\"52f8283f-d227-440b-be76-ec874b1f4089\",\"title\":\"Bandwidth History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code\"},\"gridData\":{\"h\":18,\"i\":\"54705f11-1f86-49bd-b824-223a4c88df1b\",\"w\":12,\"x\":36,\"y\":47},\"panelIndex\":\"54705f11-1f86-49bd-b824-223a4c88df1b\",\"title\":\"Status Code\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code Count\"},\"gridData\":{\"h\":18,\"i\":\"4baf311f-12ec-43ce-9b7b-9e954f3f674b\",\"w\":12,\"x\":0,\"y\":47},\"panelIndex\":\"4baf311f-12ec-43ce-9b7b-9e954f3f674b\",\"title\":\"Status Code Count\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status History\"},\"gridData\":{\"h\":18,\"i\":\"d1ab93e7-455f-44da-9833-0a66b5d203bd\",\"w\":24,\"x\":12,\"y\":47},\"panelIndex\":\"d1ab93e7-455f-44da-9833-0a66b5d203bd\",\"title\":\"Status History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Http Method\"},\"gridData\":{\"h\":17,\"i\":\"ff9501d6-0554-47ab-a2c3-11b8761a4f64\",\"w\":12,\"x\":36,\"y\":65},\"panelIndex\":\"ff9501d6-0554-47ab-a2c3-11b8761a4f64\",\"title\":\"Http Method\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time Taken\"},\"gridData\":{\"h\":8,\"i\":\"48e78b21-37e3-4db5-b8f6-65b48f3dbecd\",\"w\":12,\"x\":0,\"y\":65},\"panelIndex\":\"48e78b21-37e3-4db5-b8f6-65b48f3dbecd\",\"title\":\"Average Time Taken\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time History\"},\"gridData\":{\"h\":17,\"i\":\"a0966537-47da-46d6-ae07-78a7a8faa87a\",\"w\":24,\"x\":12,\"y\":65},\"panelIndex\":\"a0966537-47da-46d6-ae07-78a7a8faa87a\",\"title\":\"Average Time History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time To First Byte\"},\"gridData\":{\"h\":9,\"i\":\"7cc8bbe5-948f-4fe3-873d-9827871aea9c\",\"w\":12,\"x\":0,\"y\":73},\"panelIndex\":\"7cc8bbe5-948f-4fe3-873d-9827871aea9c\",\"title\":\"Average Time To First Byte\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Request URIs\"},\"gridData\":{\"h\":16,\"i\":\"59688130-2d56-4265-9f5c-ee052a857f70\",\"w\":24,\"x\":0,\"y\":82},\"panelIndex\":\"59688130-2d56-4265-9f5c-ee052a857f70\",\"title\":\"Top Request URIs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top User Agents\"},\"gridData\":{\"h\":16,\"i\":\"7b670607-9120-4587-9fb8-dbf1e88b9afc\",\"w\":24,\"x\":24,\"y\":82},\"panelIndex\":\"7b670607-9120-4587-9fb8-dbf1e88b9afc\",\"title\":\"Top User Agents\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Edge Location Heatmap\",\"vis\":null},\"gridData\":{\"h\":16,\"i\":\"48426ce7-df29-4c3c-8492-8c0e5d38a076\",\"w\":24,\"x\":0,\"y\":98},\"panelIndex\":\"48426ce7-df29-4c3c-8492-8c0e5d38a076\",\"title\":\"Edge Location Heatmap\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_19\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Referers\"},\"gridData\":{\"h\":16,\"i\":\"0671e4a9-d911-4ce5-8fef-6f166f3d850b\",\"w\":24,\"x\":24,\"y\":98},\"panelIndex\":\"0671e4a9-d911-4ce5-8fef-6f166f3d850b\",\"title\":\"Top Referers\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_20\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Requests by OS\"},\"gridData\":{\"h\":16,\"i\":\"4d08ff6c-7178-464b-aa96-1fbc3bd58dc5\",\"w\":12,\"x\":0,\"y\":114},\"panelIndex\":\"4d08ff6c-7178-464b-aa96-1fbc3bd58dc5\",\"title\":\"Requests by OS\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_21\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request by Device\"},\"gridData\":{\"h\":16,\"i\":\"e2bc9b34-a729-4f18-98c9-868e67428f12\",\"w\":12,\"x\":12,\"y\":114},\"panelIndex\":\"e2bc9b34-a729-4f18-98c9-868e67428f12\",\"title\":\"Request by Device\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_22\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request by Browser\"},\"gridData\":{\"h\":16,\"i\":\"88e2bd0c-5d25-4ff6-a6ff-1ad1e2e8fa79\",\"w\":12,\"x\":24,\"y\":114},\"panelIndex\":\"88e2bd0c-5d25-4ff6-a6ff-1ad1e2e8fa79\",\"title\":\"Request by Browser\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_23\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request by Category\"},\"gridData\":{\"h\":16,\"i\":\"fa00bff8-e231-42c8-82c7-69ed9936048a\",\"w\":12,\"x\":36,\"y\":114},\"panelIndex\":\"fa00bff8-e231-42c8-82c7-69ed9936048a\",\"title\":\"Request by Category\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_24\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Requests by Countries or Regions\"},\"gridData\":{\"h\":18,\"i\":\"d30bfed7-3aa6-455f-a287-b131d3c1369c\",\"w\":24,\"x\":0,\"y\":130},\"panelIndex\":\"d30bfed7-3aa6-455f-a287-b131d3c1369c\",\"title\":\"Requests by Countries or Regions\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_25\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Countries or Regions\"},\"gridData\":{\"h\":18,\"i\":\"9b9e0dcc-2d43-44c1-ace7-c8154a860d1a\",\"w\":12,\"x\":24,\"y\":130},\"panelIndex\":\"9b9e0dcc-2d43-44c1-ace7-c8154a860d1a\",\"title\":\"Top Countries or Regions\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_26\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Cities\"},\"gridData\":{\"h\":18,\"i\":\"df902fdf-2c50-4ad6-bd1c-c9eea5d1cb13\",\"w\":12,\"x\":36,\"y\":130},\"panelIndex\":\"df902fdf-2c50-4ad6-bd1c-c9eea5d1cb13\",\"title\":\"Top Cities\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_27\"}]","timeRestore":false,"title":"logs-aws-cloudfront-dashboard","version":1},"id":"43098870-c2ad-41f9-8c9d-bd375bd8e740","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"ea7381c1-6af7-40eb-ba7a-04a71ee06682","name":"panel_0","type":"visualization"},{"id":"473e248b-25cf-4e57-b1d3-908939f043bb","name":"panel_1","type":"visualization"},{"id":"15a9f594-27a7-496e-b83c-cd10315d03bc","name":"panel_2","type":"visualization"},{"id":"478035df-9660-4dcd-bd92-03e417faf8cd","name":"panel_3","type":"visualization"},{"id":"33846d06-3b01-4f42-9a49-722dddf39332","name":"panel_4","type":"visualization"},{"id":"93d5a98d-bfc5-4928-8428-fb2c50652ab0","name":"panel_5","type":"visualization"},{"id":"e0b656d0-4fb8-45ed-93cf-c8b9e040b886","name":"panel_6","type":"visualization"},{"id":"2543a91d-5374-41c4-b0d8-6c7db87f999c","name":"panel_7","type":"visualization"},{"id":"15f1facd-386e-40d5-a8cc-4b4e146597ef","name":"panel_8","type":"visualization"},{"id":"fb733bbd-670c-4587-8235-ff3a07bef919","name":"panel_9","type":"visualization"},{"id":"8c49d3fa-1183-4ed3-bcdd-6228cc16af57","name":"panel_10","type":"visualization"},{"id":"8ba922b1-dccb-42a9-9e6d-8f4d9f2c4e54","name":"panel_11","type":"visualization"},{"id":"528674ba-ff99-4f08-8fde-1636ea40af38","name":"panel_12","type":"visualization"},{"id":"aa2479f6-9fbe-4229-9262-29cc9cae9970","name":"panel_13","type":"visualization"},{"id":"f6600d91-b9a9-450c-b584-dfd807b0f7fa","name":"panel_14","type":"visualization"},{"id":"0afbda65-cff4-4df4-8bf4-301d2a8cbd82","name":"panel_15","type":"visualization"},{"id":"a8bd39ce-6983-43c1-9bd2-798b69b7163e","name":"panel_16","type":"visualization"},{"id":"47ba5807-9e96-421e-b1c6-34ecd1fce041","name":"panel_17","type":"visualization"},{"id":"35d249bb-dd5a-4607-b891-bae20f1644f8","name":"panel_18","type":"visualization"},{"id":"850e53d2-c196-49b1-9d7a-e0e3c854a850","name":"panel_19","type":"visualization"},{"id":"af09602c-a7c8-4a24-923a-0db49f2011d2","name":"panel_20","type":"visualization"},{"id":"c46581ff-cf0d-4940-bdef-ce37882f7d6a","name":"panel_21","type":"visualization"},{"id":"08838046-1b28-4727-b8a5-6e16f750ffe2","name":"panel_22","type":"visualization"},{"id":"3affab90-a8cd-4be6-b377-3842861a865f","name":"panel_23","type":"visualization"},{"id":"ba50ff97-95bd-4a77-8148-14e6f39cc6a1","name":"panel_24","type":"visualization"},{"id":"1402e6dc-6e08-4bf3-bc43-f87d0ac32cab","name":"panel_25","type":"visualization"},{"id":"acefc220-0b93-4f8f-92cb-7594e36639a7","name":"panel_26","type":"visualization"},{"id":"796eb897-07aa-4b1e-8f3a-40a48d3d59b0","name":"panel_27","type":"visualization"}],"type":"dashboard","updated_at":"2022-03-07T05:49:54.185Z","version":"WzIzMDUxLDFd"} -{"exportedCount":30,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/aws_cloudfront-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/aws_cloudfront-1.0.0.json deleted file mode 100644 index 2f4d806b2a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/aws_cloudfront-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_cloudfront", - "version": "1.0.0", - "displayName": "AWS cloudfront ", - "description": "AWS cloudfront Object Store", - "license": "Apache-2.0", - "type": "logs-aws_cloudfront", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_cloudfront/info", - "statics": { - "logo": { - "annotation": "cloudfront Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "AWS cloudfront Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_cloudfront", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs-aws_cloudfront", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_cloudfront", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/data/sample.json deleted file mode 100644 index 629930b4e5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/data/sample.json +++ /dev/null @@ -1,761 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "078d85edf7268fb4814b1b4fc9f4c64adfde218b6b489a38ecf1b269f14f3c7a centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k [31/Jan/2023:09:25:20 +0000] 35.89.52.162 arn:aws:sts::347283850106:assumed-role/CentralizedLogging-CustomCDKBucketDeployment8693BB-1X4DVR38SF7ZY/CentralizedLogging-CustomCDKBucketDeployment8693BB-kU6BAxSswmfp HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.70 Python/3.9.13 Linux/4.14.255-296-236.539.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.69\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "production", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "cloudfront-centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "Y5rIQOuGsI2vJN4hR3qLB55Cn4aoogvzPEnHhm5-0NiTtWDfTU5-vw==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 536, - "time-taken": 0.623, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.623, - "x-edge-detailed-result-type": "Miss" - } - } - }, - { - "@timestamp": "2023-07-18T09:15:07.000Z", - "body": "084e71aee5e48296d6b4e0fead4f55abcddb2cf9b6c9923f4c276b7f12f5f1a7 alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k [31/Jan/2023:10:35:30 +0000] 36.99.53.163 arn:aws:sts::347283850107:assumed-role/AlternativeBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF8ZZ/AlternativeBucket-CustomCDKBucketDeployment8693BB-lU6BBySswmfr HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 201 - 322 - 30 29 \"-\" \"aws-cli/1.25.71 Python/3.9.14 Linux/4.14.255-296-236.540.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.70\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "development", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "222222222222" - }, - "region": "ap-southeast-1", - "resource_id": "cloudfront-alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/css/main.3c74189a.css", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "IPGkM0N8_4AU6ok71zDa4twWLigSM7Ib33IwRsBHm1hDSmIvWoNjBA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 118, - "time-taken": 0.656, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.656, - "x-edge-detailed-result-type": "Miss" - } - } - }, - { - "@timestamp": "2023-07-19T10:16:09.000Z", - "body": "094f61afd5f582a7d7c5f1gfbad5g66bcded3df9c6a9934f5c367c7g13g6g2b8 testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k [31/Jan/2023:11:45:40 +0000] 37.109.54.164 arn:aws:sts::347283850108:assumed-role/TestBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9ZZ/TestBucket-CustomCDKBucketDeployment8693BB-mU6BBzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 202 - 322 - 30 29 \"-\" \"aws-cli/1.25.72 Python/3.9.15 Linux/4.14.255-296-236.541.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.71\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "testing", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "333333333333" - }, - "region": "us-east-1", - "resource_id": "cloudfront-testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 677, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/manifest.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "5sXuyCQs0mSgb2mN-KUcHW6z6LDQd12JBT0eE5E6RSJxwUZsxzT-kg==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 410, - "time-taken": 0.582, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.582, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-21T12:18:14.000Z", - "body": "123d94egf8769gh4825b1c4hc9j5k67lmdfe328l7b589b39mcf2c389p24g4d8r backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k [31/Jan/2023:13:55:60 +0000] 39.119.56.166 arn:aws:sts::347283850110:assumed-role/BackupBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9AA/BackupBucket-CustomCDKBucketDeployment8693BB-nU6CCzSswmft HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 204 - 322 - 30 29 \"-\" \"aws-cli/1.25.74 Python/3.9.17 Linux/4.14.255-296-236.543.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.73\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "backup", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "555555555555" - }, - "region": "eu-west-1", - "resource_id": "cloudfront-backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k", - "platform": "aws_s3" - }, - "aws": { - "cloudfront":{ - "x-edge-location": "HKG62-C2", - "sc-bytes": 501279, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/js/main.1fce72cf.js", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "zdHQDWHvw3LXHsJ9il4jbrYX4XVaRejgVdcnuSNq4WmocHqM4wATkw==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 70, - "time-taken": 1.606, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.840, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "application/javascript" - - - - } - } - }, - { - "@timestamp": "2023-07-23T16:22:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/home.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "5FtX3W-8LR38cf05aTommPpuDAteiyix_LSSXF6T8bPJWa7eyKASpQ==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 87, - "time-taken": 0.588, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.588, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-22T10:22:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 675, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/ekslog.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "S4LYsYHTPEFsp2XCNcKGKtOyBYnoZObnkCXszEz_llNN1W9fN3Cskg==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 78, - "time-taken": 0.592, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.592, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-20T00:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 674, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/cluster.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "hVdTDiAs15WMiKmFOe-Wq0VmAiEU5QulF_qhbY4rPxOP0HbwpVcpFA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 78, - "time-taken": 0.592, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.592, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-24T08:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 677, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en/servicelog.json", - "sc-status": 304, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "hrLzG-wJDS3HffJNotXAkXtbQDQz1hy-PLG8YDLJnzv1KUFwIFG6pg==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 103, - "time-taken": 0.594, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.594, - "x-edge-detailed-result-type": "Miss" - - - - - } - } - }, - { - "@timestamp": "2023-07-10T11:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "@timestamp": "2023-02-22T03:22:41", - "x-edge-location": "HKG62-C2", - "sc-bytes": 703, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en-US/home.json", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Error", - "x-edge-request-id": "Bh9Z-n6bzLqlzwHGFHflVMnpjlsOC34oxMELel058PF36cTNvoCEig==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 51, - "time-taken": 1.167, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Error", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 1.167, - "x-edge-detailed-result-type": "Error" - } - } - }, - { - "@timestamp": "2023-07-25T02:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 703, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/locales/en-US/info.json", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "v=v1.3.0", - "cs-cookie": "-", - "x-edge-result-type": "Error", - "x-edge-request-id": "Qse_oGkdO2t-QWOXmo4BzPH-Tz-Tb2Y9e5xTekFQNxMOK5uMMHapWA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 51, - "time-taken": 0.284, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Error", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.284, - "x-edge-detailed-result-type": "Error" - } - } - }, - { - "@timestamp": "2023-07-15T00:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 162423, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/media/elbArch.dbcdcea16ace81a05c28.png", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "T2z6641ScR1RQwziiZT9s8zqrlo7YD3iaLg5WVowGzs1NkcTPdrnog==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 56, - "time-taken": 1.050, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.648, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "image/png", - "sc-content-len": 161498 - } - } - }, - { - "@timestamp": "2023-07-14T02:00:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 161053, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/media/wafArch.9cdccd95c4eb308461a2.png", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "WxSdG2R6oqaVNJQkue2oCkI6nU3ZXKb04KZQDgb7ZFUkX-RmAv59XA==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 57, - "time-taken": 1.074, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.669, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "image/png", - "sc-content-len": 160127 - } - } - }, - { - "@timestamp": "2023-07-12T03:00:42.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "cloudfront.log" - }, - "attributes": { - "data_stream": { - "dataset": "cloudfront.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "cloudfront-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "cloudfront": { - "x-edge-location": "HKG62-C2", - "sc-bytes": 150993, - "c-ip": "67.183.58.10", - "cs-method": "GET", - "cs-host": "d2wusnbjo8x1w7.cloudfront.net", - "cs-uri-stem": "/static/media/rdsArch.aa17197fc8ed28ace19f.png", - "sc-status": 200, - "cs-referer": "-", - "cs-user-agent": "Mozilla/5.0%20(Macintosh;%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/110.0.0.0%20Safari/537.36", - "cs-uri-query": "-", - "cs-cookie": "-", - "x-edge-result-type": "Miss", - "x-edge-request-id": "yLiCzSmstFWGLeb9NjslBLkBOpN6stNwWakqN4wKZNHAm9VTFzE2zw==", - "x-host-header": "d2wusnbjo8x1w7.cloudfront.net", - "cs-protocol": "https", - "cs-bytes": 56, - "time-taken": 1.030, - "x-forwarded-for": "-", - "ssl-protocol": "TLSv1.3", - "ssl-cipher": "TLS_AES_128_GCM_SHA256", - "x-edge-response-result-type": "Miss", - "cs-protocol-version": "HTTP/2.0", - "fle-status": "-", - "fle-encrypted-fields": "-", - "c-port": "12812", - "time-to-first-byte": 0.626, - "x-edge-detailed-result-type": "Miss", - "sc-content-type": "image/png", - "sc-content-len": 150075 - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/info/README.md b/server/adaptors/integrations/__data__/repository/aws_cloudfront/info/README.md deleted file mode 100644 index 0459813357..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/info/README.md +++ /dev/null @@ -1,19 +0,0 @@ -# AWS CloudFront Integration - -## What is AWS CloudFront? - -Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds. CloudFront is integrated with other Amazon Web Services products to give developers and businesses an easy way to distribute content to end-users with low latency and high data transfer speeds. - -See additional details [here](https://aws.amazon.com/cloudfront/). - -## What is AWS CloudFront Integration? - -An integration is a bundle of pre-canned assets which are brought together in a meaningful manner. - -AWS CloudFront integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-aws-cloudfront` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_cloudfront-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_cloudfront-1.0.0.mapping.json deleted file mode 100644 index da6558aa1e..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_cloudfront-1.0.0.mapping.json +++ /dev/null @@ -1,194 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_cloudfront", - "labels": ["aws", "cloudfront"] - }, - "properties": { - "aws": { - "properties": { - "cloudfront": { - "properties": { - "c-ip": { - "type": "ip" - }, - "geo_location": { - "type": "geo_point" - }, - "geo_iso_code": { - "type": "keyword" - }, - "geo_country": { - "type": "keyword" - }, - "geo_city": { - "type": "keyword" - }, - "ua_browser": { - "type": "keyword" - }, - "ua_browser_version": { - "type": "keyword" - }, - "ua_os": { - "type": "keyword" - }, - "ua_os_version": { - "type": "keyword" - }, - "ua_device": { - "type": "keyword" - }, - "ua_category": { - "type": "keyword" - }, - "c-port": { - "type": "keyword" - }, - "cs-cookie": { - "type": "text" - }, - "cs-host": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "cs-referer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "cs-user-agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "cs-bytes": { - "type": "long" - }, - "cs-method": { - "type": "keyword" - }, - "cs-protocol": { - "type": "keyword" - }, - "cs-protocol-version": { - "type": "keyword" - }, - "cs-uri-query": { - "type": "text" - }, - "cs-uri-stem": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "fle-encrypted-fields": { - "type": "text" - }, - "fle-status": { - "type": "keyword" - }, - "sc-bytes": { - "type": "long" - }, - "sc-content-len": { - "type": "long" - }, - "sc-content-type": { - "type": "keyword" - }, - "sc-range-end": { - "type": "long" - }, - "sc-range-start": { - "type": "long" - }, - "sc-status": { - "type": "keyword" - }, - "ssl-cipher": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "ssl-protocol": { - "type": "keyword" - }, - "time-taken": { - "type": "float" - }, - "time-to-first-byte": { - "type": "float" - }, - "x-edge-detailed-result-type": { - "type": "keyword" - }, - "x-edge-location": { - "type": "keyword" - }, - "x-edge-request-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "x-edge-result-type": { - "type": "keyword" - }, - "x-edge-response-result-type": { - "type": "keyword" - }, - "x-forwarded-for": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "x-host-header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index 8057cd98ab..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/logs-aws_cloudfront-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/logs-aws_cloudfront-1.0.0.mapping.json deleted file mode 100644 index aee3e31d37..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudfront/schemas/logs-aws_cloudfront-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_cloudfront-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-aws-cloudfront": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "cloudfront"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_s3", "aws_cloudfront", "cloud"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/dashboard.png deleted file mode 100644 index e016871e93..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/logo.png b/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/logo.png deleted file mode 100644 index 0d1c276072..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudfront/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-1.0.0.ndjson deleted file mode 100644 index 9ee724da22..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/assets/aws_cloudtrail-1.0.0.ndjson +++ /dev/null @@ -1,21 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.AuthenticationMethod.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.AuthenticationMethod\"}}},{\"count\":0,\"name\":\"additionalEventData.CipherSuite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.CipherSuite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.CipherSuite\"}}},{\"count\":0,\"name\":\"additionalEventData.SSEApplied\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.SSEApplied.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.SSEApplied\"}}},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.SignatureVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.SignatureVersion\"}}},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredIn\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.bytesTransferredOut\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"additionalEventData.x-amz-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"additionalEventData.x-amz-id-2\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.apiVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.cloudtrail.awsRegion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":2,\"name\":\"errorCode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorCode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"errorCode\"}}},{\"count\":2,\"name\":\"errorMessage\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"errorMessage.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"errorMessage\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.eventCategory\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"eventID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"eventID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"eventID\"}}},{\"count\":2,\"name\":\"aws.cloudtrail.eventName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.cloudtrail.eventSource\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.eventVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"managementEvent\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"readOnly\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"recipientAccountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"recipientAccountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"recipientAccountId\"}}},{\"count\":0,\"name\":\"requestID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"requestID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"requestID\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameter.endTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameter.startTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.Host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.Host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.Host\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Event\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.QueueConfiguration.Queue\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.NotificationConfiguration.xmlns\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aRN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aRN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.aRN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.accelerate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.accelerate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.accelerate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.acl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.acl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.acl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.advancedOptions.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.advancedSecurityOptions.masterUserOptions.masterUserARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aggregateField\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.aggregateField.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.aggregateField\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.architectures\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.architectures.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.architectures\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.DelaySeconds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.MaximumMessageSize\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.MessageRetentionPeriod\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.ReceiveMessageWaitTimeSeconds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.RedrivePolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.attribute.VisibilityTimeout\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.bucketName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.bucketName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Bucket\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Bucket.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.code.s3Bucket\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.code.s3Key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.code.s3Key\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextEquals.aws:lambda:FunctionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.constraints.encryptionContextSubset.domainARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.cors\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.cors.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.cors\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.description\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.documentName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.documentName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.documentName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainNames\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.domainNames.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.domainNames\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.dryRun\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.durationSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryption\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionAlgorithm\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:cloudtrail:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:kinesis:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:lambda:FunctionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.aws:s3:arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.encryptionContext.domainARN\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.engineVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.engineVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.engineVersion\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.externalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.externalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.externalId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filter.eventStatusCodes\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.startTimes.from\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filter.startTimes.from.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filter.startTimes.from\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filterSet.items.name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filterSet.items.valueSet.items.value\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filters.name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.values\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.filters.values.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.filters.values\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.functionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.functionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.functionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.granteePrincipal\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.granteePrincipal.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.granteePrincipal\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.groupSet.items.groupId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.handler\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.handler.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.handler\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.includeAllInstances\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.instancesSet.items.instanceId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.itemsPerPage\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.key\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.keyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keySpec\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.keySpec.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.keySpec\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.layers\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.layers.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.layers\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.lifecycle\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.lifecycle.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.lifecycle\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.locale\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.locale.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.locale\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logGroupName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logGroupName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logGroupName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logStreamName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logStreamName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logStreamName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logging\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.logging.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.logging\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.maxResults\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notification\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notification.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.notification\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.notificationFilter.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.numberOfBytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.object-lock\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.object-lock.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.object-lock\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.operations\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.operations.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.operations\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.parameters.commands\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.parameters.commands.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.parameters.commands\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.policy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policyName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.policyName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.policyName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publicAccessBlock\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publicAccessBlock.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.publicAccessBlock\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.publish\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.queueName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.queueName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.queueName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.replication\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.replication.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.replication\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.requestPayer\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayment\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.requestPayment.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.requestPayment\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.retiringPrincipal\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.retiringPrincipal.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.retiringPrincipal\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.role\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.role.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.role\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleSessionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.roleSessionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.roleSessionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.runtime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.runtime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.runtime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.securityGroupIdSet.items.groupId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.stackName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.stackName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.stackName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.subnetId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.subnetSet.items.subnetId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tagging\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tagging.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tagging\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:logical-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.tags.aws:cloudformation:stack-name\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.targetGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.targetGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.targetGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.uUID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.uUID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.uUID\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.versioning\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.versioning.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.versioning\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcConfig.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcConfig.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.vpcSet.items.vpcId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.website\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.website.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.website\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-acl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-acl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-acl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-aws-kms-key-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption-context\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.requestParameters.x-amz-server-side-encryption\"}}},{\"count\":0,\"name\":\"resources.ARN\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.ARN.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.ARN\"}}},{\"count\":0,\"name\":\"resources.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.accountId\"}}},{\"count\":0,\"name\":\"resources.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"resources.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"resources.type\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.architectures\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.architectures.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.architectures\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.assumedRoleUser.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.assumedRoleUser.assumedRoleId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.certificateSummaryList.certificateArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.certificateSummaryList.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSha256\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSha256.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.codeSha256\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchLogGroupName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.cloudWatchOutputConfig.cloudWatchOutputEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.commandId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.commandId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.commandId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.comment\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.comment.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.comment\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.completedCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.deliveryTimedOutCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.documentName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.documentVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.documentVersion\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.errorCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.expiresAfter\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.expiresAfter.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.expiresAfter\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.interactive\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxConcurrency\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxConcurrency.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.maxConcurrency\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxErrors\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.maxErrors.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.maxErrors\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.notificationConfig.notificationType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3BucketName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3BucketName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3BucketName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3KeyPrefix\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3Region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.outputS3Region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.outputS3Region\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.parameters.commands\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.parameters.commands.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.parameters.commands\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.requestedDateTime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.requestedDateTime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.requestedDateTime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.serviceRole\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.serviceRole.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.serviceRole\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.status\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.status.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.status\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.statusDetails\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.statusDetails.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.command.statusDetails\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.targetCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.command.timeoutSeconds\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.accessKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.accessKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.expiration\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.expiration.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.expiration\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.sessionToken\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.credentials.sessionToken.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.credentials.sessionToken\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.description\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.description.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.description\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.fielddata.cache.size\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.override_main_response_version\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.anonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.desiredState\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.options.rollbackOnDisable\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.clusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.options.tLSSecurityPolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.options.volumeType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.options.kmsKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.engineVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.availabilityZones\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.options.vPCId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.domainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.accessPolicies.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.fielddata.cache.size\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.indices.query.bool.max_clause_count\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.override_main_response_version\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.options.rest.action.multi.allow_explicit_index\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.anonymousAuthEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.options.internalUserDatabaseEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.advancedSecurityOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.desiredState\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.options.rollbackOnDisable\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.autoTuneOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.cognitoOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.customEndpointEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.enforceHTTPS\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.options.tLSSecurityPolicy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.domainEndpointOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.eBSEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.options.volumeType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.eBSOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.coldStorageOptions.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.dedicatedMasterEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceCount\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.instanceType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.warmEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.options.zoneAwarenessEnabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchClusterConfig.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.options\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.elasticsearchVersion.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.options.kmsKeyId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.encryptionAtRestOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.cloudWatchLogsLogGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.AUDIT_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.cloudWatchLogsLogGroupArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.options.ES_APPLICATION_LOGS.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.logPublishingOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.options.enabled\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.nodeToNodeEncryptionOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.options.automatedSnapshotStartHour\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.snapshotOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.availabilityZones\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.options.vPCId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.creationDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.pendingDeletion\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateDate\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.elasticsearchDomainConfig.vPCOptions.status.updateVersion\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionArn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionArn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.functionArn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.functionName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.functionName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.grantId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.grantId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.grantId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.handler\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.handler.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.handler\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.isOpenSearchDomain\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.lastModified\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.layers.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.codeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.layers.uncompressedCodeSize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.memorySize\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.notificationFilter.domainName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.notificationFilter.domainName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.notificationFilter.domainName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.packageType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.packageType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.packageType\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.queueUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.queueUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.queueUrl\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.revisionId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.revisionId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.revisionId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.role\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.role.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.role\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.runtime\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.runtime.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.runtime\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.state\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.state.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.state\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReason\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReason.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.stateReason\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReasonCode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.stateReasonCode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.stateReasonCode\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.timeout\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.tracingConfig.mode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.tracingConfig.mode.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.tracingConfig.mode\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.securityGroupIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.subnetIds\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.vpcConfig.vpcId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-aws-kms-key-id\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption-context\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.responseElements.x-amz-server-side-encryption\"}}},{\"count\":0,\"name\":\"sessionCredentialFromConsole\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"sessionCredentialFromConsole.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"sessionCredentialFromConsole\"}}},{\"count\":0,\"name\":\"sharedEventID\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"sharedEventID.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"sharedEventID\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.sourceIPAddress\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"tlsDetails.cipherSuite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.cipherSuite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.cipherSuite\"}}},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.clientProvidedHostHeader.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.clientProvidedHostHeader\"}}},{\"count\":0,\"name\":\"tlsDetails.tlsVersion\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"tlsDetails.tlsVersion.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tlsDetails.tlsVersion\"}}},{\"count\":1,\"name\":\"userAgent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"userAgent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"userAgent\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accessKeyId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accessKeyId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.accessKeyId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.accountId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.invokedBy\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.invokedBy.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.invokedBy\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.principalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.principalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.principalId\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.creationDate\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.attributes.mfaAuthenticated\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.principalId\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type\"}}},{\"count\":1,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName\"}}},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.cloudtrail.userIdentity.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.cloudtrail.userIdentity.type\"}}},{\"count\":0,\"name\":\"vpcEndpointId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"vpcEndpointId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"vpcEndpointId\"}}}]","timeFieldName":"@timestamp","title":"logs-cloudtrail-*"},"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-cloudtrail-Global Control","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Global Control\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1637912766383\",\"fieldName\":\"aws.cloudtrail.awsRegion\",\"parent\":\"\",\"label\":\"Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"2f4453a0-7656-4f9e-95f8-6f256f8bbe88","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"control_0_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODUsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"6e8d4de9-9155-439c-931b-7a132103a5ea","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event by Account ID","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event by Account ID\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.accountId.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"9d920995-e840-4a08-878d-83cea0747442","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Total Event Count","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Total Event Count\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Event Count\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"03f7fe92-91c3-428f-8101-65b8f52aa407","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Event Names","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Event Names\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event Name\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"f8fc3f7e-fcff-4ff5-b77d-173bf6bed7fa","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3ODksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Event Sources","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Event Sources\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventSource\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event Source\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"e59b01fc-ae37-4c01-b273-5fce7cd370d4","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event Category","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event Category\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventCategory\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c0eb6e39-632a-45f6-874b-24006109eef8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Event By Region","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Event By Region\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.awsRegion\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"96d86ed0-956c-4c03-a794-134a3cb641a9","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Users","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Users\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":false,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.accountId.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Account Id\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"22a35f7d-94c5-4aac-964a-5f5070d3598f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"not aws.cloudtrail.sourceIPAddress:*.amazon*.com* AWS*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-Top Source IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top Source IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.sourceIPAddress\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"f79a4627-4901-41bd-acf3-e8d9dbb94487","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: s3*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-cloudtrail-S3 Buckets","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-S3 Buckets\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"4ac6d38a-432b-4b8a-be69-28812dd3b4ce","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTUsMV0="} -{"attributes":{"columns":["_source"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"not (aws.cloudtrail.eventName: Get* Describe* List* Head*)\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-cloudtrail-Change Events","version":1},"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","migrationVersion":{"search":"7.9.3"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: s3*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-Top S3 Change Events","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top S3 Change Events\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Event\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.requestParameters.bucketName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Bucket Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"69e9b30c-3a0a-4eb7-8755-c5e5086cc794","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: ec2* and aws.cloudtrail.eventName: (RunInstances or TerminateInstances or RunInstances or StopInstances)\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-EC2 Instance Changes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-EC2 Instance Changes\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"824a6747-e2ab-4496-b7b1-d4ed2406f1d8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T07:48:05.128Z","version":"WzEwOTUyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: ec2*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-EC2 Changed By","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-EC2 Changed By\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"1454131e-9cf8-4a49-b130-e8734e7720cf","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk3OTksMV0="} -{"attributes":{"columns":["errorCode","errorMessage","aws.cloudtrail.eventName","aws.cloudtrail.eventSource","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.userName","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.accountId","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.arn","aws.cloudtrail.userIdentity.sessionContext.sessionIssuer.type","aws.cloudtrail.awsRegion","aws.cloudtrail.sourceIPAddress","userAgent","aws.cloudtrail.userIdentity.accountId"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"errorCode:*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-cloudtrail-Error Events","version":1},"id":"7510af05-211a-4a69-a31b-f7598c6a23ea","migrationVersion":{"search":"7.9.3"},"references":[{"id":"6deb655c-3874-4d69-8ca4-b7dd2bb4deb4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk4MDAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource: s3* and errorCode: AccessDenied\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-S3 Access Denied","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-cloudtrail-S3 Access Denied\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"1a4fb640-6842-4d38-878e-f358ae539467","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"7510af05-211a-4a69-a31b-f7598c6a23ea","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T05:26:12.529Z","version":"Wzk4MDIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.cloudtrail.eventSource:ec2*\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-cloudtrail-Top EC2 Change Events","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-cloudtrail-Top EC2 Change Events\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.cloudtrail.eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0072f560-7830-11ec-b46a-9fdf870dcc8c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"2a0d8449-816c-42ae-8c32-6182bf393d10","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-01-18T07:42:35.102Z","version":"WzEwOTMwLDFd"} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Global Control\"},\"gridData\":{\"h\":7,\"i\":\"f41fba39-1664-460f-9b7f-2da72a45eea9\",\"w\":12,\"x\":0,\"y\":0},\"panelIndex\":\"f41fba39-1664-460f-9b7f-2da72a45eea9\",\"title\":\"Global Control\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event History\"},\"gridData\":{\"h\":16,\"i\":\"f00cf363-a72e-4ef7-9e87-527d86ae8be2\",\"w\":24,\"x\":12,\"y\":0},\"panelIndex\":\"f00cf363-a72e-4ef7-9e87-527d86ae8be2\",\"title\":\"Event History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event by Account ID\"},\"gridData\":{\"h\":16,\"i\":\"19a014c4-0fec-40bc-914d-b985b2b84c1b\",\"w\":12,\"x\":36,\"y\":0},\"panelIndex\":\"19a014c4-0fec-40bc-914d-b985b2b84c1b\",\"title\":\"Event by Account ID\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Event Count\"},\"gridData\":{\"h\":9,\"i\":\"ef438b13-4c77-48b9-8ae0-c28ae717e0ac\",\"w\":12,\"x\":0,\"y\":7},\"panelIndex\":\"ef438b13-4c77-48b9-8ae0-c28ae717e0ac\",\"title\":\"Total Event Count\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Event Names\"},\"gridData\":{\"h\":18,\"i\":\"22948727-ec80-4cd2-9bae-c76889332504\",\"w\":12,\"x\":0,\"y\":16},\"panelIndex\":\"22948727-ec80-4cd2-9bae-c76889332504\",\"title\":\"Top Event Names\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Event Sources\"},\"gridData\":{\"h\":18,\"i\":\"f9525bf2-311b-4767-8d84-67fa5c7bdaf3\",\"w\":12,\"x\":12,\"y\":16},\"panelIndex\":\"f9525bf2-311b-4767-8d84-67fa5c7bdaf3\",\"title\":\"Top Event Sources\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event Category\"},\"gridData\":{\"h\":18,\"i\":\"b580d134-a5e0-4550-9aeb-c6f4fab07ae9\",\"w\":12,\"x\":24,\"y\":16},\"panelIndex\":\"b580d134-a5e0-4550-9aeb-c6f4fab07ae9\",\"title\":\"Event Category\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Event By Region\"},\"gridData\":{\"h\":18,\"i\":\"d097c4dc-bd4f-4789-a18e-93fcf034a73e\",\"w\":12,\"x\":36,\"y\":16},\"panelIndex\":\"d097c4dc-bd4f-4789-a18e-93fcf034a73e\",\"title\":\"Event By Region\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Users\"},\"gridData\":{\"h\":15,\"i\":\"2a5da7e5-6536-4f01-8110-a20829ac0409\",\"w\":24,\"x\":0,\"y\":34},\"panelIndex\":\"2a5da7e5-6536-4f01-8110-a20829ac0409\",\"title\":\"Top Users\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Source IPs\"},\"gridData\":{\"h\":15,\"i\":\"22ca4fe6-c0f7-4206-8b90-44b9bccf2623\",\"w\":24,\"x\":24,\"y\":34},\"panelIndex\":\"22ca4fe6-c0f7-4206-8b90-44b9bccf2623\",\"title\":\"Top Source IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"S3 Buckets\"},\"gridData\":{\"h\":15,\"i\":\"87635253-310f-4ce8-8331-ef86837b06a5\",\"w\":12,\"x\":12,\"y\":49},\"panelIndex\":\"87635253-310f-4ce8-8331-ef86837b06a5\",\"title\":\"S3 Buckets\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top S3 Change Events\"},\"gridData\":{\"h\":15,\"i\":\"10250bc9-3d7c-4d81-89ca-f1160c2ff69a\",\"w\":24,\"x\":24,\"y\":49},\"panelIndex\":\"10250bc9-3d7c-4d81-89ca-f1160c2ff69a\",\"title\":\"Top S3 Change Events\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"EC2 Change Event Count\"},\"gridData\":{\"h\":15,\"i\":\"782dc2e3-49c6-43a6-b384-38cd38d0af52\",\"w\":12,\"x\":0,\"y\":64},\"panelIndex\":\"782dc2e3-49c6-43a6-b384-38cd38d0af52\",\"title\":\"EC2 Change Event Count\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"EC2 Changed By\"},\"gridData\":{\"h\":15,\"i\":\"d3ee49b2-4822-4c29-95cf-34c2d895d0f8\",\"w\":12,\"x\":12,\"y\":64},\"panelIndex\":\"d3ee49b2-4822-4c29-95cf-34c2d895d0f8\",\"title\":\"EC2 Changed By\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Error Events\"},\"gridData\":{\"h\":17,\"i\":\"03cd460b-e704-493b-b593-e17bc5acc00d\",\"w\":48,\"x\":0,\"y\":79},\"panelIndex\":\"03cd460b-e704-493b-b593-e17bc5acc00d\",\"title\":\"Error Events\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"S3 Access Denied\"},\"gridData\":{\"h\":15,\"i\":\"13169bd6-695f-4d69-ab04-e1a8dce568c1\",\"w\":12,\"x\":0,\"y\":49},\"panelIndex\":\"13169bd6-695f-4d69-ab04-e1a8dce568c1\",\"title\":\"S3 Access Denied\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top EC2 Change Events\"},\"gridData\":{\"h\":15,\"i\":\"8220a178-d566-425d-a7bf-7b0a6e510ad7\",\"w\":24,\"x\":24,\"y\":64},\"panelIndex\":\"8220a178-d566-425d-a7bf-7b0a6e510ad7\",\"title\":\"Top EC2 Change Events\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_16\"}]","timeRestore":false,"title":"logs-cloudtrail-dashboard","version":1},"id":"58077a00-135b-4ff7-8d47-4d43d710709c","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"2f4453a0-7656-4f9e-95f8-6f256f8bbe88","name":"panel_0","type":"visualization"},{"id":"6e8d4de9-9155-439c-931b-7a132103a5ea","name":"panel_1","type":"visualization"},{"id":"9d920995-e840-4a08-878d-83cea0747442","name":"panel_2","type":"visualization"},{"id":"03f7fe92-91c3-428f-8101-65b8f52aa407","name":"panel_3","type":"visualization"},{"id":"f8fc3f7e-fcff-4ff5-b77d-173bf6bed7fa","name":"panel_4","type":"visualization"},{"id":"e59b01fc-ae37-4c01-b273-5fce7cd370d4","name":"panel_5","type":"visualization"},{"id":"c0eb6e39-632a-45f6-874b-24006109eef8","name":"panel_6","type":"visualization"},{"id":"96d86ed0-956c-4c03-a794-134a3cb641a9","name":"panel_7","type":"visualization"},{"id":"22a35f7d-94c5-4aac-964a-5f5070d3598f","name":"panel_8","type":"visualization"},{"id":"f79a4627-4901-41bd-acf3-e8d9dbb94487","name":"panel_9","type":"visualization"},{"id":"4ac6d38a-432b-4b8a-be69-28812dd3b4ce","name":"panel_10","type":"visualization"},{"id":"69e9b30c-3a0a-4eb7-8755-c5e5086cc794","name":"panel_11","type":"visualization"},{"id":"824a6747-e2ab-4496-b7b1-d4ed2406f1d8","name":"panel_12","type":"visualization"},{"id":"1454131e-9cf8-4a49-b130-e8734e7720cf","name":"panel_13","type":"visualization"},{"id":"7510af05-211a-4a69-a31b-f7598c6a23ea","name":"panel_14","type":"search"},{"id":"1a4fb640-6842-4d38-878e-f358ae539467","name":"panel_15","type":"visualization"},{"id":"0072f560-7830-11ec-b46a-9fdf870dcc8c","name":"panel_16","type":"visualization"}],"type":"dashboard","updated_at":"2022-01-18T07:53:29.943Z","version":"WzEwOTYyLDFd"} -{"exportedCount":20,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json deleted file mode 100644 index 41dbc35e80..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/aws_cloudtrail-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_cloudtrail", - "version": "1.0.0", - "displayName": "AWS CloudTrail", - "description": "AWS CloudTrail log collector", - "license": "Apache-2.0", - "type": "logs-aws_cloudtrail", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info", - "statics": { - "logo": { - "annotation": "AWS CloudTrail Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "AWS CloudTrail Log Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_cloudtrail", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs-aws_cloudtrail", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_cloudtrail", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "samples.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/data/samples.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/data/samples.json deleted file mode 100644 index fd2f0673d6..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/data/samples.json +++ /dev/null @@ -1,3772 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketAcl", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "bucketName": "aws-cloudtrail-mytrail-345678901234-059ac1d5", - "Host": "aws-cloudtrail-mytrail-345678901234-059ac1d5.s3.eu-west-1.amazonaws.com", - "acl": "" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "dNg98Ncsm0R/PygSHq0b0Qiyx2TDUq9jgC9wSxasWFiQ/hJPz1rv2RWiUWErUcWAZyJqKoxckNM=", - "bytesTransferredOut": 544 - }, - "requestID": "8RJVMXE049D1QTJ1", - "eventID": "8e6ffb2a-af42-47e6-9da9-8d90adbdc937", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "535103f5-cc74-4812-90dd-6861bfa00ff3", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-17T04:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketAcl", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "bucketName": "aws-cloudtrail-logs-345678901234-222dcf7b", - "Host": "aws-cloudtrail-logs-345678901234-222dcf7b.s3.eu-west-1.amazonaws.com", - "acl": "" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "So+s40fACXsYF+1FhABCrXEa0aVR8gVq+opzVP6cf5QM2cFHRJXgiCinvaZwka9srXZyWHdhXpk=", - "bytesTransferredOut": 544 - }, - "requestID": "8RJPPQN6E24AE3HY", - "eventID": "1b37f2f5-9b80-47a0-b3df-0ae7e531e211", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "120e2232-5d8f-4797-845d-5cae63fa2ad6", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "kms.amazonaws.com", - "eventName": "GenerateDataKey", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "keyId": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07", - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/mytrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_MTTBopRY9S74a4oz.json.gz" - }, - "keySpec": "AES_256" - }, - "responseElements": null, - "requestID": "1c50c36c-f026-4aeb-a503-fe1233629e5a", - "eventID": "139bde74-a3a8-4016-be18-e72c16f0cf3b", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "49038fb9-cc61-44e2-a093-ba9e37ba090d", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-16T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:ElasticLoadBalancingDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/ElasticLoadBalancingDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5C6HNYQPO", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:25Z", - "eventSource": "elasticloadbalancing.amazonaws.com", - "eventName": "DescribeLoadBalancers", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "6e6d4b82-eb0e-4741-955f-f89e0708a5ad", - "eventID": "e60f9221-0c7a-46d5-b92d-212afd22ce31", - "readOnly": true, - "eventType": "AwsApiCall", - "apiVersion": "2012-06-01", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "cloudtrail.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:24Z", - "eventSource": "kms.amazonaws.com", - "eventName": "GenerateDataKey", - "awsRegion": "eu-west-1", - "sourceIPAddress": "cloudtrail.amazonaws.com", - "userAgent": "cloudtrail.amazonaws.com", - "requestParameters": { - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/testtrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_ypT1EKjIs0DWxgUy.json.gz" - }, - "keyId": "arn:aws:kms:eu-west-1:345678901234:key/fcf34ed2-684c-4d2d-9dae-d173e6794772", - "keySpec": "AES_256" - }, - "responseElements": null, - "requestID": "b36013b4-e873-4553-a6c2-220a8bb04f1d", - "eventID": "9805eabd-1d03-472f-933f-f4032e0fe9f2", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/fcf34ed2-684c-4d2d-9dae-d173e6794772" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "5655d7ec-f1b6-4bec-948e-c0cc072fd7f9", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "SNSDescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5I34W7W7V", - "expiration": "Dec 2, 2021 11:11:28 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession" - } - }, - "requestID": "a10348a0-c7f4-4d5a-b596-39339966b01c", - "eventID": "104a2289-b51e-4d49-99ca-8bfb90c786e5", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "c87280b6-b9ba-46af-849e-ddf7fa509848", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5KP6PYYL2B:LogHub-Pipe-bfe64-S3toOpenSearchStacklogSenderFnEB-tm2bztjl5WTH", - "arn": "arn:aws:sts::345678901234:assumed-role/LogHub-Pipe-bfe64-S3toOpenSearchStackSenderLambdaR-UNR6O2WK9FTV/LogHub-Pipe-bfe64-S3toOpenSearchStacklogSenderFnEB-tm2bztjl5WTH", - "accountId": "345678901234", - "accessKeyId": "ASIAINP7HHMSNLIOUBQA", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5KP6PYYL2B", - "arn": "arn:aws:iam::345678901234:role/LogHub-Pipe-bfe64-S3toOpenSearchStackSenderLambdaR-UNR6O2WK9FTV", - "accountId": "345678901234", - "userName": "LogHub-Pipe-bfe64-S3toOpenSearchStackSenderLambdaR-UNR6O2WK9FTV" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:55:55Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:26Z", - "eventSource": "kms.amazonaws.com", - "eventName": "Decrypt", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "encryptionAlgorithm": "SYMMETRIC_DEFAULT", - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/testtrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_ypT1EKjIs0DWxgUy.json.gz" - } - }, - "responseElements": null, - "requestID": "1680225e-b40b-4a67-8475-5ca97a54d4e4", - "eventID": "91874e34-57fa-492e-8ed0-f605ef8c684c", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/fcf34ed2-684c-4d2d-9dae-d173e6794772" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-18T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession", - "accountId": "345678901234", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:29Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "ec2.amazonaws.com", - "eventName": "DescribeNatGateways", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "DescribeNatGatewaysRequest": "" - }, - "responseElements": null, - "requestID": "591df254-404d-4a85-a2c9-df17c5706945", - "eventID": "25367e85-8135-4de4-aa45-07faf56b4024", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-19T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "EC2DescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5DDQJXD5O", - "expiration": "Dec 2, 2021 11:11:28 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession" - } - }, - "requestID": "c97d3f28-a45b-40ac-9e52-b7434aadfa91", - "eventID": "cd69c7b4-ea2f-4b7e-b36e-ea28f28a18cf", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "014a546e-de1c-4cb1-ab26-995d2a6690a1", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T01:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:25Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "ElasticLoadBalancingDescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5PRXFTYSS", - "expiration": "Dec 2, 2021 11:11:25 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:ElasticLoadBalancingDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/ElasticLoadBalancingDescribeHandlerSession" - } - }, - "requestID": "865d2e3c-24f1-49f6-b107-690ce5dfb254", - "eventID": "a7f2465a-a4d0-473c-83a6-7ba01548d364", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "00a0b0c9-b74c-44ed-b4e3-7e0cbf914fd9", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "EC2DescribeHandlerSession" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5E2JWWGOX", - "expiration": "Dec 2, 2021 11:11:29 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession" - } - }, - "requestID": "0f376fbd-06ed-4788-9c9c-ea5c0aa020b2", - "eventID": "cc7c5811-204b-4483-8aba-38f87e31130d", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "f8001dce-ba63-4bed-8715-7e3446c6dfcf", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-20T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638481888699734314", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638481888699734314", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5A2ZEP66K", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5NMPY4GP3I", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAppSync" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:51:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "xray.amazonaws.com", - "eventName": "GetSamplingRules", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "009eb0aa-62c5-4354-96e6-22b99a42983a", - "eventID": "c14bdebf-495a-4aaf-8dc0-073678ad321b", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T10:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:EC2DescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/EC2DescribeHandlerSession", - "accountId": "345678901234", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "ec2.amazonaws.com", - "eventName": "DescribeEgressOnlyInternetGateways", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "DescribeEgressOnlyInternetGatewaysRequest": "" - }, - "responseElements": null, - "requestID": "c75f6f99-dcdd-4e59-86dd-10369d7b3216", - "eventID": "94aa8445-d4e4-47d4-82fd-8caccc2156f2", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5MGPHCXONO:CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "arn": "arn:aws:sts::345678901234:assumed-role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK/CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "accountId": "345678901234", - "accessKeyId": "ASIAIYLMNBUCLSGRCUEQ", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5MGPHCXONO", - "arn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "accountId": "345678901234", - "userName": "CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:05:42Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:26Z", - "eventSource": "kms.amazonaws.com", - "eventName": "Decrypt", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/mytrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_MTTBopRY9S74a4oz.json.gz" - }, - "encryptionAlgorithm": "SYMMETRIC_DEFAULT" - }, - "responseElements": null, - "requestID": "435c9405-c5ba-46f5-a619-31685eb66418", - "eventID": "1462107d-7eca-4f1b-aed2-5576c2d581d9", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "lambda.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:17Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "lambda.amazonaws.com", - "userAgent": "lambda.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "roleSessionName": "awslambda_248_20211202221117529" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5PWNBBPHJ", - "sessionToken": "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", - "expiration": "Dec 3, 2021, 10:21:17 AM" - } - }, - "requestID": "22ee1385-2d5d-4ddf-903a-b3a9ff7451fa", - "eventID": "84e2004a-7803-4421-aaf4-80049d925144", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "1473513b-ee8b-479b-a7b4-9b547b644063", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-19T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:25Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "roleSessionName": "AWSConfig-Describe" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5JFVRGKUN", - "expiration": "Dec 2, 2021 11:11:25 PM", - "sessionToken": "IQoJb3JpZ2luX2VjEF4aCWV1LXdlc3QtMSJGMEQCIHZcihmh3z3og65UjaHO5F31IPJr7nI7dJMfbE7a7X96AiAM1WmIgk1Z8TIvpFq2ygAbjjLps3mOPEflIbIQZ9LHayrVAgg3EAIaDDM0NzI4Mzg1MDEwNiIM9T0JTd1kQvdhw8V/KrICQ5VqAD2K7XCM29NRAeay8WjevkpcXqsPYNY8MDLAUNKvV1kQkjqp2N6oHhjThGNXWf7SA6Wv1kKJWhUv3PY436YlHKW6yUskEovxh6OWvWQTlIFBZvZ3oFK+BS2eqvt8WjD4rjL3OIGhiTZej4cYN92bXTBtBGJuFj+EzQGFEdjt8SPH1BhiRpe1zwaM/na8vlKZ6XcXEZoWEWDAJrUOEBTmRyAGsH0PSSGbUu4Enbjkhm6y8ZtvXeU/MZ70igYxgrlsfS7ANK9abXdImnxnqMpOGnR4pCHn8nLZgqF9HBqkB/CH+bvDuMjZfjsh6/TSZOH7A+fxclUYmbelkuoaZjYfBn9e9bxMcYynMGsM7xH8PPtyatAz6/05Vx75LwASKiM0tg7SREi9fgIrD5xVzK7LMI2JpY0GOsABV7fN6eIaaa0FYj5ID/3E0RS7wlm2XIFv94Vbq2EgnvnJ7tXmEjVm1gET+YjAkS9yTJjDbLXFwxSTyXoMCoeTHmf8ucbKYX2HwiuKGpljqx5z2e/1s8NAC8KAEAn0PBosWuLuP+uyIn5LmghQ26uHuG5KXHmHuxSfeTt0ZmUgcRjlsv0vtsCZNbF3qfhgpy8LKNr/KlUWxbsJpzvaW/iBupcqzDcRqp1DpYhQwrT5SoHPKDmUB4XyC0C9OOCHBG0u" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe" - } - }, - "requestID": "f7f55ba9-968a-4f9d-8c85-a46eb49c1dfd", - "eventID": "b7394b83-8ad5-4141-9d26-9c225f26bac3", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "d92e1358-d0a5-4641-9067-c037acde13d6", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T11:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638482156450755254", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638482156450755254", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DT2DFC4X", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5NMPY4GP3I", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAppSync" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:55:56Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:30Z", - "eventSource": "xray.amazonaws.com", - "eventName": "GetSamplingRules", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "f96d3ba2-2d66-419a-9383-5d168e08d469", - "eventID": "2fff4ca3-0270-4024-a87d-ba2cb67925b0", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-21T05:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5DGNE5U7AI:c95c6bcfe9033cfff4d3d0c295caf16e", - "arn": "arn:aws:sts::345678901234:assumed-role/LogHub-Pipe-3a2ac-CWtoOpenSearchStackCWDestination-1WCPOGLE1YLYQ/c95c6bcfe9033cfff4d3d0c295caf16e", - "accountId": "345678901234", - "accessKeyId": "ASIAI6XAITHH276POBAA", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5DGNE5U7AI", - "arn": "arn:aws:iam::345678901234:role/LogHub-Pipe-3a2ac-CWtoOpenSearchStackCWDestination-1WCPOGLE1YLYQ", - "accountId": "345678901234", - "userName": "LogHub-Pipe-3a2ac-CWtoOpenSearchStackCWDestination-1WCPOGLE1YLYQ" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:45:50Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "logs.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:35Z", - "eventSource": "kms.amazonaws.com", - "eventName": "GenerateDataKey", - "awsRegion": "eu-west-1", - "sourceIPAddress": "logs.amazonaws.com", - "userAgent": "logs.amazonaws.com", - "requestParameters": { - "keyId": "alias/aws/kinesis", - "encryptionContext": { - "aws:kinesis:arn": "arn:aws:kinesis:eu-west-1:345678901234:stream/LogHub-Pipe-3a2ac-CWtoOpenSearchStackcwDataStream22A58C70-plrsK4s3GlGG" - }, - "numberOfBytes": 32 - }, - "responseElements": null, - "requestID": "47e3f026-346b-47f0-aa9a-6b4666774c6d", - "eventID": "bf49badb-d471-4959-9124-cbc8140a9062", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/10a963d1-db97-4382-b1ac-43dc8bd25e1d" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638481533224676745", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638481533224676745", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5JTI2Z37S", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5NMPY4GP3I", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAppSync" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:45:33Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:38Z", - "eventSource": "xray.amazonaws.com", - "eventName": "GetSamplingRules", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "d51f80cb-3781-44ad-afa3-0bed72b04d47", - "eventID": "c1c8d9e7-ca8d-4073-8a72-1ae0e5f6867b", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T01:04:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:39Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aiden-dev-bucket-eu-west-1", - "location": "", - "Host": "aiden-dev-bucket-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "PQll1iX8iROo/BXhWQBtg7OdP7nvgtJlNhG+eJ+wtDmhfUBPI9sx71NmMnoIQTWY0XukN5+oUFw=", - "bytesTransferredOut": 137 - }, - "requestID": "CCXYWDEN4MCDJVTY", - "eventID": "49ddf02f-833e-4959-b094-00b2fa985a6f", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aiden-dev-bucket-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T00:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:46Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "athena-test-345678901234", - "location": "", - "Host": "athena-test-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "XretCbctKoEzHrERRsKrZ3BpKZzcp3369pHMIncBuTfeVCyBuO0gqWXdKUDzOVYs0XWYiBNLYl0=", - "bytesTransferredOut": 137 - }, - "requestID": "WGWND0SR7ZZ7SZSY", - "eventID": "acb46a34-899d-41df-84e5-34d2f729b020", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::athena-test-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-03T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5HYW6RMIDH:LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-czSef9qts2To", - "arn": "arn:aws:sts::345678901234:assumed-role/LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-1MBVWRVD11MZY/LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-czSef9qts2To", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5KXKBYXWC", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5HYW6RMIDH", - "arn": "arn:aws:iam::345678901234:role/LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-1MBVWRVD11MZY", - "accountId": "345678901234", - "userName": "LogHub-LogHubInstanceMetaAPIInstanceAgentStatusHan-1MBVWRVD11MZY" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:54:05Z", - "mfaAuthenticated": "false" - } - } - }, - "eventTime": "2021-12-02T22:11:27Z", - "eventSource": "ssm.amazonaws.com", - "eventName": "SendCommand", - "awsRegion": "eu-west-1", - "sourceIPAddress": "54.73.36.57", - "userAgent": "Boto3/1.18.55 Python/3.9.8 Linux/4.14.246-198.474.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 Botocore/1.21.55 AwsSolution/SO8025/v1.0.0", - "requestParameters": { - "instanceIds": [], - "documentName": "AWS-RunShellScript", - "parameters": { - "commands": ["curl -s http://127.0.0.1:2022/api/v1/health"] - }, - "interactive": false - }, - "responseElements": { - "command": { - "commandId": "8e3d5ca6-4cc2-46e3-b627-18d9a70fedb0", - "documentName": "AWS-RunShellScript", - "documentVersion": "$DEFAULT", - "comment": "", - "expiresAfter": "Dec 3, 2021 12:11:27 AM", - "parameters": { - "commands": ["curl -s http://127.0.0.1:2022/api/v1/health"] - }, - "instanceIds": [], - "targets": [], - "requestedDateTime": "Dec 2, 2021 10:11:27 PM", - "status": "Pending", - "statusDetails": "Pending", - "outputS3Region": "eu-west-1", - "outputS3BucketName": "", - "outputS3KeyPrefix": "", - "maxConcurrency": "50", - "maxErrors": "0", - "targetCount": 0, - "completedCount": 0, - "errorCount": 0, - "deliveryTimedOutCount": 0, - "serviceRole": "", - "notificationConfig": { - "notificationArn": "", - "notificationEvents": [], - "notificationType": "" - }, - "cloudWatchOutputConfig": { - "cloudWatchLogGroupName": "", - "cloudWatchOutputEnabled": false - }, - "interactive": false, - "timeoutSeconds": 3600 - } - }, - "requestID": "c9936d92-e4ec-45e5-a0d9-9f5276065f0e", - "eventID": "82b7e663-15c4-41e7-a631-6dbef3ef4729", - "readOnly": false, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management", - "tlsDetails": { - "tlsVersion": "TLSv1.2", - "cipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "clientProvidedHostHeader": "ssm.eu-west-1.amazonaws.com" - } - } - } - }, - { - "@timestamp": "2023-07-04T04:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:48Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-analytics-immersion-day-345678901234", - "location": "", - "Host": "aws-analytics-immersion-day-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "ZPjcMc0dDcRvfwe51SwOIJ6iUbWkwxitqwJ5rSSn7vQjNtFegUYdKzRld7RRB/lRvvzWbWQgF9k=", - "bytesTransferredOut": 137 - }, - "requestID": "QJRYXPP89ZF3BTSY", - "eventID": "3aefe5e4-28bd-4142-988c-084f28899583", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-analytics-immersion-day-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-07T07:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:48Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-athena-query-results-eu-west-1-345678901234", - "location": "", - "Host": "aws-athena-query-results-eu-west-1-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "VohwN8OUV/QqKbKju7h/ixMvx1IlxoDwV3W1EkU1Tj+QI04u9z/WU4fN4EldkMjAuupXMINOOlY=", - "bytesTransferredOut": 137 - }, - "requestID": "QJRW0RZF190KVV67", - "eventID": "a8f102f9-90a0-4dfd-a41c-f6d5f96e3106", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-athena-query-results-eu-west-1-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-08T08:08:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTopics", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": null, - "responseElements": null, - "requestID": "9648e71d-ccec-5021-bd07-bd3e8a3c512e", - "eventID": "44362cf0-d282-4961-8157-8552527aff01", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T09:09:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:LogHub-Alarm-d24af-AlarmTopicD01E77F9-14C8QVTFGPAVT" - }, - "responseElements": null, - "requestID": "bc3730d6-4c22-595f-bb49-6af50af21850", - "eventID": "e8bdb2f9-6085-4e75-8119-bea9babee5da", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T10:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:LogHub-Alarm-d24af-AlarmTopicD01E77F9-14C8QVTFGPAVT" - }, - "responseElements": null, - "requestID": "734ee4ff-8ba6-5c6b-87bb-bedccd765d64", - "eventID": "9d834ea8-1159-4c66-a8bd-f98ee3b20fc7", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T11:11:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:aosalert" - }, - "responseElements": null, - "requestID": "f0e55f08-27bf-5108-ab29-052b616fe007", - "eventID": "57fa9739-3c41-44cd-a7d4-4b0bacec7e1f", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T08:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:28Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:aosalert" - }, - "responseElements": null, - "requestID": "ef5c2cf2-2654-56a0-bf83-76d1608497af", - "eventID": "1a50e833-5714-4e53-ac40-58d364758d46", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T08:13:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:dynamodb" - }, - "responseElements": null, - "requestID": "1e083a45-439f-5d72-8bb7-6066054f0c7d", - "eventID": "9534b5a0-87f2-4387-bb2d-072c9d440792", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:dynamodb" - }, - "responseElements": null, - "requestID": "522d7e3e-1055-5d2e-baf3-241d56849c21", - "eventID": "1025f0ea-933f-44d4-a061-ab3cd7277872", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "GetTopicAttributes", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "topicArn": "arn:aws:sns:eu-west-1:345678901234:test" - }, - "responseElements": null, - "requestID": "9524e443-2dd5-5094-8cbd-be606b04119b", - "eventID": "130022b8-0f54-46d5-a23e-c204a9405d95", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:SNSDescribeHandlerSession", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/SNSDescribeHandlerSession", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5DKBTAAFP", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:28Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "config.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:29Z", - "eventSource": "sns.amazonaws.com", - "eventName": "ListTagsForResource", - "awsRegion": "eu-west-1", - "sourceIPAddress": "config.amazonaws.com", - "userAgent": "config.amazonaws.com", - "requestParameters": { - "resourceArn": "arn:aws:sns:eu-west-1:345678901234:test" - }, - "responseElements": null, - "requestID": "2faf9210-6118-5261-8b9f-c83327c9236e", - "eventID": "817b4334-e96d-4cd2-a62e-48b89ef0632b", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-codestar-eu-west-1-345678901234-ttt-pipe", - "location": "", - "Host": "aws-codestar-eu-west-1-345678901234-ttt-pipe.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "U2Ic6CLUmEVTRVybxggD3RcX1HEZ/+UfHaB90I/+2EVmgr8aYr5NsTwX5lwULqeInMIAPZgtPnY=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQN5WAHZZXHX33Q", - "eventID": "992cbca9-9b10-48c3-b30d-9424e1660f52", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-codestar-eu-west-1-345678901234-ttt-pipe" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-12T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-cloudtrail-logs-345678901234-222dcf7b", - "location": "", - "Host": "aws-cloudtrail-logs-345678901234-222dcf7b.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "0rOQRJtW/QlzOeECmnEBexQ2jkhxEyvqyXEXjWS1UmKIAS2ntDbFs4EmFxLxflTkFNlD08ILu7w=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQW09X84YDVPYG2", - "eventID": "b1adaa81-78ee-4ed5-943c-20b86fdcaf25", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-222dcf7b" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-emr-resources-345678901234-eu-west-1", - "location": "", - "Host": "aws-emr-resources-345678901234-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "eU3mf/D7Wdus2yUrFVguHjJ1DRgUJiQOkrgEm8bAmSRKSxc6G66ahoM5RZyFP/mvsl5NddzQZsw=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQG7YS0Q6XYT60X", - "eventID": "e6a11b04-bfa3-48f0-939a-47724e5dc9d0", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-emr-resources-345678901234-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-cloudtrail-mytrail-345678901234-059ac1d5", - "location": "", - "Host": "aws-cloudtrail-mytrail-345678901234-059ac1d5.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "2dwrLUy4GRjf3hVVijBjMO+rGfi2n29Q5AiXmemZCfkO8sjwiF3/ILZbq0HaBafehJ5hqghobsk=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQS8AKBYGHKFZ1Z", - "eventID": "c66c5dcd-bdde-4a3a-911f-2eadf4bef77f", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:49Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-cloudtrail-logs-345678901234-80d2c6dc", - "location": "", - "Host": "aws-cloudtrail-logs-345678901234-80d2c6dc.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "4WZ9IIaSDDIwPc8FMZBRJlT9TaL5OTDBBTqveOZFyCcdKd1gAsr00AxrDBHaPfLKMRRjosQxPpI=", - "bytesTransferredOut": 137 - }, - "requestID": "SKQY9MDFEQXNGDWB", - "eventID": "bd772ba6-6000-48bc-a6b6-7cd1ae4b3aa2", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-cloudtrail-logs-345678901234-80d2c6dc" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-13T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:50Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-lambda-12843845950", - "location": "", - "Host": "aws-lambda-12843845950.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "kac0MeC/LpQeiXDfklblUFBidNtGh5Z0I2uLXOqIqsp42zkcAk2Hpw2Zr58LIYOe+seQiUjBKho=", - "bytesTransferredOut": 137 - }, - "requestID": "KZQWJKKVB05YS0WM", - "eventID": "306357ab-fb96-4661-afd7-7ef92e1bef96", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-lambda-12843845950" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-11T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:50Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-lakeformation-129390405", - "location": "", - "Host": "aws-lakeformation-129390405.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "Zuwt3yDJ6v0ya438cDnKfNUok6QxEr9OG7uyMsuNF9v2tnIrcJLD5VTzGsciCcr5GNE60/Gacyk=", - "bytesTransferredOut": 137 - }, - "requestID": "KZQPN6GKTXMJ68YD", - "eventID": "20486240-5fc0-4318-975c-6771fbf4d0a3", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-lakeformation-129390405" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-10T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-sam-cli-managed-default-samclisourcebucket-13z2c2q3lq9gf", - "location": "", - "Host": "aws-sam-cli-managed-default-samclisourcebucket-13z2c2q3lq9gf.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "cznqhERGOHEJD5kNY4rS6tg3VSDMGJ5krr4z6LC+vgsouCapkAwSlO115HKXmhaGAUA3J1Ycm1k=", - "bytesTransferredOut": 137 - }, - "requestID": "G2VCQDS9MJ461PSC", - "eventID": "10e9d7bd-031e-4f23-9f70-68c3be3520e9", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-sam-cli-managed-default-samclisourcebucket-13z2c2q3lq9gf" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "cdk-hnb659fds-assets-345678901234-eu-west-1", - "location": "", - "Host": "cdk-hnb659fds-assets-345678901234-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "Q/Hx/3kBvUKHLt7hBdXQHrBRfK5yO3BTgUT/g8bjlOKvfbIW51wByEBm2JuojIgX+aBlu1zgFAg=", - "bytesTransferredOut": 137 - }, - "requestID": "G2V9PP7YF2NXTP9P", - "eventID": "3976c07a-b5da-489e-bad3-85c800885a45", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::cdk-hnb659fds-assets-345678901234-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-08T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:50Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "aws-logs-345678901234-eu-west-1", - "location": "", - "Host": "aws-logs-345678901234-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "+FlNNjS6V286Tut7CPrk9m96a0vhvWFo7m/f8W0oFl+rWIDvRV/jlw11hFbIvEbC4wrfkNHGfVk=", - "bytesTransferredOut": 137 - }, - "requestID": "KZQSBQ3F2B0MN5AX", - "eventID": "2f718b0c-a3c3-4799-b4db-71e76d786f5e", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::aws-logs-345678901234-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-07T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5LHWXI4D6J:AutoScaling", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAutoScaling/AutoScaling", - "accountId": "345678901234", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5LHWXI4D6J", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAutoScaling" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:49:58Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "autoscaling.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "ec2.amazonaws.com", - "eventName": "DescribeInstanceStatus", - "awsRegion": "eu-west-1", - "sourceIPAddress": "autoscaling.amazonaws.com", - "userAgent": "autoscaling.amazonaws.com", - "requestParameters": { - "instancesSet": { - "items": [ - { - "instanceId": "i-0b0ce43d329fca1f4" - }, - { - "instanceId": "i-05b3592bd89e5b189" - } - ] - }, - "filterSet": {}, - "includeAllInstances": true - }, - "responseElements": null, - "requestID": "1bc0d851-91a3-40d3-9cad-3c7ece4b04eb", - "eventID": "387141dd-43bf-440f-ab39-7ffc5eb90a83", - "readOnly": true, - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-06T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5LHWXI4D6J:AutoScaling", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAutoScaling/AutoScaling", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5JGPGGIHJ", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5LHWXI4D6J", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling", - "accountId": "345678901234", - "userName": "AWSServiceRoleForAutoScaling" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T21:49:58Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "autoscaling.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:53Z", - "eventSource": "elasticloadbalancing.amazonaws.com", - "eventName": "DescribeTargetHealth", - "awsRegion": "eu-west-1", - "sourceIPAddress": "autoscaling.amazonaws.com", - "userAgent": "autoscaling.amazonaws.com", - "requestParameters": { - "targetGroupArn": "arn:aws:elasticloadbalancing:eu-west-1:345678901234:targetgroup/LogHu-LoadB-12VYXWEUPWAXC/305585e75190679b", - "targets": [] - }, - "responseElements": null, - "requestID": "c17abcd8-daa0-4209-af14-d15fad4ca5be", - "eventID": "b3053862-7a5c-4765-9c71-f4fb5b1433d5", - "readOnly": true, - "eventType": "AwsApiCall", - "apiVersion": "2015-12-01", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-05T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:11:58Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "cf-templates-1u5skpqfeees8-eu-west-1", - "location": "", - "Host": "cf-templates-1u5skpqfeees8-eu-west-1.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "pyZhEd+wolkH6ZUy7ZU5nnzsIyjlnSO7zi6gA8R9GtmEl7MxWhXpbRmDntivRAWn1rUPhCIuHF8=", - "bytesTransferredOut": 137 - }, - "requestID": "7D7FR0D0TBSB4FED", - "eventID": "f9a7d9ec-3ffd-492a-be33-44aa9a4e825f", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::cf-templates-1u5skpqfeees8-eu-west-1" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-04T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "appsync.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:54Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "appsync.amazonaws.com", - "userAgent": "appsync.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync", - "roleSessionName": "xray-daemon-1638483114921406273", - "durationSeconds": 3600 - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5EZSWT2UV", - "expiration": "Dec 2, 2021 11:11:54 PM", - "sessionToken": "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" - }, - "assumedRoleUser": { - "assumedRoleId": "AROAVBW53AN5NMPY4GP3I:xray-daemon-1638483114921406273", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForAppSync/xray-daemon-1638483114921406273" - } - }, - "requestID": "eb91a628-e311-4425-bd0e-f62c2e016a5b", - "eventID": "ad1664dc-7b3e-4983-a9b5-1fbc77c346d2", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/aws-service-role/appsync.amazonaws.com/AWSServiceRoleForAppSync" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "d39f1780-7857-437e-96b5-e6374dd73648", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-03T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5GFCIVAFEF:AWSConfig-Describe", - "arn": "arn:aws:sts::345678901234:assumed-role/AWSServiceRoleForConfig/AWSConfig-Describe", - "accountId": "345678901234", - "accessKeyId": "ASIAVBW53AN5GW3HPS62", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5GFCIVAFEF", - "arn": "arn:aws:iam::345678901234:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig", - "accountId": "345678901234", - "userName": "AWSServiceRoleForConfig" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:11:25Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:12:01Z", - "eventSource": "s3.amazonaws.com", - "eventName": "GetBucketLocation", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "bucketName": "config-bucket-345678901234", - "location": "", - "Host": "config-bucket-345678901234.s3.eu-west-1.amazonaws.com" - }, - "responseElements": null, - "additionalEventData": { - "SignatureVersion": "SigV4", - "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256", - "bytesTransferredIn": 0, - "AuthenticationMethod": "AuthHeader", - "x-amz-id-2": "0aIyxjqrw+4q7wSZJ4lPtHAIME142K9BJM71kt8NivdbIdjf0fAgBG4tU7c+dEJnw5Bhduyz7P0=", - "bytesTransferredOut": 137 - }, - "requestID": "79KTRM4E1FT4RXHF", - "eventID": "26f909a5-ae64-4d3d-9cbe-f77e5aeaead4", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::S3::Bucket", - "ARN": "arn:aws:s3:::config-bucket-345678901234" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "vpcEndpointId": "vpce-61638908", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-02T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AWSService", - "invokedBy": "lambda.amazonaws.com" - }, - "eventTime": "2021-12-02T22:11:46Z", - "eventSource": "sts.amazonaws.com", - "eventName": "AssumeRole", - "awsRegion": "eu-west-1", - "sourceIPAddress": "lambda.amazonaws.com", - "userAgent": "lambda.amazonaws.com", - "requestParameters": { - "roleArn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "roleSessionName": "awslambda_198_20211202221146461" - }, - "responseElements": { - "credentials": { - "accessKeyId": "ASIAVBW53AN5P2F5Z6HL", - "sessionToken": "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", - "expiration": "Dec 3, 2021, 10:21:46 AM" - } - }, - "requestID": "b9c11daf-8414-4fe5-8336-0bd381f230c4", - "eventID": "a3731201-bf60-458f-8ace-643ed7a510b4", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::IAM::Role", - "ARN": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "sharedEventID": "58eec27e-5418-4ff7-bcfc-d79cbb8d48af", - "eventCategory": "Management" - } - } - }, - { - "@timestamp": "2023-07-01T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "cloud_trail", - "domain": "cloudtrail" - }, - "attributes": { - "data_stream": { - "dataset": "cloudtrail_log", - "namespace": "production", - "type": "cloud_trail_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "cloudtrail": { - "eventVersion": "1.08", - "userIdentity": { - "type": "AssumedRole", - "principalId": "AROAVBW53AN5MGPHCXONO:CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "arn": "arn:aws:sts::345678901234:assumed-role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK/CloudTrailLog-CloudTrailLogPipelineLogProcessorFnE-Pkgt7cmJfhQj", - "accountId": "345678901234", - "accessKeyId": "ASIAJCK5XCYKUUIL4LHQ", - "sessionContext": { - "sessionIssuer": { - "type": "Role", - "principalId": "AROAVBW53AN5MGPHCXONO", - "arn": "arn:aws:iam::345678901234:role/CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK", - "accountId": "345678901234", - "userName": "CloudTrailLog-CloudTrailLogPipelineLogProcessorRol-LMN03K1C37JK" - }, - "webIdFederationData": {}, - "attributes": { - "creationDate": "2021-12-02T22:05:42Z", - "mfaAuthenticated": "false" - } - }, - "invokedBy": "AWS Internal" - }, - "eventTime": "2021-12-02T22:12:03Z", - "eventSource": "kms.amazonaws.com", - "eventName": "Decrypt", - "awsRegion": "eu-west-1", - "sourceIPAddress": "AWS Internal", - "userAgent": "AWS Internal", - "requestParameters": { - "encryptionContext": { - "aws:cloudtrail:arn": "arn:aws:cloudtrail:eu-west-1:345678901234:trail/mytrail", - "aws:s3:arn": "arn:aws:s3:::aws-cloudtrail-mytrail-345678901234-059ac1d5/AWSLogs/345678901234/CloudTrail/eu-west-1/2021/12/02/345678901234_CloudTrail_eu-west-1_20211202T2215Z_CZFG6hKgcknqRdCV.json.gz" - }, - "encryptionAlgorithm": "SYMMETRIC_DEFAULT" - }, - "responseElements": null, - "requestID": "5dbc9731-abc3-4119-a143-48d7cdf19f7f", - "eventID": "357d36d4-7ff6-413c-80aa-72c495b0dbe5", - "readOnly": true, - "resources": [ - { - "accountId": "345678901234", - "type": "AWS::KMS::Key", - "ARN": "arn:aws:kms:eu-west-1:345678901234:key/3a833466-7f7f-4e6d-bb49-63b35c2eab07" - } - ], - "eventType": "AwsApiCall", - "managementEvent": true, - "recipientAccountId": "345678901234", - "eventCategory": "Management" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info/README.md b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info/README.md deleted file mode 100644 index ebe70b8a7f..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/info/README.md +++ /dev/null @@ -1,30 +0,0 @@ -# AWS CloudTrail Log Integration - -## What is AWS CloudTrail? - -AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. - -CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services. - -CloudTrail can be used for a number of tasks, such as: - -- Simplifying compliance auditing -- Tracking changes to AWS resources -- Troubleshooting operational issues -- Identifying unwanted actions or unexpected patterns in behavior - -CloudTrail's event log data is delivered to an S3 bucket, and does not affect network throughput or latency. You can create or delete CloudTrail logs without any risk of impact to system performance. - -See additional details [here](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html). - -## What is AWS CloudTrail Log Integration? - -An integration is a set of pre-configured assets which are bundled together in a meaningful manner. - -AWS CloudTrail log integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-cloudtrail` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_cloudtrail-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_cloudtrail-1.0.0.mapping.json deleted file mode 100644 index 11e5eb3796..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_cloudtrail-1.0.0.mapping.json +++ /dev/null @@ -1,87 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_cloudtrail", - "labels": ["aws", "cloudtrail"] - }, - "properties": { - "aws": { - "type": "object", - "properties": { - "cloudtrail": { - "type": "object", - "properties": { - "eventVersion": { - "type": "keyword" - }, - "eventName": { - "type": "keyword" - }, - "eventSource": { - "type": "keyword" - }, - "eventTime": { - "type": "date" - }, - "eventType": { - "type": "keyword" - }, - "eventCategory": { - "type": "keyword" - }, - "sourceIPAddress": { - "type": "keyword" - }, - "apiVersion": { - "type": "keyword" - }, - "awsRegion": { - "type": "keyword" - }, - "requestParameter": { - "properties": { - "endTime": { - "type": "date" - }, - "startTime": { - "type": "date" - } - } - }, - "responseElements": { - "properties": { - "version": { - "type": "keyword" - }, - "lastModified": { - "type": "date" - } - } - }, - "userIdentity": { - "properties": { - "sessionContext": { - "properties": { - "attributes": { - "properties": { - "creationDate": { - "type": "date" - } - } - } - } - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index 8057cd98ab..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/logs-aws_cloudtrail-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/logs-aws_cloudtrail-1.0.0.mapping.json deleted file mode 100644 index 013792ee4e..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/schemas/logs-aws_cloudtrail-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_cloudtrail-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-cloudtrail": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "cloudtrail"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["cloud", "aws_cloudtrail", "aws_s3"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/dashboard.png deleted file mode 100644 index e01f638c68..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/logo.png b/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/logo.png deleted file mode 100644 index 46e71685d5..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_cloudtrail/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/assets/aws_elb-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_elb/assets/aws_elb-1.0.0.ndjson deleted file mode 100644 index 3489b2b6ac..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/assets/aws_elb-1.0.0.ndjson +++ /dev/null @@ -1,22 +0,0 @@ -{"attributes": {"fields": "[{\"name\": \"_index\", \"type\": \"string\", \"esTypes\": [\"_index\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"_score\", \"type\": \"number\", \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"_source\", \"type\": \"_source\", \"esTypes\": [\"_source\"], \"count\": 0, \"scripted\": false, \"searchable\": false, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"_type\", \"type\": \"string\", \"esTypes\": [\"_type\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": false}, {\"name\": \"severity.number\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"severity.text\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"severity.text.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"severity.text\"}}}, {\"name\": \"attributes.data_stream.dataset\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"attributes.data_stream.namespace\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"attributes.data_stream.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"body\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"@message\", \"type\": \"string\", \"esTypes\": [\"alias\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"@timestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"observedTimestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"observerTime\", \"type\": \"string\", \"esTypes\": [\"alias\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"traceId\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"spanId\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"schemaUrl\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"schemaUrl.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"schemaUrl\"}}}, {\"name\": \"instrumentationScope.name\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.name.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.name\"}}}, {\"name\": \"instrumentationScope.version\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.version.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.version\"}}}, {\"name\": \"instrumentationScope.dropped_attributes_count\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"instrumentationScope.schemaUrl\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"instrumentationScope.schemaUrl.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"instrumentationScope.schemaUrl\"}}}, {\"name\": \"event.domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.source\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.category\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.kind\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.result\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.message\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"event.exception.stacktrace\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.backend.status_code\", \"type\": \"number\", \"esTypes\": [\"short\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.client.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.client.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.connection_time\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.destination.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.destination.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.elb_status_code\", \"type\": \"number\", \"esTypes\": [\"short\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.http.port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.http.version\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.matched_rule_priority\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.received_bytes\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.request_creation_time\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.request_processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.response_processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.sent_bytes\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.ssl_protocol\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.ssl_cipher\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_port\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_processing_time\", \"type\": \"number\", \"esTypes\": [\"half_float\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.target_status_code\", \"type\": \"number\", \"esTypes\": [\"short\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"aws.elb.timestamp\", \"type\": \"date\", \"esTypes\": [\"date\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.flavor\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.url\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.schema\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.target\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.route\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.client.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.resent_count\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.id\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"http.request.id.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"http.request.id\"}}}, {\"name\": \"http.request.body.content\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.method\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.referrer\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.request.mime_type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.id\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"http.response.id.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"http.response.id\"}}}, {\"name\": \"http.response.body.content\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.response.status_code\", \"type\": \"number\", \"esTypes\": [\"integer\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.sock.family\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.address\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.source.address.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.source.address\"}}}, {\"name\": \"communication.source.domain\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.source.domain.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.source.domain\"}}}, {\"name\": \"communication.source.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.mac\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.packets\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.city_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.country_iso_code\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.country_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.source.geo.location\", \"type\": \"geo_point\", \"esTypes\": [\"geo_point\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.address\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.destination.address.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.destination.address\"}}}, {\"name\": \"communication.destination.domain\", \"type\": \"string\", \"esTypes\": [\"text\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": false, \"readFromDocValues\": false}, {\"name\": \"communication.destination.domain.keyword\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true, \"subType\": {\"multi\": {\"parent\": \"communication.destination.domain\"}}}, {\"name\": \"communication.destination.bytes\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.ip\", \"type\": \"ip\", \"esTypes\": [\"ip\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.mac\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.packets\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.city_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.country_iso_code\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.country_name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"communication.destination.geo.location\", \"type\": \"geo_point\", \"esTypes\": [\"geo_point\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.provider\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.availability_zone\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.region\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.machine.type\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.account.id\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.account.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.service.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.project.id\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.project.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.instance.id\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"cloud.instance.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.original\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.full\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.scheme\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.registered_domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.top_level_domain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.subdomain\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.port\", \"type\": \"number\", \"esTypes\": [\"long\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.path\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.query\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.extension\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.fragment\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.username\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"url.password\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.original\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.version\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}, {\"name\": \"http.user_agent.device.name\", \"type\": \"string\", \"esTypes\": [\"keyword\"], \"count\": 0, \"scripted\": false, \"searchable\": true, \"aggregatable\": true, \"readFromDocValues\": true}]", "timeFieldName": "@timestamp", "title": "ss4o_logs-*-*"}, "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "migrationVersion": {"index-pattern": "7.6.0"}, "references": [], "type": "index-pattern", "updated_at": "2023-07-21T09:40:35", "version": "WzE0LDFd"} -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}" }, "title": "ELB - Controls", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1606466378089\",\"fieldName\":\"event.module\",\"parent\":\"\",\"label\":\"ELB\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1606466402867\",\"fieldName\":\"cloud.account.id\",\"parent\":\"\",\"label\":\"AWS Account\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1606466482419\",\"fieldName\":\"cloud.region\",\"parent\":\"\",\"label\":\"AWS Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false},\"title\":\"ELB - Controls\"}" }, "id": "8643b130-308c-11eb-9df7-6b7b0da6e7ae", "migrationVersion": { "visualization": "7.7.0" }, "references": [ { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "control_0_index_pattern", "type": "index-pattern" }, { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "control_1_index_pattern", "type": "index-pattern" }, { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "control_2_index_pattern", "type": "index-pattern" } ], "type": "visualization", "updated_at": "2020-12-13T00:16:08.380Z", "version": "WzU0ODcsMV0=" } -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - AWS Account(Bar)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - AWS Account(Bar)\"}"},"id": "b6bb3950-308c-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0ODgsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Region(Bar)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - Region(Bar)\"}"},"id": "00407b80-308d-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0ODksMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - HTTP Response Code(PIE)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Response Code(PIE)\"}"},"id": "ed4009a0-320e-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTAsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - HTTP Response Code Trend","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}},\"title\":\"ELB - HTTP Response Code Trend\"}"},"id": "5c46e3a0-320f-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTEsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Transfer Size(MB)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"http.request.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.request.bytes'].value / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Request Size\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"sum\",\"schema\":\"metric\",\"params\":{\"field\":\"http.response.bytes\",\"json\":\"{\\n \\\"script\\\": \\\"doc['http.response.bytes'].value / 1024.0 / 1024.0\\\"\\n}\",\"customLabel\":\"Response Size\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":true,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Request Size\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"},{\"data\":{\"id\":\"2\",\"label\":\"Response Size\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"normal\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Sum of http.request.bytes\"},\"type\":\"value\"}]},\"title\":\"ELB - Transfer Size(MB)\"}"},"id": "bc0f2620-321a-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTIsMV0="} -{ "attributes": { "description": "", "kibanaSavedObjectMeta": { "searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}" }, "title": "ELB - User Agent Name(PIE)", "uiStateJSON": "{}", "version": 1, "visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.user_agent.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Protocol(PIE)\"}" }, "id": "398dc100-3217-11eb-9df7-6b7b0da6e7ae", "migrationVersion": { "visualization": "7.7.0" }, "references": [ { "id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b", "name": "kibanaSavedObjectMeta.searchSourceJSON.index", "type": "index-pattern" } ], "type": "visualization", "updated_at": "2020-12-13T00:16:08.380Z", "version": "WzU0OTMsMV0=" } -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - HTTP Request Method(PIE)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"http.request.method\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - HTTP Request Method(PIE)\"}"},"id": "d26adc60-3216-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTQsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - SSL Protocol(PIE)","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"aws.elb.ssl_protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - SSL Protocol(PIE)\"}"},"id": "7ce2b140-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTUsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - SSL Cipher","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"aws.elb.ssl_cipher\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"},\"title\":\"ELB - SSL Cipher\"}"},"id": "9acb8d80-3217-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTYsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - URL Domain","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.domain\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"},\"title\":\"ELB - URL Domain\"}"},"id": "d1ec9960-3b92-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTcsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - URL Path","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"url.path\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - URL Path\"}"},"id": "0358e220-3219-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTgsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - User Agent","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"http.user_agent.original\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - User Agent\"}"},"id": "360cc5b0-3219-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU0OTksMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Source IP Country","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"communication.source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"title\":\"ELB - Source IP Country\"}"},"id": "891bb040-3214-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDAsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Source Countries Geo Map","uiStateJSON": "{\"mapCenter\":[30.14512718337613,3.6917208421022094],\"mapZoom\":2}","version": 1,"visState": "{\"aggs\":[{\"enabled\":true,\"id\":\"1\",\"params\":{},\"schema\":\"metric\",\"type\":\"count\"},{\"enabled\":true,\"id\":\"2\",\"params\":{\"field\":\"communication.source.geo.country_iso_code\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"order\":\"desc\",\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"size\":100},\"schema\":\"segment\",\"type\":\"terms\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}},\"title\":\"ELB - Source Countries Geo Map\",\"type\":\"region_map\"}"},"id": "a322d3b0-308e-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDEsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Source IP","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"communication.source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"addLegend\":true,\"addTooltip\":true,\"isDonut\":true,\"labels\":{\"last_level\":true,\"show\":false,\"truncate\":100,\"values\":true},\"legendPosition\":\"right\",\"type\":\"pie\"},\"title\":\"ELB - Source IP\"}"},"id": "bf1fa930-3214-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDIsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Destination IP","uiStateJSON": "{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version": 1,"visState": "{\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"bucket\",\"params\":{\"field\":\"communication.destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"},\"title\":\"ELB - Destination IP\"}"},"id": "de91c0b0-3218-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDMsMV0="} -{"attributes": {"description": "","kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title": "ELB - Processing TIme","uiStateJSON": "{}","version": 1,"visState": "{\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"aws.elb.request_processing_time\",\"customLabel\":\"Request\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-30m\",\"to\":\"now\"},\"useNormalizedEsInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"schema\":\"group\",\"params\":{\"filters\":[{\"input\":{\"query\":\"NOT aws.elb.request_processing_time<0 AND NOT aws.elb.response_processing_time<0\",\"language\":\"kuery\"},\"label\":\" \"}]}},{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"schema\":\"metric\",\"params\":{\"field\":\"aws.elb.response_processing_time\",\"customLabel\":\"Response\"}}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Processing Time (Seconds)\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Request\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true},{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"id\":\"4\",\"label\":\"Response\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"top\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"row\":true},\"title\":\"ELB - Processing TIme\"}"},"id": "9205d000-3ba1-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"visualization": "7.7.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "visualization","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDQsMV0="} -{"attributes": {"columns": ["cloud.account.id","cloud.region","communication.destination.ip","communication.source.ip","communication.source.geo.country_name","aws.elb.elb_status_code","http.request.method","http.request.body.content","http.user_agent.original"],"description": "","hits": 0,"kibanaSavedObjectMeta": {"searchSourceJSON": "{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort": [],"title": "search - ELB","version": 1},"id": "cb2c8f20-3211-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"search": "7.4.0"},"references": [{"id": "9d96cb30-f01b-11ea-99e6-53b5a9b5c41b","name": "kibanaSavedObjectMeta.searchSourceJSON.index","type": "index-pattern"}],"type": "search","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDUsMV0="} -{"attributes": {"description": "","hits": 0,"kibanaSavedObjectMeta": {"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON": "{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON": "[{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":5,\"i\":\"65ad5100-9919-47dd-8aae-1925f72dc6c2\"},\"panelIndex\":\"65ad5100-9919-47dd-8aae-1925f72dc6c2\",\"embeddableConfig\":{\"title\":\"\"},\"panelRefName\":\"panel_0\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":5,\"w\":24,\"h\":7,\"i\":\"13602aba-c307-4018-814e-44ae6094e641\"},\"panelIndex\":\"13602aba-c307-4018-814e-44ae6094e641\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":5,\"w\":24,\"h\":7,\"i\":\"e8eb12e8-018e-430b-b64d-bcdfebf16165\"},\"panelIndex\":\"e8eb12e8-018e-430b-b64d-bcdfebf16165\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":12,\"w\":16,\"h\":10,\"i\":\"2fd7684e-f022-4a8e-8486-efcb22010f17\"},\"panelIndex\":\"2fd7684e-f022-4a8e-8486-efcb22010f17\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":16,\"y\":12,\"w\":32,\"h\":10,\"i\":\"5baf885b-3a6c-4a37-b0c2-f0d957aa2b24\"},\"panelIndex\":\"5baf885b-3a6c-4a37-b0c2-f0d957aa2b24\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":48,\"h\":13,\"i\":\"b0a4dd94-155e-4a11-928c-c9e813701bae\"},\"panelIndex\":\"b0a4dd94-155e-4a11-928c-c9e813701bae\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":35,\"w\":12,\"h\":12,\"i\":\"c99b3456-37d9-4dc1-8584-e1e172d75fb2\"},\"panelIndex\":\"c99b3456-37d9-4dc1-8584-e1e172d75fb2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":12,\"y\":35,\"w\":12,\"h\":12,\"i\":\"53ac67cf-842a-473a-ac36-cbc8b774fb95\"},\"panelIndex\":\"53ac67cf-842a-473a-ac36-cbc8b774fb95\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":35,\"w\":12,\"h\":12,\"i\":\"02dee2c1-ba4e-495f-9307-60275629a0a0\"},\"panelIndex\":\"02dee2c1-ba4e-495f-9307-60275629a0a0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":36,\"y\":35,\"w\":12,\"h\":12,\"i\":\"4f8a1c78-fbe7-44cb-938f-9f3a4121d5fe\"},\"panelIndex\":\"4f8a1c78-fbe7-44cb-938f-9f3a4121d5fe\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":47,\"w\":10,\"h\":15,\"i\":\"bf78a176-879b-4e60-8e1a-d3888b8c6678\"},\"panelIndex\":\"bf78a176-879b-4e60-8e1a-d3888b8c6678\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":10,\"y\":47,\"w\":14,\"h\":15,\"i\":\"065889f8-2a52-4305-99b3-39fbcf840ded\"},\"panelIndex\":\"065889f8-2a52-4305-99b3-39fbcf840ded\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":24,\"y\":47,\"w\":24,\"h\":15,\"i\":\"e68d21d8-fb4a-4268-b3ea-1dad7c5f5c42\"},\"panelIndex\":\"e68d21d8-fb4a-4268-b3ea-1dad7c5f5c42\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":62,\"w\":13,\"h\":11,\"i\":\"21f540ca-5524-4b28-a534-7619c1274f2c\"},\"panelIndex\":\"21f540ca-5524-4b28-a534-7619c1274f2c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":13,\"y\":62,\"w\":35,\"h\":21,\"i\":\"6fe30837-fe94-4a5c-8b3d-085ba337e5ae\"},\"panelIndex\":\"6fe30837-fe94-4a5c-8b3d-085ba337e5ae\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"panelRefName\":\"panel_14\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":73,\"w\":13,\"h\":10,\"i\":\"0e25b5f6-8744-473c-b426-f8d5850d6519\"},\"panelIndex\":\"0e25b5f6-8744-473c-b426-f8d5850d6519\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":83,\"w\":10,\"h\":15,\"i\":\"96ec06ba-2f21-4db4-a13c-527ea26f74a0\"},\"panelIndex\":\"96ec06ba-2f21-4db4-a13c-527ea26f74a0\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":10,\"y\":83,\"w\":38,\"h\":15,\"i\":\"e3caa6de-d408-4216-b6bd-6b230d28d195\"},\"panelIndex\":\"e3caa6de-d408-4216-b6bd-6b230d28d195\",\"embeddableConfig\":{},\"panelRefName\":\"panel_17\"},{\"version\":\"7.7.0\",\"gridData\":{\"x\":0,\"y\":98,\"w\":48,\"h\":15,\"i\":\"ccd7b879-7013-4219-87dd-8ba436177671\"},\"panelIndex\":\"ccd7b879-7013-4219-87dd-8ba436177671\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"}]","timeRestore": false,"title": "ELB Summary","version": 1},"id": "48d6b4b0-308b-11eb-9df7-6b7b0da6e7ae","migrationVersion": {"dashboard": "7.3.0"},"references": [{"id": "8643b130-308c-11eb-9df7-6b7b0da6e7ae","name": "panel_0","type": "visualization"},{"id": "b6bb3950-308c-11eb-9df7-6b7b0da6e7ae","name": "panel_1","type": "visualization"},{"id": "00407b80-308d-11eb-9df7-6b7b0da6e7ae","name": "panel_2","type": "visualization"},{"id": "ed4009a0-320e-11eb-9df7-6b7b0da6e7ae","name": "panel_3","type": "visualization"},{"id": "5c46e3a0-320f-11eb-9df7-6b7b0da6e7ae","name": "panel_4","type": "visualization"},{"id": "bc0f2620-321a-11eb-9df7-6b7b0da6e7ae","name": "panel_5","type": "visualization"},{"id": "398dc100-3217-11eb-9df7-6b7b0da6e7ae","name": "panel_6","type": "visualization"},{"id": "d26adc60-3216-11eb-9df7-6b7b0da6e7ae","name": "panel_7","type": "visualization"},{"id": "7ce2b140-3217-11eb-9df7-6b7b0da6e7ae","name": "panel_8","type": "visualization"},{"id": "9acb8d80-3217-11eb-9df7-6b7b0da6e7ae","name": "panel_9","type": "visualization"},{"id": "d1ec9960-3b92-11eb-9df7-6b7b0da6e7ae","name": "panel_10","type": "visualization"},{"id": "0358e220-3219-11eb-9df7-6b7b0da6e7ae","name": "panel_11","type": "visualization"},{"id": "360cc5b0-3219-11eb-9df7-6b7b0da6e7ae","name": "panel_12","type": "visualization"},{"id": "891bb040-3214-11eb-9df7-6b7b0da6e7ae","name": "panel_13","type": "visualization"},{"id": "a322d3b0-308e-11eb-9df7-6b7b0da6e7ae","name": "panel_14","type": "visualization"},{"id": "bf1fa930-3214-11eb-9df7-6b7b0da6e7ae","name": "panel_15","type": "visualization"},{"id": "de91c0b0-3218-11eb-9df7-6b7b0da6e7ae","name": "panel_16","type": "visualization"},{"id": "9205d000-3ba1-11eb-9df7-6b7b0da6e7ae","name": "panel_17","type": "visualization"},{"id": "cb2c8f20-3211-11eb-9df7-6b7b0da6e7ae","name": "panel_18","type": "search"}],"type": "dashboard","updated_at": "2020-12-13T00:16:08.380Z","version": "WzU1MDYsMV0="} -{"exportedCount": 21,"missingRefCount": 0,"missingReferences": []} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_mv-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_mv-1.0.0.sql deleted file mode 100644 index 86a23f32f9..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_mv-1.0.0.sql +++ /dev/null @@ -1,47 +0,0 @@ -CREATE MATERIALIZED VIEW {table_name}_mview AS -SELECT - type as `aws.elb.elb_type`, - time as `@timestamp`, - elb as `aws.elb.elb_name`, - split_part (client_ip, ':', 1) as `communication.source.ip`, - split_part (client_ip, ':', 2) as `communication.source.port`, - split_part (target_ip, ':', 1) as `communication.destination.ip`, - split_part (target_ip, ':', 2) as `communication.destination.port`, - request_processing_time as `aws.elb.request_processing_time`, - target_processing_time as `aws.elb.target_processing_time`, - response_processing_time as `aws.elb.response_processing_time`, - elb_status_code as `http.response.status_code`, - target_status_code as `aws.elb.target_status_code`, - received_bytes as `aws.elb.received_bytes`, - sent_bytes as `aws.elb.sent_bytes`, - split_part (request, ' ', 1) as `http.request.method`, - split_part (request, ' ', 2) as `url.full`, - parse_url (split_part (request, ' ', 2), 'HOST') as `url.domain`, - parse_url (split_part (request, ' ', 2), 'PATH') as `url.path`, - split_part (request, ' ', 3) as `url.schema`, - request AS `http.request.body.content`, - user_agent as `http.user_agent.original`, - user_agent as `http.user_agent.name`, - ssl_cipher as `aws.elb.ssl_cipher`, - ssl_protocol as `aws.elb.ssl_protocol`, - split_part (target_group_arn, ':', 4) as `cloud.region`, - split_part (target_group_arn, ':', 5) as `cloud.account.id`, - trace_id as `traceId`, - chosen_cert_arn as `aws.elb.chosen_cert_arn`, - matched_rule_priority as `aws.elb.matched_rule_priority`, - request_creation_time as `aws.elb.request_creation_time`, - actions_executed as `aws.elb.actions_executed`, - redirect_url as `aws.elb.redirect_url`, - lambda_error_reason as `aws.elb.lambda_error_reason`, - target_port_list as `aws.elb.target_port_list`, - target_status_code_list as `aws.elb.target_status_code_list`, - classification as `aws.elb.classification`, - classification_reason as `aws.elb.classification_reason` -FROM - {table_name} -WITH ( - auto_refresh = 'true', - checkpoint_location = '{s3_bucket_location}/checkpoint', - watermark_delay = '1 Minute', - extra_options = '{ "{table_name}": { "maxFilesPerTrigger": "10" }}' -); diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_table-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_table-1.0.0.sql deleted file mode 100644 index 3a5ed53f2d..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/assets/create_table-1.0.0.sql +++ /dev/null @@ -1,36 +0,0 @@ -CREATE EXTERNAL TABLE IF NOT EXISTS {table_name} ( - type string, - time timestamp, - elb string, - client_ip string, - target_ip string, - request_processing_time double, - target_processing_time double, - response_processing_time double, - elb_status_code int, - target_status_code string, - received_bytes bigint, - sent_bytes bigint, - request string, - user_agent string, - ssl_cipher string, - ssl_protocol string, - target_group_arn string, - trace_id string, - domain_name string, - chosen_cert_arn string, - matched_rule_priority string, - request_creation_time timestamp, - actions_executed string, - redirect_url string, - lambda_error_reason string, - target_port_list string, - target_status_code_list string, - classification string, - classification_reason string -) -USING csv -LOCATION '{s3_bucket_location}' -OPTIONS ( - sep=' ' -); diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/aws_elb-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_elb/aws_elb-1.0.0.json deleted file mode 100644 index 6fbc6714fe..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/aws_elb-1.0.0.json +++ /dev/null @@ -1,70 +0,0 @@ -{ - "name": "aws_elb", - "version": "1.0.0", - "displayName": "AWS ELB", - "description": "AWS Elastic Load Balancer collector", - "license": "Apache-2.0", - "type": "logs_elb", - "labels": ["Observability", "Logs", "AWS", "Flint S3", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_elb/info", - "statics": { - "logo": { - "annotation": "ELB Logo", - "path": "logo.svg" - }, - "gallery": [ - { - "annotation": "ELB Dashboard", - "path": "dashboard1.png" - } - ] - }, - "components": [ - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "http", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "aws_elb", - "version": "1.0.0" - }, - { - "name": "url", - "version": "1.0.0" - }, - { - "name": "logs_elb", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_elb", - "version": "1.0.0" - }, - "queries": [ - { - "name": "create_table", - "version": "1.0.0", - "language": "sql" - }, - { - "name": "create_mv", - "version": "1.0.0", - "language": "sql" - } - ] - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_elb/data/sample.json deleted file mode 100644 index 0389cc41e5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/data/sample.json +++ /dev/null @@ -1,4370 +0,0 @@ -[ - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.188.82.156:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 471 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "1.14.7.100", - "ip": "1.14.7.100", - "port": 43430, - "geo": { - "country_name": "China", - "country_iso_code": "CN" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "1.14.7.100", - "port": 43430 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 471, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:45:13.427000Z" - } - }, - "traceId": "Root=1-64937d79-5051b6825367dff7279a6ab7", - "url": { - "domain": "54.188.82.156", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 382, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.188.82.156:80/docker-compose.yml HTTP/1.1" - }, - "bytes": 252 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; CrOS x86_64 14526.89.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.133 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Chrome OS" - } - } - }, - "communication": { - "source": { - "address": "212.224.107.53", - "ip": "212.224.107.53", - "port": 50760, - "geo": { - "country_name": "Germany", - "country_iso_code": "DE" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "212.224.107.53", - "port": 50760 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 252, - "sent_bytes": 382, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:13:14.679000Z" - } - }, - "traceId": "Root=1-649a37aa-2d0007242be74a111c44e631", - "url": { - "domain": "54.188.82.156", - "path": "/docker-compose.yml" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.149.97.75:80/.env HTTP/1.1" - }, - "bytes": 230 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 60186, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 60186 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 230, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:19:20.970000Z" - } - }, - "traceId": "Root=1-649a3918-3d47bc5b3f3939562cc43631", - "url": { - "domain": "54.149.97.75", - "path": "/.env" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.149.97.75:80/ HTTP/1.1" - }, - "bytes": 316 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 60642, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 60642 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 316, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:19:21.313000Z" - } - }, - "traceId": "Root=1-649a3919-144dd9eb215b55f058c94753", - "url": { - "domain": "54.149.97.75", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.188.82.156:80/.git/config HTTP/1.1" - }, - "bytes": 155 - }, - "user_agent": { - "original": "python-requests/2.28.1", - "name": "Python Requests", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "95.214.27.80", - "ip": "95.214.27.80", - "port": 65460, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "95.214.27.80", - "port": 65460 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 155, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:16:15.418000Z" - } - }, - "traceId": "Root=1-649a2a4f-2ab52d1118a5cb5a1fbd00dd", - "url": { - "domain": "54.188.82.156", - "path": "/.git/config" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.149.97.75:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 470 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "43.154.141.71", - "ip": "43.154.141.71", - "port": 39526, - "geo": { - "country_name": "Hong Kong", - "country_iso_code": "HK" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "43.154.141.71", - "port": 39526 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 470, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:02:26.996000Z" - } - }, - "traceId": "Root=1-64937372-7e7c25e57b986ca76cc813f9", - "url": { - "domain": "54.149.97.75", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 521 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 521, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:46.563000Z" - } - }, - "traceId": "Root=1-6493707a-062e3d077d0e7f5759a83c88", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 221, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 579, - "sent_bytes": 221, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:21.030000Z" - } - }, - "traceId": "Root=1-64937061-40a294a94461434e69dc73d7", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:21.449000Z" - } - }, - "traceId": "Root=1-64937061-79a1996859288ce92d44003f", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:21.667000Z" - } - }, - "traceId": "Root=1-64937061-05e8a706396a62621b99debb", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.014000Z" - } - }, - "traceId": "Root=1-64937062-686a5a2027b24753384bafa4", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.226000Z" - } - }, - "traceId": "Root=1-64937062-5ca0fd387005cdb527631d68", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.402000Z" - } - }, - "traceId": "Root=1-64937062-40ce96b9439c166d6e90877b", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:22.571000Z" - } - }, - "traceId": "Root=1-64937062-5bfc788b20198493251caebb", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:23.666000Z" - } - }, - "traceId": "Root=1-64937063-0951fdb60649542f6e1df423", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:24.529000Z" - } - }, - "traceId": "Root=1-64937064-5d9e75005adc9d4f5e9cc257", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 2715, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 2715 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:49:25.221000Z" - } - }, - "traceId": "Root=1-64937065-60772b0a181805dc6800edd3", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 277 - }, - "user_agent": { - "original": "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot-LinkExpanding", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "52.73.199.9", - "ip": "52.73.199.9", - "port": 39894, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "52.73.199.9", - "port": 39894 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 277, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.224000Z" - } - }, - "traceId": "Root=1-6493755e-43ea9b1c186d7e7c69340533", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 828, - "status_code": 206 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 267 - }, - "user_agent": { - "original": "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot-LinkExpanding", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "54.224.51.171", - "ip": "54.224.51.171", - "port": 49166, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "54.224.51.171", - "port": 49166 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 206, - "target_status_code": 206, - "received_bytes": 267, - "sent_bytes": 828, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.256000Z" - } - }, - "traceId": "Root=1-6493755e-383d9d6435b8c33513e8ea15", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/favicon.ico HTTP/1.1" - }, - "bytes": 242 - }, - "user_agent": { - "original": "Slackbot 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "3.86.48.136", - "ip": "3.86.48.136", - "port": 33698, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "3.86.48.136", - "port": 33698 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 242, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.389000Z" - } - }, - "traceId": "Root=1-6493755e-305240137716dba935ee0722", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/favicon.ico" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.149.97.75:80/.env HTTP/1.1" - }, - "bytes": 230 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 37770, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 37770 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 230, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:21:00.211000Z" - } - }, - "traceId": "Root=1-649a2b6c-2b64f3f93a14873724a6b2e9", - "url": { - "domain": "54.149.97.75", - "path": "/.env" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 271, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.149.97.75:80/ HTTP/1.1" - }, - "bytes": 316 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "135.125.246.189", - "ip": "135.125.246.189", - "port": 38202, - "geo": { - "country_name": "France", - "country_iso_code": "FR" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "135.125.246.189", - "port": 38202 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 316, - "sent_bytes": 271, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:21:00.538000Z" - } - }, - "traceId": "Root=1-649a2b6c-13a203d2404d2b794ea078b1", - "url": { - "domain": "54.149.97.75", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.188.82.156:80/boaform/admin/formLogin HTTP/1.1" - }, - "bytes": 533 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0", - "name": "Firefox", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "79.124.56.98", - "ip": "79.124.56.98", - "port": 46898, - "geo": { - "country_name": "Bulgaria", - "country_iso_code": "BG" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "79.124.56.98", - "port": 46898 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 533, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T23:36:38.398000Z" - } - }, - "traceId": "Root=1-64938986-058003e73813c30977c8b9f1", - "url": { - "domain": "54.188.82.156", - "path": "/boaform/admin/formLogin" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 0, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "79.124.56.98", - "ip": "79.124.56.98", - "port": 46898, - "geo": { - "country_name": "Bulgaria", - "country_iso_code": "BG" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "79.124.56.98", - "port": 46898 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 0, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T23:36:38.399000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.149.97.75:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 470 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "43.154.141.71", - "ip": "43.154.141.71", - "port": 58164, - "geo": { - "country_name": "Hong Kong", - "country_iso_code": "HK" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "43.154.141.71", - "port": 58164 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 470, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T00:38:53.303000Z" - } - }, - "traceId": "Root=1-649a2f9d-0960c8f64de617691a98950e", - "url": { - "domain": "54.149.97.75", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 783, - "status_code": 200 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 579 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.003, - "response_processing_time": 0.0, - "elb_status_code": 200, - "target_status_code": 200, - "received_bytes": 579, - "sent_bytes": 783, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:45.626000Z" - } - }, - "traceId": "Root=1-649370b5-0253431f2042833a26460a7f", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:45.652000Z" - } - }, - "traceId": "Root=1-649370b5-7038a772150016f3770a50d4", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:46.958000Z" - } - }, - "traceId": "Root=1-649370b6-236a58f701ba34757a1af86d", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:46.980000Z" - } - }, - "traceId": "Root=1-649370b6-2b159d6829dd1eae6b2f5c19", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 555 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 555, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:52.790000Z" - } - }, - "traceId": "Root=1-649370bc-54228dd62baa096941578372", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:52.817000Z" - } - }, - "traceId": "Root=1-649370bc-0dc848167afad15140784d07", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 555 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 555, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:54.995000Z" - } - }, - "traceId": "Root=1-649370be-6d97b012401869d74a3b834e", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:55.016000Z" - } - }, - "traceId": "Root=1-649370bf-43c26c9b5c91ce8c4be528db", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 555 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 555, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:57.703000Z" - } - }, - "traceId": "Root=1-649370c1-6430b9e91900b7dd63abfdb8", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 33556, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 33556 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:50:57.725000Z" - } - }, - "traceId": "Root=1-649370c1-3823d52567099a7f2c9016c5", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 272, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "45.137.206.172", - "ip": "45.137.206.172", - "port": 34396, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "45.137.206.172", - "port": 34396 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 272, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T21:53:25.232000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.004000Z" - } - }, - "traceId": "Root=1-64937158-1703bbd3663398a56d532757", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.032000Z" - } - }, - "traceId": "Root=1-64937158-00902f3646247501721d0f0b", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.462000Z" - } - }, - "traceId": "Root=1-64937158-0631b61b1c06fbf1223e488a", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.485000Z" - } - }, - "traceId": "Root=1-64937158-0e12592764512ef94953ef26", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.734000Z" - } - }, - "traceId": "Root=1-64937158-41563bb6495a89296514be1d", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.760000Z" - } - }, - "traceId": "Root=1-64937158-6dd7546671aa320379907f7a", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.936000Z" - } - }, - "traceId": "Root=1-64937158-6d020d7f7f6c40233e18032c", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:28.960000Z" - } - }, - "traceId": "Root=1-64937158-4a5ac41b6bb2a2d01f665491", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 223, - "status_code": 304 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 581 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 304, - "target_status_code": 304, - "received_bytes": 581, - "sent_bytes": 223, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:29.111000Z" - } - }, - "traceId": "Root=1-64937159-2683dd2f5fc313c23c673fa5", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/clouds.jpg HTTP/1.1" - }, - "bytes": 445 - }, - "user_agent": { - "original": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Mac OS X" - } - } - }, - "communication": { - "source": { - "address": "15.248.1.132", - "ip": "15.248.1.132", - "port": 18352, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "15.248.1.132", - "port": 18352 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 445, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T21:53:29.132000Z" - } - }, - "traceId": "Root=1-64937159-46c280b6129f43b96948071a", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/clouds.jpg" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 382, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.188.82.156:80/.env HTTP/1.1" - }, - "bytes": 236 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "31.172.80.202", - "ip": "31.172.80.202", - "port": 49728, - "geo": { - "country_name": "Germany", - "country_iso_code": "DE" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "31.172.80.202", - "port": 49728 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 236, - "sent_bytes": 382, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:02:44.586000Z" - } - }, - "traceId": "Root=1-649a3534-57a9376d7ccfa2da7869721b", - "url": { - "domain": "54.188.82.156", - "path": "/.env" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 272, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "162.142.125.223", - "ip": "162.142.125.223", - "port": 51092, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "162.142.125.223", - "port": 51092 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 272, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T23:20:16.597000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "POST", - "body": { - "content": "POST http://54.149.97.75:80/boaform/admin/formLogin HTTP/1.1" - }, - "bytes": 526 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0", - "name": "Firefox", - "version": ".", - "os": { - "family": "Ubuntu" - } - } - }, - "communication": { - "source": { - "address": "193.35.18.52", - "ip": "193.35.18.52", - "port": 46566, - "geo": { - "country_name": "Netherlands", - "country_iso_code": "NL" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "193.35.18.52", - "port": 46566 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 526, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:15:40.730000Z" - } - }, - "traceId": "Root=1-6493768c-78f0b50f583816db3131bbaa", - "url": { - "domain": "54.149.97.75", - "path": "/boaform/admin/formLogin" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 0, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "193.35.18.52", - "ip": "193.35.18.52", - "port": 46566, - "geo": { - "country_name": "Netherlands", - "country_iso_code": "NL" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "193.35.18.52", - "port": 46566 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 0, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-21T22:15:40.731000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.149.97.75:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 470 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "43.154.141.71", - "ip": "43.154.141.71", - "port": 38868, - "geo": { - "country_name": "Hong Kong", - "country_iso_code": "HK" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "43.154.141.71", - "port": 38868 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 470, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T23:19:47.448000Z" - } - }, - "traceId": "Root=1-64938593-3256282f7da0efa967807a4a", - "url": { - "domain": "54.149.97.75", - "path": "/Core/Skin/Login.aspx" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 272, - "status_code": 400 - }, - "schema": "http", - "request": { - "method": null, - "body": { - "content": "- http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80- -" - }, - "bytes": 0 - }, - "user_agent": { - "original": "-", - "name": "Other", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "198.235.24.93", - "ip": "198.235.24.93", - "port": 62452, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "", - "ip": "", - "port": null - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "198.235.24.93", - "port": 62452 - }, - "target_ip": "", - "target_port": null, - "request_processing_time": null, - "target_processing_time": null, - "response_processing_time": null, - "elb_status_code": 400, - "target_status_code": null, - "received_bytes": 0, - "sent_bytes": 272, - "http": { - "port": 80, - "version": null - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": null, - "request_creation_time": "2023-06-27T01:40:50.631000Z" - } - }, - "traceId": "-", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": null - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 828, - "status_code": 206 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/ HTTP/1.1" - }, - "bytes": 267 - }, - "user_agent": { - "original": "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot-LinkExpanding", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "44.201.184.49", - "ip": "44.201.184.49", - "port": 40064, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "44.201.184.49", - "port": 40064 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 206, - "target_status_code": 206, - "received_bytes": 267, - "sent_bytes": 828, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.220000Z" - } - }, - "traceId": "Root=1-6493755e-3ca8a7935bd41bde6e7df23c", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 387, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://sample-alb-351248157.us-west-2.elb.amazonaws.com:80/favicon.ico HTTP/1.1" - }, - "bytes": 242 - }, - "user_agent": { - "original": "Slackbot 1.0 (+https://api.slack.com/robots)", - "name": "Slackbot", - "version": ".", - "os": { - "family": "Other" - } - } - }, - "communication": { - "source": { - "address": "54.146.175.252", - "ip": "54.146.175.252", - "port": 33818, - "geo": { - "country_name": "United States", - "country_iso_code": "US" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "54.146.175.252", - "port": 33818 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 242, - "sent_bytes": 387, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:10:38.365000Z" - } - }, - "traceId": "Root=1-6493755e-5ebf89d86685fc932929f452", - "url": { - "domain": "sample-alb-351248157.us-west-2.elb.amazonaws.com", - "path": "/favicon.ico" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 215, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "GET", - "body": { - "content": "GET http://54.149.97.75:80/info.php HTTP/1.1" - }, - "bytes": 230 - }, - "user_agent": { - "original": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Linux" - } - } - }, - "communication": { - "source": { - "address": "79.133.51.240", - "ip": "79.133.51.240", - "port": 55476, - "geo": { - "country_name": "Germany", - "country_iso_code": "DE" - } - }, - "destination": { - "address": "172.31.32.179", - "ip": "172.31.32.179", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "79.133.51.240", - "port": 55476 - }, - "target_ip": "172.31.32.179", - "target_port": 80, - "request_processing_time": 0.001, - "target_processing_time": 0.002, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 230, - "sent_bytes": 215, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-21T22:13:56.143000Z" - } - }, - "traceId": "Root=1-64937624-642d3f727d9fde3c2f55e35c", - "url": { - "domain": "54.149.97.75", - "path": "/info.php" - } - }, - { - "observedTimestamp": "2023-07-28T11:43:33.000Z", - "@timestamp": "2023-07-28T11:43:33.000Z", - "http": { - "response": { - "bytes": 170, - "status_code": 404 - }, - "schema": "http", - "request": { - "method": "HEAD", - "body": { - "content": "HEAD http://54.188.82.156:80/Core/Skin/Login.aspx HTTP/1.1" - }, - "bytes": 471 - }, - "user_agent": { - "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", - "name": "Chrome", - "version": ".", - "os": { - "family": "Windows" - } - } - }, - "communication": { - "source": { - "address": "1.14.7.100", - "ip": "1.14.7.100", - "port": 40138, - "geo": { - "country_name": "China", - "country_iso_code": "CN" - } - }, - "destination": { - "address": "172.31.21.214", - "ip": "172.31.21.214", - "port": 80 - } - }, - "cloud": { - "provider": "AWS", - "service.name": "ELB", - "account.id": 443273586136, - "region": "us-west-2" - }, - "aws": { - "elb": { - "client": { - "ip": "1.14.7.100", - "port": 40138 - }, - "target_ip": "172.31.21.214", - "target_port": 80, - "request_processing_time": 0.0, - "target_processing_time": 0.001, - "response_processing_time": 0.0, - "elb_status_code": 404, - "target_status_code": 404, - "received_bytes": 471, - "sent_bytes": 170, - "http": { - "port": 80, - "version": "1.1" - }, - "ssl_cipher": "-", - "ssl_protocol": "-", - "matched_rule_priority": 0, - "request_creation_time": "2023-06-27T01:07:35.848000Z" - } - }, - "traceId": "Root=1-649a3657-39104fcd5ee623ba3fd12290", - "url": { - "domain": "54.188.82.156", - "path": "/Core/Skin/Login.aspx" - } - } -] \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/info/INGESTION.md b/server/adaptors/integrations/__data__/repository/aws_elb/info/INGESTION.md deleted file mode 100644 index 459b2806db..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/info/INGESTION.md +++ /dev/null @@ -1,163 +0,0 @@ -# Sample Ingestion Pipeline - -This is a brief overview of a sample ingestion pipeline for the AWS ELB integration. - -## List of Components - -- An OpenSearch domain running through Docker -- A FluentBit agent running through Docker -- An ELB instance generating logs (not covered in this sample) - -### OpenSearch and FluentBit Setup - -1. Look at [docker-compose.yaml](<[docker-compose.yaml](https://github.com/opensearch-project/data-prepper/blob/93d06db5cad280e2e4c53e12dfb47c7cbaa7b364/examples/log-ingestion/docker-compose.yaml)https://github.com/opensearch-project/data-prepper/blob/93d06db5cad280e2e4c53e12dfb47c7cbaa7b364/examples/log-ingestion/docker-compose.yaml>) to create FluentBit and OpenSearch Docker images and run them in the `opensearch-net` Docker network. -2. Create the FluentBit as follows: - -``` -[SERVICE] - Parsers_File parsers.conf - -[INPUT] - [YOUR INPUT HERE] - -[FILTER] - Name parser - Match aws.elb - Key_Name log - Parser aws-elb - -[FILTER] - Name lua - Match aws.elb - Script otel-converter.lua - call convert_to_otel - -[OUTPUT] - Name opensearch - Match aws.elb - Host opensearch - Port 9200 - Index ss4o_logs-aws_elb-prod-sample - Suppress_Type_Name On -``` - -You would set INPUT as however you are ingesting your AWS ELB logs, more info [here](https://docs.fluentbit.io/manual/pipeline/inputs). - -3. Create your `parsers.conf` as follows: - -``` -[PARSER] - Name aws-elb - Format regex - Regex ^(?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*):(?[0-9]*) (?[^ ]*)[:-](?[0-9]*) (?[-.0-9]*) (?[-.0-9]*) (?[-.0-9]*) (?|[-0-9]*) (?-|[-0-9]*) (?[-0-9]*) (?[-0-9]*) \"(?(-|(?\w+)) (-|(?\w*)://\[?(?[^/]+?)\]?:(?\d+)(-|(?/[^?]*?))(\?(?.*?))?) (-?|\w+/(?[0-9\.]*)))\" \"(|(?[^\"]+))\" (?[()A-Z0-9-]+) (?[A-Za-z0-9.-]*) (?[^ ]*) \"(?[^\"]*)\" \"(?[^\"]*)\" \"(?[^\"]*)\" (?[-.0-9]*) (?[^ ]*) \"(?[^\"]*)\" \"(?[^\"]*)\" \"(?[^ ]*)\" \"(?[^\s]+)\" \"(?[^\s]+)\"( \"(?[^\s]+)\" \"(?[^\s]+)\")? - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z -``` - -4. Create your `otel-converter.lua` as follows: - -```lua -local function format_aws_elb(c) - return string.format( - "%s %s %s %s:%s %s:%s %s %s %s %s %s %s %s \"%s\" \"%s\" %s %s %s \"%s\" \"%s\" \"%s\" %s %s \"%s\" \"%s\" \"%s\" \"%s\" \"%s\" \"%s\" \"%s\"", - c.request_type, c.timestamp, c.elb, c.client_ip c.client_port, c.target_ip, c.target_port, c.request_processing_time, c.target_processing_time, c.response_processing_time, c.elb_status_code, c.target_status_code, c.received_bytes, c.sent_bytes, c.request, c.useragent, c.ssl_cipher, c.ssl_protocol, c.target_group_arn, c.trace_id, c.domain_name c.chosen_cert_arn, c.matched_rule_priority, c.request_creation_time, c.actions_executed, c.redirect_url, c.lambda_error_reason, c.target_port_list, c.target_status_code_list, c.classification, c.classification_reason - ) -end - -function convert_to_otel(tag, timestamp, record) - local data = { - traceId=record.trace_id, - ["@timestamp"]=(record.timestamp or os.date("!%Y-%m-%dT%H:%M:%S.000Z")), - observedTimestamp=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - body=format_aws_elb(record), - attributes={ - data_stream={ - dataset="aws_elb", - namespace="production", - type="logs" - } - }, - event={ - category="web", - name="access", - domain="aws_elb", - kind="event", - result="success", - type="access" - }, - http={ - request={ - method=record.http_method, - bytes=tonumber(record.received_bytes) - body={ - content=record.request - } - }, - response={ - bytes=tonumber(record.sent_bytes), - status_code=tonumber(record.elb_status_code) - }, - schema=record.request_type - user_agent={ - original=record.useragent - } - }, - communication={ - source={ - address=record.client_ip, - ip=record.client_ip, - port=tonumber(record.client_port) - geo={ - country_name=record.response.country.name, - country_iso_code=record.response.country.iso_code - } - }, - destination={ - address=record.target_ip, - ip=record.target_ip, - port=tonumber(record.target_port), - } - }, - cloud={ - provider="AWS", - service={ - name="ELB" - } - -- account={ - -- id=? - -- }, - -- region=? - }, - aws={ - elb={ - client={ - ip=record.client_ip, - port=tonumber(record.client_port) - }, - target_ip=record.target_ip, - target_port=tonumber(record.target_port), - request_processing_time=tonumber(record.request_processing_time), - target_processing_time: tonumber(record.target_processing_time), - response_processing_time: tonumber(record.response_processing_time), - elb_status_code: tonumber(record.elb_status_code), - target_status_code: tonumber(record.target_status_code), - received_bytes: tonumber(record.received_bytes), - sent_bytes:tonumber(record.sent_bytes), - http: { - port: tonumber(record.http_port), - version: record.http_version - }, - ssl_cipher: record.ssl_cipher, - ssl_protocol: record.ssl_protocol, - matched_rule_priority: tonumber(record.matched_rule_priority), - request_creation_time: record.request_creation_time, - } - }, - url={ - domain=record.http_host, - path=record.http_path - } - } - return 1, timestamp, data -end -``` diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/info/README.md b/server/adaptors/integrations/__data__/repository/aws_elb/info/README.md deleted file mode 100644 index b3affc4114..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/info/README.md +++ /dev/null @@ -1,31 +0,0 @@ -# AWS ELB Access Logs Integrations - -## What is AWS ELB Access Logs ? - -ELB Access Logs is a feature that allows you to capture information about requests sent to your load balancer. - -Access logs can help with a number of tasks, such as: - -- Optimizing performance by showing response and processing times - -- Security analysis by monitoring unusual request patterns or user agents - -- Understanding traffic patterns and peak loads - -While disabled by default, you can [enable storing access logs](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/enable-access-logging.html) for your load balancer in an AWS S3 bucket. - -See additional details [here](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html). - -Flow log data is collected outside of the path of your network traffic, and therefore does not affect network throughput or latency. You can create or delete flow logs without any risk of impact to network performance. - -See additional details [here](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). - -## What is AWS ELB Access Logs Integration ? - -An integration is a bundle of pre-canned assets which are bundled togather in a meaningful manner. - -AWS ELB access logs integration includes dashboards, visualisations, queries and index mapping - -### Dashboard - - diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/aws_elb-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/aws_elb-1.0.0.mapping.json deleted file mode 100644 index 646857956f..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/aws_elb-1.0.0.mapping.json +++ /dev/null @@ -1,99 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_elb", - "labels": ["aws", "elb"] - }, - "properties": { - "aws": { - "type": "object", - "properties": { - "elb": { - "properties": { - "backend.ip": { - "type": "ip" - }, - "backend.port": { - "type": "integer" - }, - "backend.processing_time": { - "type": "half_float" - }, - "backend.status_code": { - "type": "short" - }, - "client.ip": { - "type": "ip" - }, - "client.port": { - "type": "integer" - }, - "connection_time": { - "type": "integer" - }, - "destination.ip": { - "type": "ip" - }, - "destination.port": { - "type": "integer" - }, - "elb_status_code": { - "type": "short" - }, - "http.port": { - "type": "integer" - }, - "http.version": { - "type": "keyword" - }, - "matched_rule_priority": { - "type": "integer" - }, - "received_bytes": { - "type": "integer" - }, - "request_creation_time": { - "type": "date" - }, - "request_processing_time": { - "type": "half_float" - }, - "response_processing_time": { - "type": "half_float" - }, - "sent_bytes": { - "type": "integer" - }, - "ssl_protocol": { - "type": "keyword" - }, - "ssl_cipher": { - "type": "keyword" - }, - "target_ip": { - "type": "ip" - }, - "target_port": { - "type": "integer" - }, - "target_processing_time": { - "type": "half_float" - }, - "target_status_code": { - "type": "short" - }, - "timestamp": { - "type": "date" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/http-1.0.0.mapping.json deleted file mode 100644 index 5fec510cb8..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/logs_elb-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/logs_elb-1.0.0.mapping.json deleted file mode 100644 index 773d2a5f5d..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/logs_elb-1.0.0.mapping.json +++ /dev/null @@ -1,225 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_elb-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-elb": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "communication", "http", "cloud", "elb", "url"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http", "cloud", "aws_elb", "url"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/url-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_elb/schemas/url-1.0.0.mapping.json deleted file mode 100644 index 12961efd34..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/schemas/url-1.0.0.mapping.json +++ /dev/null @@ -1,61 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "url", - "labels": ["url"] - }, - "properties": { - "url": { - "properties": { - "original": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "scheme": { - "type": "keyword" - }, - "domain": { - "type": "keyword" - }, - "registered_domain": { - "type": "keyword" - }, - "top_level_domain": { - "type": "keyword" - }, - "subdomain": { - "type": "keyword" - }, - "port": { - "type": "long" - }, - "path": { - "type": "keyword" - }, - "query": { - "type": "keyword" - }, - "extension": { - "type": "keyword" - }, - "fragment": { - "type": "keyword" - }, - "username": { - "type": "keyword" - }, - "password": { - "type": "keyword" - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/aws_elb/static/dashboard1.png deleted file mode 100644 index 2d49f663c5..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_elb/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_elb/static/logo.svg b/server/adaptors/integrations/__data__/repository/aws_elb/static/logo.svg deleted file mode 100644 index ec7edda561..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_elb/static/logo.svg +++ /dev/null @@ -1,6 +0,0 @@ - - - - - - diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/assets/README.md b/server/adaptors/integrations/__data__/repository/aws_rds/assets/README.md deleted file mode 100644 index 36fac9aea5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/assets/README.md +++ /dev/null @@ -1,38 +0,0 @@ -# AWS RDS Integration Assets - -API: http://osd:5601/api/saved_objects/_import?overwrite=true - -- [Assets](aws_rds-1.0.0.ndjson) - -## Asset List - -The next table details the assets - -| Name | Type | Description | -| ------------------------------------------- | :-----------: | :--------------------------------------------------------------------------------------------------------: | -| `ss4o_logs_rds-*-*` | index-pattern | The Index Pattern | -| `AWS RDS Log Event Overview` | dashboard | The pre-canned dashboard for AWS RDS | -| `[AWS RDS] Filters` | visualization | [Controls] Interactive controls for easy dashboard manipulation | -| `[AWS RDS] Slowquery` | visualization | [Metric] Shows the latest slow queries that took more time than specified in the slow query parameters. | -| `[AWS RDS] Slow Query History` | visualization | [Vertical Bar] Presents a timeline representation of slow queries over a specified period. | -| `[AWS RDS] Average Slow Query Time History` | visualization | [Pie] : Provides a historical trend of average execution times for slow queries. | -| `[AWS RDS] Total Slow Queries` | visualization | [Metric] Depicts the total count of slow queries within a specified time frame. | -| `[AWS RDS] Top Slow Query IP Table` | visualization | [Line] Lists the IP addresses that initiated the most slow queries | -| `[AWS RDS] Slow Query Scatter Plot` | visualization | [Line] A scatter plot illustrating slow queries against two different parameters such as time and duration | -| `[AWS RDS] Average Slow Query Duration` | visualization | [Metric] Represents the average time taken by slow queries to execute | -| `[AWS RDS] Slow Query Pie` | visualization | [Pie] A pie chart showing the distribution of slow queries | -| `[AWS RDS] Slow Query Table Pie` | visualization | [Table] A pie chart showing the distribution of slow queries | -| `[AWS RDS] Top Slow Query` | visualization | [Table] Top 10 source showing the slowest queries | -| `[AWS RDS] Lock` | visualization | [Table] A visualization showing the number of active locks in your RDS instance | -| `[AWS RDS] Total Deadlock Queries` | visualization | [Table] Represents the total count of deadlock scenarios encountered in the database | -| `[AWS RDS] Deadlock History` | visualization | [Table] Provides a timeline showing occurrences of deadlock scenarios | -| `[AWS RDS] Error Data` | visualization | [Table] Represents data related to various errors occurred in your RDS instance | -| `[AWS RDS] Audit Data` | visualization | [Table] overview of audit logs, showing actions that have been tracked for review | -| `[AWS RDS] Total Error Logs` | visualization | [Line] Displays the total count of error logs recorded within a specific time frame | -| `[AWS RDS] Error History` | visualization | [Line] Provides a timeline representation of the errors occurred over a certain period. | -| `[AWS RDS] Audoit History` | visualization | [Line] Provides a timeline representation of the audited events occurred over a certain period. | -| `[AWS RDS] General Search` | search | The pre-canned search for AWS RDS | - -## Dashboard - - diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/assets/aws_rds-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_rds/assets/aws_rds-1.0.0.ndjson deleted file mode 100644 index 253bb7053a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/assets/aws_rds-1.0.0.ndjson +++ /dev/null @@ -1,22 +0,0 @@ -{"attributes":{"fieldFormatMap":"{\"deadlock-integrate-ip\":{\"id\":\"string\",\"params\":{\"parsedUrl\":{\"origin\":\"https://localhost:9200\",\"pathname\":\"/_dashboards/app/management\",\"basePath\":\"/_dashboards\"}}}}","fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-connection-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-connection-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-connection-id\"}}},{\"count\":0,\"name\":\"aws.rds.audit-db-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-host-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-host-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-host-name\"}}},{\"count\":0,\"name\":\"aws.rds.audit-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.audit-operation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-operation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-operation\"}}},{\"count\":0,\"name\":\"aws.rds.audit-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-query-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-query-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-query-id\"}}},{\"count\":0,\"name\":\"aws.rds.audit-retcode\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-user\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.audit-user.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.audit-user\"}}},{\"count\":0,\"name\":\"aws.rds.db-identifier\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.db-identifier.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-action-1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-action-2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-ip-1\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-ip-2\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.rds.deadlock-os-thread-handle-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-os-thread-handle-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-os-thread-handle-1\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-os-thread-handle-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-os-thread-handle-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-os-thread-handle-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-query-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-1\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-query-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-query-id-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-id-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-id-1\"}}},{\"count\":1,\"name\":\"deadlock-query-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-query-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-query-id-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-thread-id-1\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-thread-id-1.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-thread-id-1\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-thread-id-2\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.deadlock-thread-id-2.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.deadlock-thread-id-2\"}}},{\"count\":1,\"name\":\"aws.rds.deadlock-user-1\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.deadlock-user-2\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.err-code\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-code.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-code\"}}},{\"count\":0,\"name\":\"aws.rds.err-detail\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-label\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-label.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-label\"}}},{\"count\":0,\"name\":\"aws.rds.err-sub-system\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-sub-system.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-sub-system\"}}},{\"count\":0,\"name\":\"aws.rds.err-thread\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.err-thread.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.err-thread\"}}},{\"count\":0,\"name\":\"aws.rds.general-action\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.general-action.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.general-action\"}}},{\"count\":0,\"name\":\"aws.rds.general-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.general-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.log-detail\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-db-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-db-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-db-name\"}}},{\"count\":0,\"name\":\"aws.rds.sq-duration\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-host-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-host-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-host-name\"}}},{\"count\":0,\"name\":\"aws.rds.sq-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-id\"}}},{\"count\":0,\"name\":\"aws.rds.sq-ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-ip.keyword\",\"type\":\"ip\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-lock-wait\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-query\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-query.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-query\"}}},{\"count\":0,\"name\":\"aws.rds.sq-rows-examined\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-rows-sent\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-table-name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-table-name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-table-name\"}}},{\"count\":0,\"name\":\"aws.rds.sq-timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.rds.sq-user\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.rds.sq-user.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.rds.sq-user\"}}},{\"count\":0,\"name\":\"time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"ss4o_logs-aws_rds-sample-sample"},"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"title":"logs-aws-rds-Controller","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Controller\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1642652265092\",\"fieldName\":\"aws.rds.db-identifier.keyword\",\"parent\":\"\",\"label\":\"Database Identifier\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1642652947950\",\"fieldName\":\"aws.rds.sq-table-name.keyword\",\"parent\":\"1642652265092\",\"label\":\"Table Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":true,\"pinFilters\":false}}"},"id":"4ab9b1cf-9724-499d-aeea-0c4f511102b8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"control_0_index_pattern","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"control_1_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-rds-Log Event Overview","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Log Event Overview\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Log Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-2h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.db-identifier.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Log Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Log Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"80d85a4e-fd94-4739-beab-b490cde705f5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MiwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.sq-db-name","aws.rds.sq-table-name","aws.rds.sq-user","aws.rds.sq-query","aws.rds.sq-ip","aws.rds.sq-host-name","aws.rds.sq-rows-examined","aws.rds.sq-rows-sent","aws.rds.sq-id","aws.rds.sq-duration","aws.rds.sq-lock-wait"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"aws.rds.sq-duration > 0\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["sq-lock-wait","asc"]],"title":"logs-aws-rds-slowquery-data","version":1},"id":"05103629-66db-4c1c-b0bb-e855708ec9be","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0MywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Slow Query History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Slow Query History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/d\",\"to\":\"now/d\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"9e3ffdc2-7f7f-4e1e-9231-5a1d2c43c2c8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Average Slow Query Time History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Average Slow Query Time History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.rds.sq-duration\",\"customLabel\":\"Slow Query Time Taken\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15m\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Slow Query Time Taken\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Slow Query Time Taken\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"48c19a1b-b353-4b0d-b2c1-223b5ae53a72","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":" logs-aws-rds-Top Slow Query IP Table","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\" logs-aws-rds-Top Slow Query IP Table\",\"type\":\"table\",\"aggs\":[{\"id\":\"3\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.rds.sq-duration\",\"customLabel\":\"Average Duration\"},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-ip.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"338679b0-7179-416d-a6a5-6be8a55dba50","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Top Slow Query","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-rds-Top Slow Query\",\"type\":\"table\",\"aggs\":[{\"id\":\"4\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.rds.sq-duration\",\"customLabel\":\"Average Query duration\"},\"schema\":\"metric\"},{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-query.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Slow Query\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"f25733ef-8c66-49c6-93ea-14c1a2bc2491","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":" logs-aws-rds-Slow Query Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\" logs-aws-rds-Slow Query Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-query.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"137ba0ed-03fe-493b-9f54-9dc39fda9533","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":" logs-aws-rds-Slow Query Table Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\" logs-aws-rds-Slow Query Table Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.rds.sq-table-name.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"43602db4-6562-4f4d-92f1-147bb83481b6","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Total Slow Queries","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Total Slow Queries\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Slow Queries\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"1e652ded-a6bf-4cdc-9be8-86c5eb3dd93e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0NiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"title":"logs-aws-rds-Average Slow Query Duration","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Average Slow Query Duration\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"aws.rds.sq-duration\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"ms,ms,\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Average Slow Query Duration\",\"var_name\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-rds-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"nginx-dev-0110--*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"aws.rds.sq-duration > 0\",\"language\":\"kuery\"},\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\",\"markdown\":\"# **{{ average_slow_query_duration.last.formatted }}**\\n\\n{{ average_slow_query_duration.label }}\\n\",\"ignore_global_filter\":0,\"time_range_mode\":\"entire_time_range\"}}"},"id":"f13a7bb0-029f-4ad6-8191-c12de56669a9","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc0OSwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.log-detail","aws.rds.deadlock-ip-1","aws.rds.deadlock-action-1","aws.rds.deadlock-os-thread-handle-1","aws.rds.deadlock-query-1","aws.rds.deadlock-query-id-1","aws.rds.deadlock-thread-id-1","aws.rds.deadlock-user-1","aws.rds.deadlock-action-2","aws.rds.deadlock-ip-2","aws.rds.deadlock-os-thread-handle-2","aws.rds.deadlock-query-2","aws.rds.deadlock-query-id-2","aws.rds.deadlock-thread-id-2","aws.rds.deadlock-user-2"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"aws.rds.deadlock-query-1\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"aws.rds.deadlock-query-1\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-rds-lock-data","version":1},"id":"0b0b7618-efd8-4680-b927-453ac44cb989","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1MywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Total Deadlock Queries","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Total Deadlock Queries\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Deadlock Queries\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"a90bdf8c-842f-4254-8120-57615a63d3a5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b0b7618-efd8-4680-b927-453ac44cb989","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Deadlock History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Deadlock History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/w\",\"to\":\"now/w\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"200cc6af-892a-42cf-ae6b-f937141944b0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0b0b7618-efd8-4680-b927-453ac44cb989","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NSwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.err-label","aws.rds.err-code","aws.rds.err-detail","aws.rds.err-sub-system","aws.rds.err-thread"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"aws.rds.err-label.keyword\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"aws.rds.err-label.keyword\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-rds-Error Data","version":1},"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Total Error Logs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Total Error Logs\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Error Logs\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"95315992-e8c4-44ed-b46a-f18e98e9b8f0","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1OCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Error History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Error History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/d\",\"to\":\"now/d\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"929f4595-61bb-4ecc-b380-b79208ab2ab8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1OSwxXQ=="} -{"attributes":{"columns":["aws.rds.db-identifier","aws.rds.audit-operation","aws.rds.audit-ip","aws.rds.audit-query","aws.rds.audit-retcode","aws.rds.audit-connection-id","aws.rds.audit-host-name","aws.rds.audit-query-id","aws.rds.audit-user"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"meta\":{\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"exists\",\"key\":\"aws.rds.audit-operation.keyword\",\"value\":\"exists\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"exists\":{\"field\":\"aws.rds.audit-operation.keyword\"},\"$state\":{\"store\":\"appState\"}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-rds-Audit Data","version":1},"id":"4b9906f0-3b82-4522-9911-766f7632b4db","migrationVersion":{"search":"7.9.3"},"references":[{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"fbc82d82-deff-4237-8736-0af6a0ff0790","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc1NywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"logs-aws-rds-Audit History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-rds-Audit History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now/d\",\"to\":\"now/d\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"d39307b4-6309-4f5d-86a6-c8bc63420fce","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"4b9906f0-3b82-4522-9911-766f7632b4db","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-07-26T00:02:30.175Z","version":"Wzc2MCwxXQ=="} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"d9a4a2d5-3fa9-4d67-aecc-3592b45da718\"},\"panelIndex\":\"d9a4a2d5-3fa9-4d67-aecc-3592b45da718\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Controller\",\"panelRefName\":\"panel_0\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"bdd894b1-49c5-451a-8c85-53ae5e6d4d65\"},\"panelIndex\":\"bdd894b1-49c5-451a-8c85-53ae5e6d4d65\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Log Events Overview\",\"panelRefName\":\"panel_1\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":7,\"w\":24,\"h\":15,\"i\":\"cfed55c2-cf94-43c4-9551-48e77078fa80\"},\"panelIndex\":\"cfed55c2-cf94-43c4-9551-48e77078fa80\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query History\",\"panelRefName\":\"panel_2\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":7,\"w\":24,\"h\":15,\"i\":\"353c8024-cfbe-4036-9aaa-267c24e75a67\"},\"panelIndex\":\"353c8024-cfbe-4036-9aaa-267c24e75a67\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Average Slow Query Time History\",\"panelRefName\":\"panel_3\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":24,\"h\":15,\"i\":\"f6f989a2-c34d-4b00-a0be-b9a101858172\"},\"panelIndex\":\"f6f989a2-c34d-4b00-a0be-b9a101858172\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Top Slow Query IP\",\"panelRefName\":\"panel_4\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":22,\"w\":24,\"h\":15,\"i\":\"ff6c2123-49cb-40b3-91de-561acd661968\"},\"panelIndex\":\"ff6c2123-49cb-40b3-91de-561acd661968\",\"embeddableConfig\":{\"hidePanelTitles\":false,\"table\":null,\"vis\":{\"params\":{\"sort\":{\"columnIndex\":2,\"direction\":\"asc\"}}}},\"title\":\"Top Slow Query\",\"panelRefName\":\"panel_5\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":37,\"w\":20,\"h\":15,\"i\":\"16597129-58fe-40de-bb63-e07ce3607ef2\"},\"panelIndex\":\"16597129-58fe-40de-bb63-e07ce3607ef2\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query Pie\",\"panelRefName\":\"panel_6\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":20,\"y\":37,\"w\":21,\"h\":15,\"i\":\"bd82d45f-08ae-48a0-a42a-484e0821e0cf\"},\"panelIndex\":\"bd82d45f-08ae-48a0-a42a-484e0821e0cf\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query Table Name Pie\",\"panelRefName\":\"panel_7\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":41,\"y\":37,\"w\":7,\"h\":8,\"i\":\"b558fc11-88e7-4c07-8d02-d43c2edc8ae6\"},\"panelIndex\":\"b558fc11-88e7-4c07-8d02-d43c2edc8ae6\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Slow Queries\",\"panelRefName\":\"panel_8\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":41,\"y\":45,\"w\":7,\"h\":7,\"i\":\"54685e26-7269-4072-a80d-685ff764a9e6\"},\"panelIndex\":\"54685e26-7269-4072-a80d-685ff764a9e6\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Average Slow Query Duration\",\"panelRefName\":\"panel_9\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":52,\"w\":48,\"h\":15,\"i\":\"7e67c9ad-b300-4ec4-80ab-d9111eca62bb\"},\"panelIndex\":\"7e67c9ad-b300-4ec4-80ab-d9111eca62bb\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Slow Query Logs\",\"panelRefName\":\"panel_10\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":67,\"w\":7,\"h\":15,\"i\":\"1868514c-2bb2-4f97-83bd-b30390bc7fb1\"},\"panelIndex\":\"1868514c-2bb2-4f97-83bd-b30390bc7fb1\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Deadlock Queries\",\"panelRefName\":\"panel_11\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":7,\"y\":67,\"w\":17,\"h\":15,\"i\":\"db57c4d2-c429-40fa-b681-c121d3efb569\"},\"panelIndex\":\"db57c4d2-c429-40fa-b681-c121d3efb569\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Deadlock History\",\"panelRefName\":\"panel_12\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":67,\"w\":24,\"h\":15,\"i\":\"2b401b1c-9d8d-4b96-9123-571a6b4047f5\"},\"panelIndex\":\"2b401b1c-9d8d-4b96-9123-571a6b4047f5\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Deadlock Query Logs\",\"panelRefName\":\"panel_13\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":82,\"w\":7,\"h\":15,\"i\":\"e75f0e28-0ed2-428f-8b84-0ddf376ec992\"},\"panelIndex\":\"e75f0e28-0ed2-428f-8b84-0ddf376ec992\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Total Error Logs\",\"panelRefName\":\"panel_14\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":7,\"y\":82,\"w\":17,\"h\":15,\"i\":\"31d43fb1-68cc-43d5-9859-f7b15469164f\"},\"panelIndex\":\"31d43fb1-68cc-43d5-9859-f7b15469164f\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Error History\",\"panelRefName\":\"panel_15\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":82,\"w\":24,\"h\":15,\"i\":\"887710fb-2582-4540-bd0d-b98b6144473f\"},\"panelIndex\":\"887710fb-2582-4540-bd0d-b98b6144473f\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Error Logs\",\"panelRefName\":\"panel_16\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":97,\"w\":24,\"h\":15,\"i\":\"71008d33-ed91-45fb-ad78-7266f7684545\"},\"panelIndex\":\"71008d33-ed91-45fb-ad78-7266f7684545\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Audit History\",\"panelRefName\":\"panel_17\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":97,\"w\":24,\"h\":15,\"i\":\"6cfb4406-d581-4fec-bd7a-13c8ecfe5ca4\"},\"panelIndex\":\"6cfb4406-d581-4fec-bd7a-13c8ecfe5ca4\",\"embeddableConfig\":{\"hidePanelTitles\":false},\"title\":\"Audit Logs\",\"panelRefName\":\"panel_18\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-15m","timeRestore":true,"timeTo":"now","title":"logs-aws-rds-dashboard","version":1},"id":"de58196f-b660-4099-a996-f07d65cfdd70","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"4ab9b1cf-9724-499d-aeea-0c4f511102b8","name":"panel_0","type":"visualization"},{"id":"80d85a4e-fd94-4739-beab-b490cde705f5","name":"panel_1","type":"visualization"},{"id":"9e3ffdc2-7f7f-4e1e-9231-5a1d2c43c2c8","name":"panel_2","type":"visualization"},{"id":"48c19a1b-b353-4b0d-b2c1-223b5ae53a72","name":"panel_3","type":"visualization"},{"id":"338679b0-7179-416d-a6a5-6be8a55dba50","name":"panel_4","type":"visualization"},{"id":"f25733ef-8c66-49c6-93ea-14c1a2bc2491","name":"panel_5","type":"visualization"},{"id":"137ba0ed-03fe-493b-9f54-9dc39fda9533","name":"panel_6","type":"visualization"},{"id":"43602db4-6562-4f4d-92f1-147bb83481b6","name":"panel_7","type":"visualization"},{"id":"1e652ded-a6bf-4cdc-9be8-86c5eb3dd93e","name":"panel_8","type":"visualization"},{"id":"f13a7bb0-029f-4ad6-8191-c12de56669a9","name":"panel_9","type":"visualization"},{"id":"05103629-66db-4c1c-b0bb-e855708ec9be","name":"panel_10","type":"search"},{"id":"a90bdf8c-842f-4254-8120-57615a63d3a5","name":"panel_11","type":"visualization"},{"id":"200cc6af-892a-42cf-ae6b-f937141944b0","name":"panel_12","type":"visualization"},{"id":"0b0b7618-efd8-4680-b927-453ac44cb989","name":"panel_13","type":"search"},{"id":"95315992-e8c4-44ed-b46a-f18e98e9b8f0","name":"panel_14","type":"visualization"},{"id":"929f4595-61bb-4ecc-b380-b79208ab2ab8","name":"panel_15","type":"visualization"},{"id":"82cd7bad-e4e2-4593-9f8a-4757da844ccf","name":"panel_16","type":"search"},{"id":"d39307b4-6309-4f5d-86a6-c8bc63420fce","name":"panel_17","type":"visualization"},{"id":"4b9906f0-3b82-4522-9911-766f7632b4db","name":"panel_18","type":"search"}],"type":"dashboard","updated_at":"2023-07-26T17:06:23.797Z","version":"Wzc2MywxXQ=="} -{"exportedCount":21,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/aws_rds-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_rds/aws_rds-1.0.0.json deleted file mode 100644 index ca46d616ca..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/aws_rds-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_rds", - "version": "1.0.0", - "displayName": "AWS RDS", - "description": "AWS RDS", - "license": "Apache-2.0", - "type": "logs_rds", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_rds/info", - "statics": { - "logo": { - "annotation": "AWS RDS Logo", - "path": "aws-rds-icon.png" - }, - "gallery": [ - { - "annotation": "AWS RDS Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_rds", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs_rds", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_rds", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_rds/data/sample.json deleted file mode 100644 index ac8428b9c7..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/data/sample.json +++ /dev/null @@ -1,272 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "rds_log", - "domain": "aws.rds" - }, - "attributes": { - "data_stream": { - "dataset": "aws.rds", - "namespace": "production", - "type": "logs" - } - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "rds": { - "db-identifier": "db1", - "sq-user": "admin", - "sq-db-name": "testDB", - "sq-host-name": "host1", - "sq-ip": "192.0.2.0", - "sq-id": "sq123", - "sq-duration": 1.23, - "sq-lock-wait": 0.12, - "sq-rows-sent": 100, - "sq-rows-examined": 500, - "sq-table-name": "table1", - "sq-timestamp": "2023-07-22T11:22:33Z", - "sq-query": "SELECT * FROM table1", - "err-thread": "thread1", - "err-label": "error1", - "err-code": "err123", - "err-sub-system": "sub1", - "err-detail": "Error detail message", - "general-id": "gen123", - "general-action": "insert", - "general-query": "INSERT INTO table1 VALUES ('value1', 'value2')", - "audit-ip": "192.0.2.1", - "audit-user": "auditUser", - "audit-host-name": "host2", - "audit-connection-id": "conn123", - "audit-query-id": "query123", - "audit-operation": "SELECT", - "audit-db-name": "auditDB", - "audit-query": "SELECT * FROM auditDB", - "audit-retcode": "ret123", - "deadlock-thread-id-1": "thread2", - "deadlock-os-thread-handle-1": "osThread1", - "deadlock-query-id-1": "dq1", - "deadlock-ip-1": "192.0.2.2", - "deadlock-user-1": "user2", - "deadlock-action-1": "select", - "deadlock-query-1": "SELECT * FROM table2 WHERE column1 = 'value3'", - "deadlock-thread-id-2": "thread3", - "deadlock-os-thread-handle-2": "osThread2", - "deadlock-query-id-2": "dq2", - "deadlock-ip-2": "192.0.2.3", - "deadlock-user-2": "user3", - "deadlock-action-2": "update", - "deadlock-query-2": "UPDATE table2 SET column1 = 'value4' WHERE column1 = 'value3'", - "log-detail": "Log detail message" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_rds" - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes": 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } - }, - { - "@timestamp": "2023-07-18T09:15:06.000Z", - "body": "3 111111111112 eni-0e250409d410e1291 162.142.125.178 10.0.0.201 38472 12314 6 2 45 1674898497 1674898508 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "rds_log", - "domain": "aws.rds" - }, - "attributes": { - "data_stream": { - "dataset": "aws.rds", - "namespace": "production", - "type": "logs" - } - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c3", - "key": "AWSLogs/111111111112/vpcflowlogs/us-east-2/2023/01/28/111111111112_vpcflowlogs_us-east-2_fl-023c6afa025ee5a05_20230128T0940Z_3a9dfd9e.log.gz" - }, - "rds": { - "db-identifier": "db2", - "sq-user": "admin2", - "sq-db-name": "testDB2", - "sq-host-name": "host2", - "sq-ip": "192.0.2.1", - "sq-id": "sq124", - "sq-duration": 1.24, - "sq-lock-wait": 0.13, - "sq-rows-sent": 101, - "sq-rows-examined": 501, - "sq-table-name": "table2", - "sq-timestamp": "2023-07-22T12:23:34Z", - "sq-query": "SELECT * FROM table2", - "err-thread": "thread2", - "err-label": "error2", - "err-code": "err124", - "err-sub-system": "sub2", - "err-detail": "Error detail message 2", - "general-id": "gen124", - "general-action": "update", - "general-query": "UPDATE table2 SET column1 = 'value3', column2 = 'value4'", - "audit-ip": "192.0.2.2", - "audit-user": "auditUser2", - "audit-host-name": "host3", - "audit-connection-id": "conn124", - "audit-query-id": "query124", - "audit-operation": "UPDATE", - "audit-db-name": "auditDB2", - "audit-query": "UPDATE auditDB2 SET column1 = 'value5'", - "audit-retcode": "ret124", - "deadlock-thread-id-1": "thread3", - "deadlock-os-thread-handle-1": "osThread2", - "deadlock-query-id-1": "dq2", - "deadlock-ip-1": "192.0.2.3", - "deadlock-user-1": "user3", - "deadlock-action-1": "update", - "deadlock-query-1": "UPDATE table3 SET column1 = 'value6' WHERE column1 = 'value5'", - "deadlock-thread-id-2": "thread4", - "deadlock-os-thread-handle-2": "osThread3", - "deadlock-query-id-2": "dq3", - "deadlock-ip-2": "192.0.2.4", - "deadlock-user-2": "user4", - "deadlock-action-2": "insert", - "deadlock-query-2": "INSERT INTO table4 VALUES ('value7', 'value8')", - "log-detail": "Log detail message 2" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111112" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743528", - "platform": "aws_rds" - }, - "communication": { - "source": { - "address": "162.142.125.178", - "port": 38472, - "packets": 2, - "bytes": 45 - }, - "destination": { - "address": "10.0.0.201", - "port": 12314 - } - } - }, - { - "@timestamp": "2023-07-19T10:16:07.000Z", - "body": "4 111111111113 eni-0e250409d410e1292 162.142.125.179 10.0.0.202 38473 12315 6 3 46 1674898498 1674898509 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "rds_log", - "domain": "aws.rds" - }, - "attributes": { - "data_stream": { - "dataset": "aws.rds", - "namespace": "production", - "type": "logs" - } - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c4", - "key": "AWSLogs/111111111113/vpcflowlogs/us-east-2/2023/01/28/111111111113_vpcflowlogs_us-east-2_fl-023c6afa025ee5a06_20230128T0950Z_3a9dfd9f.log.gz" - }, - "rds": { - "db-identifier": "db3", - "sq-user": "admin3", - "sq-db-name": "testDB3", - "sq-host-name": "host3", - "sq-ip": "192.0.2.2", - "sq-id": "sq125", - "sq-duration": 1.25, - "sq-lock-wait": 0.14, - "sq-rows-sent": 102, - "sq-rows-examined": 502, - "sq-table-name": "table3", - "sq-timestamp": "2023-07-22T13:24:35Z", - "sq-query": "SELECT * FROM table3", - "err-thread": "thread3", - "err-label": "error3", - "err-code": "err125", - "err-sub-system": "sub3", - "err-detail": "Error detail message 3", - "general-id": "gen125", - "general-action": "delete", - "general-query": "DELETE FROM table3 WHERE column1 = 'value9'", - "audit-ip": "192.0.2.3", - "audit-user": "auditUser3", - "audit-host-name": "host4", - "audit-connection-id": "conn125", - "audit-query-id": "query125", - "audit-operation": "DELETE", - "audit-db-name": "auditDB3", - "audit-query": "DELETE FROM auditDB3 WHERE column1 = 'value10'", - "audit-retcode": "ret125", - "deadlock-thread-id-1": "thread4", - "deadlock-os-thread-handle-1": "osThread3", - "deadlock-query-id-1": "dq3", - "deadlock-ip-1": "192.0.2.4", - "deadlock-user-1": "user4", - "deadlock-action-1": "delete", - "deadlock-query-1": "DELETE FROM table4 WHERE column1 = 'value11'", - "deadlock-thread-id-2": "thread5", - "deadlock-os-thread-handle-2": "osThread4", - "deadlock-query-id-2": "dq4", - "deadlock-ip-2": "192.0.2.5", - "deadlock-user-2": "user5", - "deadlock-action-2": "select", - "deadlock-query-2": "SELECT * FROM table5", - "log-detail": "Log detail message 3" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111113" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743529", - "platform": "aws_rds" - }, - "communication": { - "source": { - "address": "162.142.125.179", - "port": 38473, - "packets": 3, - "bytes": 46 - }, - "destination": { - "address": "10.0.0.202", - "port": 12315 - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/info/README.md b/server/adaptors/integrations/__data__/repository/aws_rds/info/README.md deleted file mode 100644 index 9c087f6c64..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/info/README.md +++ /dev/null @@ -1,29 +0,0 @@ -# AWS RDS Integrations - -## What is AWS RDS? - -AWS RDS (Relational Database Service) is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud. - -RDS helps you perform tasks such as: - -- Managing database instances -- Scaling compute resources and storage capacity -- Automating time-consuming administration tasks including hardware provisioning, database setup, patching, and backups - -RDS keeps your database up-to-date with the latest patches, and it also provides automatic backups and disaster recovery capabilities. You can make database instances available in multiple regions to enhance availability and reliability for your data. - -See additional details [here](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html). - -## What is AWS RDS Integration? - -An integration is a collection of predefined assets which are combined in a meaningful manner. - -AWS RDS integration includes dashboards, visualizations, queries, and index mapping to help you manage and monitor your database services more effectively. - -### Dashboards - -The Dashboard uses the index alias `logs-aws-rds` for shortening the index name - be advised. - - - -This integration provides you with a comprehensive view of your RDS instances, enabling you to monitor performance and resources effectively, troubleshoot problems quickly, and make data-driven decisions. diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_rds-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_rds-1.0.0.mapping.json deleted file mode 100644 index 220abe36ec..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_rds-1.0.0.mapping.json +++ /dev/null @@ -1,299 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_rds", - "labels": ["aws", "rds"] - }, - "properties": { - "aws": { - "properties": { - "rds": { - "properties": { - "db-identifier": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-user": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-db-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-host-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-ip": { - "type": "ip" - }, - "sq-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-duration": { - "type": "double" - }, - "sq-lock-wait": { - "type": "double" - }, - "sq-rows-sent": { - "type": "long" - }, - "sq-rows-examined": { - "type": "long" - }, - "sq-table-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "sq-timestamp": { - "type": "date" - }, - "sq-query": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "err-thread": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-label": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-code": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-sub-system": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "err-detail": { - "type": "text" - }, - "general-id": { - "type": "text" - }, - "general-action": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "general-query": { - "type": "text" - }, - "audit-ip": { - "type": "ip" - }, - "audit-user": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-host-name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-connection-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-query-id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-operation": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "audit-db-name": { - "type": "text" - }, - "audit-query": { - "type": "text" - }, - "audit-retcode": { - "type": "text" - }, - "deadlock-thread-id-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-os-thread-handle-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-query-id-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-ip-1": { - "type": "ip" - }, - "deadlock-user-1": { - "type": "keyword" - }, - "deadlock-action-1": { - "type": "keyword" - }, - "deadlock-query-1": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-thread-id-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-os-thread-handle-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-query-id-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "deadlock-ip-2": { - "type": "ip" - }, - "deadlock-user-2": { - "type": "keyword" - }, - "deadlock-action-2": { - "type": "keyword" - }, - "deadlock-query-2": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword" - } - } - }, - "log-detail": { - "type": "text" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index ca32e104a0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/logs_rds-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_rds/schemas/logs_rds-1.0.0.mapping.json deleted file mode 100644 index 8f2faf6979..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_rds/schemas/logs_rds-1.0.0.mapping.json +++ /dev/null @@ -1,230 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_rds-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-aws-rds": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "rds"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "time": { - "type": "alias", - "path": "@timestamp" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_rds", "cloud", "aws_s3"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/static/aws-rds-icon.png b/server/adaptors/integrations/__data__/repository/aws_rds/static/aws-rds-icon.png deleted file mode 100644 index e24f0c9633..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_rds/static/aws-rds-icon.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_rds/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_rds/static/dashboard.png deleted file mode 100644 index f1a4c14b5e..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_rds/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/assets/aws_s3-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_s3/assets/aws_s3-1.0.0.ndjson deleted file mode 100644 index 268ec7a4d4..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/assets/aws_s3-1.0.0.ndjson +++ /dev/null @@ -1,17 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.authentication_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.bucket\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.bucket.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.bucket\"}}},{\"count\":0,\"name\":\"aws.s3.bucket_owner\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.bytes_sent\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.cipher_suite\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.cipher_suite.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.cipher_suite\"}}},{\"count\":1,\"name\":\"aws.s3.error_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.host_header\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.host_header.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.host_header\"}}},{\"count\":0,\"name\":\"aws.s3.host_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.host_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.host_id\"}}},{\"count\":3,\"name\":\"aws.s3.http_status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":3,\"name\":\"aws.s3.key\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.key.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.key\"}}},{\"count\":2,\"name\":\"aws.s3.object_size\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":3,\"name\":\"aws.s3.operation\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.referrer\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.referrer.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.referrer\"}}},{\"count\":3,\"name\":\"aws.s3.remote_ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.remote_ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.remote_ip\"}}},{\"count\":0,\"name\":\"aws.s3.request_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.request_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.request_id\"}}},{\"count\":2,\"name\":\"aws.s3.request_uri\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.request_uri.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.request_uri\"}}},{\"count\":0,\"name\":\"aws.s3.requester\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.requester.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.requester\"}}},{\"count\":0,\"name\":\"aws.s3.signature_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.tls_version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.total_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.turn_around_time\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.user_agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.s3.user_agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.s3.user_agent\"}}},{\"count\":2,\"name\":\"aws.s3.version_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"logs-aws-s3-*"},"id":"61510775-2cb7-4e94-9cd8-de970acc891b","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNTcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Total Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Total Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"a6afb5cc-99f6-4f8d-86a7-cce5c715529d","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNTgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Access History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Access History\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1M\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Requests\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"53ac018c-7baf-47f3-800b-5127cb4751fa","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNTksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Request By aws.s3.operation","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Request By aws.s3.operation\",\"type\":\"horizontal_bar\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.operation\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"aws.s3.operation\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":200},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":75,\"filter\":true,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":true},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"c273e75f-d4e0-40fd-af89-0e27eb704307","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Unique Vistors","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Unique Vistors\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"aws.s3.remote_ip.keyword\",\"customLabel\":\"Unique Vistors\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"2bb3f1fe-ab43-4919-a95f-3c2da1cfb233","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-s3-Status Code Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Status Code Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"aws.s3.http_status:3*\",\"language\":\"kuery\"},\"label\":\"3xx Count\"},{\"id\":\"10419b40-4c5c-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"10419b41-4c5c-11ec-82ff-659ecaa3e9b9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"aws.s3.http_status:4*\",\"language\":\"kuery\"},\"label\":\"4xx Count\"},{\"id\":\"1166e160-4c5c-11ec-82ff-659ecaa3e9b9\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"1166e161-4c5c-11ec-82ff-659ecaa3e9b9\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"filter\":{\"query\":\"aws.s3.http_status:5*\",\"language\":\"kuery\"},\"label\":\"5xx Count\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-s3-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-s3-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"b88445d0-4c4a-11ec-856b-618fe2d1666a\"}],\"time_range_mode\":\"entire_time_range\",\"bar_color_rules\":[{\"id\":\"41b0c9d0-4c5c-11ec-82ff-659ecaa3e9b9\"}],\"markdown\":\"# **{{ 3_xx_count.last.formatted }}**\\n\\n{{ 3_xx_count.label }}\\n\\n# **{{ 4_xx_count.last.formatted }}**\\n\\n{{ 4_xx_count.label }}\\n\\n# **{{ 5_xx_count.last.formatted }}**\\n\\n{{ 5_xx_count.label }}\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"36a551c3-7973-4f2a-85d0-c6c8cc6d93c4","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Status Code History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Status Code History\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1M\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.http_status\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"8f3173b9-5c54-497b-8b8d-d091079a1f5c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Status Code Pie","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Status Code Pie\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.http_status\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"f1addcc8-d4a1-4205-9f41-3041b199a7fe","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Top IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-s3-Top IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.remote_ip.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP\"},\"schema\":\"aws.s3.bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0be63d84-235e-4f34-aa8f-033d85d59153","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Average Time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Average Time\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.s3.total_time\",\"customLabel\":\"Average Time (Milliseconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"c4b84900-8ee5-4c94-8941-c883681fe825","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-05-05T03:26:58.860Z","version":"WzI0MTQsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"logs-aws-s3-Data Transfer","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Data Transfer\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.s3.bytes_sent\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Bytes Sent\",\"type\":\"timeseries\"},{\"id\":\"39538980-4ccf-11ec-a982-fba6b677ed57\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"39538981-4ccf-11ec-a982-fba6b677ed57\",\"type\":\"sum\",\"field\":\"aws.s3.object_size\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Get Size\",\"type\":\"timeseries\",\"filter\":{\"query\":\"aws.s3.operation:*GET*\",\"language\":\"kuery\"}},{\"id\":\"3a186020-4ccf-11ec-a982-fba6b677ed57\",\"color\":\"#68BC00\",\"split_mode\":\"filter\",\"metrics\":[{\"id\":\"3a186021-4ccf-11ec-a982-fba6b677ed57\",\"type\":\"sum\",\"field\":\"aws.s3.object_size\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Put Size\",\"type\":\"timeseries\",\"filter\":{\"query\":\"aws.s3.operation:*PUT*\",\"language\":\"kuery\"}}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-aws-s3-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-aws-s3-*\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"\",\"language\":\"kuery\"}}}"},"id":"a08321a0-1bfa-4803-acaa-2ad352dd124f","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Average Turn Around Time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-aws-s3-Average Turn Around Time\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"avg\",\"params\":{\"field\":\"aws.s3.turn_around_time\",\"customLabel\":\"Average Turn Around Time (Milliseconds)\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":40}}}}"},"id":"fd031444-891d-42a6-b649-4d6953f77152","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-05-05T03:28:51.812Z","version":"WzI0MzYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-aws-s3-Top Request Keys","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-aws-s3-Top Request Keys\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.key.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Key\"},\"schema\":\"aws.s3.bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.s3.object_size\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Object Size\"},\"schema\":\"aws.s3.bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b2ca3aa4-6445-4f2d-a8ec-aba88a83d527","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNjksMV0="} -{"attributes":{"columns":["aws.s3.operation","aws.s3.key","aws.s3.version_id","aws.s3.object_size","aws.s3.remote_ip","aws.s3.http_status","aws.s3.error_code"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"aws.s3.operation:*DELETE*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-s3-Delete Events","version":1},"id":"fa6dc531-7228-44e7-9162-0ab4be958be7","migrationVersion":{"search":"7.9.3"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNzAsMV0="} -{"attributes":{"columns":["aws.s3.operation","aws.s3.key","aws.s3.http_status","aws.s3.remote_ip","aws.s3.error_code"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"not aws.s3.http_status:2*\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"logs-aws-s3-Access Failures","version":1},"id":"07c35fbd-5dd4-4c2a-ab97-cf1deaf6c57a","migrationVersion":{"search":"7.9.3"},"references":[{"id":"61510775-2cb7-4e94-9cd8-de970acc891b","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-04-21T03:08:36.073Z","version":"WzIxNzEsMV0="} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Requests\"},\"gridData\":{\"h\":8,\"i\":\"1c156fb1-41e8-4f40-97bc-fa230f47f9d3\",\"w\":11,\"x\":0,\"y\":0},\"panelIndex\":\"1c156fb1-41e8-4f40-97bc-fa230f47f9d3\",\"title\":\"Total Requests\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Access History\"},\"gridData\":{\"h\":16,\"i\":\"10c06583-55cc-4747-b915-c5c337d3660a\",\"w\":24,\"x\":11,\"y\":0},\"panelIndex\":\"10c06583-55cc-4747-b915-c5c337d3660a\",\"title\":\"Access History\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Request By aws.s3.operation\"},\"gridData\":{\"h\":16,\"i\":\"67598b31-05de-4940-9f13-01858eca0ddf\",\"w\":13,\"x\":35,\"y\":0},\"panelIndex\":\"67598b31-05de-4940-9f13-01858eca0ddf\",\"title\":\"Request By aws.s3.operation\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Unique Vistors\"},\"gridData\":{\"h\":8,\"i\":\"e3a37fda-460d-4ee3-b76d-8eaf214684d4\",\"w\":11,\"x\":0,\"y\":8},\"panelIndex\":\"e3a37fda-460d-4ee3-b76d-8eaf214684d4\",\"title\":\"Unique Vistors\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code\"},\"gridData\":{\"h\":18,\"i\":\"f1fad13e-9062-4645-972b-a1171844a4d9\",\"w\":11,\"x\":0,\"y\":16},\"panelIndex\":\"f1fad13e-9062-4645-972b-a1171844a4d9\",\"title\":\"Status Code\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code History\"},\"gridData\":{\"h\":18,\"i\":\"3ed78cca-6e3f-4fb3-8ed4-a39a15f89d2b\",\"w\":24,\"x\":11,\"y\":16},\"panelIndex\":\"3ed78cca-6e3f-4fb3-8ed4-a39a15f89d2b\",\"title\":\"Status Code History\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Status Code Pie\"},\"gridData\":{\"h\":18,\"i\":\"3ea9b13d-59fb-45e2-b9f9-628c2b50d776\",\"w\":13,\"x\":35,\"y\":16},\"panelIndex\":\"3ea9b13d-59fb-45e2-b9f9-628c2b50d776\",\"title\":\"Status Code Pie\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Client IPs\"},\"gridData\":{\"h\":16,\"i\":\"61b5cfbd-072a-400c-988a-1a4d443dc41f\",\"w\":13,\"x\":35,\"y\":34},\"panelIndex\":\"61b5cfbd-072a-400c-988a-1a4d443dc41f\",\"title\":\"Top Client IPs\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Time\"},\"gridData\":{\"h\":8,\"i\":\"9cd8de66-de15-4619-8a7f-da3bbc86ae53\",\"w\":11,\"x\":0,\"y\":34},\"panelIndex\":\"9cd8de66-de15-4619-8a7f-da3bbc86ae53\",\"title\":\"Average Time\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Data Transfer\"},\"gridData\":{\"h\":16,\"i\":\"63a56e52-0b21-44ef-8151-eb84b0ca17b2\",\"w\":24,\"x\":11,\"y\":34},\"panelIndex\":\"63a56e52-0b21-44ef-8151-eb84b0ca17b2\",\"title\":\"Data Transfer\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Average Turn Around Time\"},\"gridData\":{\"h\":8,\"i\":\"e552454c-633a-4715-b56e-faa8c503371f\",\"w\":11,\"x\":0,\"y\":42},\"panelIndex\":\"e552454c-633a-4715-b56e-faa8c503371f\",\"title\":\"Average Turn Around Time\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Request Keys\"},\"gridData\":{\"h\":16,\"i\":\"7eeabbb9-1e06-4d6d-b2ab-4d67c40c70e5\",\"w\":24,\"x\":0,\"y\":50},\"panelIndex\":\"7eeabbb9-1e06-4d6d-b2ab-4d67c40c70e5\",\"title\":\"Top Request Keys\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Delete Events\"},\"gridData\":{\"h\":16,\"i\":\"d67f7a50-9fcc-443b-9be7-512fbd8d5b3a\",\"w\":24,\"x\":24,\"y\":50},\"panelIndex\":\"d67f7a50-9fcc-443b-9be7-512fbd8d5b3a\",\"title\":\"Delete Events\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Access Failures\"},\"gridData\":{\"h\":18,\"i\":\"fd64d623-d263-4177-ab5e-a40d1114e7ec\",\"w\":48,\"x\":0,\"y\":66},\"panelIndex\":\"fd64d623-d263-4177-ab5e-a40d1114e7ec\",\"title\":\"Access Failures\",\"version\":\"1.3.2\",\"panelRefName\":\"panel_13\"}]","timeRestore":false,"title":"logs-aws-s3-dashboard","version":1},"id":"79a9137e-6966-49d9-8921-3517699d4ecc","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"a6afb5cc-99f6-4f8d-86a7-cce5c715529d","name":"panel_0","type":"visualization"},{"id":"53ac018c-7baf-47f3-800b-5127cb4751fa","name":"panel_1","type":"visualization"},{"id":"c273e75f-d4e0-40fd-af89-0e27eb704307","name":"panel_2","type":"visualization"},{"id":"2bb3f1fe-ab43-4919-a95f-3c2da1cfb233","name":"panel_3","type":"visualization"},{"id":"36a551c3-7973-4f2a-85d0-c6c8cc6d93c4","name":"panel_4","type":"visualization"},{"id":"8f3173b9-5c54-497b-8b8d-d091079a1f5c","name":"panel_5","type":"visualization"},{"id":"f1addcc8-d4a1-4205-9f41-3041b199a7fe","name":"panel_6","type":"visualization"},{"id":"0be63d84-235e-4f34-aa8f-033d85d59153","name":"panel_7","type":"visualization"},{"id":"c4b84900-8ee5-4c94-8941-c883681fe825","name":"panel_8","type":"visualization"},{"id":"a08321a0-1bfa-4803-acaa-2ad352dd124f","name":"panel_9","type":"visualization"},{"id":"fd031444-891d-42a6-b649-4d6953f77152","name":"panel_10","type":"visualization"},{"id":"b2ca3aa4-6445-4f2d-a8ec-aba88a83d527","name":"panel_11","type":"visualization"},{"id":"fa6dc531-7228-44e7-9162-0ab4be958be7","name":"panel_12","type":"search"},{"id":"07c35fbd-5dd4-4c2a-ab97-cf1deaf6c57a","name":"panel_13","type":"search"}],"type":"dashboard","updated_at":"2023-05-05T03:29:28.271Z","version":"WzI0NTUsMV0="} -{"exportedCount":16,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/aws_s3-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_s3/aws_s3-1.0.0.json deleted file mode 100644 index c519e57b76..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/aws_s3-1.0.0.json +++ /dev/null @@ -1,46 +0,0 @@ -{ - "name": "aws_s3", - "version": "1.0.0", - "displayName": "AWS S3 ", - "description": "AWS S3 Object Store", - "license": "Apache-2.0", - "type": "logs_s3", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_s3/info", - "statics": { - "logo": { - "annotation": "S3 Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "AWS S3 Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_s3", - "version": "1.0.0" - }, - { - "name": "logs_s3", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_s3", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_s3/data/sample.json deleted file mode 100644 index 089edd8e50..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/data/sample.json +++ /dev/null @@ -1,262 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "078d85edf7268fb4814b1b4fc9f4c64adfde218b6b489a38ecf1b269f14f3c7a centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k [31/Jan/2023:09:25:20 +0000] 35.89.52.162 arn:aws:sts::347283850106:assumed-role/CentralizedLogging-CustomCDKBucketDeployment8693BB-1X4DVR38SF7ZY/CentralizedLogging-CustomCDKBucketDeployment8693BB-kU6BAxSswmfp HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.70 Python/3.9.13 Linux/4.14.255-296-236.539.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.69\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "production", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "s3-centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "078d85edf7268fb4814b1b4fc9f4c64adfde218b6b489a38ecf1b269f14f3c7a", - "bucket": "centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850106:assumed-role/CentralizedLogging-CustomCDKBucketDeployment8693BB-1X4DVR38SF7ZY/CentralizedLogging-CustomCDKBucketDeployment8693BB-kU6BAxSswmfp", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "200", - "error_code": "-", - "bytes_sent": 322, - "object_size": 120, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.70 Python/3.9.13 Linux/4.14.255-296-236.539.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.69", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "centralizedlogging-webconsoleuis3bucket22191f5e-t9bxwwr3d7k.s3.us-west-2.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-18T09:15:07.000Z", - "body": "084e71aee5e48296d6b4e0fead4f55abcddb2cf9b6c9923f4c276b7f12f5f1a7 alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k [31/Jan/2023:10:35:30 +0000] 36.99.53.163 arn:aws:sts::347283850107:assumed-role/AlternativeBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF8ZZ/AlternativeBucket-CustomCDKBucketDeployment8693BB-lU6BBySswmfr HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 201 - 322 - 30 29 \"-\" \"aws-cli/1.25.71 Python/3.9.14 Linux/4.14.255-296-236.540.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.70\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "development", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "222222222222" - }, - "region": "ap-southeast-1", - "resource_id": "s3-alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "084e71aee5e48296d6b4e0fead4f55abcddb2cf9b6c9923f4c276b7f12f5f1a7", - "bucket": "alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850107:assumed-role/AlternativeBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF8ZZ/AlternativeBucket-CustomCDKBucketDeployment8693BB-lU6BBySswmfr", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "201", - "error_code": "-", - "bytes_sent": 322, - "object_size": 234, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.71 Python/3.9.14 Linux/4.14.255-296-236.540.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.70", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "alternativebucket-webconsoleuis3bucket44281g5f-t8cxzzr3d8k.s3.ap-southeast-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-19T10:16:09.000Z", - "body": "094f61afd5f582a7d7c5f1gfbad5g66bcded3df9c6a9934f5c367c7g13g6g2b8 testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k [31/Jan/2023:11:45:40 +0000] 37.109.54.164 arn:aws:sts::347283850108:assumed-role/TestBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9ZZ/TestBucket-CustomCDKBucketDeployment8693BB-mU6BBzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 202 - 322 - 30 29 \"-\" \"aws-cli/1.25.72 Python/3.9.15 Linux/4.14.255-296-236.541.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.71\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "testing", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "333333333333" - }, - "region": "us-east-1", - "resource_id": "s3-testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "094f61afd5f582a7d7c5f1gfbad5g66bcded3df9c6a9934f5c367c7g13g6g2b8", - "bucket": "testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850108:assumed-role/TestBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9ZZ/TestBucket-CustomCDKBucketDeployment8693BB-mU6BBzSswmfs", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "202", - "error_code": "-", - "bytes_sent": 322, - "object_size": 345, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.72 Python/3.9.15 Linux/4.14.255-296-236.541.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.71", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "testbucket-webconsoleuis3bucket55291h5g-t7dyxxr3d9k.s3.us-east-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-21T12:18:14.000Z", - "body": "123d94egf8769gh4825b1c4hc9j5k67lmdfe328l7b589b39mcf2c389p24g4d8r backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k [31/Jan/2023:13:55:60 +0000] 39.119.56.166 arn:aws:sts::347283850110:assumed-role/BackupBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9AA/BackupBucket-CustomCDKBucketDeployment8693BB-nU6CCzSswmft HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 204 - 322 - 30 29 \"-\" \"aws-cli/1.25.74 Python/3.9.17 Linux/4.14.255-296-236.543.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.73\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "backup", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "555555555555" - }, - "region": "eu-west-1", - "resource_id": "s3-backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "123d94egf8769gh4825b1c4hc9j5k67lmdfe328l7b589b39mcf2c389p24g4d8r", - "bucket": "backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850110:assumed-role/BackupBucket-CustomCDKBucketDeployment8693BB-1X4DVR38SF9AA/BackupBucket-CustomCDKBucketDeployment8693BB-nU6CCzSswmft", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "204", - "error_code": "-", - "bytes_sent": 322, - "object_size": 7, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.74 Python/3.9.17 Linux/4.14.255-296-236.543.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.73", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "backupbucket-webconsoleuis3bucket44691j6h-t5ezzzr4d1k.s3.eu-west-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - }, - { - "@timestamp": "2023-07-23T16:22:33.000Z", - "body": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p [31/Jan/2023:15:35:45 +0000] 48.129.58.168 arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs HQ37919R28X8MPJV REST.GET.BUCKET - \"GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1\" 200 - 322 - 30 29 \"-\" \"aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75\" - ", - "event": { - "result": "ACCEPT", - "name": "s3_log", - "domain": "s3.log" - }, - "attributes": { - "data_stream": { - "dataset": "s3.log", - "namespace": "analytics", - "type": "logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "999999999999" - }, - "region": "us-east-1", - "resource_id": "s3-dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "platform": "aws_s3" - }, - "aws": { - "s3": { - "bucket_owner": "456g67hid9870ji5832c1l6kd8m9n70opfg4329o8p690o41rdf3d451s35h6i9s", - "bucket": "dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p", - "remote_ip": "48.129.58.200", - "requester": "arn:aws:sts::347283850115:assumed-role/DataAnalytics-CustomCDKBucketDeployment8693BB-1X4DVR38SF9BB/DataAnalytics-CustomCDKBucketDeployment8693BB-nU6CCzSswmfs", - "request_id": "HQ37919R28X8MPJV", - "operation": "REST.GET.BUCKET", - "key": "-", - "request_uri": "GET /?list-type=2&prefix=&encoding-type=url HTTP/1.1", - "http_status": "200", - "error_code": "-", - "bytes_sent": 322, - "object_size": 34, - "total_time": 30, - "turn_around_time": 29, - "referrer": "\"-\"", - "user_agent": "aws-cli/1.25.75 Python/3.9.18 Linux/4.14.255-296-236.546.amzn2.x86_64 exec-env/AWS_Lambda_python3.9 botocore/1.27.75", - "version_id": "-", - "host_id": "DUNYWGgt/9RUbhzwcO3yz93WKqGoMi1xejnUiNFJRdza/5C29Q4dmCMCvFh+hxjkn5LzunPyQNo=", - "signature_version": "SigV4", - "cipher_suite": "ECDHE-RSA-AES128-GCM-SHA256", - "authentication_type": "AuthHeader", - "host_header": "dataanalytics-webconsoleuis3bucket77981l7h-u7iyzrr6d2p.s3.us-east-1.amazonaws.com", - "tls_version": "TLSv1.2" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/info/README.md b/server/adaptors/integrations/__data__/repository/aws_s3/info/README.md deleted file mode 100644 index b91fbf4c25..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/info/README.md +++ /dev/null @@ -1,19 +0,0 @@ -# AWS S3 Integration - -## What is AWS S3? - -Amazon S3 (Simple Storage Service) is an object storage service that offers industry-leading scalability, data availability, security, and performance. It is designed to make web-scale computing easier for developers. - -See additional details [here](https://aws.amazon.com/s3/). - -## What is AWS S3 Integration? - -An integration is a bundle of pre-canned assets which are brought together in a meaningful manner. - -AWS S3 integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-aws-s3` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_s3/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index 8057cd98ab..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_s3/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/logs_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_s3/schemas/logs_s3-1.0.0.mapping.json deleted file mode 100644 index 3d1e48d26b..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_s3/schemas/logs_s3-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_s3-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-aws-s3": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_s3", "cloud"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_s3/static/dashboard.png deleted file mode 100644 index 7b1be885f0..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_s3/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_s3/static/logo.png b/server/adaptors/integrations/__data__/repository/aws_s3/static/logo.png deleted file mode 100644 index 3c1b6a5d1e..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_s3/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md deleted file mode 100644 index fb5ff8ce8c..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/README.md +++ /dev/null @@ -1,33 +0,0 @@ -# AWS VPC Flow Logs Integration Assets - -API: http://osd:5601/api/saved_objects/_import?overwrite=true - -- [Assets](aws_vpc_flow-1.0.0.ndjson) - -## Asset List - -The next table details the assets - -| Name | Type | Description | -| -------------------------------------------------- | :-----------: | :-------------------------------------------------------------------------: | -| `ss4o_logs_vpc-aws_vpc_flow-*-*` | index-pattern | The Index Pattern | -| `AWS VPC Flow Logs Overview` | dashboard | The pre-canned dashboard for AWS VPC flow logs | -| `[AWS VPC Flow Logs] Filters` | visualization | [Controls] Interactive controls for easy dashboard manipulation | -| `[AWS VPC Flow Logs] Total Requests` | visualization | [Metric] Total requests through the VPC | -| `[AWS VPC Flow Logs] Request History` | visualization | [Vertical Bar] Number of Requests counted against time | -| `[AWS VPC Flow Logs] Requests by VPC ID` | visualization | [Pie] Compare parts of Requests from each VPC ID | -| `[AWS VPC Flow Logs] Total Requests By Action` | visualization | [Metric] Number of Accept/Reject requests | -| `[AWS VPC Flow Logs] Bytes` | visualization | [Line] Trend of bytes transferred during the flow | -| `[AWS VPC Flow Logs] Packets` | visualization | [Line] Trend of Packets transferred during the flow | -| `[AWS VPC Flow Logs] Bytes Metric` | visualization | [Metric] Total ingress/egress bytes transferred during the flow | -| `[AWS VPC Flow Logs] Requests by Direction` | visualization | [Pie] Compare parts of ingress/egress requests | -| `[AWS VPC Flow Logs] Requests by Direction Metric` | visualization | [Metric] Number of ingress/egress requests | -| `[AWS VPC Flow Logs] Top Source Bytes` | visualization | [Table] Top 10 source with number of bytes transferred during the flow | -| `[AWS VPC Flow Logs] Top Destination Bytes` | visualization | [Table] Top 10 destination with number of bytes transferred during the flow | -| `[AWS VPC Flow Logs] Top Sources` | visualization | [Table] Top 10 source with number of requests send during the flow | -| `[AWS VPC Flow Logs] Top Destinations` | visualization | [Table] Top 10 destination with number of requests send during the flow | -| `[AWS VPC Flow Logs] Flow` | visualization | [Vega] Illustrates the flow from Source to Destination | -| `[AWS VPC Flow Logs] Heat Map` | visualization | [Heat Map] Heat Map of source and destination | -| `[AWS VPC Flow Logs] Top Source AWS Services` | visualization | [Pie] Compare parts of AWS service as flow source | -| `[AWS VPC Flow Logs] Top Destination AWS Services` | visualization | [Pie] Compare parts of AWS service as flow destination | -| `[AWS VPC Flow Logs] General Search` | search | The pre-canned search for AWS VPC flow logs | diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/aws_vpc_flow-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/aws_vpc_flow-1.0.0.ndjson deleted file mode 100644 index b83c619d2a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/aws_vpc_flow-1.0.0.ndjson +++ /dev/null @@ -1,22 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":2,\"name\":\"aws.s3.bucket\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.copy_source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.delete\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.key\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.part_number\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.s3.upload_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.account-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.az-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.az-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.az-id\"}}},{\"count\":1,\"name\":\"aws.vpc.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":3,\"name\":\"aws.vpc.dstaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.dstport\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.end\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.flow-direction\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.flow-direction\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.flow-direction\"}}},{\"count\":0,\"name\":\"aws.vpc.instance-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.instance-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.instance-id\"}}},{\"count\":0,\"name\":\"aws.vpc.interface-id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.log-status\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.pkt-dst-aws-service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.pkt-dst-aws-service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.pkt-dst-aws-service\"}}},{\"count\":1,\"name\":\"aws.vpc.pkt-src-aws-service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.pkt-src-aws-service\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.pkt-src-aws-service\"}}},{\"count\":0,\"name\":\"aws.vpc.protocol\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.region\"}}},{\"count\":1,\"name\":\"aws.vpc.srcaddr\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.srcport\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.start\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.vpc.subnet-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.subnet-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.subnet-id\"}}},{\"count\":0,\"name\":\"aws.vpc.version\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"aws.vpc.vpc-id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.vpc.vpc-id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.vpc.vpc-id\"}}},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"cloud.account.id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.availability_zone\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.platform\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.provider\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.region\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"cloud.resource_id\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.address\"}}},{\"count\":0,\"name\":\"communication.destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.domain\"}}},{\"count\":0,\"name\":\"communication.destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.sock.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.address\"}}},{\"count\":0,\"name\":\"communication.source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.domain\"}}},{\"count\":0,\"name\":\"communication.source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.exception.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.result\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.dropped_attributes_count\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.schemaUrl\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"observedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observerTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"severity.number\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severity.text.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severity.text\"}}},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"ss4o_logs_vpc-aws_vpc_flow-*-*"},"id":"508c299d-6380-4420-abb5-aed2ab24d676","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-07-20T06:42:29.133Z","version":"WzI3MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"[AWS VPC Flow Logs 1.0] Filters","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Filters\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1689743740550\",\"fieldName\":\"aws.vpc.account-id\",\"parent\":\"\",\"label\":\"Account ID\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1689745980222\",\"fieldName\":\"cloud.resource_id\",\"parent\":\"\",\"label\":\"VPC ID\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1689743798842\",\"fieldName\":\"aws.vpc.action\",\"parent\":\"\",\"label\":\"Action\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1689745214045\",\"fieldName\":\"aws.vpc.log-status\",\"parent\":\"\",\"label\":\"Status\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"},{\"id\":\"1689745255475\",\"fieldName\":\"aws.vpc.protocol\",\"parent\":\"\",\"label\":\"Protocal\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_4_index_pattern\"},{\"id\":\"1689745303238\",\"fieldName\":\"communication.source.address.keyword\",\"parent\":\"\",\"label\":\"Source\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_5_index_pattern\"},{\"id\":\"1689745349390\",\"fieldName\":\"communication.destination.address.keyword\",\"parent\":\"\",\"label\":\"Destination\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_6_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"e8fa7848-820d-4dd1-963f-c33f5812d3da","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_0_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_1_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_2_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_3_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_4_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_5_index_pattern","type":"index-pattern"},{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"control_6_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIwOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Total Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Total Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Requests\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"b3918e7d-0fa4-4cdd-ae92-ea1f720dd786","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Request History","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Request History\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2023-07-19T02:48:00.000Z\",\"to\":\"2023-07-19T02:48:10.000Z\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"895af4b0-811c-4209-bf37-52db55afe190","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Requests by VPC ID","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Requests by VPC ID\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.resource_id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"VPC ID\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"b7ee9d6e-183f-4b80-81e9-72798a195886","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Total Requests By Action","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Total Requests By Action\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Total Requests By Action\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"f1a8ff0c-65db-4ca4-9597-49c0205e704b","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Bytes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Bytes\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Bytes\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Bytes\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"0c6f4294-06da-4d93-9363-87c4a1f5ce7e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Packets","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Packets\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.packets\",\"customLabel\":\"Packets\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Packets\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Packets\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"c783ca94-2545-4761-b88d-14761ebec321","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-19T08:38:58.143Z","version":"WzIxNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"[AWS VPC Flow Logs 1.0] Bytes Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Bytes Metric\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"default_index_pattern\":\"ss4o_logs-nginx-sample-sample\",\"default_timefield\":\"@timestamp\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"index_pattern\":\"ss4o_logs_vpc-*-*\",\"interval\":\"\",\"isModelInvalid\":false,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#54B399\",\"fill\":0.5,\"formatter\":\"bytes\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"line_width\":1,\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"aws.vpc.bytes\"}],\"point_size\":1,\"separate_axis\":0,\"split_color_mode\":\"opensearchDashboards\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"label\":\"\",\"terms_field\":\"aws.vpc.flow-direction\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"override_index_pattern\":1,\"time_range_mode\":\"entire_time_range\",\"series_index_pattern\":\"ss4o_logs_vpc-*-*\",\"series_time_field\":\"@timestamp\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"type\":\"markdown\",\"background_color_rules\":[{\"id\":\"7bebf3d0-26ae-11ee-b650-5ffaae65d796\"}],\"markdown\":\"{{#if ingress}}\\n\\n# **{{ ingress.last.formatted }}**\\n\\nIngress Bytes\\n\\n{{/if}}\\n\\n{{#if egress}}\\n\\n# **{{ egress.last.formatted }}**\\n\\nEgress Bytes\\n\\n{{/if}}\\n\",\"markdown_less\":\"text-align: center;\\nfont-size : 20px;\",\"markdown_css\":\"#markdown-61ca57f0-469d-11e7-af02-69e470af7417{text-align:center;font-size:20px}\"}}"},"id":"237f9f10-26b0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-07-20T03:47:24.673Z","version":"WzIyNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Requests by Direction","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Requests by Direction\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.flow-direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"99f27f50-26b0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T03:50:43.397Z","version":"WzIyOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Requests by Direction Metric","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Requests by Direction Metric\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.flow-direction\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"008b7370-26b1-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T03:53:35.527Z","version":"WzIzMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Source Bytes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Source Bytes\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.srcaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"c5470900-26bf-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:43:44.560Z","version":"WzI0MSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Destination Bytes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Destination Bytes\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"aws.vpc.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.dstaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0c67f560-26c0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:43:32.606Z","version":"WzI0MCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Sources","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Sources\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.srcaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"4e074660-26c0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:43:07.974Z","version":"WzIzOCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Destinations","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Destinations\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Requests\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.dstaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"8b94b8a0-26c0-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T05:44:51.242Z","version":"WzI0MywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"[AWS VPC Flow Logs 1.0] Flow","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Flow\",\"type\":\"vega\",\"aggs\":[],\"params\":{\"spec\":\"{ \\n $schema: https://vega.github.io/schema/vega/v5.json\\n data: [\\n\\t{\\n \\t// query OpenSearch based on the currently selected time range and filter string\\n \\tname: rawData\\n \\turl: {\\n \\tindex: ss4o_logs_vpc-*-*\\n \\tbody: {\\n \\tsize: 0\\n \\taggs: {\\n \\ttable: {\\n \\tcomposite: {\\n \\tsize: 10000\\n \\tsources: [\\n \\t{\\n \\tstk1: {\\n \\tterms: {field: \\\"aws.vpc.srcaddr\\\"}\\n \\t}\\n \\t}\\n \\t{\\n \\tstk2: {\\n \\tterms: {field: \\\"aws.vpc.dstaddr\\\"}\\n \\t}\\n \\t}\\n \\t]\\n \\t}\\n \\t}\\n \\t}\\n \\t}\\n \\t}\\n \\t// From the result, take just the data we are interested in\\n \\tformat: {property: \\\"aggregations.table.buckets\\\"}\\n \\t// Convert key.stk1 -> stk1 for simpler access below\\n \\ttransform: [\\n \\t{type: \\\"formula\\\", expr: \\\"datum.key.stk1\\\", as: \\\"stk1\\\"}\\n \\t{type: \\\"formula\\\", expr: \\\"datum.key.stk2\\\", as: \\\"stk2\\\"}\\n \\t{type: \\\"formula\\\", expr: \\\"datum.doc_count\\\", as: \\\"size\\\"}\\n \\t]\\n\\t}\\n\\t{\\n \\tname: nodes\\n \\tsource: rawData\\n \\ttransform: [\\n \\t// when a country is selected, filter out unrelated data\\n \\t{\\n \\ttype: filter\\n \\texpr: !groupSelector || groupSelector.stk1 == datum.stk1 || groupSelector.stk2 == datum.stk2\\n \\t}\\n \\t// Set new key for later lookups - identifies each node\\n \\t{type: \\\"formula\\\", expr: \\\"datum.stk1+datum.stk2\\\", as: \\\"key\\\"}\\n \\t// instead of each table row, create two new rows,\\n \\t// one for the source (stack=stk1) and one for destination node (stack=stk2).\\n \\t// The country code stored in stk1 and stk2 fields is placed into grpId field.\\n \\t{\\n \\ttype: fold\\n \\tfields: [\\\"stk1\\\", \\\"stk2\\\"]\\n \\tas: [\\\"stack\\\", \\\"grpId\\\"]\\n \\t}\\n \\t// Create a sortkey, different for stk1 and stk2 stacks.\\n \\t{\\n \\ttype: formula\\n \\texpr: datum.stack == 'stk1' ? datum.stk1+datum.stk2 : datum.stk2+datum.stk1\\n \\tas: sortField\\n \\t}\\n \\t// Calculate y0 and y1 positions for stacking nodes one on top of the other,\\n \\t// independently for each stack, and ensuring they are in the proper order,\\n \\t// alphabetical from the top (reversed on the y axis)\\n \\t{\\n \\ttype: stack\\n \\tgroupby: [\\\"stack\\\"]\\n \\tsort: {field: \\\"sortField\\\", order: \\\"descending\\\"}\\n \\tfield: size\\n \\t}\\n \\t// calculate vertical center point for each node, used to draw edges\\n \\t{type: \\\"formula\\\", expr: \\\"(datum.y0+datum.y1)/2\\\", as: \\\"yc\\\"}\\n \\t]\\n\\t}\\n\\t{\\n \\tname: groups\\n \\tsource: nodes\\n \\ttransform: [\\n \\t// combine all nodes into country groups, summing up the doc counts\\n \\t{\\n \\ttype: aggregate\\n \\tgroupby: [\\\"stack\\\", \\\"grpId\\\"]\\n \\tfields: [\\\"size\\\"]\\n \\tops: [\\\"sum\\\"]\\n \\tas: [\\\"total\\\"]\\n \\t}\\n \\t// re-calculate the stacking y0,y1 values\\n \\t{\\n \\ttype: stack\\n \\tgroupby: [\\\"stack\\\"]\\n \\tsort: {field: \\\"grpId\\\", order: \\\"descending\\\"}\\n \\tfield: total\\n \\t}\\n \\t// project y0 and y1 values to screen coordinates\\n \\t// doing it once here instead of doing it several times in marks\\n \\t{type: \\\"formula\\\", expr: \\\"scale('y', datum.y0)\\\", as: \\\"scaledY0\\\"}\\n \\t{type: \\\"formula\\\", expr: \\\"scale('y', datum.y1)\\\", as: \\\"scaledY1\\\"}\\n \\t// boolean flag if the label should be on the right of the stack\\n \\t{type: \\\"formula\\\", expr: \\\"datum.stack == 'stk1'\\\", as: \\\"rightLabel\\\"}\\n \\t// Calculate traffic percentage for this country using \\\"y\\\" scale\\n \\t// domain upper bound, which represents the total traffic\\n \\t{\\n \\ttype: formula\\n \\texpr: datum.total/domain('y')[1]\\n \\tas: percentage\\n \\t}\\n \\t]\\n\\t}\\n\\t{\\n \\t// This is a temp lookup table with all the 'stk2' stack nodes\\n \\tname: destinationNodes\\n \\tsource: nodes\\n \\ttransform: [\\n \\t{type: \\\"filter\\\", expr: \\\"datum.stack == 'stk2'\\\"}\\n \\t]\\n\\t}\\n\\t{\\n \\tname: edges\\n \\tsource: nodes\\n \\ttransform: [\\n \\t// we only want nodes from the left stack\\n \\t{type: \\\"filter\\\", expr: \\\"datum.stack == 'stk1'\\\"}\\n \\t// find corresponding node from the right stack, keep it as \\\"target\\\"\\n \\t{\\n \\ttype: lookup\\n \\tfrom: destinationNodes\\n \\tkey: key\\n \\tfields: [\\\"key\\\"]\\n \\tas: [\\\"target\\\"]\\n \\t}\\n \\t// calculate SVG link path between stk1 and stk2 stacks for the node pair\\n \\t{\\n \\ttype: linkpath\\n \\torient: horizontal\\n \\tshape: diagonal\\n \\tsourceY: {expr: \\\"scale('y', datum.yc)\\\"}\\n \\tsourceX: {expr: \\\"scale('x', 'stk1') + bandwidth('x')\\\"}\\n \\ttargetY: {expr: \\\"scale('y', datum.target.yc)\\\"}\\n \\ttargetX: {expr: \\\"scale('x', 'stk2')\\\"}\\n \\t}\\n \\t// A little trick to calculate the thickness of the line.\\n \\t// The value needs to be the same as the hight of the node, but scaling\\n \\t// size to screen's height gives inversed value because screen's Y\\n \\t// coordinate goes from the top to the bottom, whereas the graph's Y=0\\n \\t// is at the bottom. So subtracting scaled doc count from screen height\\n \\t// (which is the \\\"lower\\\" bound of the \\\"y\\\" scale) gives us the right value\\n \\t{\\n \\ttype: formula\\n \\texpr: range('y')[0]-scale('y', datum.size)\\n \\tas: strokeWidth\\n \\t}\\n \\t// Tooltip needs individual link's percentage of all traffic\\n \\t{\\n \\ttype: formula\\n \\texpr: datum.size/domain('y')[1]\\n \\tas: percentage\\n \\t}\\n \\t]\\n\\t}\\n ]\\n scales: [\\n\\t{\\n \\t// calculates horizontal stack positioning\\n \\tname: x\\n \\ttype: band\\n \\trange: width\\n \\tdomain: [\\\"stk1\\\", \\\"stk2\\\"]\\n \\tpaddingOuter: 0.05\\n \\tpaddingInner: 0.95\\n\\t}\\n\\t{\\n \\t// this scale goes up as high as the highest y1 value of all nodes\\n \\tname: y\\n \\ttype: linear\\n \\trange: height\\n \\tdomain: {data: \\\"nodes\\\", field: \\\"y1\\\"}\\n\\t}\\n\\t{\\n \\t// use rawData to ensure the colors stay the same when clicking.\\n \\tname: color\\n \\ttype: ordinal\\n \\trange: category\\n \\tdomain: {data: \\\"rawData\\\", field: \\\"stk1\\\"}\\n\\t}\\n\\t{\\n \\t// this scale is used to map internal ids (stk1, stk2) to stack names\\n \\tname: stackNames\\n \\ttype: ordinal\\n \\trange: [\\\"Source\\\", \\\"Destination\\\"]\\n \\tdomain: [\\\"stk1\\\", \\\"stk2\\\"]\\n\\t}\\n ]\\n axes: [\\n\\t{\\n \\t// x axis should use custom label formatting to print proper stack names\\n \\torient: bottom\\n \\tscale: x\\n \\tencode: {\\n \\tlabels: {\\n \\tupdate: {\\n \\ttext: {scale: \\\"stackNames\\\", field: \\\"value\\\"}\\n \\t}\\n \\t}\\n \\t}\\n\\t}\\n\\t{orient: \\\"left\\\", scale: \\\"y\\\"}\\n ]\\n marks: [\\n\\t{\\n \\t// draw the connecting line between stacks\\n \\ttype: path\\n \\tname: edgeMark\\n \\tfrom: {data: \\\"edges\\\"}\\n \\t// this prevents some autosizing issues with large strokeWidth for paths\\n \\tclip: true\\n \\tencode: {\\n \\tupdate: {\\n \\t// By default use color of the left node, except when showing traffic\\n \\t// from just one country, in which case use destination color.\\n \\tstroke: [\\n \\t{\\n \\ttest: groupSelector && groupSelector.stack=='stk1'\\n \\tscale: color\\n \\tfield: stk2\\n \\t}\\n \\t{scale: \\\"color\\\", field: \\\"stk1\\\"}\\n \\t]\\n \\tstrokeWidth: {field: \\\"strokeWidth\\\"}\\n \\tpath: {field: \\\"path\\\"}\\n \\t// when showing all traffic, and hovering over a country,\\n \\t// highlight the traffic from that country.\\n \\tstrokeOpacity: {\\n \\tsignal: !groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 0.9 : 0.3\\n \\t}\\n \\t// Ensure that the hover-selected edges show on top\\n \\tzindex: {\\n \\tsignal: !groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 1 : 0\\n \\t}\\n \\t// format tooltip string\\n \\ttooltip: {\\n \\tsignal: datum.stk1 + ' → ' + datum.stk2 + '\\t' + format(datum.size, ',.0f') + ' (' + format(datum.percentage, '.1%') + ')'\\n \\t}\\n \\t}\\n \\t// Simple mouseover highlighting of a single line\\n \\thover: {\\n \\tstrokeOpacity: {value: 1}\\n \\t}\\n \\t}\\n\\t}\\n\\t{\\n \\t// draw stack groups (countries)\\n \\ttype: rect\\n \\tname: groupMark\\n \\tfrom: {data: \\\"groups\\\"}\\n \\tencode: {\\n \\tenter: {\\n \\tfill: {scale: \\\"color\\\", field: \\\"grpId\\\"}\\n \\twidth: {scale: \\\"x\\\", band: 1}\\n \\t}\\n \\tupdate: {\\n \\tx: {scale: \\\"x\\\", field: \\\"stack\\\"}\\n \\ty: {field: \\\"scaledY0\\\"}\\n \\ty2: {field: \\\"scaledY1\\\"}\\n \\tfillOpacity: {value: 0.6}\\n \\ttooltip: {\\n \\tsignal: datum.grpId + ' ' + format(datum.total, ',.0f') + ' (' + format(datum.percentage, '.1%') + ')'\\n \\t}\\n \\t}\\n \\thover: {\\n \\tfillOpacity: {value: 1}\\n \\t}\\n \\t}\\n\\t}\\n\\t{\\n \\t// draw country code labels on the inner side of the stack\\n \\ttype: text\\n \\tfrom: {data: \\\"groups\\\"}\\n \\t// don't process events for the labels - otherwise line mouseover is unclean\\n \\tinteractive: false\\n \\tencode: {\\n \\tupdate: {\\n \\t// depending on which stack it is, position x with some padding\\n \\tx: {\\n \\tsignal: scale('x', datum.stack) + (datum.rightLabel ? bandwidth('x') + 8 : -8)\\n \\t}\\n \\t// middle of the group\\n \\tyc: {signal: \\\"(datum.scaledY0 + datum.scaledY1)/2\\\"}\\n \\talign: {signal: \\\"datum.rightLabel ? 'left' : 'right'\\\"}\\n \\tbaseline: {value: \\\"middle\\\"}\\n \\tfontWeight: {value: \\\"bold\\\"}\\n \\t// only show text label if the group's height is large enough\\n \\ttext: {signal: \\\"abs(datum.scaledY0-datum.scaledY1) > 13 ? datum.grpId : ''\\\"}\\n \\t}\\n \\t}\\n\\t}\\n\\t{\\n \\t// Create a \\\"show all\\\" button. Shown only when a country is selected.\\n \\ttype: group\\n \\tdata: [\\n \\t// We need to make the button show only when groupSelector signal is true.\\n \\t// Each mark is drawn as many times as there are elements in the backing data.\\n \\t// Which means that if values list is empty, it will not be drawn.\\n \\t// Here I create a data source with one empty object, and filter that list\\n \\t// based on the signal value. This can only be done in a group.\\n \\t{\\n \\tname: dataForShowAll\\n \\tvalues: [{}]\\n \\ttransform: [{type: \\\"filter\\\", expr: \\\"groupSelector\\\"}]\\n \\t}\\n \\t]\\n \\t// Set button size and positioning\\n \\tencode: {\\n \\tenter: {\\n \\txc: {signal: \\\"width/2\\\"}\\n \\ty: {value: 30}\\n \\twidth: {value: 80}\\n \\theight: {value: 30}\\n \\t}\\n \\t}\\n \\tmarks: [\\n \\t{\\n \\t// This group is shown as a button with rounded corners.\\n \\ttype: group\\n \\t// mark name allows signal capturing\\n \\tname: groupReset\\n \\t// Only shows button if dataForShowAll has values.\\n \\tfrom: {data: \\\"dataForShowAll\\\"}\\n \\tencode: {\\n \\tenter: {\\n \\tcornerRadius: {value: 6}\\n \\tfill: {value: \\\"#F5F7FA\\\"}\\n \\tstroke: {value: \\\"#c1c1c1\\\"}\\n \\tstrokeWidth: {value: 2}\\n \\t// use parent group's size\\n \\theight: {\\n \\tfield: {group: \\\"height\\\"}\\n \\t}\\n \\twidth: {\\n \\tfield: {group: \\\"width\\\"}\\n \\t}\\n \\t}\\n \\tupdate: {\\n \\t// groups are transparent by default\\n \\topacity: {value: 1}\\n \\t}\\n \\thover: {\\n \\topacity: {value: 0.7}\\n \\t}\\n \\t}\\n \\tmarks: [\\n \\t{\\n \\ttype: text\\n \\t// if true, it will prevent clicking on the button when over text.\\n \\tinteractive: false\\n \\tencode: {\\n \\tenter: {\\n \\t// center text in the paren group\\n \\txc: {\\n \\tfield: {group: \\\"width\\\"}\\n \\tmult: 0.5\\n \\t}\\n \\tyc: {\\n \\tfield: {group: \\\"height\\\"}\\n \\tmult: 0.5\\n \\toffset: 2\\n \\t}\\n \\talign: {value: \\\"center\\\"}\\n \\tbaseline: {value: \\\"middle\\\"}\\n \\tfontWeight: {value: \\\"bold\\\"}\\n \\ttext: {value: \\\"Show All\\\"}\\n \\t}\\n \\t}\\n \\t}\\n \\t]\\n \\t}\\n \\t]\\n\\t}\\n ]\\n signals: [\\n\\t{\\n \\t// used to highlight traffic to/from the same country\\n \\tname: groupHover\\n \\tvalue: {}\\n \\ton: [\\n \\t{\\n \\tevents: @groupMark:mouseover\\n \\tupdate: \\\"{stk1:datum.stack=='stk1' && datum.grpId, stk2:datum.stack=='stk2' && datum.grpId}\\\"\\n \\t}\\n \\t{events: \\\"mouseout\\\", update: \\\"{}\\\"}\\n \\t]\\n\\t}\\n\\t// used to filter only the data related to the selected country\\n\\t{\\n \\tname: groupSelector\\n \\tvalue: false\\n \\ton: [\\n \\t{\\n \\t// Clicking groupMark sets this signal to the filter values\\n \\tevents: @groupMark:click!\\n \\tupdate: \\\"{stack:datum.stack, stk1:datum.stack=='stk1' && datum.grpId, stk2:datum.stack=='stk2' && datum.grpId}\\\"\\n \\t}\\n \\t{\\n \\t// Clicking \\\"show all\\\" button, or double-clicking anywhere resets it\\n \\tevents: [\\n \\t{type: \\\"click\\\", markname: \\\"groupReset\\\"}\\n \\t{type: \\\"dblclick\\\"}\\n \\t]\\n \\tupdate: \\\"false\\\"\\n \\t}\\n \\t]\\n\\t}\\n ]\\n}\\n\"}}"},"id":"8cd7f4c0-26c5-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-07-20T06:20:40.844Z","version":"WzI0OSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Source AWS Services","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Source AWS Services\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.pkt-src-aws-service\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"2e7f34e0-26c7-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T06:34:36.883Z","version":"WzI1NiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Top Destination AWS Services","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Top Destination AWS Services\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.pkt-dst-aws-service\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"6f8998e0-26c7-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T06:34:10.670Z","version":"WzI1NSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"[AWS VPC Flow Logs 1.0] Heat Map","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[AWS VPC Flow Logs 1.0] Heat Map\",\"type\":\"heatmap\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.dstaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Destination Address\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.vpc.srcaddr\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Address\"},\"schema\":\"group\"}],\"params\":{\"type\":\"heatmap\",\"addTooltip\":true,\"addLegend\":true,\"enableHover\":false,\"legendPosition\":\"right\",\"times\":[],\"colorsNumber\":4,\"colorSchema\":\"Greens\",\"setColorRange\":false,\"colorsRange\":[],\"invertColors\":false,\"percentageMode\":false,\"valueAxes\":[{\"show\":false,\"id\":\"ValueAxis-1\",\"type\":\"value\",\"scale\":{\"type\":\"linear\",\"defaultYExtents\":false},\"labels\":{\"show\":false,\"rotate\":0,\"overwriteColor\":false,\"color\":\"black\"}}]}}"},"id":"4fcdc6d0-26c6-11ee-b585-f9feb9f3e8dd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-20T06:26:07.933Z","version":"WzI1MSwxXQ=="} -{"attributes":{"columns":["aws.vpc.account-id","aws.vpc.vpc-id","aws.vpc.flow-direction","aws.vpc.action","aws.vpc.srcaddr","aws.vpc.srcport","aws.vpc.dstaddr","aws.vpc.dstport","aws.vpc.bytes","aws.vpc.log-status"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"[AWS VPC Flow Logs 1.0] General Search","version":1},"id":"ae8f36c0-26c8-11ee-b585-f9feb9f3e8dd","migrationVersion":{"search":"7.9.3"},"references":[{"id":"508c299d-6380-4420-abb5-aed2ab24d676","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-07-20T06:43:05.899Z","version":"WzI3MiwxXQ=="} -{"attributes":{"description":"VPC Flow Logs dashboard with basic Observability","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":10,\"i\":\"20fb32e0-40f1-40fe-8664-5cacff5f59e2\"},\"panelIndex\":\"20fb32e0-40f1-40fe-8664-5cacff5f59e2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":10,\"w\":11,\"h\":8,\"i\":\"ea07e9f4-6719-4c34-bfb8-ca48e9fda75b\"},\"panelIndex\":\"ea07e9f4-6719-4c34-bfb8-ca48e9fda75b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":11,\"y\":10,\"w\":24,\"h\":16,\"i\":\"9931d8df-e493-4649-9934-0a24c8b091f8\"},\"panelIndex\":\"9931d8df-e493-4649-9934-0a24c8b091f8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":35,\"y\":10,\"w\":13,\"h\":16,\"i\":\"7f29c46b-a690-457e-952b-a987c118dbf2\"},\"panelIndex\":\"7f29c46b-a690-457e-952b-a987c118dbf2\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":18,\"w\":11,\"h\":8,\"i\":\"59486bb7-af73-4594-a588-bd823d954b6a\"},\"panelIndex\":\"59486bb7-af73-4594-a588-bd823d954b6a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":26,\"w\":24,\"h\":15,\"i\":\"6b04df64-559d-4d48-b454-ddeec66690d1\"},\"panelIndex\":\"6b04df64-559d-4d48-b454-ddeec66690d1\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":26,\"w\":24,\"h\":15,\"i\":\"fb0eb25c-f2b3-484c-9125-4bc201e97b3f\"},\"panelIndex\":\"fb0eb25c-f2b3-484c-9125-4bc201e97b3f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":41,\"w\":12,\"h\":15,\"i\":\"bb01b5c1-bb5b-4a9f-baf7-4d606772ef93\"},\"panelIndex\":\"bb01b5c1-bb5b-4a9f-baf7-4d606772ef93\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":12,\"y\":41,\"w\":12,\"h\":15,\"i\":\"816b48d0-7c09-42e9-97be-a19c17634fc5\"},\"panelIndex\":\"816b48d0-7c09-42e9-97be-a19c17634fc5\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":41,\"w\":24,\"h\":15,\"i\":\"4ea77bab-a48b-4ccf-b8e0-6b2f5b5c337a\"},\"panelIndex\":\"4ea77bab-a48b-4ccf-b8e0-6b2f5b5c337a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":56,\"w\":12,\"h\":15,\"i\":\"8844e89c-9c06-4141-899f-b1f6fdde901b\"},\"panelIndex\":\"8844e89c-9c06-4141-899f-b1f6fdde901b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":12,\"y\":56,\"w\":12,\"h\":15,\"i\":\"d9e75376-2d8c-49f4-babb-335e73c99dee\"},\"panelIndex\":\"d9e75376-2d8c-49f4-babb-335e73c99dee\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":56,\"w\":12,\"h\":15,\"i\":\"b4d94532-59cf-454e-98a2-beb15b8a752f\"},\"panelIndex\":\"b4d94532-59cf-454e-98a2-beb15b8a752f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":36,\"y\":56,\"w\":12,\"h\":15,\"i\":\"505c0278-0d96-4617-9976-7bd9a8787e3a\"},\"panelIndex\":\"505c0278-0d96-4617-9976-7bd9a8787e3a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":71,\"w\":24,\"h\":30,\"i\":\"fb0edb10-2e2a-4b3f-99a5-22ffe95e3250\"},\"panelIndex\":\"fb0edb10-2e2a-4b3f-99a5-22ffe95e3250\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":71,\"w\":12,\"h\":15,\"i\":\"79b5d7c5-7e66-4f92-b8ad-80a42167d181\"},\"panelIndex\":\"79b5d7c5-7e66-4f92-b8ad-80a42167d181\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":36,\"y\":71,\"w\":12,\"h\":15,\"i\":\"8bbe7594-e52c-4fa6-8432-f265d0db5fd8\"},\"panelIndex\":\"8bbe7594-e52c-4fa6-8432-f265d0db5fd8\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":24,\"y\":86,\"w\":24,\"h\":15,\"i\":\"5392e5cd-13cc-4904-abe7-1e183dc59478\"},\"panelIndex\":\"5392e5cd-13cc-4904-abe7-1e183dc59478\",\"embeddableConfig\":{\"vis\":null},\"panelRefName\":\"panel_17\"},{\"version\":\"3.0.0\",\"gridData\":{\"x\":0,\"y\":101,\"w\":48,\"h\":15,\"i\":\"aa4d1311-3a80-417e-9f52-54db9f6acdca\"},\"panelIndex\":\"aa4d1311-3a80-417e-9f52-54db9f6acdca\",\"embeddableConfig\":{},\"panelRefName\":\"panel_18\"}]","timeRestore":false,"title":"AWS VPC Flow Logs Overview","version":1},"id":"978a3ffb-c7b4-4071-8c33-c7107e2148b8","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"e8fa7848-820d-4dd1-963f-c33f5812d3da","name":"panel_0","type":"visualization"},{"id":"b3918e7d-0fa4-4cdd-ae92-ea1f720dd786","name":"panel_1","type":"visualization"},{"id":"895af4b0-811c-4209-bf37-52db55afe190","name":"panel_2","type":"visualization"},{"id":"b7ee9d6e-183f-4b80-81e9-72798a195886","name":"panel_3","type":"visualization"},{"id":"f1a8ff0c-65db-4ca4-9597-49c0205e704b","name":"panel_4","type":"visualization"},{"id":"0c6f4294-06da-4d93-9363-87c4a1f5ce7e","name":"panel_5","type":"visualization"},{"id":"c783ca94-2545-4761-b88d-14761ebec321","name":"panel_6","type":"visualization"},{"id":"237f9f10-26b0-11ee-b585-f9feb9f3e8dd","name":"panel_7","type":"visualization"},{"id":"99f27f50-26b0-11ee-b585-f9feb9f3e8dd","name":"panel_8","type":"visualization"},{"id":"008b7370-26b1-11ee-b585-f9feb9f3e8dd","name":"panel_9","type":"visualization"},{"id":"c5470900-26bf-11ee-b585-f9feb9f3e8dd","name":"panel_10","type":"visualization"},{"id":"0c67f560-26c0-11ee-b585-f9feb9f3e8dd","name":"panel_11","type":"visualization"},{"id":"4e074660-26c0-11ee-b585-f9feb9f3e8dd","name":"panel_12","type":"visualization"},{"id":"8b94b8a0-26c0-11ee-b585-f9feb9f3e8dd","name":"panel_13","type":"visualization"},{"id":"8cd7f4c0-26c5-11ee-b585-f9feb9f3e8dd","name":"panel_14","type":"visualization"},{"id":"2e7f34e0-26c7-11ee-b585-f9feb9f3e8dd","name":"panel_15","type":"visualization"},{"id":"6f8998e0-26c7-11ee-b585-f9feb9f3e8dd","name":"panel_16","type":"visualization"},{"id":"4fcdc6d0-26c6-11ee-b585-f9feb9f3e8dd","name":"panel_17","type":"visualization"},{"id":"ae8f36c0-26c8-11ee-b585-f9feb9f3e8dd","name":"panel_18","type":"search"}],"type":"dashboard","updated_at":"2023-07-20T06:45:19.959Z","version":"WzI3NSwxXQ=="} -{"exportedCount":21,"missingRefCount":0,"missingReferences":[]} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_mv_vpc-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_mv_vpc-1.0.0.sql deleted file mode 100644 index 0706db3b5a..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_mv_vpc-1.0.0.sql +++ /dev/null @@ -1,30 +0,0 @@ -CREATE MATERIALIZED VIEW {table_name}_mview AS - SELECT - CAST(FROM_UNIXTIME(start) AS TIMESTAMP) as `@timestamp`, - version as `aws.vpc.version`, - account_id as `aws.vpc.account-id`, - interface_id as `aws.vpc.interface-id`, - srcaddr as `aws.vpc.srcaddr`, - dstaddr as `aws.vpc.dstaddr`, - CAST(srcport AS LONG) as `aws.vpc.srcport`, - CAST(dstport AS LONG) as `aws.vpc.dstport`, - protocol as `aws.vpc.protocol`, - CAST(packets AS LONG) as `aws.vpc.packets`, - CAST(bytes AS LONG) as `aws.vpc.bytes`, - CAST(FROM_UNIXTIME(start) AS TIMESTAMP) as `aws.vpc.start`, - CAST(FROM_UNIXTIME(end) AS TIMESTAMP) as `aws.vpc.end`, - action as `aws.vpc.action`, - log_status as `aws.vpc.log-status`, - CASE - WHEN regexp(dstaddr, '(10\\..*)|(192\\.168\\..*)|(172\\.1[6-9]\\..*)|(172\\.2[0-9]\\..*)|(172\\.3[0-1]\\.*)') - THEN 'ingress' - ELSE 'egress' - END AS `aws.vpc.flow-direction` -FROM - {table_name} -WITH ( - auto_refresh = 'true', - checkpoint_location = '{s3_bucket_location}/checkpoint', - watermark_delay = '1 Minute', - extra_options = '{ "{table_name}": { "maxFilesPerTrigger": "10" }}' -) diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_table_vpc-1.0.0.sql b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_table_vpc-1.0.0.sql deleted file mode 100644 index bb73fa9340..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/assets/create_table_vpc-1.0.0.sql +++ /dev/null @@ -1,20 +0,0 @@ -CREATE EXTERNAL TABLE IF NOT EXISTS {table_name} ( - version INT, - account_id STRING, - interface_id STRING, - srcaddr STRING, - dstaddr STRING, - srcport STRING, - dstport STRING, - protocol STRING, - packets STRING, - bytes STRING, - start BIGINT, - end BIGINT, - action STRING, - log_status STRING -) USING csv -LOCATION '{s3_bucket_location}' -OPTIONS ( - sep=' ' -); diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/aws_vpc_flow-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/aws_vpc_flow-1.0.0.json deleted file mode 100644 index 6720e0be93..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/aws_vpc_flow-1.0.0.json +++ /dev/null @@ -1,66 +0,0 @@ -{ - "name": "aws_vpc_flow", - "version": "1.0.0", - "displayName": "AWS VPC Flow", - "description": "AWS VPC Flow log collector", - "license": "Apache-2.0", - "type": "logs_vpc", - "labels": ["Observability", "Logs", "AWS", "Cloud", "Flint S3"], - "author": "Haidong Wang", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info", - "statics": { - "logo": { - "annotation": "AWS VPC Logo", - "path": "logo.svg" - }, - "gallery": [ - { - "annotation": "AWS VPC Flow Log Dashboard", - "path": "dashboard1.png" - } - ] - }, - "components": [ - { - "name": "aws_vpc_flow", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "logs_vpc", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_vpc_flow", - "version": "1.0.0" - }, - "queries": [ - { - "name": "create_table_vpc", - "version": "1.0.0", - "language": "sql" - }, - { - "name": "create_mv_vpc", - "version": "1.0.0", - "language": "sql" - } - ] - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/data/sample.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/data/sample.json deleted file mode 100644 index 8f0f644d7c..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/data/sample.json +++ /dev/null @@ -1,1467 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - }, { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "162.142.125.177", - "dstaddr" : "10.0.0.200", - "srcport" : 38471, - "dstport" : 12313, - "protocol" : "6", - "packets" : 1, - "bytes" : 44, - "pkt-src-aws-service": "S3", - "pkt-dst-aws-service": "-", - "flow-direction": "ingress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "ACCEPT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "162.142.125.177", - "port": 38471, - "packets": 1, - "bytes" : 44 - }, - "destination": { - "address": "10.0.0.200", - "port": 12313 - } - } -}, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "body": "2 111111111111 eni-0e250409d410e1290 162.142.125.177 10.0.0.200 38471 12313 6 1 44 1674898496 1674898507 ACCEPT OK", - "event": { - "result": "ACCEPT", - "name": "flow_log", - "domain": "vpc.flow_log" - }, - "attributes": { - "data_stream": { - "dataset": "vpc.flow_log", - "namespace": "production", - "type": "logs_vpc" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e82b7d743527", - "platform": "aws_vpc" - }, - "aws": { - "s3": { - "bucket": "centralizedlogging-loghubloggingbucket0fa53b76-t57zyhgb8c2", - "key": "AWSLogs/111111111111/vpcflowlogs/us-east-2/2023/01/28/111111111111_vpcflowlogs_us-east-2_fl-023c6afa025ee5a04_20230128T0930Z_3a9dfd9d.log.gz" - }, - "vpc": { - "version" : "2", - "account-id" : "111111111111", - "interface-id" : "eni-0e250409d410e1290", - "region": "ap-southeast-2", - "vpc-id": "vpc-0d4d4e82b7d743527", - "subnet-id": "subnet-aaaaaaaa012345678", - "az-id": "apse2-az3", - "instance-id": "i-0c50d5961bcb2d47b", - "srcaddr" : "10.0.0.200", - "dstaddr" : "162.142.125.177", - "srcport" : 12313, - "dstport" : 38471, - "protocol" : "6", - "packets" : 1, - "bytes" : 440, - "pkt-src-aws-service": "-", - "pkt-dst-aws-service": "S3", - "flow-direction": "egress", - "start" : "1674898496", - "end" : "1674898507", - "action" : "REJECT", - "log-status" : "OK" - } - }, - "communication": { - "source": { - "address": "10.0.0.200", - "port": 12313, - "packets": 1, - "bytes" : 440 - }, - "destination": { - "address": "162.142.125.177", - "port": 38471 - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info/README.md b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info/README.md deleted file mode 100644 index 7997141e3d..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/info/README.md +++ /dev/null @@ -1,29 +0,0 @@ -# AWS VPC Flow Logs Integration - -## What is AWS VPC Flow Logs ? - -VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. - -Flow logs can help you with a number of tasks, such as: - -- Diagnosing overly restrictive security group rules - -- Monitoring the traffic that is reaching your instance - -- Determining the direction of the traffic to and from the network interfaces - -Flow log data is collected outside of the path of your network traffic, and therefore does not affect network throughput or latency. You can create or delete flow logs without any risk of impact to network performance. - -See additional details [here](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). - -## What is AWS VPC FLow Logs Integration ? - -An integration is a bundle of pre-canned assets which are bundled togather in a meaningful manner. - -AWS VPC flow logs integration includes dashboards, visualisations, queries and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-vpc` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index ca32e104a0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_vpc_flow-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_vpc_flow-1.0.0.mapping.json deleted file mode 100644 index 2369f953d7..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/aws_vpc_flow-1.0.0.mapping.json +++ /dev/null @@ -1,115 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_vpc_flow", - "labels": ["aws", "vpc"] - }, - "properties": { - "aws": { - "properties": { - "vpc": { - "properties": { - "version": { - "type": "keyword" - }, - "account-id": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "az-id": { - "type": "keyword" - }, - "vpc-id": { - "type": "keyword" - }, - "subnet-id": { - "type": "keyword" - }, - "tcp-flags": { - "type": "keyword" - }, - "type": { - "type": "keyword" - }, - "interface-id": { - "type": "keyword" - }, - "instance-id": { - "type": "keyword" - }, - "srcaddr": { - "type": "keyword" - }, - "dstaddr": { - "type": "keyword" - }, - "srcport": { - "type": "long" - }, - "dstport": { - "type": "long" - }, - "protocol": { - "type": "keyword" - }, - "protocol-code": { - "type": "keyword" - }, - "packets": { - "type": "long" - }, - "bytes": { - "type": "long" - }, - "start": { - "type": "date", - "format": "epoch_second" - }, - "end": { - "type": "date", - "format": "epoch_second" - }, - "flow-direction": { - "type": "keyword" - }, - "pkt-src-aws-service": { - "type": "keyword" - }, - "pkt-srcaddr": { - "type": "keyword" - }, - "pkt-dst-aws-service": { - "type": "keyword" - }, - "pkt-dstaddr": { - "type": "keyword" - }, - "traffic-path": { - "type": "keyword" - }, - "action": { - "type": "keyword" - }, - "log-status": { - "type": "keyword" - }, - "sublocation-id": { - "type": "keyword" - }, - "sublocation-type": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/logs_vpc-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/logs_vpc-1.0.0.mapping.json deleted file mode 100644 index 6b07534115..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/schemas/logs_vpc-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_vpc-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-vpc": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "communication", "vpc"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["aws_vpc_flow", "aws_s3", "cloud", "communication"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/dashboard1.png deleted file mode 100644 index 0d75b3bfc3..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/logo.svg b/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/logo.svg deleted file mode 100644 index 60ed1fe260..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_vpc_flow/static/logo.svg +++ /dev/null @@ -1,3 +0,0 @@ - - - diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/assets/aws_waf-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/aws_waf/assets/aws_waf-1.0.0.ndjson deleted file mode 100644 index fdbe42a5e5..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/assets/aws_waf-1.0.0.ndjson +++ /dev/null @@ -1,24 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"esTypes\":[\"_type\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.formatVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":1,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.args\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.args.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.args\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.clientIp\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.country\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.headers.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.headers.value\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.headers.value.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.headers.value\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.httpMethod\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.httpVersion\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpRequest.requestId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.requestId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.requestId\"}}},{\"count\":0,\"name\":\"aws.waf.httpRequest.uri\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.httpRequest.uri.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.httpRequest.uri\"}}},{\"count\":0,\"name\":\"aws.waf.httpSourceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.httpSourceName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.labels.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.labels.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.labels.name\"}}},{\"count\":0,\"name\":\"aws.waf.ruleGroupList.ruleGroupId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.ruleGroupList.terminatingRule.aws.waf.action\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.ruleGroupList.terminatingRule.ruleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.terminatingRuleId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"aws.waf.terminatingRuleType\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"userAgent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"userAgent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"userAgent\"}}},{\"count\":0,\"name\":\"aws.waf.webaclId\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"aws.waf.webaclId.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"aws.waf.webaclId\"}}},{\"count\":0,\"name\":\"webaclName\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true}]","timeFieldName":"@timestamp","title":"logs-waf-*"},"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MTgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Client IPs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Client IPs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.clientIp\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client IP Address\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"71b2a6fc-6c2e-42d4-82b6-4f5a2741f63f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MTksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Total Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Total Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"}],\"params\":{\"addLegend\":false,\"addTooltip\":true,\"metric\":{\"colorSchema\":\"Green to Red\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"invertColors\":false,\"aws.waf.labels\":{\"show\":false},\"metricColorMode\":\"None\",\"percentageMode\":false,\"style\":{\"bgColor\":false,\"bgFill\":\"#000\",\"fontSize\":60,\"labelColor\":false,\"subText\":\"\"},\"useRanges\":false},\"type\":\"metric\"}}"},"id":"58bb62ff-66e4-4dab-9b64-c8cf812c46a2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjAsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"aws.waf.action:BLOCK\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Total Blocked Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Total Blocked Requests\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"aws.waf.labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"1e59055f-d033-4e25-985c-2902e5d138ea","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Country or Region By Requests","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Country or Region By Requests\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"segment\"}],\"params\":{\"legendPosition\":\"bottomright\",\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"selectedLayer\":{\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\",\"id\":\"world_countries\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"attribution\":\"Made with NaturalEarth | Elastic Maps Service\",\"fields\":[{\"type\":\"id\",\"name\":\"iso2\",\"description\":\"ISO 3166-1 alpha-2 code\"},{\"type\":\"id\",\"name\":\"iso3\",\"description\":\"ISO 3166-1 alpha-3 code\"},{\"type\":\"property\",\"name\":\"name\",\"description\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"layerId\":\"elastic_maps_service.World Countries\",\"isEMS\":true},\"emsHotLink\":\"https://maps.elastic.co/v6.7?locale=en#file/world_countries\",\"selectedJoinField\":{\"type\":\"id\",\"name\":\"iso2\",\"description\":\"ISO 3166-1 alpha-2 code\"},\"isDisplayWarning\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"default\":true,\"minZoom\":0,\"maxZoom\":10,\"attribution\":\"\",\"id\":\"TMS in config/kibana.yml\",\"origin\":\"self_hosted\"}},\"mapZoom\":2,\"mapCenter\":[0,0],\"outlineWeight\":1,\"showAllShapes\":true}}"},"id":"3cb53d17-ac34-45db-aaeb-97791c9d82d2","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Executed WAF Rules","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Executed WAF Rules\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.terminatingRuleId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"912530c2-48a6-4618-8010-b8007e44ed2c","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[]}"},"title":"logs-waf-Filters","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Filters\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"fieldName\":\"webaclName\",\"id\":\"1565169719620\",\"label\":\"WebACL\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1565775477773\",\"fieldName\":\"aws.waf.terminatingRuleType\",\"parent\":\"\",\"label\":\"Rule Type\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"fieldName\":\"aws.waf.action\",\"id\":\"1565169899571\",\"label\":\"aws.waf.action\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_2_index_pattern\"},{\"fieldName\":\"aws.waf.httpRequest.country\",\"id\":\"1565170498755\",\"label\":\"Country or Region\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_3_index_pattern\"},{\"id\":\"1565182161719\",\"fieldName\":\"host.keyword\",\"parent\":\"\",\"label\":\"Host\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_4_index_pattern\"},{\"fieldName\":\"aws.waf.httpRequest.clientIp\",\"id\":\"1565170536048\",\"label\":\"Client IP\",\"options\":{\"dynamicOptions\":true,\"multiselect\":false,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_5_index_pattern\"},{\"id\":\"1647912414472\",\"fieldName\":\"aws.waf.httpSourceId\",\"parent\":\"\",\"label\":\"Source\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_6_index_pattern\"},{\"fieldName\":\"aws.waf.ruleGroupList.ruleGroupId\",\"id\":\"1565169760470\",\"label\":\"Rule\",\"options\":{\"dynamicOptions\":true,\"multiselect\":true,\"order\":\"desc\",\"size\":5,\"type\":\"terms\"},\"parent\":\"\",\"type\":\"list\",\"indexPatternRefName\":\"control_7_index_pattern\"},{\"id\":\"1647911642407\",\"fieldName\":\"aws.waf.labels.name.keyword\",\"parent\":\"\",\"label\":\"Label\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_8_index_pattern\"}],\"pinFilters\":true,\"updateFiltersOnChange\":true,\"useTimeFilter\":false}}"},"id":"4394f245-57e6-475e-ad33-cd29742e2b8a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_0_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_1_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_2_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_3_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_4_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_5_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_6_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_7_index_pattern","type":"index-pattern"},{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"control_8_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-22T01:29:36.328Z","version":"WzEyMzc3LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Countries or Regions","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Countries or Regions\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.country\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country or Region\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"ecc648d9-2b36-46c4-a527-7fbccad61ba8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjUsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top User-Agents","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":0,\"direction\":\"asc\"}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top User-Agents\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"userAgent.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"User-Agent\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b12eee40-37c6-436e-bcfb-d993d3a51aca","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjYsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-HTTP Methods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-HTTP Methods\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.httpMethod\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c02eb336-6502-4ac4-aa53-91de17910031","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Unique Client IPs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Unique Client IPs\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"aws.waf.httpRequest.clientIp\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"aws.waf.labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"866d8631-5f43-4246-8c7d-ed39d70c9a9f","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MjksMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Hosts","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Hosts\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"host.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"exclude\":\"\",\"include\":\"\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"},"id":"e9522627-5bf8-4a3e-b995-0037300bb082","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzEsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top WebACLs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top WebACLs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"webaclName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WebACL Name\"},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.webaclId.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"WebACL ID\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"1935ea3d-8155-44d4-b837-8a1397f00980","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzIsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Rules","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Rules\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.terminatingRuleId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Rule Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"3fa73516-89de-41c8-bacf-035da4e959af","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzMsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top Request URIs","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":0,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top Request URIs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.uri.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"URI\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":0,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"a0cac454-18c9-4099-91bb-93a76512bb93","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzQsMV0="} -{"attributes":{"columns":["aws.waf.httpRequest.clientIp","aws.waf.httpRequest.args","aws.waf.httpRequest.uri","host","aws.waf.httpRequest.country","aws.waf.action","aws.waf.labels","terminatingRuleMatchDetails","aws.waf.terminatingRuleId"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["timestamp","desc"]],"title":"logs-waf-Matched Details","version":1},"id":"d0ee6b41-8ebb-44a2-9ea7-86251ae7e089","migrationVersion":{"search":"7.9.3"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-03-22T01:57:25.407Z","version":"WzEyNDQ4LDFd"} -{"attributes":{"columns":["aws.waf.httpRequest.clientIp","terminatingRuleMatchDetails","aws.waf.labels","aws.waf.ruleGroupList","rateBasedRuleList","aws.waf.httpRequest.args","aws.waf.terminatingRuleId","aws.waf.action","nonTerminatingMatchingRules"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"aws.waf.terminatingRuleId:*\",\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["timestamp","desc"]],"title":"logs-waf-Terminating Matching Rule","version":1},"id":"712af10a-14a8-4eca-b791-ea701f80529f","migrationVersion":{"search":"7.9.3"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2022-03-21T02:29:23.065Z","version":"WzExNTE2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Web ACLs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Web ACLs\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"webaclName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"f3400632-1596-403b-a447-57bc3971246e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzcsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Requests History","uiStateJSON":"{\"vis\":{\"colors\":{\"BLOCK\":\"#E24D42\",\"ALLOW\":\"#629E51\"}}}","version":1,"visState":"{\"title\":\"logs-waf-Requests History\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"2022-03-22T19:00:00.000Z\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"Time\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"aws.waf.labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"aws.waf.labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"aws.waf.labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"3390bff0-ab15-11ec-b721-5f83aa22d08e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-24T02:02:37.452Z","version":"WzEzMDI2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Requests by Source","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"logs-waf-Requests by Source\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpSourceId\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"aws.waf.labels\":{\"show\":true,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"9b152580-ab15-11ec-b721-5f83aa22d08e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-03-24T01:57:39.337Z","version":"WzEyODMyLDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Block Allow Host Uri","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"asc\"}}}}","version":1,"visState":"{\"title\":\"logs-waf-Block Allow Host Uri\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"host.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.uri.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.action\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":3,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"aws.waf.action\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"fb588f28-934f-4476-94f4-cd99ad90be69","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-11T09:24:16.830Z","version":"WzQ5MzgsMV0="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"logs-waf-Top aws.waf.labels","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":4,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"logs-waf-Top aws.waf.labels\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.labels.name.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Label\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"host.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Host\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"aws.waf.httpRequest.uri.keyword\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Request URI\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"642534d0-72c0-11ec-acf9-63f0c6197356","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"d3ff0302-3337-452b-afd2-4e4f87fd37ca","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-01-12T01:39:20.829Z","version":"WzU0NzgsMV0="} -{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"darkTheme\":false,\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false,\"table\":null,\"title\":\"Top Client IPs\",\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}},\"gridData\":{\"h\":17,\"i\":\"1\",\"w\":12,\"x\":12,\"y\":63},\"panelIndex\":\"1\",\"title\":\"Top Client IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Requests\"},\"gridData\":{\"h\":6,\"i\":\"2\",\"w\":12,\"x\":0,\"y\":8},\"panelIndex\":\"2\",\"title\":\"Total Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Total Blocked Requests\"},\"gridData\":{\"h\":6,\"i\":\"3\",\"w\":12,\"x\":0,\"y\":14},\"panelIndex\":\"3\",\"title\":\"Total Blocked Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Country or Region By Requests\"},\"gridData\":{\"h\":22,\"i\":\"6\",\"w\":36,\"x\":0,\"y\":26},\"panelIndex\":\"6\",\"title\":\"Country or Region By Requests\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"WAF Rules\"},\"gridData\":{\"h\":12,\"i\":\"8\",\"w\":12,\"x\":36,\"y\":12},\"panelIndex\":\"8\",\"title\":\"WAF Rules\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Filters\"},\"gridData\":{\"h\":8,\"i\":\"9\",\"w\":36,\"x\":0,\"y\":0},\"panelIndex\":\"9\",\"title\":\"Filters\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Countries or Regions\"},\"gridData\":{\"h\":15,\"i\":\"10\",\"w\":12,\"x\":36,\"y\":48},\"panelIndex\":\"10\",\"title\":\"Top Countries or Regions\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top User Agents\"},\"gridData\":{\"h\":17,\"i\":\"11\",\"w\":24,\"x\":24,\"y\":63},\"panelIndex\":\"11\",\"title\":\"Top User Agents\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"HTTP Methods\"},\"gridData\":{\"h\":12,\"i\":\"12\",\"w\":12,\"x\":36,\"y\":36},\"panelIndex\":\"12\",\"title\":\"HTTP Methods\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Unique Client IPs\"},\"gridData\":{\"h\":6,\"i\":\"14\",\"w\":12,\"x\":0,\"y\":20},\"panelIndex\":\"14\",\"title\":\"Unique Client IPs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Hosts\"},\"gridData\":{\"h\":15,\"i\":\"16\",\"w\":12,\"x\":12,\"y\":48},\"panelIndex\":\"16\",\"title\":\"Top Hosts\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top WebACLs\"},\"gridData\":{\"h\":15,\"i\":\"17\",\"w\":12,\"x\":0,\"y\":48},\"panelIndex\":\"17\",\"title\":\"Top WebACLs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Rules\"},\"gridData\":{\"h\":17,\"i\":\"18\",\"w\":12,\"x\":0,\"y\":63},\"panelIndex\":\"18\",\"title\":\"Top Rules\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top Request URIs\"},\"gridData\":{\"h\":15,\"i\":\"19\",\"w\":12,\"x\":24,\"y\":48},\"panelIndex\":\"19\",\"title\":\"Top Request URIs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"View by aws.waf.httpRequest args,uri,path\"},\"gridData\":{\"h\":18,\"i\":\"20\",\"w\":48,\"x\":0,\"y\":118},\"panelIndex\":\"20\",\"title\":\"View by aws.waf.httpRequest args,uri,path\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"View by Matching Rule\"},\"gridData\":{\"h\":20,\"i\":\"21\",\"w\":48,\"x\":0,\"y\":98},\"panelIndex\":\"21\",\"title\":\"View by Matching Rule\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Web ACLs\"},\"gridData\":{\"h\":12,\"i\":\"4e8b942b-3972-4139-915d-521de2e22574\",\"w\":12,\"x\":36,\"y\":0},\"panelIndex\":\"4e8b942b-3972-4139-915d-521de2e22574\",\"title\":\"Web ACLs\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Requests History\",\"vis\":{\"colors\":{\"ALLOW\":\"#629E51\",\"BLOCK\":\"#BF1B00\"}}},\"gridData\":{\"h\":18,\"i\":\"61ab1f0a-1eb6-4a0a-9673-83506e61ecef\",\"w\":24,\"x\":12,\"y\":8},\"panelIndex\":\"61ab1f0a-1eb6-4a0a-9673-83506e61ecef\",\"title\":\"Requests History\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Sources\"},\"gridData\":{\"h\":12,\"i\":\"82f50929-a6d5-455d-a3a7-4434b508b749\",\"w\":12,\"x\":36,\"y\":24},\"panelIndex\":\"82f50929-a6d5-455d-a3a7-4434b508b749\",\"title\":\"Sources\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"table\":null,\"title\":\"Block Allow Host Uri\",\"vis\":{\"params\":{\"sort\":{\"columnIndex\":3,\"direction\":\"desc\"}}}},\"gridData\":{\"h\":18,\"i\":\"e48a3b9d-d533-4c45-9263-9f1c946d0e82\",\"w\":24,\"x\":0,\"y\":80},\"panelIndex\":\"e48a3b9d-d533-4c45-9263-9f1c946d0e82\",\"title\":\"Block Allow Host Uri\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_19\"},{\"embeddableConfig\":{\"hidePanelTitles\":false,\"title\":\"Top aws.waf.labels with Host, Uri\"},\"gridData\":{\"h\":18,\"i\":\"0d730c5b-bdc3-4ff7-9cd5-2a729303b66d\",\"w\":24,\"x\":24,\"y\":80},\"panelIndex\":\"0d730c5b-bdc3-4ff7-9cd5-2a729303b66d\",\"title\":\"Top aws.waf.labels with Host, Uri\",\"version\":\"1.0.0-SNAPSHOT\",\"panelRefName\":\"panel_20\"}]","timeRestore":false,"title":"logs-waf-dashboard","version":1},"id":"3ce97e1e-b385-4841-8152-c3bce7d68d1f","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"71b2a6fc-6c2e-42d4-82b6-4f5a2741f63f","name":"panel_0","type":"visualization"},{"id":"58bb62ff-66e4-4dab-9b64-c8cf812c46a2","name":"panel_1","type":"visualization"},{"id":"1e59055f-d033-4e25-985c-2902e5d138ea","name":"panel_2","type":"visualization"},{"id":"3cb53d17-ac34-45db-aaeb-97791c9d82d2","name":"panel_3","type":"visualization"},{"id":"912530c2-48a6-4618-8010-b8007e44ed2c","name":"panel_4","type":"visualization"},{"id":"4394f245-57e6-475e-ad33-cd29742e2b8a","name":"panel_5","type":"visualization"},{"id":"ecc648d9-2b36-46c4-a527-7fbccad61ba8","name":"panel_6","type":"visualization"},{"id":"b12eee40-37c6-436e-bcfb-d993d3a51aca","name":"panel_7","type":"visualization"},{"id":"c02eb336-6502-4ac4-aa53-91de17910031","name":"panel_8","type":"visualization"},{"id":"866d8631-5f43-4246-8c7d-ed39d70c9a9f","name":"panel_9","type":"visualization"},{"id":"e9522627-5bf8-4a3e-b995-0037300bb082","name":"panel_10","type":"visualization"},{"id":"1935ea3d-8155-44d4-b837-8a1397f00980","name":"panel_11","type":"visualization"},{"id":"3fa73516-89de-41c8-bacf-035da4e959af","name":"panel_12","type":"visualization"},{"id":"a0cac454-18c9-4099-91bb-93a76512bb93","name":"panel_13","type":"visualization"},{"id":"d0ee6b41-8ebb-44a2-9ea7-86251ae7e089","name":"panel_14","type":"search"},{"id":"712af10a-14a8-4eca-b791-ea701f80529f","name":"panel_15","type":"search"},{"id":"f3400632-1596-403b-a447-57bc3971246e","name":"panel_16","type":"visualization"},{"id":"3390bff0-ab15-11ec-b721-5f83aa22d08e","name":"panel_17","type":"visualization"},{"id":"9b152580-ab15-11ec-b721-5f83aa22d08e","name":"panel_18","type":"visualization"},{"id":"fb588f28-934f-4476-94f4-cd99ad90be69","name":"panel_19","type":"visualization"},{"id":"642534d0-72c0-11ec-acf9-63f0c6197356","name":"panel_20","type":"visualization"}],"type":"dashboard","updated_at":"2022-03-24T02:00:22.332Z","version":"WzEyOTI4LDFd"} -{"exportedCount":23,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/aws_waf-1.0.0.json b/server/adaptors/integrations/__data__/repository/aws_waf/aws_waf-1.0.0.json deleted file mode 100644 index 2075aecf66..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/aws_waf-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "aws_waf", - "version": "1.0.0", - "displayName": "AWS waf", - "description": "AWS waf log collector", - "license": "Apache-2.0", - "type": "logs_waf", - "labels": ["Observability", "Logs", "AWS", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/aws_waf/info", - "statics": { - "logo": { - "annotation": "AWS waf Logo", - "path": "logo.jpg" - }, - "gallery": [ - { - "annotation": "AWS waf Log Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "aws_waf", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "logs_waf", - "version": "1.0.0" - }, - { - "name": "aws_s3", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "aws_waf", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "samples.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/data/samples.json b/server/adaptors/integrations/__data__/repository/aws_waf/data/samples.json deleted file mode 100644 index 0a40b21e2e..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/data/samples.json +++ /dev/null @@ -1,4594 +0,0 @@ -[ - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "image" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/favicon.ico", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "a8i7U3kgh9ZgC-i_-vuB9ycuY1yXZA2C93SommMJO-NSZ8w1EfbQTA==" - } - } - } - }, - { - "@timestamp": "2023-07-17T04:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "text/css,*/*;q=0.1" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "style" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/css/main.3c74189a.css", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "Nwcv2BEFdfsvUgaBa878YM2DqeOJvjgYTi_D1OZ7zsluZDCsscmgig==" - } - } - } - }, - { - "@timestamp": "2023-07-13T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/cluster.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "9EBB1jusDQ4BJHy7Im56e5obUGBHLcJ0-d6PwMZ1DCoEApsumJFKCw==" - } - } - } - }, - { - "@timestamp": "2023-07-16T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/704.0fc9620b.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "PCylxlN5B7WYLr9E-FsDoRtynBLm6s5aKn-gYhFFn74KV0H6mtM2bA==" - } - } - } - }, - { - "@timestamp": "2023-07-12T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/info.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "KtWGg2zob530o7N5bNUT2zRbco11OGdsdYgcCmFAzUluNx3QgSQEJw==" - } - } - } - }, - { - "@timestamp": "2023-07-10T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/common.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "_F-SWxrC9nZ22jplLSvC7_ox2Jx2xPFE9HYT4tQtOcAYJwBrg1v6NQ==" - } - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "pytY5ev4ebR05f9mQGOnwufqXpk_FbsgRuFjd9cihOg42IqyE9Gx0Q==" - } - } - } - }, - { - "@timestamp": "2023-07-18T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/ekslog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "y34C69VSSUEMC3BippLVEXzZnQoBttgRdH6R1rZExLwc2lZIt6X2sA==" - } - } - } - }, - { - "@timestamp": "2023-07-19T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/applog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "W2b9qzn-ubH9iI-8NUXzC0WFMWmfO5A7cOEEDqzBzbdfpSUKdv2Mfw==" - } - } - } - }, - { - "@timestamp": "2023-07-12T01:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/resource.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "r0JWgRulEiWPnFXo0Kcu-nBQeaIX1X9f2EfUdvFFQMXsxBKkc27J0A==" - } - } - } - }, - { - "@timestamp": "2023-07-13T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/cluster.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "9F8xi5ujMH1et6Ysh_-2VQhiIAgLYJkA6bejtXBuIl7lx1QKDxUxtQ==" - } - } - } - }, - { - "@timestamp": "2023-07-20T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/home.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "iPfEWiMKyaM6iFv3XGLK9hvQt7ZchJXnV-hBr-DFdWnYlH04h0ZRzw==" - } - } - } - }, - { - "@timestamp": "2023-07-11T10:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/171.b2862bb4.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "imCy2Tz9QYBNeRoKSbwnueyJbqltF52pBw6RRoQ95TyTtmbC8R_vvg==" - } - } - } - }, - { - "@timestamp": "2023-07-09T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/main.1fce72cf.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "YF_xCzvlSslgoa6sHVY78bbK9JyI5xZv4ofP-o3FcwLtCjDho4VtOQ==" - } - } - } - }, - { - "@timestamp": "2023-07-01T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/common.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "3hCiWgV0BpwLCt1e9nvpFQGM7QMSj-g40cb5pTvi3Z_5diK-0TaUJQ==" - } - } - } - }, - { - "@timestamp": "2023-07-19T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/servicelog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "MEkdaSTQMtuUA_whHiIM3l3wpPthbiFLV5GHVIfx39O8dKRrotcZew==" - } - } - } - }, - { - "@timestamp": "2023-07-13T11:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/resource.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "wbUO-9AVJzjhJHFdjd5cmouNp4ulDmm4hYbAQqdKRAS3o59mlwo9pA==" - } - } - } - }, - { - "@timestamp": "2023-07-21T05:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en/home.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "MTcYuStUpGv5GcTKzDVKrpTO1P91eESO0K3dkDJ87a6MzAWK33ZKww==" - } - } - } - }, - { - "@timestamp": "2023-07-11T12:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/applog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "MP4ldvR5h-k1hYZyNUe3npEQdNsF1upPYgZDAUBAfpTY6ydjehgszQ==" - } - } - } - }, - { - "@timestamp": "2023-07-12T01:04:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/156.e12ab3ef.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "ZEec9twgKzh-7M5mBk31JG1cgpZaq6JCEvJ0P7rss0q66ID-NRorWw==" - } - } - } - }, - { - "@timestamp": "2023-07-10T00:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/42.a78e6cdc.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "vfGrNbR3NHPIb8i1sDwZXapumeCzZ44Vo9T3wYXyXX5Eqntn2gBzvA==" - } - } - } - }, - { - "@timestamp": "2023-07-03T03:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/info.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "tyQN06m_gBa9rAP3gsxpoBt7TSbaByGd341sms_h8Rx5ZuuStXe0Yw==" - } - } - } - }, - { - "@timestamp": "2023-07-04T04:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/servicelog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "qD11sEL_uV0sX3XjNEwkB74nGIUy5nefHwn7REK3nU-xYtAEEtCf3w==" - } - } - } - }, - { - "@timestamp": "2023-07-07T07:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/locales/en-US/ekslog.json", - "args": "v=v1.3.0", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "iBmLjtAsp6KQkYMEnSHHdX_4OQ66cG993XlSoMEMBbO6SuvySzuQXQ==" - } - } - } - }, - { - "@timestamp": "2023-07-08T08:08:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/54.66e91f12.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "fmndmvBBD1sko0pOCapAyqaPOD1YSuqzw_8gwkHGtVnQ0KxDnBf9sQ==" - } - } - } - }, - { - "@timestamp": "2023-07-09T09:09:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548658747", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "HM4AuFrQ0scez_PTg9Ie_mtTkcTed0wa6u5Otl7MoYTO7uWEvwHHDw==" - } - } - } - }, - { - "@timestamp": "2023-07-10T10:10:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/289.f9fcf639.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "AvozC55PQVeSjj18F5Pl00PIOaImVS6EGoMLWpT84xstY0BaO55hzQ==" - } - } - } - }, - { - "@timestamp": "2023-07-11T11:11:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548665916", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "SZqmcXIZ9PBSamzQowJBc2bV5eVmhJVJA-wxDSRdP6Gqqnnm6Ll4zw==" - } - } - } - }, - { - "@timestamp": "2023-07-12T08:12:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "accept", - "value": "*/*" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "no-cors" - }, - { - "name": "sec-fetch-dest", - "value": "script" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/static/js/592.57113085.chunk.js", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "ILEgkYBAGPgRq6uo82mbIV6QxFhy4bZVkpel-9AoHEkQNhSX68WpZw==" - } - } - } - }, - { - "@timestamp": "2023-07-13T08:13:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "LZEvUnDWadacvKLRROO1NHZBGpwozTNadZSOAnrJcicJqrHoBUJP0w==" - } - } - } - }, - { - "@timestamp": "2023-07-17T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "yr4cC1IFd6ZHD6UmTw_QTayDWwqmyuqce7Q6VqTjFBPpLIybmfcIxg==" - } - } - } - }, - { - "@timestamp": "2023-07-01T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "jPbv-RPsxtsQ5k9xxyWSKvE9bFlJLTarzMBVDy2xukWleaMpjZh72A==" - } - } - } - }, - { - "@timestamp": "2023-07-10T00:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "KBDRxdNLJ5vN4EN6E7fHA0qqnReXb-hZTYkMV5Qi77DU63I0pjOfsg==" - } - } - } - }, - { - "@timestamp": "2023-07-13T09:00:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548672251", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "6fz1cJxE2PYMUoi1Y0OIyqNUAZqwiftW5oay3fNrnaBahCkFc-4VCA==" - } - } - } - }, - { - "@timestamp": "2023-07-12T01:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548669562", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "AiaVoelxpsweW5RAwvj2v37T0Qdzb-YT8PxndPpbJMAFZ3LH8oRElw==" - } - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548678928", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "PM2dHUCB05rj_5pWg6pLfvU-Iu2WcoaNI1HvpPe3_S4pX5As56TRqA==" - } - } - } - }, - { - "@timestamp": "2023-07-23T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "accept", - "value": "application/json, text/plain, */*" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "sec-fetch-site", - "value": "same-origin" - }, - { - "name": "sec-fetch-mode", - "value": "cors" - }, - { - "name": "sec-fetch-dest", - "value": "empty" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - } - ], - "uri": "/aws-exports.json", - "args": "timestamp=1679548675203", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "HLBUYRzP8ll-I-2qOho5h8AUrzSjlvWw7DJrDk4VeYx92FugehT68w==" - } - } - } - }, - { - "@timestamp": "2023-07-01T08:14:05.000Z", - "event": { - "result": "ACCEPT", - "name": "waf", - "domain": "waf" - }, - "attributes": { - "data_stream": { - "dataset": "waf_log", - "namespace": "production", - "type": "waf_logs" - } - }, - "cloud": { - "provider": "aws", - "account": { - "id": "111111111111" - }, - "region": "ap-southeast-2", - "resource_id": "vpc-0d4d4e*2b*d74*527", - "platform": "aws_vpc" - }, - "aws": { - "waf": { - "formatVersion": 1, - "webaclId": "arn:aws:wafv2:us-east-1:345678901234:global/webacl/test-cf/ba65eb35-e5d8-4be5-b016-129a338a48b1", - "terminatingRuleId": "Default_Action", - "terminatingRuleType": "REGULAR", - "action": "ALLOW", - "terminatingRuleMatchDetails": [], - "httpSourceName": "CF", - "httpSourceId": "E13XOUZ3C0STES", - "ruleGroupList": [ - { - "ruleGroupId": "AWS#AWSManagedRulesAmazonIpReputationList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesAnonymousIpList", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - }, - { - "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet", - "terminatingRule": null, - "nonTerminatingMatchingRules": [], - "excludedRules": null, - "customerConfig": null - } - ], - "rateBasedRuleList": [], - "nonTerminatingMatchingRules": [], - "requestHeadersInserted": null, - "responseCodeSent": null, - "httpRequest": { - "clientIp": "13.248.48.3", - "country": "HK", - "headers": [ - { - "name": "host", - "value": "d2wu*nbj*8x1w7.cloudfront.net" - }, - { - "name": "cache-control", - "value": "max-age=0" - }, - { - "name": "sec-ch-ua", - "value": "\"Google Chrome\";v=\"111\", \"Not(A:Brand\";v=\"8\", \"Chromium\";v=\"111\"" - }, - { - "name": "sec-ch-ua-mobile", - "value": "?0" - }, - { - "name": "sec-ch-ua-platform", - "value": "\"macOS\"" - }, - { - "name": "upgrade-insecure-requests", - "value": "1" - }, - { - "name": "user-agent", - "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" - }, - { - "name": "accept", - "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7" - }, - { - "name": "sec-fetch-site", - "value": "none" - }, - { - "name": "sec-fetch-mode", - "value": "navigate" - }, - { - "name": "sec-fetch-user", - "value": "?1" - }, - { - "name": "sec-fetch-dest", - "value": "document" - }, - { - "name": "accept-encoding", - "value": "gzip, deflate, br" - }, - { - "name": "accept-language", - "value": "en-US,en;q=0.9" - }, - { - "name": "if-none-match", - "value": "\"af0d9ab1ebeaf8ff3ce34ea9e79f2579\"" - }, - { - "name": "if-modified-since", - "value": "Tue, 31 Jan 2023 09:25:22 GMT" - } - ], - "uri": "/log-pipeline/service-log", - "args": "", - "httpVersion": "HTTP/2.0", - "httpMethod": "GET", - "requestId": "QL4r6nTLZ0zEwDNyrrv64BYG6nrLGwQx1WPAsdPeQai6cecRr83rFQ==" - } - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/info/README.md b/server/adaptors/integrations/__data__/repository/aws_waf/info/README.md deleted file mode 100644 index f4620fbece..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/info/README.md +++ /dev/null @@ -1,28 +0,0 @@ -# AWS WAF Log Integration - -## What is AWS WAF? - -AWS WAF (Web Application Firewall) is a web application firewall service that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF provides firewall rules to filter and monitor HTTP/HTTPS requests based on specific conditions. - -AWS WAF can be used for various purposes, such as: - -- Mitigating web application layer DDoS attacks -- Blocking common web attack patterns like SQL injection and cross-site scripting (XSS) -- Filtering traffic based on IP addresses or geographic locations -- Controlling access to specific parts of your application - -AWS WAF allows you to define rules to match specific conditions and then take actions, such as allowing, blocking, or rate-limiting requests, based on those rules. - -See additional details [here](https://aws.amazon.com/waf/). - -## What is AWS WAF Log Integration? - -An integration is a set of pre-configured assets bundled together to facilitate monitoring and analysis. - -AWS WAF log integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - -The Dashboard uses the index alias `logs-waf` for shortening the index name - be advised. - - diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_s3-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_s3-1.0.0.mapping.json deleted file mode 100644 index ca32e104a0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_s3-1.0.0.mapping.json +++ /dev/null @@ -1,170 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_s3", - "labels": ["aws", "s3"] - }, - "properties": { - "aws": { - "properties": { - "s3": { - "properties": { - "bucket_owner": { - "type": "keyword" - }, - "bucket": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "remote_ip": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "requester": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "request_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "operation": { - "type": "keyword" - }, - "key": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "copy_source": { - "type": "keyword" - }, - "upload_id": { - "type": "keyword" - }, - "delete": { - "type": "keyword" - }, - "part_number": { - "type": "keyword" - }, - "request_uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "http_status": { - "type": "keyword" - }, - "error_code": { - "type": "keyword" - }, - "bytes_sent": { - "type": "long" - }, - "object_size": { - "type": "long" - }, - "total_time": { - "type": "integer" - }, - "turn_around_time": { - "type": "integer" - }, - "referrer": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "user_agent": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "version_id": { - "type": "keyword" - }, - "host_id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "signature_version": { - "type": "keyword" - }, - "cipher_suite": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "authentication_type": { - "type": "keyword" - }, - "host_header": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "tls_version": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_waf-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_waf-1.0.0.mapping.json deleted file mode 100644 index 5722911f10..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/aws_waf-1.0.0.mapping.json +++ /dev/null @@ -1,144 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "aws_waf", - "labels": ["aws", "waf"] - }, - "properties": { - "aws": { - "type": "object", - "properties": { - "waf": { - "type": "object", - "properties": { - "action": { - "type": "keyword" - }, - "formatVersion": { - "type": "keyword" - }, - "httpRequest": { - "properties": { - "args": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "clientIp": { - "type": "ip" - }, - "country": { - "type": "keyword" - }, - "headers": { - "properties": { - "name": { - "type": "keyword" - }, - "value": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "httpMethod": { - "type": "keyword" - }, - "httpVersion": { - "type": "keyword" - }, - "requestId": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "uri": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "httpSourceId": { - "type": "keyword" - }, - "httpSourceName": { - "type": "keyword" - }, - "labels": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "ruleGroupList": { - "properties": { - "ruleGroupId": { - "type": "keyword" - }, - "terminatingRule": { - "properties": { - "action": { - "type": "keyword" - }, - "ruleId": { - "type": "keyword" - } - } - } - } - }, - "terminatingRuleId": { - "type": "keyword" - }, - "terminatingRuleType": { - "type": "keyword" - }, - "webaclId": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "webaclName": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/logs_waf-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/aws_waf/schemas/logs_waf-1.0.0.mapping.json deleted file mode 100644 index f79b80dfa0..0000000000 --- a/server/adaptors/integrations/__data__/repository/aws_waf/schemas/logs_waf-1.0.0.mapping.json +++ /dev/null @@ -1,226 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-aws_waf-*"], - "priority": 900, - "data_stream": {}, - "template": { - "aliases": { - "logs-waf": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "aws", "s3", "cloud", "waf"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["cloud", "aws_waf", "aws_s3"], - "version": 1 -} diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/static/dashboard.png b/server/adaptors/integrations/__data__/repository/aws_waf/static/dashboard.png deleted file mode 100644 index 8f268e106a..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_waf/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/aws_waf/static/logo.jpg b/server/adaptors/integrations/__data__/repository/aws_waf/static/logo.jpg deleted file mode 100644 index e944bea26a..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/aws_waf/static/logo.jpg and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/assets/haproxy-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/haproxy/assets/haproxy-1.0.0.ndjson deleted file mode 100644 index e74be47adf..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/assets/haproxy-1.0.0.ndjson +++ /dev/null @@ -1,11 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"body\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.address\"}}},{\"count\":0,\"name\":\"communication.destination.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.destination.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.destination.domain\"}}},{\"count\":0,\"name\":\"communication.destination.geo.city_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_iso_code\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.country_name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.geo.location\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.destination.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.sock.family\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.address\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.address.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.address\"}}},{\"count\":0,\"name\":\"communication.source.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.domain\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"communication.source.domain.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"communication.source.domain\"}}},{\"count\":0,\"name\":\"communication.source.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.mac\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.packets\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"communication.source.port\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.category\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.domain\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.message\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.exception.stacktrace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.exception.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.kind\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.name\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.result\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.source\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.client.ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.flavor\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.body.content\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.request.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"http.request.id\"}}},{\"count\":0,\"name\":\"http.request.method\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.mime_type\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.request.referrer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.resent_count\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.body.content\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.response.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.response.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"http.response.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"http.response.id\"}}},{\"count\":0,\"name\":\"http.response.status_code\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.route\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.schema\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.target\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.url\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"http.user_agent\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.dropped_attributes_count\",\"type\":\"number\",\"esTypes\":[\"integer\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"instrumentationScope.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.name\"}}},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.schemaUrl\"}}},{\"count\":0,\"name\":\"instrumentationScope.version\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"instrumentationScope.version.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"instrumentationScope.version\"}}},{\"count\":0,\"name\":\"observedTimestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"observerTime\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"schemaUrl\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"schemaUrl.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"schemaUrl\"}}},{\"count\":0,\"name\":\"severity.number\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"severity.text\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"severity.text.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"severity.text\"}}},{\"count\":0,\"name\":\"spanId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"span_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"span_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"span_id\"}}},{\"count\":0,\"name\":\"traceId\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"trace_id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"trace_id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"trace_id\"}}}]","timeFieldName":"@timestamp","title":"ss4o_logs-haproxy-sample-sample"},"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-11-06T06:10:10.775Z","version":"WzExOSwxXQ=="} -{"attributes":{"columns":["http.request.method","http.response.status_code"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"version\":true,\"query\":{\"query\":\"event.domain:haproxy.access\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"[HAProxy Core Logs 1.0] HAProxy Access Logs","version":1},"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","migrationVersion":{"search":"7.9.3"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"[HAProxy Core Logs 1.0] Response codes over time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[HAProxy Core Logs 1.0] Response codes over time\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-24h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"http.response.status_code:[200 TO 299]\",\"language\":\"lucene\"},\"label\":\"200s\"},{\"input\":{\"query\":\"http.response.status_code:[300 TO 399]\",\"language\":\"lucene\"},\"label\":\"300s\"},{\"input\":{\"query\":\"http.response.status_code:[400 TO 499]\",\"language\":\"lucene\"},\"label\":\"400s\"},{\"input\":{\"query\":\"http.response.status_code:[500 TO 599]\",\"language\":\"lucene\"},\"label\":\"500s\"},{\"input\":{\"query\":\"http.response.status_code:0\",\"language\":\"lucene\"},\"label\":\"0\"}]},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"feb24bf8-f5e4-4f24-a9e0-c6618a8db3c3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMSwxXQ=="} -{"attributes":{"columns":["_source"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"highlightAll\":true,\"query\":{\"query\":\"http.response.status_code >= 300 and event.domain:haproxy.access\",\"language\":\"kuery\"},\"version\":true,\"highlight\":{\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"pre_tags\":[\"@kibana-highlighted-field@\"],\"require_field_match\":false,\"fragment_size\":2147483647},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"title":"[HAProxy Core Logs 1.0] HAProxy Error Logs","version":1},"id":"aae90f71-83e6-4154-83f8-80185a58cde7","migrationVersion":{"search":"7.9.3"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"lucene\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"[HAProxy Core Logs 1.0] Errors over time","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"[HAProxy Core Logs 1.0] Errors over time\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-24h\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"bfa0e172-75fa-485d-aebd-b623713359b3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"aae90f71-83e6-4154-83f8-80185a58cde7","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"HTTP Top URLs","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"HTTP Top URLs\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.url\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"69b27677-9127-4581-9f1a-cc3a84822354","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"Data Volume","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Data Volume\",\"type\":\"area\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"http.response.bytes\",\"customLabel\":\"Response Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-15m\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"m\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{},\"customLabel\":\"\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"area\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Response Bytes\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"area\",\"mode\":\"stacked\",\"data\":{\"label\":\"Response Bytes\",\"id\":\"1\"},\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"showCircles\":true,\"interpolate\":\"linear\",\"valueAxis\":\"ValueAxis-1\"}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"},\"labels\":{}}}"},"id":"de792cf1-b1f1-4705-890d-4206709c7360","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-06T06:10:10.775Z","version":"WzEyNCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Status code dropdown","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Status code dropdown\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1700045798676\",\"fieldName\":\"http.response.status_code\",\"parent\":\"\",\"label\":\"Dropdown\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"c4fcd310-83a5-11ee-8c8a-a1faaf8536ee","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"689b4f16-5275-4e1e-9835-91dd5e06161e","name":"control_0_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2023-11-15T10:57:29.280Z","version":"WzEyNywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"Transactions by API","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Transactions by API\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.url\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"http.response.status_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":500,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0e69fad0-76ec-11ee-8c8a-a1faaf8536ee","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"78ce24fc-c71c-4f58-be16-6d736e788a80","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2023-11-16T05:08:59.573Z","version":"WzEzMCwxXQ=="} -{"attributes":{"description":"HAProxy dashboard with basic Observability on access / error logs","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":8,\"i\":\"1f31e50b-06e3-41e6-972e-e4e5fe1a9872\",\"w\":48,\"x\":0,\"y\":15},\"panelIndex\":\"1f31e50b-06e3-41e6-972e-e4e5fe1a9872\",\"title\":\"HTTP Status Codes over Time\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":9,\"i\":\"d91a8da4-b34b-470a-aca6-9c76b47cd6fb\",\"w\":24,\"x\":0,\"y\":23},\"panelIndex\":\"d91a8da4-b34b-470a-aca6-9c76b47cd6fb\",\"title\":\"HTTP Errors over Time\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{\"vis\":{\"sortColumn\":{\"colIndex\":0,\"direction\":\"asc\"}}},\"gridData\":{\"h\":15,\"i\":\"8e658e0d-7b64-4be8-8ad9-3b28eadf30f0\",\"w\":24,\"x\":24,\"y\":23},\"panelIndex\":\"8e658e0d-7b64-4be8-8ad9-3b28eadf30f0\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"hidePanelTitles\":false},\"gridData\":{\"h\":15,\"i\":\"4d8c2aa7-159c-4a1a-80ff-00a9299056ce\",\"w\":24,\"x\":0,\"y\":32},\"panelIndex\":\"4d8c2aa7-159c-4a1a-80ff-00a9299056ce\",\"title\":\"HTTP Data Volume\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"742783de-3ed5-4ba8-aafd-948220697bc6\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"742783de-3ed5-4ba8-aafd-948220697bc6\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"8f9de824-cffd-43d1-b59e-8912ec9da1c5\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"8f9de824-cffd-43d1-b59e-8912ec9da1c5\",\"version\":\"2.9.0\",\"panelRefName\":\"panel_5\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-90d","timeRestore":true,"timeTo":"now","title":"HAProxy Logs Overview","version":1},"id":"49e36499-ca0a-4636-9216-6db5095cc96e","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"feb24bf8-f5e4-4f24-a9e0-c6618a8db3c3","name":"panel_0","type":"visualization"},{"id":"bfa0e172-75fa-485d-aebd-b623713359b3","name":"panel_1","type":"visualization"},{"id":"69b27677-9127-4581-9f1a-cc3a84822354","name":"panel_2","type":"visualization"},{"id":"de792cf1-b1f1-4705-890d-4206709c7360","name":"panel_3","type":"visualization"},{"id":"c4fcd310-83a5-11ee-8c8a-a1faaf8536ee","name":"panel_4","type":"visualization"},{"id":"0e69fad0-76ec-11ee-8c8a-a1faaf8536ee","name":"panel_5","type":"visualization"}],"type":"dashboard","updated_at":"2023-11-16T05:16:26.850Z","version":"WzEzMiwxXQ=="} -{"exportedCount":10,"missingRefCount":0,"missingReferences":[]} \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/data/sample.json b/server/adaptors/integrations/__data__/repository/haproxy/data/sample.json deleted file mode 100644 index 05e7bd1726..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/data/sample.json +++ /dev/null @@ -1 +0,0 @@ -[{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T06:46:14.029Z","observedTimestamp":"2023-11-20T06:46:14.029Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:06:46:14 +0000] \"GET /monitor HTTP/1.1\" 200 23741 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"300","bytes":23741},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:24.734Z","observedTimestamp":"2023-11-20T07:10:24.734Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:24 +0000] \"GET /monitor HTTP/1.1\" 200 23881 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"400","bytes":23881},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:19.628Z","observedTimestamp":"2023-11-20T07:10:19.628Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:19 +0000] \"GET /monitor HTTP/1.1\" 200 23881 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23881},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:14.505Z","observedTimestamp":"2023-11-20T07:10:14.505Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:14 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:09.302Z","observedTimestamp":"2023-11-20T07:10:09.302Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:09 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:04.151Z","observedTimestamp":null,"body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:04 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"200","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-20T07:10:04.151Z","observedTimestamp":"2023-11-20T07:10:04.000Z","body":"10.81.1.1:57147 stats stats/0/0/0/0/0 1/1/0/0/00/0--LR--[20/Nov/2023:07:10:04 +0000] \"GET /monitor HTTP/1.1\" 200 23886 \"{Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0}\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{"method":"GET"},"response":{"status_code":"404","bytes":23886},"url":"/monitor"}},{"span_id":"abcdef1010","attributes":{"data_stream":{"namespace":"production","dataset":"haproxy.access","type":"logs"}},"event":{"domain":"haproxy.access","kind":"event","result":"success","type":["access"],"category":["web"],"name":"access"},"@timestamp":"2023-11-21T08:57:33.000Z","observedTimestamp":"2023-11-21T08:57:43.000Z","body":"10.81.1.1:61108 stats stats/-1/-1/-1/-1/10009a 1/1/0/0/00/0--cR--[21/Nov/2023:08:57:43 +0000] \" HTTP/1.1\" 408 0 \"\"\"","trace_id":"102981ABCD2901","http":{"flavor":"1.1","request":{},"response":{"status_code":"408","bytes":1},"url":"/monitor"}}] \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/haproxy-1.0.0.json b/server/adaptors/integrations/__data__/repository/haproxy/haproxy-1.0.0.json deleted file mode 100644 index 74dafe701f..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/haproxy-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "haproxy", - "version": "1.0.0", - "displayName": "HAProxy Dashboard", - "description": "HAProxy logs collector", - "license": "Apache-2.0", - "type": "logs", - "labels": ["Observability", "Logs"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/haproxy/info", - "statics": { - "logo": { - "annotation": "HAProxy Logo", - "path": "logo.svg" - }, - "gallery": [ - { - "annotation": "HAProxy Dashboard", - "path": "dashboard1.png" - }, - { - "annotation": "HAProxy Dashboard view", - "path": "dashboard2.png" - } - ] - }, - "components": [ - { - "name": "communication", - "version": "1.0.0" - }, - { - "name": "http", - "version": "1.0.0" - }, - { - "name": "logs", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "haproxy", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/README.md b/server/adaptors/integrations/__data__/repository/haproxy/info/README.md deleted file mode 100644 index 7373d5da94..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/README.md +++ /dev/null @@ -1,18 +0,0 @@ -# HAProxy Integration - -## What is HAProxy? - -HAProxy is open-source software that provides a high availability load balancer and proxy server for TCP and HTTP-based applications. - -See additional details [here](http://www.haproxy.org/). - -## What is HAProxy Integration? - -An integration is a bundle of pre-canned assets that are packaged together in a meaningful manner. -HAProxy integration includes dashboards, visualisations, queries and an index mapping. - -### Dashboards - - - - diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/docker-compose.yaml b/server/adaptors/integrations/__data__/repository/haproxy/info/test/docker-compose.yaml deleted file mode 100644 index 731bba55de..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/docker-compose.yaml +++ /dev/null @@ -1,90 +0,0 @@ -version: '3' - -services: - opensearch: - image: opensearchstaging/opensearch:3.0.0 - container_name: opensearch - environment: - - cluster.name=opensearch-cluster # Name the cluster - - node.name=opensearch # Name the node that will run in this container - - discovery.seed_hosts=opensearch # Nodes to look for when discovering the cluster - - cluster.initial_cluster_manager_nodes=opensearch # Nodes eligibile to serve as cluster manager - - bootstrap.memory_lock=true # Disable JVM heap memory swapping - - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # Set min and max JVM heap sizes to at least 50% of system RAM - - "DISABLE_INSTALL_DEMO_CONFIG=true" # Prevents execution of bundled demo script which installs demo certificates and security configurations to OpenSearch - - "DISABLE_SECURITY_PLUGIN=true" # Disables security plugin - ulimits: - memlock: - soft: -1 # Set memlock to unlimited (no soft or hard limit) - hard: -1 - nofile: - soft: 65536 # Maximum number of open files for the opensearch user - set to at least 65536 - hard: 65536 - volumes: - - opensearch:/usr/share/opensearch/data # Creates volume called opensearch-data1 and mounts it to the container - ports: - - 9200:9200 - - 9600:9600 - expose: - - "9200" - healthcheck: - test: ["CMD", "curl", "-f", "http://localhost:9200/_cluster/health?wait_for_status=yellow"] - interval: 5s - timeout: 25s - retries: 4 - networks: - - opensearch-net # All of the containers will join the same Docker bridge network - haproxy: - container_name: haproxy - image: haproxytech/haproxy-alpine:2.4 - volumes: - # - ./haproxy-otel/opentelemetry_module.conf:/etc/nginx/conf.d/opentelemetry_module.conf - - ./haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro - ports: - - 8405:8405 - depends_on: - - flask-app - - fluentbit - networks: - - opensearch-net # All of the containers will join the same Docker bridge network - links: - - fluentbit - logging: - driver: "fluentd" - options: - fluentd-address: 127.0.0.1:24224 - tag: haproxy.access - fluentbit: - container_name: fluentbit - image: fluent/fluent-bit:latest - volumes: - - ./fluent-bit:/fluent-bit/etc - ports: - - "24224:24224" - - "24224:24224/udp" - depends_on: - - opensearch - networks: - - opensearch-net - redis: - image: redis - ports: - - 6357:6357 - networks: - - opensearch-net - flask-app: - build: flask-app - ports: - - 5000:5000 - depends_on: - - redis - volumes: - - ./flask-app/app.py:/code/app.py - networks: - - opensearch-net - -volumes: - opensearch: - -networks: - opensearch-net: diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/Dockerfile b/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/Dockerfile deleted file mode 100644 index bb172b4af6..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/Dockerfile +++ /dev/null @@ -1,9 +0,0 @@ -FROM python:latest -ADD . /code -WORKDIR /code -RUN pip install -r requirements.txt - -RUN mkdir -p /run/haproxy/ -RUN export VALUE=$(id -u haproxy) - -CMD ["flask", "run", "-h", "0.0.0.0", "-p", "5000", "--debug"] diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/app.py b/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/app.py deleted file mode 100644 index 26f0647700..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/app.py +++ /dev/null @@ -1,20 +0,0 @@ -from random import random, randint -from flask import Flask -from redis import Redis - -app = Flask(__name__) -redis = Redis(host='redis', port=6379) - - -@app.route("/") -def hits(): - if random() < 0.20: - return "Random error", 500 - h = redis.incr('hits') - return f"This page has been viewed {h} time(s)" - -@app.route("/dice") -def roll_dice(): - if random() < 0.05: - return "Random error", 500 - return str(randint(1, 6)) diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/requirements.txt b/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/requirements.txt deleted file mode 100644 index 56c1ce66b5..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/flask-app/requirements.txt +++ /dev/null @@ -1,2 +0,0 @@ -flask==2.3.2 -redis \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/fluent-bit.conf b/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/fluent-bit.conf deleted file mode 100644 index 991f747923..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/fluent-bit.conf +++ /dev/null @@ -1,30 +0,0 @@ -[SERVICE] - Parsers_File parsers.conf - -[INPUT] - Name forward - Port 24224 - -[FILTER] - Name parser - Match haproxy.access - Key_Name log - Parser haproxy - -[FILTER] - Name lua - Match haproxy.access - Script otel-converter.lua - call convert_to_otel - -[OUTPUT] - Name opensearch - Match haproxy.access - Host opensearch - Port 9200 - Index ss4o_logs-haproxy-dev - Suppress_Type_Name On - -[OUTPUT] - Name stdout - Match haproxy.access \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/otel-converter.lua b/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/otel-converter.lua deleted file mode 100644 index 178f4bb8c8..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/otel-converter.lua +++ /dev/null @@ -1,84 +0,0 @@ -local hexCharset = "0123456789abcdef" -local function randHex(length) - if length > 0 then - local index = math.random(1, #hexCharset) - return randHex(length - 1) .. hexCharset:sub(index, index) - else - return "" - end -end - -local function format_haproxy(c) - if c.error then - return string.format( - "%s [%s] \"%s HTTP/1.1\" %s %s \"%s\"", - c.remote, - os.date("%d/%b/%Y:%H:%M:%S %z"), - c.method, - c.code, - c.size, - c.error - ) - else - return string.format( - "%s [%s] \"%s %s HTTP/1.1\" %s %s \"%s\"", - c.remote, - os.date("%d/%b/%Y:%H:%M:%S %z"), - c.method, - c.path, - c.code, - c.size, - c.agent - ) - end -end - -local formats = { - ["haproxy.access"] = format_haproxy - -} - -function convert_to_otel(tag, timestamp, record) - local data = { - traceId=randHex(32), - spanId=randHex(16), - ["@timestamp"]=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - observedTimestamp=os.date("!%Y-%m-%dT%H:%M:%S.000Z"), - body=formats[tag](record), - attributes={ - data_stream={ - dataset=tag, - namespace="production", - type="logs" - } - }, - event={ - category="web", - name="access", - domain=tag, - kind="event", - result="success", - type="access" - }, - http={ - request={ - method=record.method - }, - response={ - bytes=tonumber(record.size), - status_code=tonumber(record.code) - }, - flavor="1.1", - url=record.path - }, - communication={ - source={ - address=record.remote - } - } - } - if record.remote then - data.communication.source.ip = string.match(record.remote, "%d+%.%d+%.%d+%.%d+") - end - return 1, timestamp, data -end \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/parsers.conf b/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/parsers.conf deleted file mode 100644 index fb5c26a460..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/fluent-bit/parsers.conf +++ /dev/null @@ -1,6 +0,0 @@ -[PARSER] - Name haproxy - Format regex - Regex ^(?[^ ]*) \[(?[^\]]*)\] (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (((?[^\"]*) "(?\S+)(?: +(?[^\"]*?)(?: +\S*)?)?)|(?[^ ]*))?" - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S.%L diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg b/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg deleted file mode 100644 index 51fbadb559..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg +++ /dev/null @@ -1,23 +0,0 @@ -global - stats socket /var/run/api.sock user haproxy group haproxy mode 660 level admin expose-fd listeners - log stdout format raw local0 info - -defaults - mode http - option httplog - timeout client 10s - timeout connect 5s - timeout server 10s - timeout http-request 10s - log global - -frontend frontend - bind *:8405 - stats enable - stats refresh 5s - capture request header User-Agent len 128 - default_backend webservers - -backend webservers - server s1 flask-app:5000 check - diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh b/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh deleted file mode 100644 index 6528480efb..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh +++ /dev/null @@ -1,2 +0,0 @@ -# Copy access.log, error.log, metrics.log, parsers.conf, and fluent-bit.conf into the /tmp directory -sudo docker run -it -v /tmp/:/tmp/ fluent/fluent-bit /bin/fluent-bit -R /tmp/parsers.conf -c /tmp/fluent-bit.conf \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index 2bd5dadfa6..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json deleted file mode 100644 index fd1082432a..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json deleted file mode 100644 index 958842e97f..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json +++ /dev/null @@ -1,223 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-*-*"], - "priority": 900, - "data_stream": {}, - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "http", "communication"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http"], - "version": 1 - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png deleted file mode 100644 index 305a8e8410..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png b/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png deleted file mode 100644 index 8bb8972422..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg b/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg deleted file mode 100644 index ae734d7522..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg +++ /dev/null @@ -1,51 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/server/adaptors/integrations/__data__/repository/k8s/assets/README.md b/server/adaptors/integrations/__data__/repository/k8s/assets/README.md deleted file mode 100644 index f970c5334e..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/assets/README.md +++ /dev/null @@ -1,55 +0,0 @@ -# K8s Dashboard Explained - -The following queries are used for the k8s dashboard: - -- Deployment names Graph: - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.name` - -- Available pods per deployment (done per deployment aggregation) - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.name` - -- Desired pod - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.desired` - -- Available pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.available` - -- Unavailable pods - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.unavailable` -- Unavailable pods per deployment ( done per deployment aggregation) - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.unavailable` - -- CPU usage by node - - - Filter: `event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)` - - Query: `kubernetes.node.name` , `kubernetes.container.cpu.usage.nanocores`, `kubernetes.node.cpu.capacity.cores` - -- Top memory intensive pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.container` - - Query: `kubernetes.container._module.pod.name`, `kubernetes.container.memory.usage.bytes` - -- Top CPU intensive pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.container` - - Query: `kubernetes.container._module.pod.name`, `kubernetes.container.cpu.usage.core.ns` - -- Network in by node - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.pod` - - Query: `kubernetes.pod.network.rx.bytes` - -- Network out by node - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.pod` - - Query: `kubernetes.pod.network.tx.bytes` diff --git a/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson deleted file mode 100644 index 655af5bf34..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson +++ /dev/null @@ -1,16 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.dataset\"}}},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.namespace\"}}},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.type\"}}},{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.dataset.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"event.dataset\"}}},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.module.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"event.module\"}}},{\"count\":0,\"name\":\"kubernetes.container.cpu.limit.cores\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.cpu.request.cores\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.id\"}}},{\"count\":0,\"name\":\"kubernetes.container.image\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.image.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.image\"}}},{\"count\":0,\"name\":\"kubernetes.container.memory.limit.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.memory.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.name\"}}},{\"count\":0,\"name\":\"kubernetes.container.status.phase\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.status.phase.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.status.phase\"}}},{\"count\":0,\"name\":\"kubernetes.container.status.ready\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.status.restarts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.deployment.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.deployment.name\"}}},{\"count\":0,\"name\":\"kubernetes.deployment.paused\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.available\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.desired\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.unavailable\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.updated\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.labels.app\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.app.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.app\"}}},{\"count\":0,\"name\":\"kubernetes.labels.controller-revision-hash\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.controller-revision-hash.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.controller-revision-hash\"}}},{\"count\":0,\"name\":\"kubernetes.labels.eks.amazonaws.com/component\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.eks.amazonaws.com/component.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.eks.amazonaws.com/component\"}}},{\"count\":0,\"name\":\"kubernetes.labels.io.kompose.service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.io.kompose.service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.io.kompose.service\"}}},{\"count\":0,\"name\":\"kubernetes.labels.k8s-app\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.k8s-app.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.k8s-app\"}}},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.pod-template-generation\"}}},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-hash\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-hash.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.pod-template-hash\"}}},{\"count\":0,\"name\":\"kubernetes.namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.namespace\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/os\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/arch\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/hostname\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/hostname.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/hostname\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/os\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.kubernetes.io/region\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node.cpu.allocatable.cores\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.cpu.capacity.cores\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.memory.allocatable.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.memory.capacity.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node.name\"}}},{\"count\":0,\"name\":\"kubernetes.node.pod.allocatable.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.pod.capacity.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.status.ready\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node.status.ready.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node.status.ready\"}}},{\"count\":0,\"name\":\"kubernetes.node.status.unschedulable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.pod.host_ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.host_ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.host_ip\"}}},{\"count\":0,\"name\":\"kubernetes.pod.ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.ip\"}}},{\"count\":0,\"name\":\"kubernetes.pod.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.name\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.phase\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.phase.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.phase\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.ready\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.ready.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.ready\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.scheduled\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.scheduled.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.scheduled\"}}},{\"count\":0,\"name\":\"kubernetes.pod.uid\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.uid.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.uid\"}}}]","timeFieldName":"@timestamp","title":"ss4o_logs-k8s-*"},"id":"677d1880-3710-11ee-9c99-1babb143e8dd","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-08-09T23:56:49.032Z","version":"WzQ2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Nodes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Nodes\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"kubernetes.node.name\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Nodes\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.node\",\"language\":\"kuery\"},\"background_color_rules\":[{\"id\":\"79ccad80-48ff-11ec-b39b-33a1da97fd00\"}],\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"35410fad-e9d9-4df0-b88b-380347b6673c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzU5OSwxXQ=="} -{"attributes":{"description":"Deployment Table","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"Kubernetes - Deployments","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Deployments\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"289c1980-48fc-11ec-b39b-33a1da97fd00\"}],\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"index_pattern\":\"\",\"interval\":\"\",\"isModelInvalid\":false,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"bar\",\"color\":\"#68BC00\",\"fill\":\"0.6\",\"filter\":{\"language\":\"kuery\",\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\"},\"formatter\":\"number\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"label\":\"Deployments\",\"line_width\":\"0\",\"metrics\":[{\"field\":\"kubernetes.deployment.name\",\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"override_index_pattern\":1,\"point_size\":1,\"separate_axis\":0,\"series_index_pattern\":\"logs-k8s\",\"series_time_field\":\"@timestamp\",\"split_color_mode\":\"opensearchDashboards\",\"split_filters\":[{\"color\":\"#68BC00\",\"filter\":{\"language\":\"kuery\",\"query\":\"\"},\"id\":\"e2942b00-3795-11ee-98d8-576c351e07b5\"}],\"split_mode\":\"terms\",\"stacked\":\"stacked_within_series\",\"terms_field\":\"kubernetes.deployment.name\",\"terms_order_by\":\"_count\",\"terms_size\":\"100\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"type\":\"timeseries\",\"bar_color_rules\":[{\"id\":\"f4541fc0-3796-11ee-8af2-45ce6d9f36cb\"}],\"pivot_id\":\"kubernetes.deployment.name\",\"pivot_type\":\"string\"}}"},"id":"d9a10a4a-a344-4acf-81c5-f3fbdea773e0","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Available pods per deployment [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Available pods per deployment [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"label\":\"Available pods\",\"type\":\"timeseries\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"terms_field\":\"kubernetes.deployment.name\",\"terms_size\":\"100\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"\",\"index_pattern\":\"\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false}}"},"id":"c1403f7e-9ce1-41c6-a571-a5fe09455067","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Desired pods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Desired pods\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(96,146,192,1)\",\"split_mode\":\"everything\",\"split_color_mode\":\"rainbow\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.desired\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked_within_series\",\"override_index_pattern\":0,\"series_index_pattern\":\"logs-k8s\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"series_time_field\":\"@timestamp\",\"label\":\"Desired Pods\",\"type\":\"timeseries\",\"series_interval\":\"auto\",\"offset_time\":\"\",\"hide_in_legend\":0}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"10s\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"fe4117c0-48fc-11ec-b39b-33a1da97fd00\"}],\"gauge_color_rules\":[{\"id\":\"173ca960-48fd-11ec-b39b-33a1da97fd00\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"}}}"},"id":"ca4afa09-317d-43e0-8587-bc8023eaccab","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Available pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Available pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(84,179,153,1)\",\"split_mode\":\"terms\",\"split_color_mode\":\"gradient\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":\"0.8\",\"stacked\":\"stacked\",\"label\":\"Available Pods\",\"type\":\"timeseries\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"10s\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"fc647630-49c5-11ec-bdfd-3b80d430f4ad\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"45b57c4e-8ac9-4103-bc31-89668017349d","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Unavailable pods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Unavailable pods\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(231,102,76,1)\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Unavailable Pods\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"b43829d0-4900-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"021c0b61-3ac1-46cf-856a-63f4c5764554","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Unavailable pods per deployment [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Unavailable pods per deployment [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"label\":\"Unavailable pods\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.deployment.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"}}}"},"id":"300d6e9c-c915-4bb4-98cf-4b5968523ccf","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CPU usage by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU usage by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.usage.nanocores\"},{\"id\":\"d39f5b30-4faf-11ec-9d5a-59f0e2391052\",\"type\":\"avg\",\"field\":\"event.duration\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"},\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.node.name\",\"offset_time\":\"10s\"},{\"id\":\"faee71b0-48f9-11ec-b39b-33a1da97fd00\",\"color\":\"\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\",\"type\":\"avg\",\"field\":\"kubernetes.node.cpu.capacity.cores\"},{\"id\":\"c1c04570-48fa-11ec-b39b-33a1da97fd00\",\"type\":\"math\",\"variables\":[{\"id\":\"cbc40d90-48fa-11ec-b39b-33a1da97fd00\",\"name\":\"cores\",\"field\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\"}],\"script\":\"params.cores * 1000000000\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"1000\",\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"},\"terms_order_by\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\",\"value_template\":\"{{value}} nanocores\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"\",\"index_pattern\":\"\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"198ab4e0-48f9-11ec-b39b-33a1da97fd00\"}],\"bar_color_rules\":[{\"id\":\"1b9e79b0-48f9-11ec-b39b-33a1da97fd00\"}],\"gauge_color_rules\":[{\"id\":\"1c00e500-48f9-11ec-b39b-33a1da97fd00\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"}}"},"id":"6bf080cf-6b7a-4c13-a30b-f17146c44633","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory usage by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory usage by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"},{\"id\":\"c7a3a880-48fd-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"10s\",\"id\":\"cf2e0c30-48fd-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"c7a3a880-48fd-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\",\"terms_size\":\"1000\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"id\":\"08b86cc0-48fe-11ec-b39b-33a1da97fd00\",\"color\":\"\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"sum\",\"field\":\"kubernetes.node.memory.capacity.bytes\"},{\"id\":\"35fe8b10-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\"},{\"unit\":\"10s\",\"id\":\"3c89ce40-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"35fe8b10-48fe-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Node capacity\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.node.name\",\"hidden\":false,\"terms_order_by\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"}}}"},"id":"dc7c955e-cfe9-48b4-bfb9-57d7c6a8cb0a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top memory intensive pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top memory intensive pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"},{\"unit\":\"\",\"id\":\"7103e0f0-4900-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"10s\",\"id\":\"7ab85090-4900-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"7103e0f0-4900-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":null}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"bar_color_rules\":[{\"id\":\"39e57750-4900-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.container\",\"language\":\"kuery\"}}}"},"id":"1d928d8c-d17a-4a1a-916a-d899735bd638","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:36:49.991Z","version":"WzYxOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top CPU intensive pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top CPU intensive pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.request.cores\"},{\"unit\":\"1s\",\"id\":\"eeea0fe0-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"count\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0 a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.container.name\",\"value_template\":\"{{value}} ns\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"label\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"bar_color_rules\":[{\"id\":\"c8d782b0-48ff-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.container\",\"language\":\"kuery\"},\"background_color_rules\":[{\"id\":\"cf2799e0-37a3-11ee-bfde-4b4fbdcc71b7\"}]}}"},"id":"ae948f51-9848-4e95-ad47-07c0a5ed4abe","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:35:15.998Z","version":"WzYxNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network in by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network in by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.rx.bytes\"},{\"unit\":\"\",\"id\":\"a1742800-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"\",\"id\":\"aa9b72d0-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"positive_only\",\"field\":\"a1742800-48fe-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.pod\",\"language\":\"kuery\"}}}"},"id":"b4426454-e43b-4fc3-bcc4-a277d31c6888","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYxMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network out by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network out by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.tx.bytes\"},{\"unit\":\"\",\"id\":\"17284c20-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"\",\"id\":\"1bbe7610-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"positive_only\",\"field\":\"17284c20-48ff-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.pod\",\"language\":\"kuery\"}}}"},"id":"4606d976-2d24-41fb-bf1d-557b0e6cc9f6","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYxMSwxXQ=="} -{"attributes":{"description":"Overview of Kubernetes cluster metrics","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"80c8564d-6611-4937-8641-377f7a90c240\",\"w\":9,\"x\":0,\"y\":0},\"panelIndex\":\"80c8564d-6611-4937-8641-377f7a90c240\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"5ba4ba5a-e98a-4729-9cbf-318244b46ad1\",\"w\":15,\"x\":9,\"y\":0},\"panelIndex\":\"5ba4ba5a-e98a-4729-9cbf-318244b46ad1\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"2aa6bf34-48cf-41a2-9d28-7dce46945f85\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"2aa6bf34-48cf-41a2-9d28-7dce46945f85\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"8b2b9250-64c3-4e58-b956-ea5d9065a942\",\"w\":8,\"x\":0,\"y\":9},\"panelIndex\":\"8b2b9250-64c3-4e58-b956-ea5d9065a942\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"988b264c-2bb5-4668-977b-c6fe6db705c7\",\"w\":8,\"x\":8,\"y\":9},\"panelIndex\":\"988b264c-2bb5-4668-977b-c6fe6db705c7\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"d690d7b2-9e5f-4b35-bff5-0d833e02e757\",\"w\":8,\"x\":16,\"y\":9},\"panelIndex\":\"d690d7b2-9e5f-4b35-bff5-0d833e02e757\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"5c92a579-d535-4423-84cf-af779084634d\",\"w\":24,\"x\":24,\"y\":9},\"panelIndex\":\"5c92a579-d535-4423-84cf-af779084634d\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"e0fa93dc-1008-4a51-bfd8-be72f06346c2\",\"w\":24,\"x\":0,\"y\":18},\"panelIndex\":\"e0fa93dc-1008-4a51-bfd8-be72f06346c2\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"8160fabe-70d6-414f-8a4d-b5f785e96b0f\",\"w\":24,\"x\":24,\"y\":18},\"panelIndex\":\"8160fabe-70d6-414f-8a4d-b5f785e96b0f\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"448c759d-2fb9-4c51-bcf2-e7792dc7e05b\",\"w\":24,\"x\":0,\"y\":29},\"panelIndex\":\"448c759d-2fb9-4c51-bcf2-e7792dc7e05b\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"9cd02619-6df4-4273-8098-8de6839495af\",\"w\":24,\"x\":24,\"y\":29},\"panelIndex\":\"9cd02619-6df4-4273-8098-8de6839495af\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"4bd4e0ba-49c5-4d4d-8305-07bbe4413451\",\"w\":24,\"x\":0,\"y\":40},\"panelIndex\":\"4bd4e0ba-49c5-4d4d-8305-07bbe4413451\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"d0162880-bc2d-42ea-87b1-f64ec7cdb5cc\",\"w\":24,\"x\":24,\"y\":40},\"panelIndex\":\"d0162880-bc2d-42ea-87b1-f64ec7cdb5cc\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_12\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-30m","timeRestore":true,"timeTo":"now","title":"[Kubernetes] Overview ","version":1},"id":"85ae304f-f545-432a-82d6-eebd6afcdb0c","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"35410fad-e9d9-4df0-b88b-380347b6673c","name":"panel_0","type":"visualization"},{"id":"d9a10a4a-a344-4acf-81c5-f3fbdea773e0","name":"panel_1","type":"visualization"},{"id":"c1403f7e-9ce1-41c6-a571-a5fe09455067","name":"panel_2","type":"visualization"},{"id":"ca4afa09-317d-43e0-8587-bc8023eaccab","name":"panel_3","type":"visualization"},{"id":"45b57c4e-8ac9-4103-bc31-89668017349d","name":"panel_4","type":"visualization"},{"id":"021c0b61-3ac1-46cf-856a-63f4c5764554","name":"panel_5","type":"visualization"},{"id":"300d6e9c-c915-4bb4-98cf-4b5968523ccf","name":"panel_6","type":"visualization"},{"id":"6bf080cf-6b7a-4c13-a30b-f17146c44633","name":"panel_7","type":"visualization"},{"id":"dc7c955e-cfe9-48b4-bfb9-57d7c6a8cb0a","name":"panel_8","type":"visualization"},{"id":"1d928d8c-d17a-4a1a-916a-d899735bd638","name":"panel_9","type":"visualization"},{"id":"ae948f51-9848-4e95-ad47-07c0a5ed4abe","name":"panel_10","type":"visualization"},{"id":"b4426454-e43b-4fc3-bcc4-a277d31c6888","name":"panel_11","type":"visualization"},{"id":"4606d976-2d24-41fb-bf1d-557b0e6cc9f6","name":"panel_12","type":"visualization"}],"type":"dashboard","updated_at":"2023-08-10T17:36:54.857Z","version":"WzYyMCwxXQ=="} -{"exportedCount":14,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json deleted file mode 100644 index 10d21c7335..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json +++ /dev/null @@ -1,1156 +0,0 @@ -[ - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://f163fdbf0d4016e6d6fcbc5549cffebf8ca4c034e281f5aaf49dd6caa2afc867", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0dbbb0c3-3a16-40b2-91b4-5e1a7714293d", - "name": "kube-proxy-8nmp6" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 69905933, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://2c970452b041f7476f00b2e36029837bcaebbc1bb80575769a755b7e4939829e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "d7953b0a-02d8-4941-b66a-41180fcdbc2e", - "name": "aws-node-4nfll" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 69953818, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T08:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T05:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://37d8b94ab34b11832cda800ee724a16cf4740e210b003ae6215f961e599b40ac", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "e2e35438-0e8c-4632-80d3-9b20ac5abad8", - "name": "aws-node-n46pw" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 70092857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://6f345a8bab999eb86c4360be306bdefc785780ec4e29ebc72e84c41b1b5ef6e2", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "28ce8b99-3c7b-44a8-a163-feff47fbf600", - "name": "kube-proxy-wnvrv" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 70146837, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T06:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T11:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T04:09:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:53:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T03:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7d585cda8ad6ec372b49a2cb4d956e992dbc72a37e12b45760d8caa699da88b8", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70384450, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-attacher:v4.0.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-attacher", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://25982c97d991e241cc7647ecea3f58c8e957096e9f389f921d9bc9cc87171006", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70435988, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://342f5713722df91ae371e61942b46267a21d7c8439074976236292f2adc8752f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70443736, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "k8s.gcr.io/metrics-server/metrics-server:v0.6.2", - "memory": { - "request": { - "bytes": 209715200 - } - }, - "name": "metrics-server", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://0c486c46da5d9c45578a381b3ce629f44b7eae3bc96247a591fbee6fc18a3e6f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "621887e4-8c1e-4b61-a34e-56067e61f766", - "name": "metrics-server-679799879f-9vkg2" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "679799879f", - "k8s-app": "metrics-server" - } - }, - "event": { - "duration": 70471081, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T08:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json deleted file mode 100644 index f5f1a02d5d..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json +++ /dev/null @@ -1,1120 +0,0 @@ -[ - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-accountingservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "accountingservice", - "id": "containerd://44278f999d015af7ab0f0a65394dec0f78a8b12b58d3d7712b02d99212460473", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-accountingservice-59668979bc-xprrw" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69908658, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-emailservice", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 104857600 - } - }, - "name": "emailservice", - "id": "containerd://8389347773f5b54e54c505f79e7b4ebb82ab01b10e5404b1af483f54db2e5682", - "status": { - "phase": "running", - "ready": true, - "restarts": 129 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-emailservice-7654879b-rd6nn" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69912518, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "usage": { - "bytes": 20971520 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-recommendationservice", - "memory": { - "usage": { - "bytes": 524288000 - }, - "request": { - "bytes": 524288000 - }, - "limit": { - "bytes": 524288000 - } - }, - "name": "recommendationservice", - "id": "containerd://c233d6baed9ffcd7cc3b2228f83d5d9cbfa61dca94cf728e5b955957e72d5bce", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-recommendationservice-748d97d5b7-lf2xr" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69983602, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "usage": { - "bytes": 131072000 - }, - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - }, - "usage": { - "bytes": 128801888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-quoteservice", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 41943040 - } - }, - "name": "quoteservice", - "id": "containerd://d1ea28ba00206c8361686429fd0810f265872f324a2e8ada12cc0df87dc12901", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-quoteservice-9467f9c67-x5c5m" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70030857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-loadgenerator", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "loadgenerator", - "id": "containerd://16655ff17d25d160d96515765a5a89bf31cabcf1bc6807046510f6ad044e8548", - "status": { - "phase": "running", - "ready": true, - "restarts": 18 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-loadgenerator-7b96dddb88-jnkc6" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70073822, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "usage": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-productcatalogservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "productcatalogservice", - "id": "containerd://123b9452ee5ba869fd4c68a7c38e692333f8755903da2891006ceffe07ce664c", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-productcatalogservice-7f8666fc8-kbp44" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70202138, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T19:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "usage": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-paymentservice", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "paymentservice", - "id": "containerd://a7c006d4b2a28f7b225f0520efb1798296c93f602d9e213a5d80ef4d30529382", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-paymentservice-7dcd5bcbb5-9vbbt" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70257222, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-21T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-frauddetectionservice", - "memory": { - "request": { - "bytes": 209715200 - }, - "usage": { - "bytes": 209715200 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "frauddetectionservice", - "id": "containerd://33c247d008adca74bb71fd12191e503a9564ffc2a0825ae7dc00e3cfd7ca6d3f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-frauddetectionservice-f6dbdfd8c-t4kcm" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70300352, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:22:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "usage": { - "bytes": 41943040 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json deleted file mode 100644 index 84ea683271..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json +++ /dev/null @@ -1,562 +0,0 @@ -[ - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44305569, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-checkoutservice" - } - }, - "event": { - "duration": 44318865, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "metrics-server" - } - }, - "event": { - "duration": 44321565, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "logstash", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "logstash-deployment" - } - }, - "event": { - "duration": 44366876, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "ebs-csi-controller" - } - }, - "event": { - "duration": 44369244, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-loadgenerator" - } - }, - "event": { - "duration": 44371283, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "aws-load-balancer-controller" - } - }, - "event": { - "duration": 44391882, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-emailservice" - } - }, - "event": { - "duration": 44395238, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-accountingservice" - } - }, - "event": { - "duration": 44397268, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-ffspostgres" - } - }, - "event": { - "duration": 44417515, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "langchain" - } - }, - "event": { - "duration": 44419548, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44421849, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-featureflagservice" - } - }, - "event": { - "duration": 44443165, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger" - } - }, - "event": { - "duration": 44445153, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "coredns" - } - }, - "event": { - "duration": 44446989, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-redis" - } - }, - "event": { - "duration": 44470444, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "data-prepper" - } - }, - "event": { - "duration": 44472410, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-frontend" - } - }, - "event": { - "duration": 44474346, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-cartservice" - } - }, - "event": { - "duration": 44493728, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-currencyservice" - } - }, - "event": { - "duration": 44495707, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json deleted file mode 100644 index 12f5a80d90..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json +++ /dev/null @@ -1,2002 +0,0 @@ -[ - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32121077, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32130296, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32285801, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39578002, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39596213, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39604819, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34395346, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34403890, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34408303, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37378781, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37395055, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37399957, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41680053, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41697038, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41701949, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38799399, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38805143, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38807723, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41176924, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41185746, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample.json deleted file mode 100644 index 973150e14f..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample.json +++ /dev/null @@ -1,4835 +0,0 @@ -[ - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32121077, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32130296, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32285801, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39578002, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39596213, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39604819, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34395346, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34403890, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34408303, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37378781, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37395055, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37399957, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41680053, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41697038, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41701949, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38799399, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38805143, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38807723, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41176924, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41185746, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44305569, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-checkoutservice" - } - }, - "event": { - "duration": 44318865, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "metrics-server" - } - }, - "event": { - "duration": 44321565, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "logstash", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "logstash-deployment" - } - }, - "event": { - "duration": 44366876, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "ebs-csi-controller" - } - }, - "event": { - "duration": 44369244, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-loadgenerator" - } - }, - "event": { - "duration": 44371283, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "aws-load-balancer-controller" - } - }, - "event": { - "duration": 44391882, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-emailservice" - } - }, - "event": { - "duration": 44395238, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-accountingservice" - } - }, - "event": { - "duration": 44397268, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-ffspostgres" - } - }, - "event": { - "duration": 44417515, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "langchain" - } - }, - "event": { - "duration": 44419548, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44421849, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-featureflagservice" - } - }, - "event": { - "duration": 44443165, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger" - } - }, - "event": { - "duration": 44445153, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "coredns" - } - }, - "event": { - "duration": 44446989, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-redis" - } - }, - "event": { - "duration": 44470444, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "data-prepper" - } - }, - "event": { - "duration": 44472410, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-frontend" - } - }, - "event": { - "duration": 44474346, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-cartservice" - } - }, - "event": { - "duration": 44493728, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-currencyservice" - } - }, - "event": { - "duration": 44495707, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-accountingservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "accountingservice", - "id": "containerd://44278f999d015af7ab0f0a65394dec0f78a8b12b58d3d7712b02d99212460473", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-accountingservice-59668979bc-xprrw" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69908658, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-emailservice", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 104857600 - } - }, - "name": "emailservice", - "id": "containerd://8389347773f5b54e54c505f79e7b4ebb82ab01b10e5404b1af483f54db2e5682", - "status": { - "phase": "running", - "ready": true, - "restarts": 129 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-emailservice-7654879b-rd6nn" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69912518, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "usage": { - "bytes": 20971520 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-recommendationservice", - "memory": { - "usage": { - "bytes": 524288000 - }, - "request": { - "bytes": 524288000 - }, - "limit": { - "bytes": 524288000 - } - }, - "name": "recommendationservice", - "id": "containerd://c233d6baed9ffcd7cc3b2228f83d5d9cbfa61dca94cf728e5b955957e72d5bce", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-recommendationservice-748d97d5b7-lf2xr" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69983602, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "usage": { - "bytes": 131072000 - }, - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - }, - "usage": { - "bytes": 128801888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-quoteservice", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 41943040 - } - }, - "name": "quoteservice", - "id": "containerd://d1ea28ba00206c8361686429fd0810f265872f324a2e8ada12cc0df87dc12901", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-quoteservice-9467f9c67-x5c5m" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70030857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-loadgenerator", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "loadgenerator", - "id": "containerd://16655ff17d25d160d96515765a5a89bf31cabcf1bc6807046510f6ad044e8548", - "status": { - "phase": "running", - "ready": true, - "restarts": 18 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-loadgenerator-7b96dddb88-jnkc6" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70073822, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "usage": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-productcatalogservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "productcatalogservice", - "id": "containerd://123b9452ee5ba869fd4c68a7c38e692333f8755903da2891006ceffe07ce664c", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-productcatalogservice-7f8666fc8-kbp44" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70202138, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T19:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "usage": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-paymentservice", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "paymentservice", - "id": "containerd://a7c006d4b2a28f7b225f0520efb1798296c93f602d9e213a5d80ef4d30529382", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-paymentservice-7dcd5bcbb5-9vbbt" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70257222, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-21T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-frauddetectionservice", - "memory": { - "request": { - "bytes": 209715200 - }, - "usage": { - "bytes": 209715200 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "frauddetectionservice", - "id": "containerd://33c247d008adca74bb71fd12191e503a9564ffc2a0825ae7dc00e3cfd7ca6d3f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-frauddetectionservice-f6dbdfd8c-t4kcm" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70300352, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:22:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "usage": { - "bytes": 41943040 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://f163fdbf0d4016e6d6fcbc5549cffebf8ca4c034e281f5aaf49dd6caa2afc867", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0dbbb0c3-3a16-40b2-91b4-5e1a7714293d", - "name": "kube-proxy-8nmp6" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 69905933, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://2c970452b041f7476f00b2e36029837bcaebbc1bb80575769a755b7e4939829e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "d7953b0a-02d8-4941-b66a-41180fcdbc2e", - "name": "aws-node-4nfll" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 69953818, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T08:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T05:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://37d8b94ab34b11832cda800ee724a16cf4740e210b003ae6215f961e599b40ac", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "e2e35438-0e8c-4632-80d3-9b20ac5abad8", - "name": "aws-node-n46pw" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 70092857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://6f345a8bab999eb86c4360be306bdefc785780ec4e29ebc72e84c41b1b5ef6e2", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "28ce8b99-3c7b-44a8-a163-feff47fbf600", - "name": "kube-proxy-wnvrv" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 70146837, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T06:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T11:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T04:09:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:53:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T03:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7d585cda8ad6ec372b49a2cb4d956e992dbc72a37e12b45760d8caa699da88b8", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70384450, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-attacher:v4.0.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-attacher", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://25982c97d991e241cc7647ecea3f58c8e957096e9f389f921d9bc9cc87171006", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70435988, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://342f5713722df91ae371e61942b46267a21d7c8439074976236292f2adc8752f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70443736, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "k8s.gcr.io/metrics-server/metrics-server:v0.6.2", - "memory": { - "request": { - "bytes": 209715200 - } - }, - "name": "metrics-server", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://0c486c46da5d9c45578a381b3ce629f44b7eae3bc96247a591fbee6fc18a3e6f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "621887e4-8c1e-4b61-a34e-56067e61f766", - "name": "metrics-server-679799879f-9vkg2" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "679799879f", - "k8s-app": "metrics-server" - } - }, - "event": { - "duration": 70471081, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T08:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] - diff --git a/server/adaptors/integrations/__data__/repository/k8s/info/README.md b/server/adaptors/integrations/__data__/repository/k8s/info/README.md deleted file mode 100644 index 94e9aaaae6..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/info/README.md +++ /dev/null @@ -1,90 +0,0 @@ -# Kubernetes Integration - -## What is Kubernetes? - -Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications. It provides a robust and scalable infrastructure for running applications in a cloud-native environment. - -See additional details [here](https://kubernetes.io/). - -## What is Kubernetes Integration? - -An integration is a collection of pre-configured assets that are bundled together to streamline monitoring and analysis. - -Kubernetes integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - - - -With the Kubernetes integration, you can gain valuable insights into the health and performance of your containerized applications. The pre-configured dashboards and visualizations help you monitor key metrics, track resource utilization, and identify potential issues within your Kubernetes clusters. This integration empowers you to efficiently manage your containerized workloads, scale applications as needed, and ensure the reliability and availability of your Kubernetes environment. - -### Collecting K8s - -The next OpenTelemetry [page](https://opentelemetry.io/docs/kubernetes/collector/components/) describes the K8s attributes and other components - -#### Kubernetes Attributes Processor - -The Kubernetes Attributes Processor automatically discovers Kubernetes pods, extracts their metadata, and adds the extracted metadata to spans, metrics, and logs as resource attributes. - -The following attributes are added by default: - -**Cluster** - -- `k8s.cluster.name` -- `k8s.cluster.uid` - -**Namespace** - -- `k8s.namespace.name` - -**Pod** - -- `k8s.pod.name` -- `k8s.pod.uid` -- `k8s.pod.start_time` -- `k8s.deployment.name` - -**Node** - -- `k8s.node.name` -- `k8s.node.uid` - -**Container** - -- `k8s.container.name` -- `k8s.container.restart_count` - -**ReplicaSet** - -- `k8s.replicaset.name` -- `k8s.replicaset.uid` - -**Deployment** - -- `k8s.deployment.name` -- `k8s.deployment.uid` - -**StatefulSet** - -- `k8s.statefulset.name` -- `k8s.statefulset.uid` - -**DaemonSet** - -- `k8s.daemon.name` -- `k8s.daemon.uid` - -**DaemonSet** - -- `k8s.job.name` -- `k8s.job.uid` - -> All these fields are represented in the k8s-1.0.0.mapping schema and are aliased with the existing ECS based fields - -### Important Components for Kubernetes - -- [Kubeletstats Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubeletstats-receiver): pulls pod metrics from the API server on a kubelet. -- [Filelog Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#filelog-receiver): collects Kubernetes logs and application logs written to stdout/stderr. -- [Kubernetes Cluster Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubernetes-cluster-receiver): collects cluster-level metrics and entity events. -- [Kubernetes Objects Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubernetes-objects-receiver): collects objects, such as events, from the Kubernetes API server. -- [Host Metrics Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#host-metrics-receiver): scrapes host metrics from Kubernetes nodes. diff --git a/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md b/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md deleted file mode 100644 index 198e8a9558..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md +++ /dev/null @@ -1,42 +0,0 @@ -# Setting Fluent Bit Ingestion Deployment in Kubernetes - -Fluent Bit is an open-source and multi-platform Log Processor and Forwarder. It allows you to unify the data collection and logging of your system. This particular YAML configuration deploys Fluent Bit in a Kubernetes cluster for monitoring purposes. - -## Components - -The YAML consists of four primary components: - -**ClusterRole:** For defining permissions. -**ClusterRoleBinding:** To bind the permissions to a specific service account. -**ConfigMap:** To store the configuration details for Fluent Bit. -**DaemonSet:** For deploying Fluent Bit on all nodes in the cluster. - -1. **ClusterRole** - This part of the YAML file defines a ClusterRole named fluent-bit-read. It sets the permissions for accessing various resources in the cluster: -2. **ClusterRoleBinding** - This binds the above ClusterRole to a ServiceAccount named fluent-bit in the logging namespace. It ensures the permissions defined in the ClusterRole are applied to this service account. -3. **ConfigMap** - The fluent-bit-config ConfigMap stores the Fluent Bit configuration, including service, input, filter, output, and parser details. Configuration related to different aspects of log collection and forwarding is included in this section. -4. **DaemonSet** - Fluent Bit is deployed as a DaemonSet, which means a Fluent Bit container will run on every node in the cluster. This ensures that logs from all nodes are collected and processed. - -This Fluent Bit deployment in Kubernetes is instrumental in gathering, processing, and forwarding logs from different parts of the cluster. -It can be integrated with various log analytics tools and used for monitoring the behavior of the cluster, facilitating prompt insights and responses to system events. Make sure to tailor the configuration to match your specific requirements and infrastructure. - -### References - -- [K8s Filter Plugin](https://docs.fluentbit.io/manual/pipeline/filters/kubernetes) - -**Kubernetes filter performs the following operations:** - -Analyzes the data and extracts the metadata such as `Pod name`, `namespace`, `container name`, and `container ID` . -Queries Kubernetes API server to get extra metadata for the given Pod including the `Pod ID`, `labels`, `annotations`. - -This metadata is then appended to each record (log message). -This data is cached locally in memory and is appended to each log record. - -The following parameters represent a minimum configuration for this filter used in the ConfigMap above: - -- `Name` — the name of the filter plugin. -- `Kube_URL` — API Server end-point. E.g https://kubernetes.default.svc.cluster.local/ -- `Match` — a tag to match filtering against. diff --git a/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml b/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml deleted file mode 100644 index 687cf6da9e..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml +++ /dev/null @@ -1,174 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: fluent-bit-read -rules: -- apiGroups: [""] - resources: - - namespaces - - pods - - pods/logs - - nodes - - nodes/proxy - verbs: ["get", "list", "watch"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: fluent-bit-read -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: fluent-bit-read -subjects: -- kind: ServiceAccount - name: fluent-bit - namespace: logging ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: fluent-bit-config - namespace: logging - labels: - k8s-app: fluent-bit -data: - # Configuration files: server, input, filters and output - # ====================================================== - fluent-bit.conf: | - [SERVICE] - Flush 5 - Log_Level info - Daemon off - Parsers_File parsers.conf - HTTP_Server On - HTTP_Listen 0.0.0.0 - HTTP_Port 2020 - storage.path /var/log/flb-storage/ - storage.sync normal - storage.checksum off - storage.backlog.mem_limit 100M - - @INCLUDE input-kubernetes.conf - @INCLUDE filter-kubernetes.conf - @INCLUDE output-opensearch.conf - - input-kubernetes.conf: | - [INPUT] - Name tail - Tag kube.* - Path /var/log/containers/*.log - Exclude_Path /var/log/containers/*_fluent-bit-*.log,/var/log/containers/*_kube-system_*.log - Parser docker - DB /var/log/flb_kube.db - Mem_Buf_Limit 100MB - Skip_Long_Lines On - Refresh_Interval 10 - - filter-kubernetes.conf: | - [FILTER] - Name kubernetes - Match kube.* - Kube_URL https://kubernetes.default.svc:443 - Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token - Kube_Tag_Prefix kube.var.log.containers. - Merge_Log On - Merge_Log_Key log_processed - K8S-Logging.Parser On - K8S-Logging.Exclude Off - - output-opensearch.conf: | - [OUTPUT] - Name opensearch - Match * - Host { endpoint } - Port 443 - TLS On - Replace_Dots On - AWS_Auth On - AWS_Region { region } - Retry_Limit 6 - Logstash_Format On - Logstash_Prefix fluent-bit - Logstash_DateFormat %U.%Y - - parsers.conf: | - [PARSER] - Name json - Format json - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z - - [PARSER] - Name docker - Format json - Time_Key time - Time_Format %Y-%m-%dT%H:%M:%S.%L - Time_Keep On - # Command | Decoder | Field | Optional Action - # =============|==================|================= - Decode_Field_As escaped log try_next - Decode_Field_As json log - - [PARSER] - # http://rubular.com/r/tjUt3Awgg4 - Name cri - Format regex - Regex ^(?[^ ]+) (?stdout|stderr) (?[^ ]*) (?.*)$ - Time_Key time - Time_Format %Y-%m-%dT%H:%M:%S.%L%z - - --- -apiVersion: apps/v1 -kind: DaemonSet -metadata: - name: fluent-bit - namespace: logging - labels: - k8s-app: fluent-bit-logging - version: v1 - kubernetes.io/cluster-service: "true" - -spec: - selector: - matchLabels: - k8s-app: fluent-bit-logging - template: - metadata: - labels: - k8s-app: fluent-bit-logging - version: v1 - kubernetes.io/cluster-service: "true" - annotations: - prometheus.io/scrape: "true" - prometheus.io/port: "2020" - prometheus.io/path: /api/v1/metrics/prometheus - spec: - containers: - - name: fluent-bit - image: amazon/aws-for-fluent-bit:latest - imagePullPolicy: Always - ports: - - containerPort: 2020 - volumeMounts: - - name: varlog - mountPath: /var/log - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: fluent-bit-config - mountPath: /fluent-bit/etc/ - terminationGracePeriodSeconds: 10 - volumes: - - name: varlog - hostPath: - path: /var/log - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: fluent-bit-config - configMap: - name: fluent-bit-config - serviceAccountName: fluent-bit diff --git a/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json b/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json deleted file mode 100644 index d359ffe8ee..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "k8s", - "version": "1.0.0", - "displayName": "Kubernetes Dashboard", - "description": "Kubernetes web logs collector", - "license": "Apache-2.0", - "type": "logs-k8s", - "labels": ["Observability", "Logs", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/k8s/info", - "statics": { - "logo": { - "annotation": "Kubernetes Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "Kubernetes Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "k8s", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "container", - "version": "1.0.0" - }, - { - "name": "logs-k8s", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "k8s", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json deleted file mode 100644 index e8fd9ec763..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json +++ /dev/null @@ -1,68 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "container", - "labels": ["container"] - }, - "properties": { - "container": { - "properties": { - "image": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - }, - "tag": { - "type": "keyword" - }, - "hash": { - "type": "keyword" - } - } - }, - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "labels": { - "type": "keyword" - }, - "runtime": { - "type": "keyword" - }, - "memory.usage": { - "type": "float" - }, - "network": { - "type": "object", - "properties": { - "ingress.bytes": { - "type": "long" - }, - "egress.bytes": { - "type": "long" - } - } - }, - "cpu.usage": { - "type": "float" - }, - "disk.read.bytes": { - "type": "long" - }, - "disk.write.bytes": { - "type": "long" - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json deleted file mode 100644 index 7d88aab2f2..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json +++ /dev/null @@ -1,2286 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "k8s", - "labels": ["k8s"] - }, - "properties": { - "kubernetes": { - "type": "object", - "properties": { - "annotations": { - "type": "object" - }, - "apiserver": { - "properties": { - "request": { - "properties": { - "client": { - "type": "keyword", - "ignore_above": 256 - }, - "count": { - "type": "long" - }, - "latency": { - "properties": { - "bucket": { - "properties": { - "*": { - "type": "object" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - }, - "resource": { - "type": "keyword", - "ignore_above": 256 - }, - "scope": { - "type": "keyword", - "ignore_above": 256 - }, - "subresource": { - "type": "keyword", - "ignore_above": 256 - }, - "verb": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "container": { - "properties": { - "cpu": { - "properties": { - "limit": { - "properties": { - "cores": { - "type": "float" - }, - "nanocores": { - "type": "long" - } - } - }, - "request": { - "properties": { - "cores": { - "type": "float" - }, - "nanocores": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "nanocores": { - "type": "long" - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - } - } - }, - "id": { - "type": "keyword", - "ignore_above": 256 - }, - "image": { - "type": "keyword", - "ignore_above": 256 - }, - "logs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "limit": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "request": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "rootfs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "phase": { - "type": "keyword", - "ignore_above": 256 - }, - "ready": { - "type": "boolean" - }, - "reason": { - "type": "keyword", - "ignore_above": 256 - }, - "restarts": { - "type": "long" - } - } - } - } - }, - "controllermanager": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "leader": { - "properties": { - "is_master": { - "type": "boolean" - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "node": { - "properties": { - "collector": { - "properties": { - "count": { - "type": "long" - }, - "eviction": { - "properties": { - "count": { - "type": "long" - } - } - }, - "health": { - "properties": { - "pct": { - "type": "long" - } - } - }, - "unhealthy": { - "properties": { - "count": { - "type": "long" - } - } - } - } - } - } - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "workqueue": { - "properties": { - "adds": { - "properties": { - "count": { - "type": "long" - } - } - }, - "depth": { - "properties": { - "count": { - "type": "long" - } - } - }, - "longestrunning": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "retries": { - "properties": { - "count": { - "type": "long" - } - } - }, - "unfinished": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "zone": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "deployment": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "paused": { - "type": "boolean" - }, - "replicas": { - "properties": { - "available": { - "type": "long" - }, - "desired": { - "type": "long" - }, - "unavailable": { - "type": "long" - }, - "updated": { - "type": "long" - } - } - } - } - }, - "event": { - "properties": { - "count": { - "type": "long" - }, - "involved_object": { - "properties": { - "api_version": { - "type": "keyword", - "ignore_above": 256 - }, - "kind": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "resource_version": { - "type": "keyword", - "ignore_above": 256 - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "message": { - "type": "keyword", - "ignore_above": 256, - "copy_to": ["message"] - }, - "metadata": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "namespace": { - "type": "keyword", - "ignore_above": 256 - }, - "resource_version": { - "type": "keyword", - "ignore_above": 256 - }, - "self_link": { - "type": "keyword", - "ignore_above": 256 - }, - "timestamp": { - "properties": { - "created": { - "type": "date" - } - } - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "reason": { - "type": "keyword", - "ignore_above": 256 - }, - "timestamp": { - "properties": { - "first_occurrence": { - "type": "date" - }, - "last_occurrence": { - "type": "date" - } - } - }, - "type": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "labels": { - "properties": { - "app": { - "properties": { - "kubernetes": { - "properties": { - "io/component": { - "type": "keyword", - "ignore_above": 256 - }, - "io/instance": { - "type": "keyword", - "ignore_above": 256 - }, - "io/managed-by": { - "type": "keyword", - "ignore_above": 256 - }, - "io/name": { - "type": "keyword", - "ignore_above": 256 - }, - "io/version": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "value": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "controller-revision-hash": { - "type": "keyword", - "ignore_above": 256 - }, - "eks": { - "properties": { - "amazonaws": { - "properties": { - "com/component": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "helm": { - "properties": { - "sh/chart": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "io": { - "properties": { - "kompose": { - "properties": { - "service": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "k8s-app": { - "type": "keyword", - "ignore_above": 256 - }, - "pod-template-generation": { - "type": "keyword", - "ignore_above": 256 - }, - "pod-template-hash": { - "type": "keyword", - "ignore_above": 256 - }, - "statefulset": { - "properties": { - "kubernetes": { - "properties": { - "io/pod-name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "namespace": { - "type": "keyword", - "ignore_above": 256 - }, - "node": { - "properties": { - "_module": { - "properties": { - "labels": { - "properties": { - "beta": { - "properties": { - "kubernetes": { - "properties": { - "io/arch": { - "type": "keyword", - "ignore_above": 256 - }, - "io/instance-type": { - "type": "keyword", - "ignore_above": 256 - }, - "io/os": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "eks": { - "properties": { - "amazonaws": { - "properties": { - "com/capacityType": { - "type": "keyword", - "ignore_above": 256 - }, - "com/nodegroup": { - "type": "keyword", - "ignore_above": 256 - }, - "com/nodegroup-image": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "failure-domain": { - "properties": { - "beta": { - "properties": { - "kubernetes": { - "properties": { - "io/region": { - "type": "keyword", - "ignore_above": 256 - }, - "io/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "k8s": { - "properties": { - "io/cloud-provider-aws": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "kubernetes": { - "properties": { - "io/arch": { - "type": "keyword", - "ignore_above": 256 - }, - "io/hostname": { - "type": "keyword", - "ignore_above": 256 - }, - "io/os": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "node": { - "properties": { - "kubernetes": { - "properties": { - "io/instance-type": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "topology": { - "properties": { - "ebs": { - "properties": { - "csi": { - "properties": { - "aws": { - "properties": { - "com/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "kubernetes": { - "properties": { - "io/region": { - "type": "keyword", - "ignore_above": 256 - }, - "io/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - }, - "cpu": { - "properties": { - "allocatable": { - "properties": { - "cores": { - "type": "float" - } - } - }, - "capacity": { - "properties": { - "cores": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "nanocores": { - "type": "long" - } - } - } - } - }, - "fs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "allocatable": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "network": { - "properties": { - "rx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - }, - "tx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - } - } - }, - "pod": { - "properties": { - "allocatable": { - "properties": { - "total": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "total": { - "type": "long" - } - } - } - } - }, - "runtime": { - "properties": { - "imagefs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "ready": { - "type": "keyword", - "ignore_above": 256 - }, - "unschedulable": { - "type": "boolean" - } - } - } - } - }, - "pod": { - "properties": { - "cpu": { - "properties": { - "usage": { - "properties": { - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "nanocores": { - "type": "long" - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - } - } - }, - "host_ip": { - "type": "ip" - }, - "ip": { - "type": "ip" - }, - "memory": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "major_page_faults": { - "type": "long" - }, - "page_faults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - }, - "working_set": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "network": { - "properties": { - "rx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - }, - "tx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "phase": { - "type": "keyword", - "ignore_above": 256 - }, - "ready": { - "type": "keyword", - "ignore_above": 256 - }, - "scheduled": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "proxy": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "sync": { - "properties": { - "networkprogramming": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "0": { - "type": "long" - }, - "250000": { - "type": "long" - }, - "500000": { - "type": "long" - }, - "1000000": { - "type": "long" - }, - "2000000": { - "type": "long" - }, - "3000000": { - "type": "long" - }, - "4000000": { - "type": "long" - }, - "5000000": { - "type": "long" - }, - "6000000": { - "type": "long" - }, - "7000000": { - "type": "long" - }, - "8000000": { - "type": "long" - }, - "9000000": { - "type": "long" - }, - "10000000": { - "type": "long" - }, - "11000000": { - "type": "long" - }, - "12000000": { - "type": "long" - }, - "13000000": { - "type": "long" - }, - "14000000": { - "type": "long" - }, - "15000000": { - "type": "long" - }, - "16000000": { - "type": "long" - }, - "17000000": { - "type": "long" - }, - "18000000": { - "type": "long" - }, - "19000000": { - "type": "long" - }, - "20000000": { - "type": "long" - }, - "21000000": { - "type": "long" - }, - "22000000": { - "type": "long" - }, - "23000000": { - "type": "long" - }, - "24000000": { - "type": "long" - }, - "25000000": { - "type": "long" - }, - "26000000": { - "type": "long" - }, - "27000000": { - "type": "long" - }, - "28000000": { - "type": "long" - }, - "29000000": { - "type": "long" - }, - "30000000": { - "type": "long" - }, - "31000000": { - "type": "long" - }, - "32000000": { - "type": "long" - }, - "33000000": { - "type": "long" - }, - "34000000": { - "type": "long" - }, - "35000000": { - "type": "long" - }, - "36000000": { - "type": "long" - }, - "37000000": { - "type": "long" - }, - "38000000": { - "type": "long" - }, - "39000000": { - "type": "long" - }, - "40000000": { - "type": "long" - }, - "41000000": { - "type": "long" - }, - "42000000": { - "type": "long" - }, - "43000000": { - "type": "long" - }, - "44000000": { - "type": "long" - }, - "45000000": { - "type": "long" - }, - "46000000": { - "type": "long" - }, - "47000000": { - "type": "long" - }, - "48000000": { - "type": "long" - }, - "49000000": { - "type": "long" - }, - "50000000": { - "type": "long" - }, - "51000000": { - "type": "long" - }, - "52000000": { - "type": "long" - }, - "53000000": { - "type": "long" - }, - "54000000": { - "type": "long" - }, - "55000000": { - "type": "long" - }, - "56000000": { - "type": "long" - }, - "57000000": { - "type": "long" - }, - "58000000": { - "type": "long" - }, - "59000000": { - "type": "long" - }, - "60000000": { - "type": "long" - }, - "65000000": { - "type": "long" - }, - "70000000": { - "type": "long" - }, - "75000000": { - "type": "long" - }, - "80000000": { - "type": "long" - }, - "85000000": { - "type": "long" - }, - "90000000": { - "type": "long" - }, - "95000000": { - "type": "long" - }, - "100000000": { - "type": "long" - }, - "105000000": { - "type": "long" - }, - "110000000": { - "type": "long" - }, - "115000000": { - "type": "long" - }, - "120000000": { - "type": "long" - }, - "150000000": { - "type": "long" - }, - "180000000": { - "type": "long" - }, - "210000000": { - "type": "long" - }, - "240000000": { - "type": "long" - }, - "270000000": { - "type": "long" - }, - "300000000": { - "type": "long" - }, - "*": { - "type": "object" - }, - "+Inf": { - "type": "long" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "rules": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "1000": { - "type": "long" - }, - "2000": { - "type": "long" - }, - "4000": { - "type": "long" - }, - "8000": { - "type": "long" - }, - "16000": { - "type": "long" - }, - "32000": { - "type": "long" - }, - "64000": { - "type": "long" - }, - "128000": { - "type": "long" - }, - "256000": { - "type": "long" - }, - "512000": { - "type": "long" - }, - "1024000": { - "type": "long" - }, - "2048000": { - "type": "long" - }, - "4096000": { - "type": "long" - }, - "8192000": { - "type": "long" - }, - "16384000": { - "type": "long" - }, - "*": { - "type": "object" - }, - "+Inf": { - "type": "long" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - } - } - }, - "replicaset": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "replicas": { - "properties": { - "available": { - "type": "long" - }, - "desired": { - "type": "long" - }, - "labeled": { - "type": "long" - }, - "observed": { - "type": "long" - }, - "ready": { - "type": "long" - } - } - } - } - }, - "scheduler": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "leader": { - "properties": { - "is_master": { - "type": "boolean" - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "operation": { - "type": "keyword", - "ignore_above": 256 - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "result": { - "type": "keyword", - "ignore_above": 256 - }, - "scheduling": { - "properties": { - "duration": { - "properties": { - "seconds": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "e2e": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "*": { - "type": "object" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "pod": { - "properties": { - "attempts": { - "properties": { - "count": { - "type": "long" - } - } - }, - "preemption": { - "properties": { - "victims": { - "properties": { - "count": { - "type": "long" - } - } - } - } - } - } - } - } - } - } - }, - "statefulset": { - "properties": { - "created": { - "type": "long" - }, - "generation": { - "properties": { - "desired": { - "type": "long" - }, - "observed": { - "type": "long" - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "replicas": { - "properties": { - "desired": { - "type": "long" - }, - "observed": { - "type": "long" - } - } - } - } - }, - "system": { - "properties": { - "container": { - "type": "keyword", - "ignore_above": 256 - }, - "cpu": { - "properties": { - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "nanocores": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - } - } - }, - "volume": { - "properties": { - "fs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "k8s": { - "properties": { - "namespace": { - "properties": { - "name": { - "type": "alias", - "path": "kubernetes.namespace" - } - } - }, - "cluster": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "node": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.node.name" - } - } - }, - "pod": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.pod.name" - } - } - }, - "container": { - "properties": { - "restart_count": { - "type": "long" - }, - "name": { - "type": "alias", - "path": "kubernetes.container.name" - } - } - }, - "replicaset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.replicaset.name" - } - } - }, - "deployment": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.deployment.name" - } - } - }, - "statefulset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.statefulset.name" - } - } - }, - "daemonset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "job": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json deleted file mode 100644 index 6be0d25228..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json +++ /dev/null @@ -1,245 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-k8s-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-k8s": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "duration": { - "type": "long" - }, - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["k8s", "container", "cloud"], - "version": 1, - "_meta": { - "description": "Simple Schema For Observability", - "catalog": "observability", - "type": "logs", - "labels": ["log", "k8s", "cloud", "container"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png b/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png deleted file mode 100644 index 07995f7eae..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/k8s/static/logo.png b/server/adaptors/integrations/__data__/repository/k8s/static/logo.png deleted file mode 100644 index 4c6716706d..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/k8s/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json deleted file mode 100644 index 5fec510cb8..0000000000 --- a/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/create_mv-1.0.0.sql b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_mv-1.0.0.sql similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/create_mv-1.0.0.sql rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_mv-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/create_table-1.0.0.sql b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_table-1.0.0.sql similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/create_table-1.0.0.sql rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_table-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/nginx-1.0.0.ndjson b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/nginx-1.0.0.ndjson similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/nginx-1.0.0.ndjson rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/nginx-1.0.0.ndjson diff --git a/server/adaptors/integrations/__data__/repository/nginx/data/sample.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/data/sample.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/data/sample.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/data/sample.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/info/README.md b/server/adaptors/integrations/__test__/__data__/repository/nginx/info/README.md similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/info/README.md rename to server/adaptors/integrations/__test__/__data__/repository/nginx/info/README.md diff --git a/server/adaptors/integrations/__data__/repository/nginx/nginx-1.0.0.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/nginx-1.0.0.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/nginx-1.0.0.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/nginx-1.0.0.json diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/apache/schemas/communication-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/http-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/apache/schemas/http-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/http-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/dashboard1.png b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard1.png similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/dashboard1.png rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard1.png diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/dashboard2.png b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard2.png similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/dashboard2.png rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard2.png diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/logo.svg b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/logo.svg similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/logo.svg rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/logo.svg diff --git a/server/adaptors/integrations/__test__/json_repository.test.ts b/server/adaptors/integrations/__test__/json_repository.test.ts index 0e777b3eca..1d3296f56f 100644 --- a/server/adaptors/integrations/__test__/json_repository.test.ts +++ b/server/adaptors/integrations/__test__/json_repository.test.ts @@ -15,7 +15,7 @@ import { JsonCatalogDataAdaptor } from '../repository/json_data_adaptor'; import { deepCheck, foldResults } from '../repository/utils'; const fetchSerializedIntegrations = async (): Promise> => { - const directory = path.join(__dirname, '../__data__/repository'); + const directory = path.join(__dirname, '../__test__/__data__/repository'); const folders = await fs.readdir(directory); const readers = await Promise.all( folders.map(async (folder) => { @@ -42,10 +42,9 @@ describe('The Local Serialized Catalog', () => { it('Should pass deep validation for all serialized integrations', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); for (const integ of await repository.getIntegrationList()) { const validationResult = await deepCheck(integ); @@ -55,10 +54,9 @@ describe('The Local Serialized Catalog', () => { it('Should correctly retrieve a logo', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); const integration = (await repository.getIntegration('nginx')) as IntegrationReader; const logoStatic = await integration.getStatic('logo.svg'); @@ -68,10 +66,9 @@ describe('The Local Serialized Catalog', () => { it('Should correctly retrieve a gallery image', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); const integration = (await repository.getIntegration('nginx')) as IntegrationReader; const logoStatic = await integration.getStatic('dashboard1.png'); diff --git a/server/adaptors/integrations/__test__/local_fs_repository.test.ts b/server/adaptors/integrations/__test__/local_fs_repository.test.ts index dcacf02bbb..be0afeb16e 100644 --- a/server/adaptors/integrations/__test__/local_fs_repository.test.ts +++ b/server/adaptors/integrations/__test__/local_fs_repository.test.ts @@ -12,10 +12,15 @@ import { IntegrationReader } from '../repository/integration_reader'; import path from 'path'; import * as fs from 'fs/promises'; import { deepCheck } from '../repository/utils'; +import { FileSystemDataAdaptor } from '../repository/fs_data_adaptor'; + +const repository: TemplateManager = new TemplateManager([ + new FileSystemDataAdaptor(path.join(__dirname, './__data__/repository')), +]); describe('The local repository', () => { it('Should only contain valid integration directories or files.', async () => { - const directory = path.join(__dirname, '../__data__/repository'); + const directory = path.join(__dirname, './__data__/repository'); const folders = await fs.readdir(directory); await Promise.all( folders.map(async (folder) => { @@ -32,9 +37,6 @@ describe('The local repository', () => { }); it('Should pass deep validation for all local integrations.', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integrations: IntegrationReader[] = await repository.getIntegrationList(); await Promise.all( integrations.map(async (i) => { @@ -50,18 +52,12 @@ describe('The local repository', () => { describe('Local Nginx Integration', () => { it('Should serialize without errors', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integration = await repository.getIntegration('nginx'); await expect(integration?.serialize()).resolves.toHaveProperty('ok', true); }); it('Should serialize to include the config', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integration = await repository.getIntegration('nginx'); const config = await integration!.getConfig(); const serialized = await integration!.serialize(); diff --git a/server/adaptors/integrations/integrations_manager.ts b/server/adaptors/integrations/integrations_manager.ts index c516d3fc78..13834c8424 100644 --- a/server/adaptors/integrations/integrations_manager.ts +++ b/server/adaptors/integrations/integrations_manager.ts @@ -3,12 +3,12 @@ * SPDX-License-Identifier: Apache-2.0 */ -import path from 'path'; import { addRequestToMetric } from '../../common/metrics/metrics_helper'; import { IntegrationsAdaptor } from './integrations_adaptor'; import { SavedObject, SavedObjectsClientContract } from '../../../../../src/core/server/types'; import { IntegrationInstanceBuilder } from './integrations_builder'; import { TemplateManager } from './repository/repository'; +import { IndexDataAdaptor } from './repository/index_data_adaptor'; export class IntegrationsManager implements IntegrationsAdaptor { client: SavedObjectsClientContract; @@ -17,22 +17,21 @@ export class IntegrationsManager implements IntegrationsAdaptor { constructor(client: SavedObjectsClientContract, repository?: TemplateManager) { this.client = client; - this.repository = - repository ?? new TemplateManager(path.join(__dirname, '__data__/repository')); + this.repository = repository ?? new TemplateManager([new IndexDataAdaptor(this.client)]); this.instanceBuilder = new IntegrationInstanceBuilder(this.client); } deleteIntegrationInstance = async (id: string): Promise => { - let children: any; + let children: SavedObject; try { children = await this.client.get('integration-instance', id); - } catch (err: any) { + } catch (err) { return err.output?.statusCode === 404 ? Promise.resolve([id]) : Promise.reject(err); } const toDelete = children.attributes.assets - .filter((i: any) => i.assetId) - .map((i: any) => { + .filter((i: AssetReference) => i.assetId) + .map((i: AssetReference) => { return { id: i.assetId, type: i.assetType }; }); toDelete.push({ id, type: 'integration-instance' }); @@ -43,7 +42,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { try { await this.client.delete(asset.type, asset.id); return Promise.resolve(asset.id); - } catch (err: any) { + } catch (err) { addRequestToMetric('integrations', 'delete', err); return err.output?.statusCode === 404 ? Promise.resolve(asset.id) : Promise.reject(err); } @@ -101,20 +100,22 @@ export class IntegrationsManager implements IntegrationsAdaptor { query?: IntegrationInstanceQuery ): Promise => { addRequestToMetric('integrations', 'get', 'count'); - const result = await this.client.get('integration-instance', `${query!.id}`); + const result = (await this.client.get('integration-instance', `${query!.id}`)) as SavedObject< + IntegrationInstance + >; return Promise.resolve(this.buildInstanceResponse(result)); }; buildInstanceResponse = async ( - savedObj: SavedObject + savedObj: SavedObject ): Promise => { - const assets: AssetReference[] | undefined = (savedObj.attributes as any)?.assets; + const assets: AssetReference[] | undefined = savedObj.attributes.assets; const status: string = assets ? await this.getAssetStatus(assets) : 'available'; return { id: savedObj.id, status, - ...(savedObj.attributes as any), + ...savedObj.attributes, }; }; @@ -124,7 +125,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { try { await this.client.get(asset.assetType, asset.assetId); return { id: asset.assetId, status: 'available' }; - } catch (err: any) { + } catch (err) { const statusCode = err.output?.statusCode; if (statusCode && 400 <= statusCode && statusCode < 500) { return { id: asset.assetId, status: 'unavailable' }; @@ -166,7 +167,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { }); const test = await this.client.create('integration-instance', result); return Promise.resolve({ ...result, id: test.id }); - } catch (err: any) { + } catch (err) { addRequestToMetric('integrations', 'create', err); return Promise.reject({ message: err.message, @@ -213,7 +214,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { }); }; - getAssets = async (templateName: string): Promise<{ savedObjects?: any }> => { + getAssets = async (templateName: string): Promise => { const integration = await this.repository.getIntegration(templateName); if (integration === null) { return Promise.reject({ diff --git a/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts b/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts new file mode 100644 index 0000000000..6ab7f77b73 --- /dev/null +++ b/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts @@ -0,0 +1,105 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { IntegrationReader } from '../integration_reader'; +import { JsonCatalogDataAdaptor } from '../json_data_adaptor'; +import { TEST_INTEGRATION_CONFIG } from '../../../../../test/constants'; +import { savedObjectsClientMock } from '../../../../../../../src/core/server/mocks'; +import { IndexDataAdaptor } from '../index_data_adaptor'; +import { SavedObjectsClientContract } from '../../../../../../../src/core/server'; + +// Simplified catalog for integration searching -- Do not use for full deserialization tests. +const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample1', + }, + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample2', + }, + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample2', + version: '2.1.0', + }, +]; + +// Copy of json_data_adaptor.test.ts with new reader type +// Since implementation at time of writing is to defer to json adaptor +describe('Index Data Adaptor', () => { + let mockClient: SavedObjectsClientContract; + + beforeEach(() => { + mockClient = savedObjectsClientMock.create(); + mockClient.find = jest.fn().mockResolvedValue({ + saved_objects: TEST_CATALOG_NO_SERIALIZATION.map((item) => ({ + attributes: item, + })), + }); + }); + + it('Should correctly identify repository type', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + await expect(adaptor.getDirectoryType()).resolves.toBe('repository'); + }); + + it('Should correctly identify integration type after filtering', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const joined = await adaptor.join('sample1'); + await expect(joined.getDirectoryType()).resolves.toBe('integration'); + }); + + it('Should correctly retrieve integration versions', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const versions = await adaptor.findIntegrationVersions('sample2'); + expect((versions as { value: string[] }).value).toHaveLength(2); + }); + + it('Should correctly supply latest integration version for IntegrationReader', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const reader = new IntegrationReader('sample2', adaptor.join('sample2')); + const version = await reader.getLatestVersion(); + expect(version).toBe('2.1.0'); + }); + + it('Should find integration names', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const integResult = await adaptor.findIntegrations(); + const integs = (integResult as { value: string[] }).value; + integs.sort(); + + expect(integs).toEqual(['sample1', 'sample2']); + }); + + it('Should reject any attempts to read a file with a type', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const result = await adaptor.readFile('logs-1.0.0.json', 'schemas'); + await expect(result.error?.message).toBe( + 'JSON adaptor does not support subtypes (isConfigLocalized: true)' + ); + }); + + it('Should reject any attempts to read a raw file', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const result = await adaptor.readFileRaw('logo.svg', 'static'); + await expect(result.error?.message).toBe( + 'JSON adaptor does not support raw files (isConfigLocalized: true)' + ); + }); + + it('Should reject nested directory searching', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const result = await adaptor.findIntegrations('sample1'); + await expect(result.error?.message).toBe( + 'Finding integrations for custom dirs not supported for JSONreader' + ); + }); + + it('Should report unknown directory type if integration list is empty', async () => { + const adaptor = new JsonCatalogDataAdaptor([]); + await expect(adaptor.getDirectoryType()).resolves.toBe('unknown'); + }); +}); diff --git a/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts b/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts index 8c703b7516..89a994ffd8 100644 --- a/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts +++ b/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts @@ -8,6 +8,7 @@ import { IntegrationReader } from '../integration_reader'; import path from 'path'; import { JsonCatalogDataAdaptor } from '../json_data_adaptor'; import { TEST_INTEGRATION_CONFIG } from '../../../../../test/constants'; +import { FileSystemDataAdaptor } from '../fs_data_adaptor'; // Simplified catalog for integration searching -- Do not use for full deserialization tests. const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ @@ -28,9 +29,9 @@ const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ describe('JSON Data Adaptor', () => { it('Should be able to deserialize a serialized integration', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../../__data__/repository') - ); + const repository: TemplateManager = new TemplateManager([ + new FileSystemDataAdaptor(path.join(__dirname, '../../__test__/__data__/repository')), + ]); const fsIntegration: IntegrationReader = (await repository.getIntegration('nginx'))!; const fsConfig = await fsIntegration.getConfig(); const serialized = await fsIntegration.serialize(); @@ -112,4 +113,13 @@ describe('JSON Data Adaptor', () => { const adaptor = new JsonCatalogDataAdaptor([]); await expect(adaptor.getDirectoryType()).resolves.toBe('unknown'); }); + + // Bug: a previous regex for version finding counted the `8` in `k8s-1.0.0.json` as the version + it('Should correctly read a config with a number in the name', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + await expect(adaptor.readFile('sample2-2.1.0.json')).resolves.toMatchObject({ + ok: true, + value: TEST_CATALOG_NO_SERIALIZATION[2], + }); + }); }); diff --git a/server/adaptors/integrations/repository/__test__/repository.test.ts b/server/adaptors/integrations/repository/__test__/repository.test.ts index 816b44eaa0..ae0698ffad 100644 --- a/server/adaptors/integrations/repository/__test__/repository.test.ts +++ b/server/adaptors/integrations/repository/__test__/repository.test.ts @@ -8,6 +8,7 @@ import { TemplateManager } from '../repository'; import { IntegrationReader } from '../integration_reader'; import { Dirent, Stats } from 'fs'; import path from 'path'; +import { FileSystemDataAdaptor } from '../fs_data_adaptor'; jest.mock('fs/promises'); @@ -15,7 +16,7 @@ describe('Repository', () => { let repository: TemplateManager; beforeEach(() => { - repository = new TemplateManager('path/to/directory'); + repository = new TemplateManager([new FileSystemDataAdaptor('path/to/directory')]); }); afterEach(() => { diff --git a/server/adaptors/integrations/repository/fs_data_adaptor.ts b/server/adaptors/integrations/repository/fs_data_adaptor.ts index 52c5dff6d5..5687749ca2 100644 --- a/server/adaptors/integrations/repository/fs_data_adaptor.ts +++ b/server/adaptors/integrations/repository/fs_data_adaptor.ts @@ -21,7 +21,7 @@ const safeIsDirectory = async (maybeDirectory: string): Promise => { * A CatalogDataAdaptor that reads from the local filesystem. * Used to read default Integrations shipped in the in-product catalog at `__data__`. */ -export class FileSystemCatalogDataAdaptor implements CatalogDataAdaptor { +export class FileSystemDataAdaptor implements CatalogDataAdaptor { isConfigLocalized = false; directory: string; @@ -131,7 +131,7 @@ export class FileSystemCatalogDataAdaptor implements CatalogDataAdaptor { return hasSchemas ? 'integration' : 'repository'; } - join(filename: string): FileSystemCatalogDataAdaptor { - return new FileSystemCatalogDataAdaptor(path.join(this.directory, filename)); + join(filename: string): FileSystemDataAdaptor { + return new FileSystemDataAdaptor(path.join(this.directory, filename)); } } diff --git a/server/adaptors/integrations/repository/index_data_adaptor.ts b/server/adaptors/integrations/repository/index_data_adaptor.ts new file mode 100644 index 0000000000..3344dd0720 --- /dev/null +++ b/server/adaptors/integrations/repository/index_data_adaptor.ts @@ -0,0 +1,56 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { CatalogDataAdaptor, IntegrationPart } from './catalog_data_adaptor'; +import { SavedObjectsClientContract } from '../../../../../../src/core/server/types'; +import { JsonCatalogDataAdaptor } from './json_data_adaptor'; + +export class IndexDataAdaptor implements CatalogDataAdaptor { + isConfigLocalized = true; + directory?: string; + client: SavedObjectsClientContract; + + constructor(client: SavedObjectsClientContract, directory?: string) { + this.directory = directory; + this.client = client; + } + + private async asJsonAdaptor(): Promise { + const results = await this.client.find({ type: 'integration-template' }); + const filteredIntegrations: SerializedIntegration[] = results.saved_objects + .map((obj) => obj.attributes as SerializedIntegration) + .filter((obj) => this.directory === undefined || this.directory === obj.name); + return new JsonCatalogDataAdaptor(filteredIntegrations); + } + + async findIntegrationVersions(dirname?: string | undefined): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.findIntegrationVersions(dirname); + } + + async readFile(filename: string, type?: IntegrationPart): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.readFile(filename, type); + } + + async readFileRaw(filename: string, type?: IntegrationPart): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.readFileRaw(filename, type); + } + + async findIntegrations(dirname: string = '.'): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.findIntegrations(dirname); + } + + async getDirectoryType(dirname?: string): Promise<'integration' | 'repository' | 'unknown'> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.getDirectoryType(dirname); + } + + join(filename: string): IndexDataAdaptor { + return new IndexDataAdaptor(this.client, filename); + } +} diff --git a/server/adaptors/integrations/repository/integration_reader.ts b/server/adaptors/integrations/repository/integration_reader.ts index 0f28c5d420..ea3acbe77b 100644 --- a/server/adaptors/integrations/repository/integration_reader.ts +++ b/server/adaptors/integrations/repository/integration_reader.ts @@ -6,7 +6,7 @@ import path from 'path'; import semver from 'semver'; import { validateTemplate } from '../validators'; -import { FileSystemCatalogDataAdaptor } from './fs_data_adaptor'; +import { FileSystemDataAdaptor } from './fs_data_adaptor'; import { CatalogDataAdaptor, IntegrationPart } from './catalog_data_adaptor'; import { foldResults, pruneConfig } from './utils'; @@ -23,7 +23,7 @@ export class IntegrationReader { constructor(directory: string, reader?: CatalogDataAdaptor) { this.directory = directory; this.name = path.basename(directory); - this.reader = reader ?? new FileSystemCatalogDataAdaptor(directory); + this.reader = reader ?? new FileSystemDataAdaptor(directory); } /** @@ -178,17 +178,7 @@ export class IntegrationReader { * @param version The version of the integration to retrieve assets for. * @returns An object containing the different types of assets. */ - async getAssets( - version?: string - ): Promise< - Result<{ - savedObjects?: object[]; - queries?: Array<{ - query: string; - language: string; - }>; - }> - > { + async getAssets(version?: string): Promise> { const configResult = await this.getRawConfig(version); if (!configResult.ok) { return configResult; diff --git a/server/adaptors/integrations/repository/json_data_adaptor.ts b/server/adaptors/integrations/repository/json_data_adaptor.ts index 05c0b11104..2ab1547e16 100644 --- a/server/adaptors/integrations/repository/json_data_adaptor.ts +++ b/server/adaptors/integrations/repository/json_data_adaptor.ts @@ -16,7 +16,7 @@ export class JsonCatalogDataAdaptor implements CatalogDataAdaptor { /** * Creates a new FileSystemCatalogDataAdaptor instance. * - * @param directory The base directory from which to read files. This is not sanitized. + * @param integrationsList The list of JSON-serialized integrations to use as a pseudo-directory. */ constructor(integrationsList: SerializedIntegration[]) { this.integrationsList = integrationsList; @@ -41,10 +41,9 @@ export class JsonCatalogDataAdaptor implements CatalogDataAdaptor { }; } - const name = filename.split('-')[0]; - const version = filename.match(/\d+(\.\d+)*/); + const filenameParts = filename.match(/([\w]+)-(\d+(\.\d+)*)\.json/); for (const integ of this.integrationsList) { - if (integ.name === name && integ.version === version?.[0]) { + if (integ.name === filenameParts?.[1] && integ.version === filenameParts?.[2]) { return { ok: true, value: integ }; } } diff --git a/server/adaptors/integrations/repository/repository.ts b/server/adaptors/integrations/repository/repository.ts index 0337372049..4f418daac6 100644 --- a/server/adaptors/integrations/repository/repository.ts +++ b/server/adaptors/integrations/repository/repository.ts @@ -3,44 +3,56 @@ * SPDX-License-Identifier: Apache-2.0 */ -import * as path from 'path'; import { IntegrationReader } from './integration_reader'; -import { FileSystemCatalogDataAdaptor } from './fs_data_adaptor'; import { CatalogDataAdaptor } from './catalog_data_adaptor'; export class TemplateManager { - reader: CatalogDataAdaptor; - directory: string; + readers: CatalogDataAdaptor[]; - constructor(directory: string, reader?: CatalogDataAdaptor) { - this.directory = directory; - this.reader = reader ?? new FileSystemCatalogDataAdaptor(directory); + constructor(readers: CatalogDataAdaptor[]) { + this.readers = readers; } async getIntegrationList(): Promise { - // TODO in the future, we want to support traversing nested directory structures. - const folders = await this.reader.findIntegrations(); + const lists = await Promise.all( + this.readers.map((reader) => this.getReaderIntegrationList(reader)) + ); + return lists.flat(); + } + + private async getReaderIntegrationList(reader: CatalogDataAdaptor): Promise { + const folders = await reader.findIntegrations(); if (!folders.ok) { - console.error(`Error reading integration directories in: ${this.directory}`, folders.error); return []; } const integrations = await Promise.all( - folders.value.map((i) => - this.getIntegration(path.relative(this.directory, path.join(this.directory, i))) - ) + folders.value.map((integrationName) => this.getReaderIntegration(reader, integrationName)) ); return integrations.filter((x) => x !== null) as IntegrationReader[]; } - async getIntegration(integPath: string): Promise { - if ((await this.reader.getDirectoryType(integPath)) !== 'integration') { - console.error(`Requested integration '${integPath}' does not exist`); + async getIntegration(integrationName: string): Promise { + const maybeIntegrations = await Promise.all( + this.readers.map((reader) => this.getReaderIntegration(reader, integrationName)) + ); + for (const maybeIntegration of maybeIntegrations) { + if (maybeIntegration !== null) { + return maybeIntegration; + } + } + return null; + } + + private async getReaderIntegration( + reader: CatalogDataAdaptor, + integrationName: string + ): Promise { + if ((await reader.getDirectoryType(integrationName)) !== 'integration') { return null; } - const integ = new IntegrationReader(integPath, this.reader.join(integPath)); + const integ = new IntegrationReader(integrationName, reader.join(integrationName)); const checkResult = await integ.getConfig(); if (!checkResult.ok) { - console.error(`Integration '${integPath}' is invalid:`, checkResult.error); return null; } return integ; diff --git a/server/adaptors/integrations/types.ts b/server/adaptors/integrations/types.ts index 5e7565a133..7868faee83 100644 --- a/server/adaptors/integrations/types.ts +++ b/server/adaptors/integrations/types.ts @@ -62,6 +62,14 @@ interface IntegrationAssets { }>; } +interface ParsedIntegrationAssets { + savedObjects?: object[]; + queries?: Array<{ + query: string; + language: string; + }>; +} + interface SerializedIntegrationAssets extends IntegrationAssets { savedObjects?: { name: string; diff --git a/server/plugin.ts b/server/plugin.ts index 8efee24159..303a99e52e 100644 --- a/server/plugin.ts +++ b/server/plugin.ts @@ -12,6 +12,7 @@ import { Logger, Plugin, PluginInitializerContext, + SavedObject, SavedObjectsType, } from '../../../src/core/server'; import { OpenSearchObservabilityPlugin } from './adaptors/opensearch_observability_plugin'; @@ -90,7 +91,10 @@ export class ObservabilityPlugin migrations: { '3.0.0': (doc) => ({ ...doc, description: '' }), '3.0.1': (doc) => ({ ...doc, description: 'Some Description Text' }), - '3.0.2': (doc) => ({ ...doc, dateCreated: parseInt(doc.dateCreated || '0', 10) }), + '3.0.2': (doc) => ({ + ...doc, + dateCreated: parseInt((doc as { dateCreated?: string }).dateCreated || '0', 10), + }), }, }; @@ -98,6 +102,18 @@ export class ObservabilityPlugin name: 'integration-instance', hidden: false, namespaceType: 'single', + management: { + importableAndExportable: true, + getInAppUrl(obj: SavedObject) { + return { + path: `/app/integrations#/installed/${obj.id}`, + uiCapabilitiesPath: 'advancedSettings.show', + }; + }, + getTitle(obj: SavedObject) { + return obj.attributes.name; + }, + }, mappings: { dynamic: false, properties: { @@ -120,8 +136,71 @@ export class ObservabilityPlugin }, }; + const integrationTemplateType: SavedObjectsType = { + name: 'integration-template', + hidden: false, + namespaceType: 'single', + management: { + importableAndExportable: true, + getInAppUrl(obj: SavedObject) { + return { + path: `/app/integrations#/available/${obj.attributes.name}`, + uiCapabilitiesPath: 'advancedSettings.show', + }; + }, + getTitle(obj: SavedObject) { + return obj.attributes.displayName ?? obj.attributes.name; + }, + }, + mappings: { + dynamic: false, + properties: { + name: { + type: 'text', + }, + version: { + type: 'text', + }, + displayName: { + type: 'text', + }, + license: { + type: 'text', + }, + type: { + type: 'text', + }, + labels: { + type: 'text', + }, + author: { + type: 'text', + }, + description: { + type: 'text', + }, + sourceUrl: { + type: 'text', + }, + statics: { + type: 'nested', + }, + components: { + type: 'nested', + }, + assets: { + type: 'nested', + }, + sampleData: { + type: 'nested', + }, + }, + }, + }; + core.savedObjects.registerType(obsPanelType); core.savedObjects.registerType(integrationInstanceType); + core.savedObjects.registerType(integrationTemplateType); // Register server side APIs setupRoutes({ router, client: openSearchObservabilityClient, config }); diff --git a/server/routes/integrations/__tests__/integrations_router.test.ts b/server/routes/integrations/__tests__/integrations_router.test.ts index 15d2bac28b..5f6a7c39e5 100644 --- a/server/routes/integrations/__tests__/integrations_router.test.ts +++ b/server/routes/integrations/__tests__/integrations_router.test.ts @@ -26,12 +26,12 @@ describe('Data wrapper', () => { const result = await handleWithCallback( adaptorMock as IntegrationsAdaptor, responseMock as OpenSearchDashboardsResponseFactory, - callback + (callback as unknown) as (a: IntegrationsAdaptor) => Promise ); expect(callback).toHaveBeenCalled(); expect(responseMock.ok).toHaveBeenCalled(); - expect(result.body.data).toEqual({ test: 'data' }); + expect((result as { body?: unknown }).body).toEqual({ data: { test: 'data' } }); }); it('passes callback errors through', async () => { @@ -46,6 +46,6 @@ describe('Data wrapper', () => { expect(callback).toHaveBeenCalled(); expect(responseMock.custom).toHaveBeenCalled(); - expect(result.body).toEqual('test error'); + expect((result as { body?: unknown }).body).toEqual('test error'); }); }); diff --git a/server/routes/integrations/integrations_router.ts b/server/routes/integrations/integrations_router.ts index 46fe47768f..fba05b7b04 100644 --- a/server/routes/integrations/integrations_router.ts +++ b/server/routes/integrations/integrations_router.ts @@ -11,6 +11,7 @@ import { INTEGRATIONS_BASE } from '../../../common/constants/shared'; import { IntegrationsAdaptor } from '../../adaptors/integrations/integrations_adaptor'; import { OpenSearchDashboardsRequest, + OpenSearchDashboardsResponse, OpenSearchDashboardsResponseFactory, } from '../../../../../src/core/server/http/router'; import { IntegrationsManager } from '../../adaptors/integrations/integrations_manager'; @@ -29,19 +30,19 @@ import { IntegrationsManager } from '../../adaptors/integrations/integrations_ma * @callback callback A callback that will invoke a request on a provided adaptor. * @returns {Promise} An `OpenSearchDashboardsResponse` with the return data from the callback. */ -export const handleWithCallback = async ( +export const handleWithCallback = async ( adaptor: IntegrationsAdaptor, response: OpenSearchDashboardsResponseFactory, - callback: (a: IntegrationsAdaptor) => any -): Promise => { + callback: (a: IntegrationsAdaptor) => Promise +): Promise> => { try { const data = await callback(adaptor); return response.ok({ body: { data, }, - }); - } catch (err: any) { + }) as OpenSearchDashboardsResponse<{ data: T }>; + } catch (err) { console.error(`handleWithCallback: callback failed with error "${err.message}"`); return response.custom({ statusCode: err.statusCode || 500, @@ -63,7 +64,7 @@ export function registerIntegrationsRoute(router: IRouter) { path: `${INTEGRATIONS_BASE}/repository`, validate: false, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationTemplates() @@ -84,7 +85,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => { return a.loadIntegrationInstance( @@ -105,7 +106,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback( adaptor, @@ -130,7 +131,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); try { const requestPath = sanitize(request.params.path); @@ -141,7 +142,7 @@ export function registerIntegrationsRoute(router: IRouter) { }, body: result, }); - } catch (err: any) { + } catch (err) { return response.custom({ statusCode: err.statusCode ? err.statusCode : 500, body: err.message, @@ -159,7 +160,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getSchemas(request.params.id) @@ -176,7 +177,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getAssets(request.params.id) @@ -193,7 +194,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getSampleData(request.params.id) @@ -206,7 +207,7 @@ export function registerIntegrationsRoute(router: IRouter) { path: `${INTEGRATIONS_BASE}/store`, validate: false, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationInstances({}) @@ -223,7 +224,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.deleteIntegrationInstance(request.params.id) @@ -240,7 +241,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationInstance({
[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (?[^ ]*) (((?[^\"]*) "(?\S+)(?: +(?[^\"]*?)(?: +\S*)?)?)|(?[^ ]*))?" - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S.%L diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg b/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg deleted file mode 100644 index 51fbadb559..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/haproxy.cfg +++ /dev/null @@ -1,23 +0,0 @@ -global - stats socket /var/run/api.sock user haproxy group haproxy mode 660 level admin expose-fd listeners - log stdout format raw local0 info - -defaults - mode http - option httplog - timeout client 10s - timeout connect 5s - timeout server 10s - timeout http-request 10s - log global - -frontend frontend - bind *:8405 - stats enable - stats refresh 5s - capture request header User-Agent len 128 - default_backend webservers - -backend webservers - server s1 flask-app:5000 check - diff --git a/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh b/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh deleted file mode 100644 index 6528480efb..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/info/test/run.sh +++ /dev/null @@ -1,2 +0,0 @@ -# Copy access.log, error.log, metrics.log, parsers.conf, and fluent-bit.conf into the /tmp directory -sudo docker run -it -v /tmp/:/tmp/ fluent/fluent-bit /bin/fluent-bit -R /tmp/parsers.conf -c /tmp/fluent-bit.conf \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index 2bd5dadfa6..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json deleted file mode 100644 index fd1082432a..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json deleted file mode 100644 index 958842e97f..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/schemas/logs-1.0.0.mapping.json +++ /dev/null @@ -1,223 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-*-*"], - "priority": 900, - "data_stream": {}, - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "labels": ["log", "http", "communication"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@message": { - "type": "alias", - "path": "body" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["communication", "http"], - "version": 1 - } \ No newline at end of file diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png b/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png deleted file mode 100644 index 305a8e8410..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard1.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png b/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png deleted file mode 100644 index 8bb8972422..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/haproxy/static/dashboard2.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg b/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg deleted file mode 100644 index ae734d7522..0000000000 --- a/server/adaptors/integrations/__data__/repository/haproxy/static/logo.svg +++ /dev/null @@ -1,51 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/server/adaptors/integrations/__data__/repository/k8s/assets/README.md b/server/adaptors/integrations/__data__/repository/k8s/assets/README.md deleted file mode 100644 index f970c5334e..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/assets/README.md +++ /dev/null @@ -1,55 +0,0 @@ -# K8s Dashboard Explained - -The following queries are used for the k8s dashboard: - -- Deployment names Graph: - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.name` - -- Available pods per deployment (done per deployment aggregation) - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.name` - -- Desired pod - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.desired` - -- Available pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.available` - -- Unavailable pods - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.unavailable` -- Unavailable pods per deployment ( done per deployment aggregation) - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.deployment` - - Query: `kubernetes.deployment.replicas.unavailable` - -- CPU usage by node - - - Filter: `event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)` - - Query: `kubernetes.node.name` , `kubernetes.container.cpu.usage.nanocores`, `kubernetes.node.cpu.capacity.cores` - -- Top memory intensive pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.container` - - Query: `kubernetes.container._module.pod.name`, `kubernetes.container.memory.usage.bytes` - -- Top CPU intensive pods - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.container` - - Query: `kubernetes.container._module.pod.name`, `kubernetes.container.cpu.usage.core.ns` - -- Network in by node - - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.pod` - - Query: `kubernetes.pod.network.rx.bytes` - -- Network out by node - - Filter: `event.domain:kubernetes AND event.dataset:kubernetes.pod` - - Query: `kubernetes.pod.network.tx.bytes` diff --git a/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson b/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson deleted file mode 100644 index 655af5bf34..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/assets/k8s-1.0.0.ndjson +++ /dev/null @@ -1,16 +0,0 @@ -{"attributes":{"fields":"[{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"_type\",\"type\":\"string\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.dataset.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.dataset\"}}},{\"count\":0,\"name\":\"attributes.data_stream.namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.namespace\"}}},{\"count\":0,\"name\":\"attributes.data_stream.type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"attributes.data_stream.type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"attributes.data_stream.type\"}}},{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.dataset.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"event.dataset\"}}},{\"count\":0,\"name\":\"event.duration\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"event.module\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"event.module.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"event.module\"}}},{\"count\":0,\"name\":\"kubernetes.container.cpu.limit.cores\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.cpu.request.cores\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.id\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.id.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.id\"}}},{\"count\":0,\"name\":\"kubernetes.container.image\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.image.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.image\"}}},{\"count\":0,\"name\":\"kubernetes.container.memory.limit.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.memory.request.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.name\"}}},{\"count\":0,\"name\":\"kubernetes.container.status.phase\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.container.status.phase.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.container.status.phase\"}}},{\"count\":0,\"name\":\"kubernetes.container.status.ready\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.container.status.restarts\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.deployment.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.deployment.name\"}}},{\"count\":0,\"name\":\"kubernetes.deployment.paused\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.available\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.desired\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.unavailable\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.deployment.replicas.updated\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.labels.app\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.app.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.app\"}}},{\"count\":0,\"name\":\"kubernetes.labels.controller-revision-hash\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.controller-revision-hash.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.controller-revision-hash\"}}},{\"count\":0,\"name\":\"kubernetes.labels.eks.amazonaws.com/component\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.eks.amazonaws.com/component.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.eks.amazonaws.com/component\"}}},{\"count\":0,\"name\":\"kubernetes.labels.io.kompose.service\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.io.kompose.service.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.io.kompose.service\"}}},{\"count\":0,\"name\":\"kubernetes.labels.k8s-app\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.k8s-app.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.k8s-app\"}}},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-generation\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-generation.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.pod-template-generation\"}}},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-hash\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.labels.pod-template-hash.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.labels.pod-template-hash\"}}},{\"count\":0,\"name\":\"kubernetes.namespace\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.namespace.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.namespace\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/arch\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/instance-type\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.beta.kubernetes.io/os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.beta.kubernetes.io/os\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/capacityType\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup-image\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.eks.amazonaws.com/nodegroup\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/region\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.failure-domain.beta.kubernetes.io/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.k8s.io/cloud-provider-aws\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/arch\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/arch.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/arch\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/hostname\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/hostname.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/hostname\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.kubernetes.io/os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.kubernetes.io/os\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.node.kubernetes.io/instance-type\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.ebs.csi.aws.com/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/region\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/region.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.kubernetes.io/region\"}}},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node._module.labels.topology.kubernetes.io/zone\"}}},{\"count\":0,\"name\":\"kubernetes.node.cpu.allocatable.cores\",\"type\":\"number\",\"esTypes\":[\"float\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.cpu.capacity.cores\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.memory.allocatable.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.memory.capacity.bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node.name\"}}},{\"count\":0,\"name\":\"kubernetes.node.pod.allocatable.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.pod.capacity.total\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.node.status.ready\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.node.status.ready.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.node.status.ready\"}}},{\"count\":0,\"name\":\"kubernetes.node.status.unschedulable\",\"type\":\"boolean\",\"esTypes\":[\"boolean\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true},{\"count\":0,\"name\":\"kubernetes.pod.host_ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.host_ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.host_ip\"}}},{\"count\":0,\"name\":\"kubernetes.pod.ip\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.ip.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.ip\"}}},{\"count\":0,\"name\":\"kubernetes.pod.name\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.name.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.name\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.phase\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.phase.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.phase\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.ready\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.ready.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.ready\"}}},{\"count\":0,\"name\":\"kubernetes.pod.status.scheduled\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.status.scheduled.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.status.scheduled\"}}},{\"count\":0,\"name\":\"kubernetes.pod.uid\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false},{\"count\":0,\"name\":\"kubernetes.pod.uid.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"kubernetes.pod.uid\"}}}]","timeFieldName":"@timestamp","title":"ss4o_logs-k8s-*"},"id":"677d1880-3710-11ee-9c99-1babb143e8dd","migrationVersion":{"index-pattern":"7.6.0"},"references":[],"type":"index-pattern","updated_at":"2023-08-09T23:56:49.032Z","version":"WzQ2LDFd"} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Nodes","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Nodes\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"kubernetes.node.name\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Nodes\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.node\",\"language\":\"kuery\"},\"background_color_rules\":[{\"id\":\"79ccad80-48ff-11ec-b39b-33a1da97fd00\"}],\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"35410fad-e9d9-4df0-b88b-380347b6673c","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzU5OSwxXQ=="} -{"attributes":{"description":"Deployment Table","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"Kubernetes - Deployments","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Deployments\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"289c1980-48fc-11ec-b39b-33a1da97fd00\"}],\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"index_pattern\":\"\",\"interval\":\"\",\"isModelInvalid\":false,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"bar\",\"color\":\"#68BC00\",\"fill\":\"0.6\",\"filter\":{\"language\":\"kuery\",\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\"},\"formatter\":\"number\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"label\":\"Deployments\",\"line_width\":\"0\",\"metrics\":[{\"field\":\"kubernetes.deployment.name\",\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"override_index_pattern\":1,\"point_size\":1,\"separate_axis\":0,\"series_index_pattern\":\"logs-k8s\",\"series_time_field\":\"@timestamp\",\"split_color_mode\":\"opensearchDashboards\",\"split_filters\":[{\"color\":\"#68BC00\",\"filter\":{\"language\":\"kuery\",\"query\":\"\"},\"id\":\"e2942b00-3795-11ee-98d8-576c351e07b5\"}],\"split_mode\":\"terms\",\"stacked\":\"stacked_within_series\",\"terms_field\":\"kubernetes.deployment.name\",\"terms_order_by\":\"_count\",\"terms_size\":\"100\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"type\":\"timeseries\",\"bar_color_rules\":[{\"id\":\"f4541fc0-3796-11ee-8af2-45ce6d9f36cb\"}],\"pivot_id\":\"kubernetes.deployment.name\",\"pivot_type\":\"string\"}}"},"id":"d9a10a4a-a344-4acf-81c5-f3fbdea773e0","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Available pods per deployment [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Available pods per deployment [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"label\":\"Available pods\",\"type\":\"timeseries\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"terms_field\":\"kubernetes.deployment.name\",\"terms_size\":\"100\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"\",\"index_pattern\":\"\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false}}"},"id":"c1403f7e-9ce1-41c6-a571-a5fe09455067","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Desired pods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Desired pods\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(96,146,192,1)\",\"split_mode\":\"everything\",\"split_color_mode\":\"rainbow\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.desired\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked_within_series\",\"override_index_pattern\":0,\"series_index_pattern\":\"logs-k8s\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"series_time_field\":\"@timestamp\",\"label\":\"Desired Pods\",\"type\":\"timeseries\",\"series_interval\":\"auto\",\"offset_time\":\"\",\"hide_in_legend\":0}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"10s\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"fe4117c0-48fc-11ec-b39b-33a1da97fd00\"}],\"gauge_color_rules\":[{\"id\":\"173ca960-48fd-11ec-b39b-33a1da97fd00\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"}}}"},"id":"ca4afa09-317d-43e0-8587-bc8023eaccab","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Available pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Available pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(84,179,153,1)\",\"split_mode\":\"terms\",\"split_color_mode\":\"gradient\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"cardinality\",\"field\":\"kubernetes.deployment.replicas.available\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":\"0.8\",\"stacked\":\"stacked\",\"label\":\"Available Pods\",\"type\":\"timeseries\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"10s\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"fc647630-49c5-11ec-bdfd-3b80d430f4ad\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"45b57c4e-8ac9-4103-bc31-89668017349d","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwMywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Kubernetes - Unavailable pods","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Kubernetes - Unavailable pods\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"rgba(231,102,76,1)\",\"split_mode\":\"everything\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"bar\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Unavailable Pods\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"b43829d0-4900-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"},\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\"}}"},"id":"021c0b61-3ac1-46cf-856a-63f4c5764554","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Unavailable pods per deployment [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Unavailable pods per deployment [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"avg\",\"field\":\"kubernetes.deployment.replicas.unavailable\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"stacked\",\"label\":\"Unavailable pods\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.deployment.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.deployment\",\"language\":\"kuery\"}}}"},"id":"300d6e9c-c915-4bb4-98cf-4b5968523ccf","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CPU usage by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU usage by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.usage.nanocores\"},{\"id\":\"d39f5b30-4faf-11ec-9d5a-59f0e2391052\",\"type\":\"avg\",\"field\":\"event.duration\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"},\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.node.name\",\"offset_time\":\"10s\"},{\"id\":\"faee71b0-48f9-11ec-b39b-33a1da97fd00\",\"color\":\"\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\",\"type\":\"avg\",\"field\":\"kubernetes.node.cpu.capacity.cores\"},{\"id\":\"c1c04570-48fa-11ec-b39b-33a1da97fd00\",\"type\":\"math\",\"variables\":[{\"id\":\"cbc40d90-48fa-11ec-b39b-33a1da97fd00\",\"name\":\"cores\",\"field\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\"}],\"script\":\"params.cores * 1000000000\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"override_index_pattern\":1,\"series_index_pattern\":\"logs-k8s\",\"terms_field\":\"kubernetes.node.name\",\"terms_size\":\"1000\",\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"},\"terms_order_by\":\"faee71b1-48f9-11ec-b39b-33a1da97fd00\",\"value_template\":\"{{value}} nanocores\",\"series_time_field\":\"@timestamp\"}],\"time_field\":\"\",\"index_pattern\":\"\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"background_color_rules\":[{\"id\":\"198ab4e0-48f9-11ec-b39b-33a1da97fd00\"}],\"bar_color_rules\":[{\"id\":\"1b9e79b0-48f9-11ec-b39b-33a1da97fd00\"}],\"gauge_color_rules\":[{\"id\":\"1c00e500-48f9-11ec-b39b-33a1da97fd00\"}],\"gauge_width\":10,\"gauge_inner_width\":10,\"gauge_style\":\"half\"}}"},"id":"6bf080cf-6b7a-4c13-a30b-f17146c44633","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory usage by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory usage by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"},{\"id\":\"c7a3a880-48fd-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"10s\",\"id\":\"cf2e0c30-48fd-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"c7a3a880-48fd-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\",\"terms_size\":\"1000\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"id\":\"08b86cc0-48fe-11ec-b39b-33a1da97fd00\",\"color\":\"\",\"split_mode\":\"terms\",\"metrics\":[{\"id\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"sum\",\"field\":\"kubernetes.node.memory.capacity.bytes\"},{\"id\":\"35fe8b10-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\"},{\"unit\":\"10s\",\"id\":\"3c89ce40-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"35fe8b10-48fe-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":0.5,\"stacked\":\"none\",\"label\":\"Node capacity\",\"type\":\"timeseries\",\"terms_field\":\"kubernetes.node.name\",\"hidden\":false,\"terms_order_by\":\"08b86cc1-48fe-11ec-b39b-33a1da97fd00\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND (event.dataset:kubernetes.container OR event.dataset:kubernetes.node)\",\"language\":\"kuery\"}}}"},"id":"dc7c955e-cfe9-48b4-bfb9-57d7c6a8cb0a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYwNywxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top memory intensive pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top memory intensive pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.memory.usage.bytes\"},{\"unit\":\"\",\"id\":\"7103e0f0-4900-11ec-b39b-33a1da97fd00\",\"type\":\"cumulative_sum\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"10s\",\"id\":\"7ab85090-4900-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"7103e0f0-4900-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":null}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"bar_color_rules\":[{\"id\":\"39e57750-4900-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.container\",\"language\":\"kuery\"}}}"},"id":"1d928d8c-d17a-4a1a-916a-d899735bd638","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:36:49.991Z","version":"WzYxOSwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top CPU intensive pods [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top CPU intensive pods [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.container.cpu.request.cores\"},{\"unit\":\"1s\",\"id\":\"eeea0fe0-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"count\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"0.0 a\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"terms_field\":\"kubernetes.container.name\",\"value_template\":\"{{value}} ns\",\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"label\":\"\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"ss4o_logs-k8s-k8s-sample-sample\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"bar_color_rules\":[{\"id\":\"c8d782b0-48ff-11ec-b39b-33a1da97fd00\"}],\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.container\",\"language\":\"kuery\"},\"background_color_rules\":[{\"id\":\"cf2799e0-37a3-11ee-bfde-4b4fbdcc71b7\"}]}}"},"id":"ae948f51-9848-4e95-ad47-07c0a5ed4abe","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:35:15.998Z","version":"WzYxNiwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network in by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network in by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.rx.bytes\"},{\"unit\":\"\",\"id\":\"a1742800-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"\",\"id\":\"aa9b72d0-48fe-11ec-b39b-33a1da97fd00\",\"type\":\"positive_only\",\"field\":\"a1742800-48fe-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.pod\",\"language\":\"kuery\"}}}"},"id":"b4426454-e43b-4fc3-bcc4-a277d31c6888","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYxMCwxXQ=="} -{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network out by node [ Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network out by node [ Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"timeseries\",\"series\":[{\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"terms\",\"split_color_mode\":\"opensearchDashboards\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"sum\",\"field\":\"kubernetes.pod.network.tx.bytes\"},{\"unit\":\"\",\"id\":\"17284c20-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"derivative\",\"field\":\"61ca57f2-469d-11e7-af02-69e470af7417\"},{\"unit\":\"\",\"id\":\"1bbe7610-48ff-11ec-b39b-33a1da97fd00\",\"type\":\"positive_only\",\"field\":\"17284c20-48ff-11ec-b39b-33a1da97fd00\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"bytes\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"label\":\"\",\"type\":\"timeseries\",\"terms_field\":\"host.name\",\"terms_order_by\":\"61ca57f2-469d-11e7-af02-69e470af7417\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"logs-k8s\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"default_index_pattern\":\"logs-k8s\",\"default_timefield\":\"@timestamp\",\"isModelInvalid\":false,\"filter\":{\"query\":\"event.domain:kubernetes AND event.dataset:kubernetes.pod\",\"language\":\"kuery\"}}}"},"id":"4606d976-2d24-41fb-bf1d-557b0e6cc9f6","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2023-08-10T17:30:40.560Z","version":"WzYxMSwxXQ=="} -{"attributes":{"description":"Overview of Kubernetes cluster metrics","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"80c8564d-6611-4937-8641-377f7a90c240\",\"w\":9,\"x\":0,\"y\":0},\"panelIndex\":\"80c8564d-6611-4937-8641-377f7a90c240\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"5ba4ba5a-e98a-4729-9cbf-318244b46ad1\",\"w\":15,\"x\":9,\"y\":0},\"panelIndex\":\"5ba4ba5a-e98a-4729-9cbf-318244b46ad1\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"2aa6bf34-48cf-41a2-9d28-7dce46945f85\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"2aa6bf34-48cf-41a2-9d28-7dce46945f85\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"8b2b9250-64c3-4e58-b956-ea5d9065a942\",\"w\":8,\"x\":0,\"y\":9},\"panelIndex\":\"8b2b9250-64c3-4e58-b956-ea5d9065a942\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"988b264c-2bb5-4668-977b-c6fe6db705c7\",\"w\":8,\"x\":8,\"y\":9},\"panelIndex\":\"988b264c-2bb5-4668-977b-c6fe6db705c7\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"d690d7b2-9e5f-4b35-bff5-0d833e02e757\",\"w\":8,\"x\":16,\"y\":9},\"panelIndex\":\"d690d7b2-9e5f-4b35-bff5-0d833e02e757\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"5c92a579-d535-4423-84cf-af779084634d\",\"w\":24,\"x\":24,\"y\":9},\"panelIndex\":\"5c92a579-d535-4423-84cf-af779084634d\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"e0fa93dc-1008-4a51-bfd8-be72f06346c2\",\"w\":24,\"x\":0,\"y\":18},\"panelIndex\":\"e0fa93dc-1008-4a51-bfd8-be72f06346c2\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"8160fabe-70d6-414f-8a4d-b5f785e96b0f\",\"w\":24,\"x\":24,\"y\":18},\"panelIndex\":\"8160fabe-70d6-414f-8a4d-b5f785e96b0f\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"448c759d-2fb9-4c51-bcf2-e7792dc7e05b\",\"w\":24,\"x\":0,\"y\":29},\"panelIndex\":\"448c759d-2fb9-4c51-bcf2-e7792dc7e05b\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"9cd02619-6df4-4273-8098-8de6839495af\",\"w\":24,\"x\":24,\"y\":29},\"panelIndex\":\"9cd02619-6df4-4273-8098-8de6839495af\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"4bd4e0ba-49c5-4d4d-8305-07bbe4413451\",\"w\":24,\"x\":0,\"y\":40},\"panelIndex\":\"4bd4e0ba-49c5-4d4d-8305-07bbe4413451\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":11,\"i\":\"d0162880-bc2d-42ea-87b1-f64ec7cdb5cc\",\"w\":24,\"x\":24,\"y\":40},\"panelIndex\":\"d0162880-bc2d-42ea-87b1-f64ec7cdb5cc\",\"version\":\"3.0.0\",\"panelRefName\":\"panel_12\"}]","refreshInterval":{"pause":true,"value":0},"timeFrom":"now-30m","timeRestore":true,"timeTo":"now","title":"[Kubernetes] Overview ","version":1},"id":"85ae304f-f545-432a-82d6-eebd6afcdb0c","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"35410fad-e9d9-4df0-b88b-380347b6673c","name":"panel_0","type":"visualization"},{"id":"d9a10a4a-a344-4acf-81c5-f3fbdea773e0","name":"panel_1","type":"visualization"},{"id":"c1403f7e-9ce1-41c6-a571-a5fe09455067","name":"panel_2","type":"visualization"},{"id":"ca4afa09-317d-43e0-8587-bc8023eaccab","name":"panel_3","type":"visualization"},{"id":"45b57c4e-8ac9-4103-bc31-89668017349d","name":"panel_4","type":"visualization"},{"id":"021c0b61-3ac1-46cf-856a-63f4c5764554","name":"panel_5","type":"visualization"},{"id":"300d6e9c-c915-4bb4-98cf-4b5968523ccf","name":"panel_6","type":"visualization"},{"id":"6bf080cf-6b7a-4c13-a30b-f17146c44633","name":"panel_7","type":"visualization"},{"id":"dc7c955e-cfe9-48b4-bfb9-57d7c6a8cb0a","name":"panel_8","type":"visualization"},{"id":"1d928d8c-d17a-4a1a-916a-d899735bd638","name":"panel_9","type":"visualization"},{"id":"ae948f51-9848-4e95-ad47-07c0a5ed4abe","name":"panel_10","type":"visualization"},{"id":"b4426454-e43b-4fc3-bcc4-a277d31c6888","name":"panel_11","type":"visualization"},{"id":"4606d976-2d24-41fb-bf1d-557b0e6cc9f6","name":"panel_12","type":"visualization"}],"type":"dashboard","updated_at":"2023-08-10T17:36:54.857Z","version":"WzYyMCwxXQ=="} -{"exportedCount":14,"missingRefCount":0,"missingReferences":[]} diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json deleted file mode 100644 index 10d21c7335..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-cpu-usage.json +++ /dev/null @@ -1,1156 +0,0 @@ -[ - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://f163fdbf0d4016e6d6fcbc5549cffebf8ca4c034e281f5aaf49dd6caa2afc867", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0dbbb0c3-3a16-40b2-91b4-5e1a7714293d", - "name": "kube-proxy-8nmp6" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 69905933, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://2c970452b041f7476f00b2e36029837bcaebbc1bb80575769a755b7e4939829e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "d7953b0a-02d8-4941-b66a-41180fcdbc2e", - "name": "aws-node-4nfll" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 69953818, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T08:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T05:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://37d8b94ab34b11832cda800ee724a16cf4740e210b003ae6215f961e599b40ac", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "e2e35438-0e8c-4632-80d3-9b20ac5abad8", - "name": "aws-node-n46pw" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 70092857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://6f345a8bab999eb86c4360be306bdefc785780ec4e29ebc72e84c41b1b5ef6e2", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "28ce8b99-3c7b-44a8-a163-feff47fbf600", - "name": "kube-proxy-wnvrv" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 70146837, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T06:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T11:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T04:09:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:53:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T03:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7d585cda8ad6ec372b49a2cb4d956e992dbc72a37e12b45760d8caa699da88b8", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70384450, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-attacher:v4.0.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-attacher", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://25982c97d991e241cc7647ecea3f58c8e957096e9f389f921d9bc9cc87171006", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70435988, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://342f5713722df91ae371e61942b46267a21d7c8439074976236292f2adc8752f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70443736, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "k8s.gcr.io/metrics-server/metrics-server:v0.6.2", - "memory": { - "request": { - "bytes": 209715200 - } - }, - "name": "metrics-server", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://0c486c46da5d9c45578a381b3ce629f44b7eae3bc96247a591fbee6fc18a3e6f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "621887e4-8c1e-4b61-a34e-56067e61f766", - "name": "metrics-server-679799879f-9vkg2" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "679799879f", - "k8s-app": "metrics-server" - } - }, - "event": { - "duration": 70471081, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T08:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json deleted file mode 100644 index f5f1a02d5d..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-container-memory-usage.json +++ /dev/null @@ -1,1120 +0,0 @@ -[ - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-accountingservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "accountingservice", - "id": "containerd://44278f999d015af7ab0f0a65394dec0f78a8b12b58d3d7712b02d99212460473", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-accountingservice-59668979bc-xprrw" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69908658, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-emailservice", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 104857600 - } - }, - "name": "emailservice", - "id": "containerd://8389347773f5b54e54c505f79e7b4ebb82ab01b10e5404b1af483f54db2e5682", - "status": { - "phase": "running", - "ready": true, - "restarts": 129 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-emailservice-7654879b-rd6nn" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69912518, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "usage": { - "bytes": 20971520 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-recommendationservice", - "memory": { - "usage": { - "bytes": 524288000 - }, - "request": { - "bytes": 524288000 - }, - "limit": { - "bytes": 524288000 - } - }, - "name": "recommendationservice", - "id": "containerd://c233d6baed9ffcd7cc3b2228f83d5d9cbfa61dca94cf728e5b955957e72d5bce", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-recommendationservice-748d97d5b7-lf2xr" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69983602, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "usage": { - "bytes": 131072000 - }, - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - }, - "usage": { - "bytes": 128801888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-quoteservice", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 41943040 - } - }, - "name": "quoteservice", - "id": "containerd://d1ea28ba00206c8361686429fd0810f265872f324a2e8ada12cc0df87dc12901", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-quoteservice-9467f9c67-x5c5m" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70030857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-loadgenerator", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "loadgenerator", - "id": "containerd://16655ff17d25d160d96515765a5a89bf31cabcf1bc6807046510f6ad044e8548", - "status": { - "phase": "running", - "ready": true, - "restarts": 18 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-loadgenerator-7b96dddb88-jnkc6" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70073822, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "usage": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-productcatalogservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "productcatalogservice", - "id": "containerd://123b9452ee5ba869fd4c68a7c38e692333f8755903da2891006ceffe07ce664c", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-productcatalogservice-7f8666fc8-kbp44" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70202138, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T19:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "usage": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-paymentservice", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "paymentservice", - "id": "containerd://a7c006d4b2a28f7b225f0520efb1798296c93f602d9e213a5d80ef4d30529382", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-paymentservice-7dcd5bcbb5-9vbbt" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70257222, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-21T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-frauddetectionservice", - "memory": { - "request": { - "bytes": 209715200 - }, - "usage": { - "bytes": 209715200 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "frauddetectionservice", - "id": "containerd://33c247d008adca74bb71fd12191e503a9564ffc2a0825ae7dc00e3cfd7ca6d3f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-frauddetectionservice-f6dbdfd8c-t4kcm" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70300352, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:22:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "usage": { - "bytes": 41943040 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json deleted file mode 100644 index 84ea683271..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-deployment-name.json +++ /dev/null @@ -1,562 +0,0 @@ -[ - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44305569, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-checkoutservice" - } - }, - "event": { - "duration": 44318865, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "metrics-server" - } - }, - "event": { - "duration": 44321565, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "logstash", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "logstash-deployment" - } - }, - "event": { - "duration": 44366876, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "ebs-csi-controller" - } - }, - "event": { - "duration": 44369244, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-loadgenerator" - } - }, - "event": { - "duration": 44371283, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "aws-load-balancer-controller" - } - }, - "event": { - "duration": 44391882, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-emailservice" - } - }, - "event": { - "duration": 44395238, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-accountingservice" - } - }, - "event": { - "duration": 44397268, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-ffspostgres" - } - }, - "event": { - "duration": 44417515, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "langchain" - } - }, - "event": { - "duration": 44419548, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44421849, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-featureflagservice" - } - }, - "event": { - "duration": 44443165, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger" - } - }, - "event": { - "duration": 44445153, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "coredns" - } - }, - "event": { - "duration": 44446989, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-redis" - } - }, - "event": { - "duration": 44470444, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "data-prepper" - } - }, - "event": { - "duration": 44472410, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-frontend" - } - }, - "event": { - "duration": 44474346, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-cartservice" - } - }, - "event": { - "duration": 44493728, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-currencyservice" - } - }, - "event": { - "duration": 44495707, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json deleted file mode 100644 index 12f5a80d90..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample-node-cpu-usage.json +++ /dev/null @@ -1,2002 +0,0 @@ -[ - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32121077, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32130296, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32285801, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39578002, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39596213, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39604819, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34395346, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34403890, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34408303, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37378781, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37395055, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37399957, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41680053, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41697038, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41701949, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38799399, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38805143, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38807723, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41176924, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41185746, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - } -] diff --git a/server/adaptors/integrations/__data__/repository/k8s/data/sample.json b/server/adaptors/integrations/__data__/repository/k8s/data/sample.json deleted file mode 100644 index 973150e14f..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/data/sample.json +++ /dev/null @@ -1,4835 +0,0 @@ -[ - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32121077, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32130296, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 32285801, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39578002, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39596213, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 39604819, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34395346, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34403890, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 34408303, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37378781, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37395055, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 37399957, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41680053, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41697038, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41701949, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38799399, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38805143, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-62.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-62.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 38807723, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-0-253.ec2.internal" - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1a" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1a", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 31792103424 - }, - "capacity": { - "bytes": 32833339392 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-0-253.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41176924, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "node": { - "_domain": { - "labels": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/hostname": "ip-10-0-1-107.ec2.internal" - }, - "node": { - "kubernetes": { - "io/instance-type": "m5.2xlarge" - } - }, - "topology": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - }, - "ebs": { - "csi": { - "aws": { - "com/zone": "us-east-1b" - } - } - } - }, - "k8s": { - "io/cloud-provider-aws": "22771173a877370a23796c9759ec12cf" - }, - "eks": { - "amazonaws": { - "com/capacityType": "ON_DEMAND", - "com/nodegroup-image": "ami-06c9b6a12f5bd0a96", - "com/nodegroup": "playground-observability" - } - }, - "failure-domain": { - "beta": { - "kubernetes": { - "io/zone": "us-east-1b", - "io/region": "us-east-1" - } - } - }, - "beta": { - "kubernetes": { - "io/arch": "amd64", - "io/os": "linux", - "io/instance-type": "m5.2xlarge" - } - } - } - }, - "memory": { - "allocatable": { - "bytes": 32144420864 - }, - "capacity": { - "bytes": 33185656832 - } - }, - "pod": { - "allocatable": { - "total": 58 - }, - "capacity": { - "total": 58 - } - }, - "name": "ip-10-0-1-107.ec2.internal", - "cpu": { - "allocatable": { - "cores": 7.91 - }, - "capacity": { - "cores": 8 - } - }, - "status": { - "ready": "true", - "unschedulable": false - } - } - }, - "event": { - "duration": 41185746, - "domain": "kubernetes", - "dataset": "kubernetes.node" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.node", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44305569, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-checkoutservice" - } - }, - "event": { - "duration": 44318865, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "metrics-server" - } - }, - "event": { - "duration": 44321565, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "logstash", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "logstash-deployment" - } - }, - "event": { - "duration": 44366876, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "ebs-csi-controller" - } - }, - "event": { - "duration": 44369244, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-loadgenerator" - } - }, - "event": { - "duration": 44371283, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "aws-load-balancer-controller" - } - }, - "event": { - "duration": 44391882, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-emailservice" - } - }, - "event": { - "duration": 44395238, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-accountingservice" - } - }, - "event": { - "duration": 44397268, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-ffspostgres" - } - }, - "event": { - "duration": 44417515, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "langchain" - } - }, - "event": { - "duration": 44419548, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger-agent" - } - }, - "event": { - "duration": 44421849, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-featureflagservice" - } - }, - "event": { - "duration": 44443165, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "jaeger" - } - }, - "event": { - "duration": 44445153, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "kube-system", - "deployment": { - "paused": false, - "replicas": { - "desired": 2, - "unavailable": 0, - "available": 2, - "updated": 2 - }, - "name": "coredns" - } - }, - "event": { - "duration": 44446989, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-redis" - } - }, - "event": { - "duration": 44470444, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "default", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "data-prepper" - } - }, - "event": { - "duration": 44472410, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-frontend" - } - }, - "event": { - "duration": 44474346, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-cartservice" - } - }, - "event": { - "duration": 44493728, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "namespace": "otel-demo", - "deployment": { - "paused": false, - "replicas": { - "desired": 1, - "unavailable": 0, - "available": 1, - "updated": 1 - }, - "name": "opentelemetry-demo-currencyservice" - } - }, - "event": { - "duration": 44495707, - "domain": "kubernetes", - "dataset": "kubernetes.deployment" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.deployment", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-accountingservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "accountingservice", - "id": "containerd://44278f999d015af7ab0f0a65394dec0f78a8b12b58d3d7712b02d99212460473", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-accountingservice-59668979bc-xprrw" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69908658, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-emailservice", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 104857600 - } - }, - "name": "emailservice", - "id": "containerd://8389347773f5b54e54c505f79e7b4ebb82ab01b10e5404b1af483f54db2e5682", - "status": { - "phase": "running", - "ready": true, - "restarts": 129 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-emailservice-7654879b-rd6nn" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69912518, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "usage": { - "bytes": 20971520 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-recommendationservice", - "memory": { - "usage": { - "bytes": 524288000 - }, - "request": { - "bytes": 524288000 - }, - "limit": { - "bytes": 524288000 - } - }, - "name": "recommendationservice", - "id": "containerd://c233d6baed9ffcd7cc3b2228f83d5d9cbfa61dca94cf728e5b955957e72d5bce", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-recommendationservice-748d97d5b7-lf2xr" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 69983602, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "usage": { - "bytes": 131072000 - }, - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - }, - "usage": { - "bytes": 128801888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-quoteservice", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 41943040 - } - }, - "name": "quoteservice", - "id": "containerd://d1ea28ba00206c8361686429fd0810f265872f324a2e8ada12cc0df87dc12901", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-quoteservice-9467f9c67-x5c5m" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70030857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-loadgenerator", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "loadgenerator", - "id": "containerd://16655ff17d25d160d96515765a5a89bf31cabcf1bc6807046510f6ad044e8548", - "status": { - "phase": "running", - "ready": true, - "restarts": 18 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-loadgenerator-7b96dddb88-jnkc6" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70073822, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "usage": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-22T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-productcatalogservice", - "memory": { - "request": { - "bytes": 20971520 - }, - "usage": { - "bytes": 20971520 - }, - "limit": { - "bytes": 20971520 - } - }, - "name": "productcatalogservice", - "id": "containerd://123b9452ee5ba869fd4c68a7c38e692333f8755903da2891006ceffe07ce664c", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-productcatalogservice-7f8666fc8-kbp44" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70202138, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T19:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "usage": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-paymentservice", - "memory": { - "request": { - "bytes": 125829120 - }, - "usage": { - "bytes": 125829120 - }, - "limit": { - "bytes": 125829120 - } - }, - "name": "paymentservice", - "id": "containerd://a7c006d4b2a28f7b225f0520efb1798296c93f602d9e213a5d80ef4d30529382", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-paymentservice-7dcd5bcbb5-9vbbt" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70257222, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-21T20:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "usage": { - "bytes": 104857600 - }, - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "ghcr.io/open-telemetry/demo:1.4.0-frauddetectionservice", - "memory": { - "request": { - "bytes": 209715200 - }, - "usage": { - "bytes": 209715200 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "frauddetectionservice", - "id": "containerd://33c247d008adca74bb71fd12191e503a9564ffc2a0825ae7dc00e3cfd7ca6d3f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-frauddetectionservice-f6dbdfd8c-t4kcm" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70300352, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T22:22:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "usage": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T23:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "usage": { - "bytes": 41943040 - }, - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://f163fdbf0d4016e6d6fcbc5549cffebf8ca4c034e281f5aaf49dd6caa2afc867", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0dbbb0c3-3a16-40b2-91b4-5e1a7714293d", - "name": "kube-proxy-8nmp6" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 69905933, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://2c970452b041f7476f00b2e36029837bcaebbc1bb80575769a755b7e4939829e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "d7953b0a-02d8-4941-b66a-41180fcdbc2e", - "name": "aws-node-4nfll" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 69953818, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://c8ced8774e570c002329ed8796bb25cb311d22c88cf056ded9ba789b30ab1ab4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 69981567, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1162d2c6bc58ce994a27e75443b0f9b8df78a0cb9cb9010bae7c8a9d015ee0a5", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "ef6e0cfb-9ad3-4699-b273-cef6a09553ba", - "name": "ebs-csi-node-4cf4d" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 69985627, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/otel/opentelemetry-collector-contrib:0.75.0", - "memory": { - "request": { - "bytes": 131072000 - }, - "limit": { - "bytes": 131072000 - } - }, - "name": "opentelemetry-collector", - "cpu": { - "request": { - "cores": 0.256 - }, - "limit": { - "cores": 0.256 - } - }, - "id": "containerd://3db8c7c58c0002034c1a516885b33c7dcab4442dd687b7ecf63c28fb990dee40", - "status": { - "phase": "running", - "ready": true, - "restarts": 15 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "name": "opentelemetry-demo-otelcol-78c9df8478-l957d" - }, - "namespace": "otel-demo" - }, - "event": { - "duration": 70025208, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T08:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.io/opensearchproject/opensearch:2.8.0", - "memory": { - "request": { - "bytes": 12884901888 - } - }, - "name": "opensearch", - "cpu": { - "request": { - "cores": 1 - } - }, - "id": "containerd://7bd729ae8a368abcf0aaa9ae5063e48e37915dd57f3ee41294e488cc7a5fb4cd", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "3b6dc9a9-aae4-4772-834f-0f7f8459c0b1", - "name": "opensearch-cluster-leader-0" - }, - "namespace": "default", - "labels": { - "app": { - "kubernetes": { - "io/instance": "opensearch", - "io/component": "opensearch-cluster-leader", - "io/name": "opensearch", - "io/version": "2.6.0", - "io/managed-by": "Helm" - } - }, - "controller-revision-hash": "opensearch-cluster-leader-65fcd84bbf", - "statefulset": { - "kubernetes": { - "io/pod-name": "opensearch-cluster-leader-0" - } - }, - "helm": { - "sh/chart": "opensearch-2.11.4" - } - } - }, - "event": { - "duration": 70027314, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/coredns:v1.8.7-eksbuild.3", - "memory": { - "request": { - "bytes": 73400320 - }, - "limit": { - "bytes": 178257920 - } - }, - "name": "coredns", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://e8b210a2088679b6ba75fbc27cbb8107ebb7ea9f3d1ada941251e1138ce3884e", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "2b7e092c-de0e-4251-af4f-c8da5b630869", - "name": "coredns-79989457d9-v59b8" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "79989457d9", - "eks": { - "amazonaws": { - "com/component": "coredns" - } - }, - "k8s-app": "kube-dns" - } - }, - "event": { - "duration": 70089631, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T05:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/amazon-k8s-cni:v1.11.4-eksbuild.1", - "name": "aws-node", - "cpu": { - "request": { - "cores": 0.025 - } - }, - "id": "containerd://37d8b94ab34b11832cda800ee724a16cf4740e210b003ae6215f961e599b40ac", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "e2e35438-0e8c-4632-80d3-9b20ac5abad8", - "name": "aws-node-n46pw" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/instance": "aws-vpc-cni", - "io/name": "aws-node" - } - }, - "controller-revision-hash": "6cc8dbb89d", - "pod-template-generation": "1", - "k8s-app": "aws-node" - } - }, - "event": { - "duration": 70092857, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/kube-proxy:v1.24.7-minimal-eksbuild.2", - "name": "kube-proxy", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://6f345a8bab999eb86c4360be306bdefc785780ec4e29ebc72e84c41b1b5ef6e2", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "28ce8b99-3c7b-44a8-a163-feff47fbf600", - "name": "kube-proxy-wnvrv" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "5795b88684", - "pod-template-generation": "1", - "k8s-app": "kube-proxy" - } - }, - "event": { - "duration": 70146837, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T06:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://1820135ab3420f9e3f52330634a7bff529609f0e40ce84b60837badd41b463a4", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70205789, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T02:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-provisioner:v3.3.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-provisioner", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://6a2f26e1656de2dae1da7486214cedafd0e25e664917b4f2277509a55569f862", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70252204, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T11:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://16d63eb3ba8c02cbc7e36887cfbe2569963c6c660cb26c71366e56edb3ca964b", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "c6900681-12e3-4d07-b974-96865561f701", - "name": "metricbeat-gc6m5" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70254865, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-node-driver-registrar:v2.6.2-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "node-driver-registrar", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7c71c4670755922260cfbf2dcf394066455df09424eeab0b33221459a11ff222", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70295533, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "docker.elastic.co/beats/metricbeat-oss:7.3.1", - "memory": { - "request": { - "bytes": 104857600 - }, - "limit": { - "bytes": 209715200 - } - }, - "name": "metricbeat", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://4b827e4b2820646b19ccc456e545f6195e33b1cb08c8fc1e4321b07eaa782215", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "88953be9-ee1e-41c0-a08e-3eba2c4545ac", - "name": "metricbeat-54mjf" - }, - "namespace": "kube-system", - "labels": { - "controller-revision-hash": "9cf85bbf4", - "pod-template-generation": "1", - "k8s-app": "metricbeat" - } - }, - "event": { - "duration": 70298046, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T04:09:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-snapshotter:v6.1.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-snapshotter", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://3db1c485a677cd7c61f9aff4e23abc0fdcf995ecfb154d2c03fc8e57f58179aa", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70348802, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:53:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7231a4a787c9aab11d8c5a70005c7aaf8e42a57218a5eb920d34a3f7866d7a0d", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "8a2dbcab-04a0-4e61-b094-cdc6bd4589d0", - "name": "ebs-csi-controller-5b7f6c8b85-h27jd" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70376974, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T03:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/aws-ebs-csi-driver:v1.15.0", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "ebs-plugin", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://7d585cda8ad6ec372b49a2cb4d956e992dbc72a37e12b45760d8caa699da88b8", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-107.ec2.internal" - }, - "pod": { - "uid": "da392f5d-5035-489d-8de6-74fa6b5c31c9", - "name": "ebs-csi-node-2s5wf" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70384450, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-23T10:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/csi-attacher:v4.0.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "csi-attacher", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://25982c97d991e241cc7647ecea3f58c8e957096e9f389f921d9bc9cc87171006", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "0b12421e-5acd-46fb-bc65-e175af0c7b1f", - "name": "ebs-csi-controller-5b7f6c8b85-ws57q" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-controller" - }, - "pod-template-hash": "5b7f6c8b85" - } - }, - "event": { - "duration": 70435988, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T00:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "602401143452.dkr.ecr.us-east-1.amazonaws.com/eks/livenessprobe:v2.8.0-eks-1-25-latest", - "memory": { - "request": { - "bytes": 41943040 - }, - "limit": { - "bytes": 268435456 - } - }, - "name": "liveness-probe", - "cpu": { - "request": { - "cores": 0.01 - }, - "limit": { - "cores": 0.1 - } - }, - "id": "containerd://342f5713722df91ae371e61942b46267a21d7c8439074976236292f2adc8752f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-0-253.ec2.internal" - }, - "pod": { - "uid": "5829a136-d5e7-47f9-92cb-c58a4ba3c34a", - "name": "ebs-csi-node-q4mm6" - }, - "namespace": "kube-system", - "labels": { - "app": { - "kubernetes": { - "io/component": "csi-driver", - "io/name": "aws-ebs-csi-driver", - "io/version": "1.15.0", - "io/managed-by": "EKS" - }, - "value": "ebs-csi-node" - }, - "controller-revision-hash": "548657c66", - "pod-template-generation": "1" - } - }, - "event": { - "duration": 70443736, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T01:59:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - }, - { - "kubernetes": { - "container": { - "image": "k8s.gcr.io/metrics-server/metrics-server:v0.6.2", - "memory": { - "request": { - "bytes": 209715200 - } - }, - "name": "metrics-server", - "cpu": { - "request": { - "cores": 0.1 - } - }, - "id": "containerd://0c486c46da5d9c45578a381b3ce629f44b7eae3bc96247a591fbee6fc18a3e6f", - "status": { - "phase": "running", - "ready": true, - "restarts": 0 - } - }, - "node": { - "name": "ip-10-0-1-62.ec2.internal" - }, - "pod": { - "uid": "621887e4-8c1e-4b61-a34e-56067e61f766", - "name": "metrics-server-679799879f-9vkg2" - }, - "namespace": "kube-system", - "labels": { - "pod-template-hash": "679799879f", - "k8s-app": "metrics-server" - } - }, - "event": { - "duration": 70471081, - "domain": "kubernetes", - "dataset": "kubernetes.container" - }, - "@timestamp": "2023-07-24T08:00:52.121Z", - "attributes": { - "data_stream": { - "dataset": "kubernetes.container", - "namespace": "production", - "type": "kubernetes" - } - } - } -] - diff --git a/server/adaptors/integrations/__data__/repository/k8s/info/README.md b/server/adaptors/integrations/__data__/repository/k8s/info/README.md deleted file mode 100644 index 94e9aaaae6..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/info/README.md +++ /dev/null @@ -1,90 +0,0 @@ -# Kubernetes Integration - -## What is Kubernetes? - -Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications. It provides a robust and scalable infrastructure for running applications in a cloud-native environment. - -See additional details [here](https://kubernetes.io/). - -## What is Kubernetes Integration? - -An integration is a collection of pre-configured assets that are bundled together to streamline monitoring and analysis. - -Kubernetes integration includes dashboards, visualizations, queries, and an index mapping. - -### Dashboards - - - -With the Kubernetes integration, you can gain valuable insights into the health and performance of your containerized applications. The pre-configured dashboards and visualizations help you monitor key metrics, track resource utilization, and identify potential issues within your Kubernetes clusters. This integration empowers you to efficiently manage your containerized workloads, scale applications as needed, and ensure the reliability and availability of your Kubernetes environment. - -### Collecting K8s - -The next OpenTelemetry [page](https://opentelemetry.io/docs/kubernetes/collector/components/) describes the K8s attributes and other components - -#### Kubernetes Attributes Processor - -The Kubernetes Attributes Processor automatically discovers Kubernetes pods, extracts their metadata, and adds the extracted metadata to spans, metrics, and logs as resource attributes. - -The following attributes are added by default: - -**Cluster** - -- `k8s.cluster.name` -- `k8s.cluster.uid` - -**Namespace** - -- `k8s.namespace.name` - -**Pod** - -- `k8s.pod.name` -- `k8s.pod.uid` -- `k8s.pod.start_time` -- `k8s.deployment.name` - -**Node** - -- `k8s.node.name` -- `k8s.node.uid` - -**Container** - -- `k8s.container.name` -- `k8s.container.restart_count` - -**ReplicaSet** - -- `k8s.replicaset.name` -- `k8s.replicaset.uid` - -**Deployment** - -- `k8s.deployment.name` -- `k8s.deployment.uid` - -**StatefulSet** - -- `k8s.statefulset.name` -- `k8s.statefulset.uid` - -**DaemonSet** - -- `k8s.daemon.name` -- `k8s.daemon.uid` - -**DaemonSet** - -- `k8s.job.name` -- `k8s.job.uid` - -> All these fields are represented in the k8s-1.0.0.mapping schema and are aliased with the existing ECS based fields - -### Important Components for Kubernetes - -- [Kubeletstats Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubeletstats-receiver): pulls pod metrics from the API server on a kubelet. -- [Filelog Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#filelog-receiver): collects Kubernetes logs and application logs written to stdout/stderr. -- [Kubernetes Cluster Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubernetes-cluster-receiver): collects cluster-level metrics and entity events. -- [Kubernetes Objects Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#kubernetes-objects-receiver): collects objects, such as events, from the Kubernetes API server. -- [Host Metrics Receiver](https://opentelemetry.io/docs/kubernetes/collector/components/#host-metrics-receiver): scrapes host metrics from Kubernetes nodes. diff --git a/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md b/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md deleted file mode 100644 index 198e8a9558..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/ingestion/README.md +++ /dev/null @@ -1,42 +0,0 @@ -# Setting Fluent Bit Ingestion Deployment in Kubernetes - -Fluent Bit is an open-source and multi-platform Log Processor and Forwarder. It allows you to unify the data collection and logging of your system. This particular YAML configuration deploys Fluent Bit in a Kubernetes cluster for monitoring purposes. - -## Components - -The YAML consists of four primary components: - -**ClusterRole:** For defining permissions. -**ClusterRoleBinding:** To bind the permissions to a specific service account. -**ConfigMap:** To store the configuration details for Fluent Bit. -**DaemonSet:** For deploying Fluent Bit on all nodes in the cluster. - -1. **ClusterRole** - This part of the YAML file defines a ClusterRole named fluent-bit-read. It sets the permissions for accessing various resources in the cluster: -2. **ClusterRoleBinding** - This binds the above ClusterRole to a ServiceAccount named fluent-bit in the logging namespace. It ensures the permissions defined in the ClusterRole are applied to this service account. -3. **ConfigMap** - The fluent-bit-config ConfigMap stores the Fluent Bit configuration, including service, input, filter, output, and parser details. Configuration related to different aspects of log collection and forwarding is included in this section. -4. **DaemonSet** - Fluent Bit is deployed as a DaemonSet, which means a Fluent Bit container will run on every node in the cluster. This ensures that logs from all nodes are collected and processed. - -This Fluent Bit deployment in Kubernetes is instrumental in gathering, processing, and forwarding logs from different parts of the cluster. -It can be integrated with various log analytics tools and used for monitoring the behavior of the cluster, facilitating prompt insights and responses to system events. Make sure to tailor the configuration to match your specific requirements and infrastructure. - -### References - -- [K8s Filter Plugin](https://docs.fluentbit.io/manual/pipeline/filters/kubernetes) - -**Kubernetes filter performs the following operations:** - -Analyzes the data and extracts the metadata such as `Pod name`, `namespace`, `container name`, and `container ID` . -Queries Kubernetes API server to get extra metadata for the given Pod including the `Pod ID`, `labels`, `annotations`. - -This metadata is then appended to each record (log message). -This data is cached locally in memory and is appended to each log record. - -The following parameters represent a minimum configuration for this filter used in the ConfigMap above: - -- `Name` — the name of the filter plugin. -- `Kube_URL` — API Server end-point. E.g https://kubernetes.default.svc.cluster.local/ -- `Match` — a tag to match filtering against. diff --git a/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml b/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml deleted file mode 100644 index 687cf6da9e..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/ingestion/fluent-bit.yaml +++ /dev/null @@ -1,174 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: fluent-bit-read -rules: -- apiGroups: [""] - resources: - - namespaces - - pods - - pods/logs - - nodes - - nodes/proxy - verbs: ["get", "list", "watch"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: fluent-bit-read -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: fluent-bit-read -subjects: -- kind: ServiceAccount - name: fluent-bit - namespace: logging ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: fluent-bit-config - namespace: logging - labels: - k8s-app: fluent-bit -data: - # Configuration files: server, input, filters and output - # ====================================================== - fluent-bit.conf: | - [SERVICE] - Flush 5 - Log_Level info - Daemon off - Parsers_File parsers.conf - HTTP_Server On - HTTP_Listen 0.0.0.0 - HTTP_Port 2020 - storage.path /var/log/flb-storage/ - storage.sync normal - storage.checksum off - storage.backlog.mem_limit 100M - - @INCLUDE input-kubernetes.conf - @INCLUDE filter-kubernetes.conf - @INCLUDE output-opensearch.conf - - input-kubernetes.conf: | - [INPUT] - Name tail - Tag kube.* - Path /var/log/containers/*.log - Exclude_Path /var/log/containers/*_fluent-bit-*.log,/var/log/containers/*_kube-system_*.log - Parser docker - DB /var/log/flb_kube.db - Mem_Buf_Limit 100MB - Skip_Long_Lines On - Refresh_Interval 10 - - filter-kubernetes.conf: | - [FILTER] - Name kubernetes - Match kube.* - Kube_URL https://kubernetes.default.svc:443 - Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token - Kube_Tag_Prefix kube.var.log.containers. - Merge_Log On - Merge_Log_Key log_processed - K8S-Logging.Parser On - K8S-Logging.Exclude Off - - output-opensearch.conf: | - [OUTPUT] - Name opensearch - Match * - Host { endpoint } - Port 443 - TLS On - Replace_Dots On - AWS_Auth On - AWS_Region { region } - Retry_Limit 6 - Logstash_Format On - Logstash_Prefix fluent-bit - Logstash_DateFormat %U.%Y - - parsers.conf: | - [PARSER] - Name json - Format json - Time_Key time - Time_Format %d/%b/%Y:%H:%M:%S %z - - [PARSER] - Name docker - Format json - Time_Key time - Time_Format %Y-%m-%dT%H:%M:%S.%L - Time_Keep On - # Command | Decoder | Field | Optional Action - # =============|==================|================= - Decode_Field_As escaped log try_next - Decode_Field_As json log - - [PARSER] - # http://rubular.com/r/tjUt3Awgg4 - Name cri - Format regex - Regex ^(?[^ ]+) (?stdout|stderr) (?[^ ]*) (?.*)$ - Time_Key time - Time_Format %Y-%m-%dT%H:%M:%S.%L%z - - --- -apiVersion: apps/v1 -kind: DaemonSet -metadata: - name: fluent-bit - namespace: logging - labels: - k8s-app: fluent-bit-logging - version: v1 - kubernetes.io/cluster-service: "true" - -spec: - selector: - matchLabels: - k8s-app: fluent-bit-logging - template: - metadata: - labels: - k8s-app: fluent-bit-logging - version: v1 - kubernetes.io/cluster-service: "true" - annotations: - prometheus.io/scrape: "true" - prometheus.io/port: "2020" - prometheus.io/path: /api/v1/metrics/prometheus - spec: - containers: - - name: fluent-bit - image: amazon/aws-for-fluent-bit:latest - imagePullPolicy: Always - ports: - - containerPort: 2020 - volumeMounts: - - name: varlog - mountPath: /var/log - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: fluent-bit-config - mountPath: /fluent-bit/etc/ - terminationGracePeriodSeconds: 10 - volumes: - - name: varlog - hostPath: - path: /var/log - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: fluent-bit-config - configMap: - name: fluent-bit-config - serviceAccountName: fluent-bit diff --git a/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json b/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json deleted file mode 100644 index d359ffe8ee..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/k8s-1.0.0.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "name": "k8s", - "version": "1.0.0", - "displayName": "Kubernetes Dashboard", - "description": "Kubernetes web logs collector", - "license": "Apache-2.0", - "type": "logs-k8s", - "labels": ["Observability", "Logs", "Cloud"], - "author": "OpenSearch", - "sourceUrl": "https://github.com/opensearch-project/dashboards-observability/tree/main/server/adaptors/integrations/__data__/repository/k8s/info", - "statics": { - "logo": { - "annotation": "Kubernetes Logo", - "path": "logo.png" - }, - "gallery": [ - { - "annotation": "Kubernetes Dashboard", - "path": "dashboard.png" - } - ] - }, - "components": [ - { - "name": "k8s", - "version": "1.0.0" - }, - { - "name": "cloud", - "version": "1.0.0" - }, - { - "name": "container", - "version": "1.0.0" - }, - { - "name": "logs-k8s", - "version": "1.0.0" - } - ], - "assets": { - "savedObjects": { - "name": "k8s", - "version": "1.0.0" - } - }, - "sampleData": { - "path": "sample.json" - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json deleted file mode 100644 index e167c16efa..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/cloud-1.0.0.mapping.json +++ /dev/null @@ -1,83 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "cloud", - "labels": ["cloud"] - }, - "properties": { - "cloud": { - "properties": { - "provider": { - "type": "keyword" - }, - "availability_zone": { - "type": "keyword" - }, - "region": { - "type": "keyword" - }, - "machine": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - } - } - }, - "account": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "platform": { - "type": "keyword" - }, - "service": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "project": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - }, - "resource_id": { - "type": "keyword" - }, - "instance": { - "type": "object", - "properties": { - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json deleted file mode 100644 index e8fd9ec763..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/container-1.0.0.mapping.json +++ /dev/null @@ -1,68 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "container", - "labels": ["container"] - }, - "properties": { - "container": { - "properties": { - "image": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - }, - "tag": { - "type": "keyword" - }, - "hash": { - "type": "keyword" - } - } - }, - "id": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "labels": { - "type": "keyword" - }, - "runtime": { - "type": "keyword" - }, - "memory.usage": { - "type": "float" - }, - "network": { - "type": "object", - "properties": { - "ingress.bytes": { - "type": "long" - }, - "egress.bytes": { - "type": "long" - } - } - }, - "cpu.usage": { - "type": "float" - }, - "disk.read.bytes": { - "type": "long" - }, - "disk.write.bytes": { - "type": "long" - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json deleted file mode 100644 index 7d88aab2f2..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/k8s-1.0.0.mapping.json +++ /dev/null @@ -1,2286 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "k8s", - "labels": ["k8s"] - }, - "properties": { - "kubernetes": { - "type": "object", - "properties": { - "annotations": { - "type": "object" - }, - "apiserver": { - "properties": { - "request": { - "properties": { - "client": { - "type": "keyword", - "ignore_above": 256 - }, - "count": { - "type": "long" - }, - "latency": { - "properties": { - "bucket": { - "properties": { - "*": { - "type": "object" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - }, - "resource": { - "type": "keyword", - "ignore_above": 256 - }, - "scope": { - "type": "keyword", - "ignore_above": 256 - }, - "subresource": { - "type": "keyword", - "ignore_above": 256 - }, - "verb": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "container": { - "properties": { - "cpu": { - "properties": { - "limit": { - "properties": { - "cores": { - "type": "float" - }, - "nanocores": { - "type": "long" - } - } - }, - "request": { - "properties": { - "cores": { - "type": "float" - }, - "nanocores": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "nanocores": { - "type": "long" - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - } - } - }, - "id": { - "type": "keyword", - "ignore_above": 256 - }, - "image": { - "type": "keyword", - "ignore_above": 256 - }, - "logs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "limit": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "request": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "rootfs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "phase": { - "type": "keyword", - "ignore_above": 256 - }, - "ready": { - "type": "boolean" - }, - "reason": { - "type": "keyword", - "ignore_above": 256 - }, - "restarts": { - "type": "long" - } - } - } - } - }, - "controllermanager": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "leader": { - "properties": { - "is_master": { - "type": "boolean" - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "node": { - "properties": { - "collector": { - "properties": { - "count": { - "type": "long" - }, - "eviction": { - "properties": { - "count": { - "type": "long" - } - } - }, - "health": { - "properties": { - "pct": { - "type": "long" - } - } - }, - "unhealthy": { - "properties": { - "count": { - "type": "long" - } - } - } - } - } - } - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "workqueue": { - "properties": { - "adds": { - "properties": { - "count": { - "type": "long" - } - } - }, - "depth": { - "properties": { - "count": { - "type": "long" - } - } - }, - "longestrunning": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "retries": { - "properties": { - "count": { - "type": "long" - } - } - }, - "unfinished": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "zone": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "deployment": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "paused": { - "type": "boolean" - }, - "replicas": { - "properties": { - "available": { - "type": "long" - }, - "desired": { - "type": "long" - }, - "unavailable": { - "type": "long" - }, - "updated": { - "type": "long" - } - } - } - } - }, - "event": { - "properties": { - "count": { - "type": "long" - }, - "involved_object": { - "properties": { - "api_version": { - "type": "keyword", - "ignore_above": 256 - }, - "kind": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "resource_version": { - "type": "keyword", - "ignore_above": 256 - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "message": { - "type": "keyword", - "ignore_above": 256, - "copy_to": ["message"] - }, - "metadata": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "namespace": { - "type": "keyword", - "ignore_above": 256 - }, - "resource_version": { - "type": "keyword", - "ignore_above": 256 - }, - "self_link": { - "type": "keyword", - "ignore_above": 256 - }, - "timestamp": { - "properties": { - "created": { - "type": "date" - } - } - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "reason": { - "type": "keyword", - "ignore_above": 256 - }, - "timestamp": { - "properties": { - "first_occurrence": { - "type": "date" - }, - "last_occurrence": { - "type": "date" - } - } - }, - "type": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "labels": { - "properties": { - "app": { - "properties": { - "kubernetes": { - "properties": { - "io/component": { - "type": "keyword", - "ignore_above": 256 - }, - "io/instance": { - "type": "keyword", - "ignore_above": 256 - }, - "io/managed-by": { - "type": "keyword", - "ignore_above": 256 - }, - "io/name": { - "type": "keyword", - "ignore_above": 256 - }, - "io/version": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "value": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "controller-revision-hash": { - "type": "keyword", - "ignore_above": 256 - }, - "eks": { - "properties": { - "amazonaws": { - "properties": { - "com/component": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "helm": { - "properties": { - "sh/chart": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "io": { - "properties": { - "kompose": { - "properties": { - "service": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "k8s-app": { - "type": "keyword", - "ignore_above": 256 - }, - "pod-template-generation": { - "type": "keyword", - "ignore_above": 256 - }, - "pod-template-hash": { - "type": "keyword", - "ignore_above": 256 - }, - "statefulset": { - "properties": { - "kubernetes": { - "properties": { - "io/pod-name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "namespace": { - "type": "keyword", - "ignore_above": 256 - }, - "node": { - "properties": { - "_module": { - "properties": { - "labels": { - "properties": { - "beta": { - "properties": { - "kubernetes": { - "properties": { - "io/arch": { - "type": "keyword", - "ignore_above": 256 - }, - "io/instance-type": { - "type": "keyword", - "ignore_above": 256 - }, - "io/os": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "eks": { - "properties": { - "amazonaws": { - "properties": { - "com/capacityType": { - "type": "keyword", - "ignore_above": 256 - }, - "com/nodegroup": { - "type": "keyword", - "ignore_above": 256 - }, - "com/nodegroup-image": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "failure-domain": { - "properties": { - "beta": { - "properties": { - "kubernetes": { - "properties": { - "io/region": { - "type": "keyword", - "ignore_above": 256 - }, - "io/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "k8s": { - "properties": { - "io/cloud-provider-aws": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "kubernetes": { - "properties": { - "io/arch": { - "type": "keyword", - "ignore_above": 256 - }, - "io/hostname": { - "type": "keyword", - "ignore_above": 256 - }, - "io/os": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "node": { - "properties": { - "kubernetes": { - "properties": { - "io/instance-type": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "topology": { - "properties": { - "ebs": { - "properties": { - "csi": { - "properties": { - "aws": { - "properties": { - "com/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - }, - "kubernetes": { - "properties": { - "io/region": { - "type": "keyword", - "ignore_above": 256 - }, - "io/zone": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - }, - "cpu": { - "properties": { - "allocatable": { - "properties": { - "cores": { - "type": "float" - } - } - }, - "capacity": { - "properties": { - "cores": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "nanocores": { - "type": "long" - } - } - } - } - }, - "fs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "allocatable": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "network": { - "properties": { - "rx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - }, - "tx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - } - } - }, - "pod": { - "properties": { - "allocatable": { - "properties": { - "total": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "total": { - "type": "long" - } - } - } - } - }, - "runtime": { - "properties": { - "imagefs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "ready": { - "type": "keyword", - "ignore_above": 256 - }, - "unschedulable": { - "type": "boolean" - } - } - } - } - }, - "pod": { - "properties": { - "cpu": { - "properties": { - "usage": { - "properties": { - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "nanocores": { - "type": "long" - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - } - } - }, - "host_ip": { - "type": "ip" - }, - "ip": { - "type": "ip" - }, - "memory": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "major_page_faults": { - "type": "long" - }, - "page_faults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - }, - "limit": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - }, - "node": { - "properties": { - "pct": { - "type": "scaled_float", - "scaling_factor": 1000 - } - } - } - } - }, - "working_set": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "network": { - "properties": { - "rx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - }, - "tx": { - "properties": { - "bytes": { - "type": "long" - }, - "errors": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - }, - "status": { - "properties": { - "phase": { - "type": "keyword", - "ignore_above": 256 - }, - "ready": { - "type": "keyword", - "ignore_above": 256 - }, - "scheduled": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "uid": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "proxy": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "sync": { - "properties": { - "networkprogramming": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "0": { - "type": "long" - }, - "250000": { - "type": "long" - }, - "500000": { - "type": "long" - }, - "1000000": { - "type": "long" - }, - "2000000": { - "type": "long" - }, - "3000000": { - "type": "long" - }, - "4000000": { - "type": "long" - }, - "5000000": { - "type": "long" - }, - "6000000": { - "type": "long" - }, - "7000000": { - "type": "long" - }, - "8000000": { - "type": "long" - }, - "9000000": { - "type": "long" - }, - "10000000": { - "type": "long" - }, - "11000000": { - "type": "long" - }, - "12000000": { - "type": "long" - }, - "13000000": { - "type": "long" - }, - "14000000": { - "type": "long" - }, - "15000000": { - "type": "long" - }, - "16000000": { - "type": "long" - }, - "17000000": { - "type": "long" - }, - "18000000": { - "type": "long" - }, - "19000000": { - "type": "long" - }, - "20000000": { - "type": "long" - }, - "21000000": { - "type": "long" - }, - "22000000": { - "type": "long" - }, - "23000000": { - "type": "long" - }, - "24000000": { - "type": "long" - }, - "25000000": { - "type": "long" - }, - "26000000": { - "type": "long" - }, - "27000000": { - "type": "long" - }, - "28000000": { - "type": "long" - }, - "29000000": { - "type": "long" - }, - "30000000": { - "type": "long" - }, - "31000000": { - "type": "long" - }, - "32000000": { - "type": "long" - }, - "33000000": { - "type": "long" - }, - "34000000": { - "type": "long" - }, - "35000000": { - "type": "long" - }, - "36000000": { - "type": "long" - }, - "37000000": { - "type": "long" - }, - "38000000": { - "type": "long" - }, - "39000000": { - "type": "long" - }, - "40000000": { - "type": "long" - }, - "41000000": { - "type": "long" - }, - "42000000": { - "type": "long" - }, - "43000000": { - "type": "long" - }, - "44000000": { - "type": "long" - }, - "45000000": { - "type": "long" - }, - "46000000": { - "type": "long" - }, - "47000000": { - "type": "long" - }, - "48000000": { - "type": "long" - }, - "49000000": { - "type": "long" - }, - "50000000": { - "type": "long" - }, - "51000000": { - "type": "long" - }, - "52000000": { - "type": "long" - }, - "53000000": { - "type": "long" - }, - "54000000": { - "type": "long" - }, - "55000000": { - "type": "long" - }, - "56000000": { - "type": "long" - }, - "57000000": { - "type": "long" - }, - "58000000": { - "type": "long" - }, - "59000000": { - "type": "long" - }, - "60000000": { - "type": "long" - }, - "65000000": { - "type": "long" - }, - "70000000": { - "type": "long" - }, - "75000000": { - "type": "long" - }, - "80000000": { - "type": "long" - }, - "85000000": { - "type": "long" - }, - "90000000": { - "type": "long" - }, - "95000000": { - "type": "long" - }, - "100000000": { - "type": "long" - }, - "105000000": { - "type": "long" - }, - "110000000": { - "type": "long" - }, - "115000000": { - "type": "long" - }, - "120000000": { - "type": "long" - }, - "150000000": { - "type": "long" - }, - "180000000": { - "type": "long" - }, - "210000000": { - "type": "long" - }, - "240000000": { - "type": "long" - }, - "270000000": { - "type": "long" - }, - "300000000": { - "type": "long" - }, - "*": { - "type": "object" - }, - "+Inf": { - "type": "long" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "rules": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "1000": { - "type": "long" - }, - "2000": { - "type": "long" - }, - "4000": { - "type": "long" - }, - "8000": { - "type": "long" - }, - "16000": { - "type": "long" - }, - "32000": { - "type": "long" - }, - "64000": { - "type": "long" - }, - "128000": { - "type": "long" - }, - "256000": { - "type": "long" - }, - "512000": { - "type": "long" - }, - "1024000": { - "type": "long" - }, - "2048000": { - "type": "long" - }, - "4096000": { - "type": "long" - }, - "8192000": { - "type": "long" - }, - "16384000": { - "type": "long" - }, - "*": { - "type": "object" - }, - "+Inf": { - "type": "long" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - } - } - }, - "replicaset": { - "properties": { - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "replicas": { - "properties": { - "available": { - "type": "long" - }, - "desired": { - "type": "long" - }, - "labeled": { - "type": "long" - }, - "observed": { - "type": "long" - }, - "ready": { - "type": "long" - } - } - } - } - }, - "scheduler": { - "properties": { - "client": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "code": { - "type": "keyword", - "ignore_above": 256 - }, - "handler": { - "type": "keyword", - "ignore_above": 256 - }, - "host": { - "type": "keyword", - "ignore_above": 256 - }, - "http": { - "properties": { - "request": { - "properties": { - "count": { - "type": "long" - }, - "duration": { - "properties": { - "us": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "response": { - "properties": { - "size": { - "properties": { - "bytes": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "long" - } - } - } - } - } - } - } - } - }, - "leader": { - "properties": { - "is_master": { - "type": "boolean" - } - } - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "operation": { - "type": "keyword", - "ignore_above": 256 - }, - "process": { - "properties": { - "cpu": { - "properties": { - "sec": { - "type": "double" - } - } - }, - "fds": { - "properties": { - "open": { - "properties": { - "count": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "resident": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "virtual": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "started": { - "properties": { - "sec": { - "type": "double" - } - } - } - } - }, - "result": { - "type": "keyword", - "ignore_above": 256 - }, - "scheduling": { - "properties": { - "duration": { - "properties": { - "seconds": { - "properties": { - "count": { - "type": "long" - }, - "percentile": { - "properties": { - "*": { - "type": "object" - } - } - }, - "sum": { - "type": "double" - } - } - } - } - }, - "e2e": { - "properties": { - "duration": { - "properties": { - "us": { - "properties": { - "bucket": { - "properties": { - "*": { - "type": "object" - } - } - }, - "count": { - "type": "long" - }, - "sum": { - "type": "long" - } - } - } - } - } - } - }, - "pod": { - "properties": { - "attempts": { - "properties": { - "count": { - "type": "long" - } - } - }, - "preemption": { - "properties": { - "victims": { - "properties": { - "count": { - "type": "long" - } - } - } - } - } - } - } - } - } - } - }, - "statefulset": { - "properties": { - "created": { - "type": "long" - }, - "generation": { - "properties": { - "desired": { - "type": "long" - }, - "observed": { - "type": "long" - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - }, - "replicas": { - "properties": { - "desired": { - "type": "long" - }, - "observed": { - "type": "long" - } - } - } - } - }, - "system": { - "properties": { - "container": { - "type": "keyword", - "ignore_above": 256 - }, - "cpu": { - "properties": { - "usage": { - "properties": { - "core": { - "properties": { - "ns": { - "type": "long" - } - } - }, - "nanocores": { - "type": "long" - } - } - } - } - }, - "memory": { - "properties": { - "majorpagefaults": { - "type": "long" - }, - "pagefaults": { - "type": "long" - }, - "rss": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "usage": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "workingset": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "start_time": { - "type": "date" - } - } - }, - "volume": { - "properties": { - "fs": { - "properties": { - "available": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "capacity": { - "properties": { - "bytes": { - "type": "long" - } - } - }, - "inodes": { - "properties": { - "count": { - "type": "long" - }, - "free": { - "type": "long" - }, - "used": { - "type": "long" - } - } - }, - "used": { - "properties": { - "bytes": { - "type": "long" - } - } - } - } - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "k8s": { - "properties": { - "namespace": { - "properties": { - "name": { - "type": "alias", - "path": "kubernetes.namespace" - } - } - }, - "cluster": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "node": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.node.name" - } - } - }, - "pod": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.pod.name" - } - } - }, - "container": { - "properties": { - "restart_count": { - "type": "long" - }, - "name": { - "type": "alias", - "path": "kubernetes.container.name" - } - } - }, - "replicaset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.replicaset.name" - } - } - }, - "deployment": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.deployment.name" - } - } - }, - "statefulset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "alias", - "path": "kubernetes.statefulset.name" - } - } - }, - "daemonset": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "job": { - "properties": { - "uid": { - "type": "keyword", - "ignore_above": 256 - }, - "name": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json deleted file mode 100644 index 6be0d25228..0000000000 --- a/server/adaptors/integrations/__data__/repository/k8s/schemas/logs-k8s-1.0.0.mapping.json +++ /dev/null @@ -1,245 +0,0 @@ -{ - "index_patterns": ["ss4o_logs-k8s-*"], - "data_stream": {}, - "template": { - "aliases": { - "logs-k8s": {} - }, - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "log", - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - }, - "_source": { - "enabled": true - }, - "dynamic_templates": [ - { - "resources_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "resource.*" - } - }, - { - "attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "attributes.*" - } - }, - { - "instrumentation_scope_attributes_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "instrumentationScope.attributes.*" - } - } - ], - "properties": { - "severity": { - "properties": { - "number": { - "type": "long" - }, - "text": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "attributes": { - "type": "object", - "properties": { - "data_stream": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "namespace": { - "ignore_above": 128, - "type": "keyword" - }, - "type": { - "ignore_above": 56, - "type": "keyword" - } - } - } - } - }, - "body": { - "type": "text" - }, - "@timestamp": { - "type": "date" - }, - "observedTimestamp": { - "type": "date" - }, - "observerTime": { - "type": "alias", - "path": "observedTimestamp" - }, - "traceId": { - "ignore_above": 256, - "type": "keyword" - }, - "spanId": { - "ignore_above": 256, - "type": "keyword" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "instrumentationScope": { - "properties": { - "name": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 128 - } - } - }, - "version": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "dropped_attributes_count": { - "type": "integer" - }, - "schemaUrl": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - } - } - }, - "event": { - "properties": { - "dataset": { - "ignore_above": 128, - "type": "keyword" - }, - "duration": { - "type": "long" - }, - "domain": { - "ignore_above": 256, - "type": "keyword" - }, - "name": { - "ignore_above": 256, - "type": "keyword" - }, - "source": { - "ignore_above": 256, - "type": "keyword" - }, - "category": { - "ignore_above": 256, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "kind": { - "ignore_above": 256, - "type": "keyword" - }, - "result": { - "ignore_above": 256, - "type": "keyword" - }, - "exception": { - "properties": { - "message": { - "ignore_above": 1024, - "type": "keyword" - }, - "type": { - "ignore_above": 256, - "type": "keyword" - }, - "stacktrace": { - "type": "text" - } - } - } - } - } - } - }, - "settings": { - "index": { - "mapping": { - "total_fields": { - "limit": 10000 - } - }, - "refresh_interval": "5s" - } - } - }, - "composed_of": ["k8s", "container", "cloud"], - "version": 1, - "_meta": { - "description": "Simple Schema For Observability", - "catalog": "observability", - "type": "logs", - "labels": ["log", "k8s", "cloud", "container"], - "correlations": [ - { - "field": "spanId", - "foreign-schema": "traces", - "foreign-field": "spanId" - }, - { - "field": "traceId", - "foreign-schema": "traces", - "foreign-field": "traceId" - } - ] - } -} diff --git a/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png b/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png deleted file mode 100644 index 07995f7eae..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/k8s/static/dashboard.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/k8s/static/logo.png b/server/adaptors/integrations/__data__/repository/k8s/static/logo.png deleted file mode 100644 index 4c6716706d..0000000000 Binary files a/server/adaptors/integrations/__data__/repository/k8s/static/logo.png and /dev/null differ diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json deleted file mode 100644 index d9af5d7193..0000000000 --- a/server/adaptors/integrations/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json +++ /dev/null @@ -1,135 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "communication", - "labels": ["communication"] - }, - "properties": { - "communication": { - "properties": { - "sock.family": { - "type": "keyword", - "ignore_above": 256 - }, - "source": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - }, - "destination": { - "type": "object", - "properties": { - "address": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "domain": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "bytes": { - "type": "long" - }, - "ip": { - "type": "ip" - }, - "port": { - "type": "long" - }, - "mac": { - "type": "keyword", - "ignore_above": 1024 - }, - "packets": { - "type": "long" - }, - "geo": { - "type": "object", - "properties": { - "city_name": { - "type": "keyword" - }, - "country_iso_code": { - "type": "keyword" - }, - "country_name": { - "type": "keyword" - }, - "location": { - "type": "geo_point" - } - } - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json deleted file mode 100644 index 5fec510cb8..0000000000 --- a/server/adaptors/integrations/__data__/repository/nginx/schemas/http-1.0.0.mapping.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "template": { - "mappings": { - "_meta": { - "version": "1.0.0", - "catalog": "observability", - "type": "logs", - "component": "http", - "labels": ["http"] - }, - "dynamic_templates": [ - { - "request_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "request.header.*" - } - }, - { - "response_header_map": { - "mapping": { - "type": "keyword" - }, - "path_match": "response.header.*" - } - } - ], - "properties": { - "http": { - "properties": { - "flavor": { - "type": "keyword", - "ignore_above": 256 - }, - "user_agent": { - "type": "object", - "properties": { - "original": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "device": { - "type": "object", - "properties": { - "name": { - "type": "keyword" - } - } - }, - "os": { - "type": "object", - "properties": { - "type": { - "type": "keyword" - }, - "platform": { - "type": "keyword" - }, - "name": { - "type": "keyword" - }, - "full": { - "type": "keyword" - }, - "family": { - "type": "keyword" - }, - "version": { - "type": "keyword" - }, - "kernel": { - "type": "keyword" - } - } - } - } - }, - "url": { - "type": "keyword", - "ignore_above": 2048 - }, - "schema": { - "type": "keyword", - "ignore_above": 1024 - }, - "target": { - "type": "keyword", - "ignore_above": 1024 - }, - "route": { - "type": "keyword", - "ignore_above": 1024 - }, - "client.ip": { - "type": "ip" - }, - "resent_count": { - "type": "integer" - }, - "request": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "method": { - "type": "keyword", - "ignore_above": 256 - }, - "referrer": { - "type": "keyword", - "ignore_above": 1024 - }, - "mime_type": { - "type": "keyword", - "ignore_above": 1024 - } - } - }, - "response": { - "type": "object", - "properties": { - "id": { - "type": "text", - "fields": { - "keyword": { - "type": "keyword", - "ignore_above": 256 - } - } - }, - "body.content": { - "type": "text" - }, - "bytes": { - "type": "long" - }, - "status_code": { - "type": "integer" - } - } - } - } - } - } - } - } -} diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/create_mv-1.0.0.sql b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_mv-1.0.0.sql similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/create_mv-1.0.0.sql rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_mv-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/create_table-1.0.0.sql b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_table-1.0.0.sql similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/create_table-1.0.0.sql rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/create_table-1.0.0.sql diff --git a/server/adaptors/integrations/__data__/repository/nginx/assets/nginx-1.0.0.ndjson b/server/adaptors/integrations/__test__/__data__/repository/nginx/assets/nginx-1.0.0.ndjson similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/assets/nginx-1.0.0.ndjson rename to server/adaptors/integrations/__test__/__data__/repository/nginx/assets/nginx-1.0.0.ndjson diff --git a/server/adaptors/integrations/__data__/repository/nginx/data/sample.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/data/sample.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/data/sample.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/data/sample.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/info/README.md b/server/adaptors/integrations/__test__/__data__/repository/nginx/info/README.md similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/info/README.md rename to server/adaptors/integrations/__test__/__data__/repository/nginx/info/README.md diff --git a/server/adaptors/integrations/__data__/repository/nginx/nginx-1.0.0.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/nginx-1.0.0.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/nginx-1.0.0.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/nginx-1.0.0.json diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/communication-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/apache/schemas/communication-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/communication-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/apache/schemas/http-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/http-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/apache/schemas/http-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/http-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json b/server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json rename to server/adaptors/integrations/__test__/__data__/repository/nginx/schemas/logs-1.0.0.mapping.json diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/dashboard1.png b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard1.png similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/dashboard1.png rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard1.png diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/dashboard2.png b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard2.png similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/dashboard2.png rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/dashboard2.png diff --git a/server/adaptors/integrations/__data__/repository/nginx/static/logo.svg b/server/adaptors/integrations/__test__/__data__/repository/nginx/static/logo.svg similarity index 100% rename from server/adaptors/integrations/__data__/repository/nginx/static/logo.svg rename to server/adaptors/integrations/__test__/__data__/repository/nginx/static/logo.svg diff --git a/server/adaptors/integrations/__test__/json_repository.test.ts b/server/adaptors/integrations/__test__/json_repository.test.ts index 0e777b3eca..1d3296f56f 100644 --- a/server/adaptors/integrations/__test__/json_repository.test.ts +++ b/server/adaptors/integrations/__test__/json_repository.test.ts @@ -15,7 +15,7 @@ import { JsonCatalogDataAdaptor } from '../repository/json_data_adaptor'; import { deepCheck, foldResults } from '../repository/utils'; const fetchSerializedIntegrations = async (): Promise> => { - const directory = path.join(__dirname, '../__data__/repository'); + const directory = path.join(__dirname, '../__test__/__data__/repository'); const folders = await fs.readdir(directory); const readers = await Promise.all( folders.map(async (folder) => { @@ -42,10 +42,9 @@ describe('The Local Serialized Catalog', () => { it('Should pass deep validation for all serialized integrations', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); for (const integ of await repository.getIntegrationList()) { const validationResult = await deepCheck(integ); @@ -55,10 +54,9 @@ describe('The Local Serialized Catalog', () => { it('Should correctly retrieve a logo', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); const integration = (await repository.getIntegration('nginx')) as IntegrationReader; const logoStatic = await integration.getStatic('logo.svg'); @@ -68,10 +66,9 @@ describe('The Local Serialized Catalog', () => { it('Should correctly retrieve a gallery image', async () => { const serialized = await fetchSerializedIntegrations(); - const repository = new TemplateManager( - '.', - new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]) - ); + const repository = new TemplateManager([ + new JsonCatalogDataAdaptor(serialized.value as SerializedIntegration[]), + ]); const integration = (await repository.getIntegration('nginx')) as IntegrationReader; const logoStatic = await integration.getStatic('dashboard1.png'); diff --git a/server/adaptors/integrations/__test__/local_fs_repository.test.ts b/server/adaptors/integrations/__test__/local_fs_repository.test.ts index dcacf02bbb..be0afeb16e 100644 --- a/server/adaptors/integrations/__test__/local_fs_repository.test.ts +++ b/server/adaptors/integrations/__test__/local_fs_repository.test.ts @@ -12,10 +12,15 @@ import { IntegrationReader } from '../repository/integration_reader'; import path from 'path'; import * as fs from 'fs/promises'; import { deepCheck } from '../repository/utils'; +import { FileSystemDataAdaptor } from '../repository/fs_data_adaptor'; + +const repository: TemplateManager = new TemplateManager([ + new FileSystemDataAdaptor(path.join(__dirname, './__data__/repository')), +]); describe('The local repository', () => { it('Should only contain valid integration directories or files.', async () => { - const directory = path.join(__dirname, '../__data__/repository'); + const directory = path.join(__dirname, './__data__/repository'); const folders = await fs.readdir(directory); await Promise.all( folders.map(async (folder) => { @@ -32,9 +37,6 @@ describe('The local repository', () => { }); it('Should pass deep validation for all local integrations.', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integrations: IntegrationReader[] = await repository.getIntegrationList(); await Promise.all( integrations.map(async (i) => { @@ -50,18 +52,12 @@ describe('The local repository', () => { describe('Local Nginx Integration', () => { it('Should serialize without errors', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integration = await repository.getIntegration('nginx'); await expect(integration?.serialize()).resolves.toHaveProperty('ok', true); }); it('Should serialize to include the config', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../__data__/repository') - ); const integration = await repository.getIntegration('nginx'); const config = await integration!.getConfig(); const serialized = await integration!.serialize(); diff --git a/server/adaptors/integrations/integrations_manager.ts b/server/adaptors/integrations/integrations_manager.ts index c516d3fc78..13834c8424 100644 --- a/server/adaptors/integrations/integrations_manager.ts +++ b/server/adaptors/integrations/integrations_manager.ts @@ -3,12 +3,12 @@ * SPDX-License-Identifier: Apache-2.0 */ -import path from 'path'; import { addRequestToMetric } from '../../common/metrics/metrics_helper'; import { IntegrationsAdaptor } from './integrations_adaptor'; import { SavedObject, SavedObjectsClientContract } from '../../../../../src/core/server/types'; import { IntegrationInstanceBuilder } from './integrations_builder'; import { TemplateManager } from './repository/repository'; +import { IndexDataAdaptor } from './repository/index_data_adaptor'; export class IntegrationsManager implements IntegrationsAdaptor { client: SavedObjectsClientContract; @@ -17,22 +17,21 @@ export class IntegrationsManager implements IntegrationsAdaptor { constructor(client: SavedObjectsClientContract, repository?: TemplateManager) { this.client = client; - this.repository = - repository ?? new TemplateManager(path.join(__dirname, '__data__/repository')); + this.repository = repository ?? new TemplateManager([new IndexDataAdaptor(this.client)]); this.instanceBuilder = new IntegrationInstanceBuilder(this.client); } deleteIntegrationInstance = async (id: string): Promise => { - let children: any; + let children: SavedObject; try { children = await this.client.get('integration-instance', id); - } catch (err: any) { + } catch (err) { return err.output?.statusCode === 404 ? Promise.resolve([id]) : Promise.reject(err); } const toDelete = children.attributes.assets - .filter((i: any) => i.assetId) - .map((i: any) => { + .filter((i: AssetReference) => i.assetId) + .map((i: AssetReference) => { return { id: i.assetId, type: i.assetType }; }); toDelete.push({ id, type: 'integration-instance' }); @@ -43,7 +42,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { try { await this.client.delete(asset.type, asset.id); return Promise.resolve(asset.id); - } catch (err: any) { + } catch (err) { addRequestToMetric('integrations', 'delete', err); return err.output?.statusCode === 404 ? Promise.resolve(asset.id) : Promise.reject(err); } @@ -101,20 +100,22 @@ export class IntegrationsManager implements IntegrationsAdaptor { query?: IntegrationInstanceQuery ): Promise => { addRequestToMetric('integrations', 'get', 'count'); - const result = await this.client.get('integration-instance', `${query!.id}`); + const result = (await this.client.get('integration-instance', `${query!.id}`)) as SavedObject< + IntegrationInstance + >; return Promise.resolve(this.buildInstanceResponse(result)); }; buildInstanceResponse = async ( - savedObj: SavedObject + savedObj: SavedObject ): Promise => { - const assets: AssetReference[] | undefined = (savedObj.attributes as any)?.assets; + const assets: AssetReference[] | undefined = savedObj.attributes.assets; const status: string = assets ? await this.getAssetStatus(assets) : 'available'; return { id: savedObj.id, status, - ...(savedObj.attributes as any), + ...savedObj.attributes, }; }; @@ -124,7 +125,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { try { await this.client.get(asset.assetType, asset.assetId); return { id: asset.assetId, status: 'available' }; - } catch (err: any) { + } catch (err) { const statusCode = err.output?.statusCode; if (statusCode && 400 <= statusCode && statusCode < 500) { return { id: asset.assetId, status: 'unavailable' }; @@ -166,7 +167,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { }); const test = await this.client.create('integration-instance', result); return Promise.resolve({ ...result, id: test.id }); - } catch (err: any) { + } catch (err) { addRequestToMetric('integrations', 'create', err); return Promise.reject({ message: err.message, @@ -213,7 +214,7 @@ export class IntegrationsManager implements IntegrationsAdaptor { }); }; - getAssets = async (templateName: string): Promise<{ savedObjects?: any }> => { + getAssets = async (templateName: string): Promise => { const integration = await this.repository.getIntegration(templateName); if (integration === null) { return Promise.reject({ diff --git a/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts b/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts new file mode 100644 index 0000000000..6ab7f77b73 --- /dev/null +++ b/server/adaptors/integrations/repository/__test__/index_data_adaptor.test.ts @@ -0,0 +1,105 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { IntegrationReader } from '../integration_reader'; +import { JsonCatalogDataAdaptor } from '../json_data_adaptor'; +import { TEST_INTEGRATION_CONFIG } from '../../../../../test/constants'; +import { savedObjectsClientMock } from '../../../../../../../src/core/server/mocks'; +import { IndexDataAdaptor } from '../index_data_adaptor'; +import { SavedObjectsClientContract } from '../../../../../../../src/core/server'; + +// Simplified catalog for integration searching -- Do not use for full deserialization tests. +const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample1', + }, + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample2', + }, + { + ...(TEST_INTEGRATION_CONFIG as SerializedIntegration), + name: 'sample2', + version: '2.1.0', + }, +]; + +// Copy of json_data_adaptor.test.ts with new reader type +// Since implementation at time of writing is to defer to json adaptor +describe('Index Data Adaptor', () => { + let mockClient: SavedObjectsClientContract; + + beforeEach(() => { + mockClient = savedObjectsClientMock.create(); + mockClient.find = jest.fn().mockResolvedValue({ + saved_objects: TEST_CATALOG_NO_SERIALIZATION.map((item) => ({ + attributes: item, + })), + }); + }); + + it('Should correctly identify repository type', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + await expect(adaptor.getDirectoryType()).resolves.toBe('repository'); + }); + + it('Should correctly identify integration type after filtering', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const joined = await adaptor.join('sample1'); + await expect(joined.getDirectoryType()).resolves.toBe('integration'); + }); + + it('Should correctly retrieve integration versions', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const versions = await adaptor.findIntegrationVersions('sample2'); + expect((versions as { value: string[] }).value).toHaveLength(2); + }); + + it('Should correctly supply latest integration version for IntegrationReader', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const reader = new IntegrationReader('sample2', adaptor.join('sample2')); + const version = await reader.getLatestVersion(); + expect(version).toBe('2.1.0'); + }); + + it('Should find integration names', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const integResult = await adaptor.findIntegrations(); + const integs = (integResult as { value: string[] }).value; + integs.sort(); + + expect(integs).toEqual(['sample1', 'sample2']); + }); + + it('Should reject any attempts to read a file with a type', async () => { + const adaptor = new IndexDataAdaptor(mockClient); + const result = await adaptor.readFile('logs-1.0.0.json', 'schemas'); + await expect(result.error?.message).toBe( + 'JSON adaptor does not support subtypes (isConfigLocalized: true)' + ); + }); + + it('Should reject any attempts to read a raw file', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const result = await adaptor.readFileRaw('logo.svg', 'static'); + await expect(result.error?.message).toBe( + 'JSON adaptor does not support raw files (isConfigLocalized: true)' + ); + }); + + it('Should reject nested directory searching', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + const result = await adaptor.findIntegrations('sample1'); + await expect(result.error?.message).toBe( + 'Finding integrations for custom dirs not supported for JSONreader' + ); + }); + + it('Should report unknown directory type if integration list is empty', async () => { + const adaptor = new JsonCatalogDataAdaptor([]); + await expect(adaptor.getDirectoryType()).resolves.toBe('unknown'); + }); +}); diff --git a/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts b/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts index 8c703b7516..89a994ffd8 100644 --- a/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts +++ b/server/adaptors/integrations/repository/__test__/json_data_adaptor.test.ts @@ -8,6 +8,7 @@ import { IntegrationReader } from '../integration_reader'; import path from 'path'; import { JsonCatalogDataAdaptor } from '../json_data_adaptor'; import { TEST_INTEGRATION_CONFIG } from '../../../../../test/constants'; +import { FileSystemDataAdaptor } from '../fs_data_adaptor'; // Simplified catalog for integration searching -- Do not use for full deserialization tests. const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ @@ -28,9 +29,9 @@ const TEST_CATALOG_NO_SERIALIZATION: SerializedIntegration[] = [ describe('JSON Data Adaptor', () => { it('Should be able to deserialize a serialized integration', async () => { - const repository: TemplateManager = new TemplateManager( - path.join(__dirname, '../../__data__/repository') - ); + const repository: TemplateManager = new TemplateManager([ + new FileSystemDataAdaptor(path.join(__dirname, '../../__test__/__data__/repository')), + ]); const fsIntegration: IntegrationReader = (await repository.getIntegration('nginx'))!; const fsConfig = await fsIntegration.getConfig(); const serialized = await fsIntegration.serialize(); @@ -112,4 +113,13 @@ describe('JSON Data Adaptor', () => { const adaptor = new JsonCatalogDataAdaptor([]); await expect(adaptor.getDirectoryType()).resolves.toBe('unknown'); }); + + // Bug: a previous regex for version finding counted the `8` in `k8s-1.0.0.json` as the version + it('Should correctly read a config with a number in the name', async () => { + const adaptor = new JsonCatalogDataAdaptor(TEST_CATALOG_NO_SERIALIZATION); + await expect(adaptor.readFile('sample2-2.1.0.json')).resolves.toMatchObject({ + ok: true, + value: TEST_CATALOG_NO_SERIALIZATION[2], + }); + }); }); diff --git a/server/adaptors/integrations/repository/__test__/repository.test.ts b/server/adaptors/integrations/repository/__test__/repository.test.ts index 816b44eaa0..ae0698ffad 100644 --- a/server/adaptors/integrations/repository/__test__/repository.test.ts +++ b/server/adaptors/integrations/repository/__test__/repository.test.ts @@ -8,6 +8,7 @@ import { TemplateManager } from '../repository'; import { IntegrationReader } from '../integration_reader'; import { Dirent, Stats } from 'fs'; import path from 'path'; +import { FileSystemDataAdaptor } from '../fs_data_adaptor'; jest.mock('fs/promises'); @@ -15,7 +16,7 @@ describe('Repository', () => { let repository: TemplateManager; beforeEach(() => { - repository = new TemplateManager('path/to/directory'); + repository = new TemplateManager([new FileSystemDataAdaptor('path/to/directory')]); }); afterEach(() => { diff --git a/server/adaptors/integrations/repository/fs_data_adaptor.ts b/server/adaptors/integrations/repository/fs_data_adaptor.ts index 52c5dff6d5..5687749ca2 100644 --- a/server/adaptors/integrations/repository/fs_data_adaptor.ts +++ b/server/adaptors/integrations/repository/fs_data_adaptor.ts @@ -21,7 +21,7 @@ const safeIsDirectory = async (maybeDirectory: string): Promise => { * A CatalogDataAdaptor that reads from the local filesystem. * Used to read default Integrations shipped in the in-product catalog at `__data__`. */ -export class FileSystemCatalogDataAdaptor implements CatalogDataAdaptor { +export class FileSystemDataAdaptor implements CatalogDataAdaptor { isConfigLocalized = false; directory: string; @@ -131,7 +131,7 @@ export class FileSystemCatalogDataAdaptor implements CatalogDataAdaptor { return hasSchemas ? 'integration' : 'repository'; } - join(filename: string): FileSystemCatalogDataAdaptor { - return new FileSystemCatalogDataAdaptor(path.join(this.directory, filename)); + join(filename: string): FileSystemDataAdaptor { + return new FileSystemDataAdaptor(path.join(this.directory, filename)); } } diff --git a/server/adaptors/integrations/repository/index_data_adaptor.ts b/server/adaptors/integrations/repository/index_data_adaptor.ts new file mode 100644 index 0000000000..3344dd0720 --- /dev/null +++ b/server/adaptors/integrations/repository/index_data_adaptor.ts @@ -0,0 +1,56 @@ +/* + * Copyright OpenSearch Contributors + * SPDX-License-Identifier: Apache-2.0 + */ + +import { CatalogDataAdaptor, IntegrationPart } from './catalog_data_adaptor'; +import { SavedObjectsClientContract } from '../../../../../../src/core/server/types'; +import { JsonCatalogDataAdaptor } from './json_data_adaptor'; + +export class IndexDataAdaptor implements CatalogDataAdaptor { + isConfigLocalized = true; + directory?: string; + client: SavedObjectsClientContract; + + constructor(client: SavedObjectsClientContract, directory?: string) { + this.directory = directory; + this.client = client; + } + + private async asJsonAdaptor(): Promise { + const results = await this.client.find({ type: 'integration-template' }); + const filteredIntegrations: SerializedIntegration[] = results.saved_objects + .map((obj) => obj.attributes as SerializedIntegration) + .filter((obj) => this.directory === undefined || this.directory === obj.name); + return new JsonCatalogDataAdaptor(filteredIntegrations); + } + + async findIntegrationVersions(dirname?: string | undefined): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.findIntegrationVersions(dirname); + } + + async readFile(filename: string, type?: IntegrationPart): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.readFile(filename, type); + } + + async readFileRaw(filename: string, type?: IntegrationPart): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.readFileRaw(filename, type); + } + + async findIntegrations(dirname: string = '.'): Promise> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.findIntegrations(dirname); + } + + async getDirectoryType(dirname?: string): Promise<'integration' | 'repository' | 'unknown'> { + const adaptor = await this.asJsonAdaptor(); + return await adaptor.getDirectoryType(dirname); + } + + join(filename: string): IndexDataAdaptor { + return new IndexDataAdaptor(this.client, filename); + } +} diff --git a/server/adaptors/integrations/repository/integration_reader.ts b/server/adaptors/integrations/repository/integration_reader.ts index 0f28c5d420..ea3acbe77b 100644 --- a/server/adaptors/integrations/repository/integration_reader.ts +++ b/server/adaptors/integrations/repository/integration_reader.ts @@ -6,7 +6,7 @@ import path from 'path'; import semver from 'semver'; import { validateTemplate } from '../validators'; -import { FileSystemCatalogDataAdaptor } from './fs_data_adaptor'; +import { FileSystemDataAdaptor } from './fs_data_adaptor'; import { CatalogDataAdaptor, IntegrationPart } from './catalog_data_adaptor'; import { foldResults, pruneConfig } from './utils'; @@ -23,7 +23,7 @@ export class IntegrationReader { constructor(directory: string, reader?: CatalogDataAdaptor) { this.directory = directory; this.name = path.basename(directory); - this.reader = reader ?? new FileSystemCatalogDataAdaptor(directory); + this.reader = reader ?? new FileSystemDataAdaptor(directory); } /** @@ -178,17 +178,7 @@ export class IntegrationReader { * @param version The version of the integration to retrieve assets for. * @returns An object containing the different types of assets. */ - async getAssets( - version?: string - ): Promise< - Result<{ - savedObjects?: object[]; - queries?: Array<{ - query: string; - language: string; - }>; - }> - > { + async getAssets(version?: string): Promise> { const configResult = await this.getRawConfig(version); if (!configResult.ok) { return configResult; diff --git a/server/adaptors/integrations/repository/json_data_adaptor.ts b/server/adaptors/integrations/repository/json_data_adaptor.ts index 05c0b11104..2ab1547e16 100644 --- a/server/adaptors/integrations/repository/json_data_adaptor.ts +++ b/server/adaptors/integrations/repository/json_data_adaptor.ts @@ -16,7 +16,7 @@ export class JsonCatalogDataAdaptor implements CatalogDataAdaptor { /** * Creates a new FileSystemCatalogDataAdaptor instance. * - * @param directory The base directory from which to read files. This is not sanitized. + * @param integrationsList The list of JSON-serialized integrations to use as a pseudo-directory. */ constructor(integrationsList: SerializedIntegration[]) { this.integrationsList = integrationsList; @@ -41,10 +41,9 @@ export class JsonCatalogDataAdaptor implements CatalogDataAdaptor { }; } - const name = filename.split('-')[0]; - const version = filename.match(/\d+(\.\d+)*/); + const filenameParts = filename.match(/([\w]+)-(\d+(\.\d+)*)\.json/); for (const integ of this.integrationsList) { - if (integ.name === name && integ.version === version?.[0]) { + if (integ.name === filenameParts?.[1] && integ.version === filenameParts?.[2]) { return { ok: true, value: integ }; } } diff --git a/server/adaptors/integrations/repository/repository.ts b/server/adaptors/integrations/repository/repository.ts index 0337372049..4f418daac6 100644 --- a/server/adaptors/integrations/repository/repository.ts +++ b/server/adaptors/integrations/repository/repository.ts @@ -3,44 +3,56 @@ * SPDX-License-Identifier: Apache-2.0 */ -import * as path from 'path'; import { IntegrationReader } from './integration_reader'; -import { FileSystemCatalogDataAdaptor } from './fs_data_adaptor'; import { CatalogDataAdaptor } from './catalog_data_adaptor'; export class TemplateManager { - reader: CatalogDataAdaptor; - directory: string; + readers: CatalogDataAdaptor[]; - constructor(directory: string, reader?: CatalogDataAdaptor) { - this.directory = directory; - this.reader = reader ?? new FileSystemCatalogDataAdaptor(directory); + constructor(readers: CatalogDataAdaptor[]) { + this.readers = readers; } async getIntegrationList(): Promise { - // TODO in the future, we want to support traversing nested directory structures. - const folders = await this.reader.findIntegrations(); + const lists = await Promise.all( + this.readers.map((reader) => this.getReaderIntegrationList(reader)) + ); + return lists.flat(); + } + + private async getReaderIntegrationList(reader: CatalogDataAdaptor): Promise { + const folders = await reader.findIntegrations(); if (!folders.ok) { - console.error(`Error reading integration directories in: ${this.directory}`, folders.error); return []; } const integrations = await Promise.all( - folders.value.map((i) => - this.getIntegration(path.relative(this.directory, path.join(this.directory, i))) - ) + folders.value.map((integrationName) => this.getReaderIntegration(reader, integrationName)) ); return integrations.filter((x) => x !== null) as IntegrationReader[]; } - async getIntegration(integPath: string): Promise { - if ((await this.reader.getDirectoryType(integPath)) !== 'integration') { - console.error(`Requested integration '${integPath}' does not exist`); + async getIntegration(integrationName: string): Promise { + const maybeIntegrations = await Promise.all( + this.readers.map((reader) => this.getReaderIntegration(reader, integrationName)) + ); + for (const maybeIntegration of maybeIntegrations) { + if (maybeIntegration !== null) { + return maybeIntegration; + } + } + return null; + } + + private async getReaderIntegration( + reader: CatalogDataAdaptor, + integrationName: string + ): Promise { + if ((await reader.getDirectoryType(integrationName)) !== 'integration') { return null; } - const integ = new IntegrationReader(integPath, this.reader.join(integPath)); + const integ = new IntegrationReader(integrationName, reader.join(integrationName)); const checkResult = await integ.getConfig(); if (!checkResult.ok) { - console.error(`Integration '${integPath}' is invalid:`, checkResult.error); return null; } return integ; diff --git a/server/adaptors/integrations/types.ts b/server/adaptors/integrations/types.ts index 5e7565a133..7868faee83 100644 --- a/server/adaptors/integrations/types.ts +++ b/server/adaptors/integrations/types.ts @@ -62,6 +62,14 @@ interface IntegrationAssets { }>; } +interface ParsedIntegrationAssets { + savedObjects?: object[]; + queries?: Array<{ + query: string; + language: string; + }>; +} + interface SerializedIntegrationAssets extends IntegrationAssets { savedObjects?: { name: string; diff --git a/server/plugin.ts b/server/plugin.ts index 8efee24159..303a99e52e 100644 --- a/server/plugin.ts +++ b/server/plugin.ts @@ -12,6 +12,7 @@ import { Logger, Plugin, PluginInitializerContext, + SavedObject, SavedObjectsType, } from '../../../src/core/server'; import { OpenSearchObservabilityPlugin } from './adaptors/opensearch_observability_plugin'; @@ -90,7 +91,10 @@ export class ObservabilityPlugin migrations: { '3.0.0': (doc) => ({ ...doc, description: '' }), '3.0.1': (doc) => ({ ...doc, description: 'Some Description Text' }), - '3.0.2': (doc) => ({ ...doc, dateCreated: parseInt(doc.dateCreated || '0', 10) }), + '3.0.2': (doc) => ({ + ...doc, + dateCreated: parseInt((doc as { dateCreated?: string }).dateCreated || '0', 10), + }), }, }; @@ -98,6 +102,18 @@ export class ObservabilityPlugin name: 'integration-instance', hidden: false, namespaceType: 'single', + management: { + importableAndExportable: true, + getInAppUrl(obj: SavedObject) { + return { + path: `/app/integrations#/installed/${obj.id}`, + uiCapabilitiesPath: 'advancedSettings.show', + }; + }, + getTitle(obj: SavedObject) { + return obj.attributes.name; + }, + }, mappings: { dynamic: false, properties: { @@ -120,8 +136,71 @@ export class ObservabilityPlugin }, }; + const integrationTemplateType: SavedObjectsType = { + name: 'integration-template', + hidden: false, + namespaceType: 'single', + management: { + importableAndExportable: true, + getInAppUrl(obj: SavedObject) { + return { + path: `/app/integrations#/available/${obj.attributes.name}`, + uiCapabilitiesPath: 'advancedSettings.show', + }; + }, + getTitle(obj: SavedObject) { + return obj.attributes.displayName ?? obj.attributes.name; + }, + }, + mappings: { + dynamic: false, + properties: { + name: { + type: 'text', + }, + version: { + type: 'text', + }, + displayName: { + type: 'text', + }, + license: { + type: 'text', + }, + type: { + type: 'text', + }, + labels: { + type: 'text', + }, + author: { + type: 'text', + }, + description: { + type: 'text', + }, + sourceUrl: { + type: 'text', + }, + statics: { + type: 'nested', + }, + components: { + type: 'nested', + }, + assets: { + type: 'nested', + }, + sampleData: { + type: 'nested', + }, + }, + }, + }; + core.savedObjects.registerType(obsPanelType); core.savedObjects.registerType(integrationInstanceType); + core.savedObjects.registerType(integrationTemplateType); // Register server side APIs setupRoutes({ router, client: openSearchObservabilityClient, config }); diff --git a/server/routes/integrations/__tests__/integrations_router.test.ts b/server/routes/integrations/__tests__/integrations_router.test.ts index 15d2bac28b..5f6a7c39e5 100644 --- a/server/routes/integrations/__tests__/integrations_router.test.ts +++ b/server/routes/integrations/__tests__/integrations_router.test.ts @@ -26,12 +26,12 @@ describe('Data wrapper', () => { const result = await handleWithCallback( adaptorMock as IntegrationsAdaptor, responseMock as OpenSearchDashboardsResponseFactory, - callback + (callback as unknown) as (a: IntegrationsAdaptor) => Promise ); expect(callback).toHaveBeenCalled(); expect(responseMock.ok).toHaveBeenCalled(); - expect(result.body.data).toEqual({ test: 'data' }); + expect((result as { body?: unknown }).body).toEqual({ data: { test: 'data' } }); }); it('passes callback errors through', async () => { @@ -46,6 +46,6 @@ describe('Data wrapper', () => { expect(callback).toHaveBeenCalled(); expect(responseMock.custom).toHaveBeenCalled(); - expect(result.body).toEqual('test error'); + expect((result as { body?: unknown }).body).toEqual('test error'); }); }); diff --git a/server/routes/integrations/integrations_router.ts b/server/routes/integrations/integrations_router.ts index 46fe47768f..fba05b7b04 100644 --- a/server/routes/integrations/integrations_router.ts +++ b/server/routes/integrations/integrations_router.ts @@ -11,6 +11,7 @@ import { INTEGRATIONS_BASE } from '../../../common/constants/shared'; import { IntegrationsAdaptor } from '../../adaptors/integrations/integrations_adaptor'; import { OpenSearchDashboardsRequest, + OpenSearchDashboardsResponse, OpenSearchDashboardsResponseFactory, } from '../../../../../src/core/server/http/router'; import { IntegrationsManager } from '../../adaptors/integrations/integrations_manager'; @@ -29,19 +30,19 @@ import { IntegrationsManager } from '../../adaptors/integrations/integrations_ma * @callback callback A callback that will invoke a request on a provided adaptor. * @returns {Promise} An `OpenSearchDashboardsResponse` with the return data from the callback. */ -export const handleWithCallback = async ( +export const handleWithCallback = async ( adaptor: IntegrationsAdaptor, response: OpenSearchDashboardsResponseFactory, - callback: (a: IntegrationsAdaptor) => any -): Promise => { + callback: (a: IntegrationsAdaptor) => Promise +): Promise> => { try { const data = await callback(adaptor); return response.ok({ body: { data, }, - }); - } catch (err: any) { + }) as OpenSearchDashboardsResponse<{ data: T }>; + } catch (err) { console.error(`handleWithCallback: callback failed with error "${err.message}"`); return response.custom({ statusCode: err.statusCode || 500, @@ -63,7 +64,7 @@ export function registerIntegrationsRoute(router: IRouter) { path: `${INTEGRATIONS_BASE}/repository`, validate: false, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationTemplates() @@ -84,7 +85,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => { return a.loadIntegrationInstance( @@ -105,7 +106,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback( adaptor, @@ -130,7 +131,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); try { const requestPath = sanitize(request.params.path); @@ -141,7 +142,7 @@ export function registerIntegrationsRoute(router: IRouter) { }, body: result, }); - } catch (err: any) { + } catch (err) { return response.custom({ statusCode: err.statusCode ? err.statusCode : 500, body: err.message, @@ -159,7 +160,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getSchemas(request.params.id) @@ -176,7 +177,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getAssets(request.params.id) @@ -193,7 +194,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getSampleData(request.params.id) @@ -206,7 +207,7 @@ export function registerIntegrationsRoute(router: IRouter) { path: `${INTEGRATIONS_BASE}/store`, validate: false, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationInstances({}) @@ -223,7 +224,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.deleteIntegrationInstance(request.params.id) @@ -240,7 +241,7 @@ export function registerIntegrationsRoute(router: IRouter) { }), }, }, - async (context, request, response): Promise => { + async (context, request, response): Promise => { const adaptor = getAdaptor(context, request); return handleWithCallback(adaptor, response, async (a: IntegrationsAdaptor) => a.getIntegrationInstance({