API tools faq
paste
Advertisement
Guest User

mapping

a guest
Jul 26th, 2016
1,090
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 145.58 KB | None | 0 0
raw download clone embed print report
  1. {
  2. "logstash-2016.07.19" : {
  3. "mappings" : {
  4. "_default_" : {
  5. "_all" : {
  6. "enabled" : true,
  7. "omit_norms" : true
  8. },
  9. "dynamic_templates" : [ {
  10. "message_field" : {
  11. "mapping" : {
  12. "fielddata" : {
  13. "format" : "disabled"
  14. },
  15. "index" : "analyzed",
  16. "omit_norms" : true,
  17. "type" : "string"
  18. },
  19. "match" : "message",
  20. "match_mapping_type" : "string"
  21. }
  22. }, {
  23. "string_fields" : {
  24. "mapping" : {
  25. "fielddata" : {
  26. "format" : "disabled"
  27. },
  28. "index" : "analyzed",
  29. "omit_norms" : true,
  30. "type" : "string",
  31. "fields" : {
  32. "raw" : {
  33. "ignore_above" : 256,
  34. "index" : "not_analyzed",
  35. "type" : "string",
  36. "doc_values" : true
  37. }
  38. }
  39. },
  40. "match" : "*",
  41. "match_mapping_type" : "string"
  42. }
  43. }, {
  44. "float_fields" : {
  45. "mapping" : {
  46. "type" : "float",
  47. "doc_values" : true
  48. },
  49. "match" : "*",
  50. "match_mapping_type" : "float"
  51. }
  52. }, {
  53. "double_fields" : {
  54. "mapping" : {
  55. "type" : "double",
  56. "doc_values" : true
  57. },
  58. "match" : "*",
  59. "match_mapping_type" : "double"
  60. }
  61. }, {
  62. "byte_fields" : {
  63. "mapping" : {
  64. "type" : "byte",
  65. "doc_values" : true
  66. },
  67. "match" : "*",
  68. "match_mapping_type" : "byte"
  69. }
  70. }, {
  71. "short_fields" : {
  72. "mapping" : {
  73. "type" : "short",
  74. "doc_values" : true
  75. },
  76. "match" : "*",
  77. "match_mapping_type" : "short"
  78. }
  79. }, {
  80. "integer_fields" : {
  81. "mapping" : {
  82. "type" : "integer",
  83. "doc_values" : true
  84. },
  85. "match" : "*",
  86. "match_mapping_type" : "integer"
  87. }
  88. }, {
  89. "long_fields" : {
  90. "mapping" : {
  91. "type" : "long",
  92. "doc_values" : true
  93. },
  94. "match" : "*",
  95. "match_mapping_type" : "long"
  96. }
  97. }, {
  98. "date_fields" : {
  99. "mapping" : {
  100. "type" : "date",
  101. "doc_values" : true
  102. },
  103. "match" : "*",
  104. "match_mapping_type" : "date"
  105. }
  106. }, {
  107. "geo_point_fields" : {
  108. "mapping" : {
  109. "type" : "geo_point",
  110. "doc_values" : true
  111. },
  112. "match" : "*",
  113. "match_mapping_type" : "geo_point"
  114. }
  115. } ],
  116. "properties" : {
  117. "@timestamp" : {
  118. "type" : "date",
  119. "format" : "strict_date_optional_time||epoch_millis"
  120. },
  121. "@version" : {
  122. "type" : "string",
  123. "index" : "not_analyzed"
  124. },
  125. "geoip" : {
  126. "dynamic" : "true",
  127. "properties" : {
  128. "ip" : {
  129. "type" : "ip"
  130. },
  131. "latitude" : {
  132. "type" : "float"
  133. },
  134. "location" : {
  135. "type" : "geo_point"
  136. },
  137. "longitude" : {
  138. "type" : "float"
  139. }
  140. }
  141. }
  142. }
  143. },
  144. "traffic" : {
  145. "_all" : {
  146. "enabled" : true,
  147. "omit_norms" : true
  148. },
  149. "dynamic_templates" : [ {
  150. "message_field" : {
  151. "mapping" : {
  152. "fielddata" : {
  153. "format" : "disabled"
  154. },
  155. "index" : "analyzed",
  156. "omit_norms" : true,
  157. "type" : "string"
  158. },
  159. "match" : "message",
  160. "match_mapping_type" : "string"
  161. }
  162. }, {
  163. "string_fields" : {
  164. "mapping" : {
  165. "fielddata" : {
  166. "format" : "disabled"
  167. },
  168. "index" : "analyzed",
  169. "omit_norms" : true,
  170. "type" : "string",
  171. "fields" : {
  172. "raw" : {
  173. "ignore_above" : 256,
  174. "index" : "not_analyzed",
  175. "type" : "string",
  176. "doc_values" : true
  177. }
  178. }
  179. },
  180. "match" : "*",
  181. "match_mapping_type" : "string"
  182. }
  183. }, {
  184. "float_fields" : {
  185. "mapping" : {
  186. "type" : "float",
  187. "doc_values" : true
  188. },
  189. "match" : "*",
  190. "match_mapping_type" : "float"
  191. }
  192. }, {
  193. "double_fields" : {
  194. "mapping" : {
  195. "type" : "double",
  196. "doc_values" : true
  197. },
  198. "match" : "*",
  199. "match_mapping_type" : "double"
  200. }
  201. }, {
  202. "byte_fields" : {
  203. "mapping" : {
  204. "type" : "byte",
  205. "doc_values" : true
  206. },
  207. "match" : "*",
  208. "match_mapping_type" : "byte"
  209. }
  210. }, {
  211. "short_fields" : {
  212. "mapping" : {
  213. "type" : "short",
  214. "doc_values" : true
  215. },
  216. "match" : "*",
  217. "match_mapping_type" : "short"
  218. }
  219. }, {
  220. "integer_fields" : {
  221. "mapping" : {
  222. "type" : "integer",
  223. "doc_values" : true
  224. },
  225. "match" : "*",
  226. "match_mapping_type" : "integer"
  227. }
  228. }, {
  229. "long_fields" : {
  230. "mapping" : {
  231. "type" : "long",
  232. "doc_values" : true
  233. },
  234. "match" : "*",
  235. "match_mapping_type" : "long"
  236. }
  237. }, {
  238. "date_fields" : {
  239. "mapping" : {
  240. "type" : "date",
  241. "doc_values" : true
  242. },
  243. "match" : "*",
  244. "match_mapping_type" : "date"
  245. }
  246. }, {
  247. "geo_point_fields" : {
  248. "mapping" : {
  249. "type" : "geo_point",
  250. "doc_values" : true
  251. },
  252. "match" : "*",
  253. "match_mapping_type" : "geo_point"
  254. }
  255. } ],
  256. "properties" : {
  257. "@timestamp" : {
  258. "type" : "date",
  259. "format" : "strict_date_optional_time||epoch_millis"
  260. },
  261. "@version" : {
  262. "type" : "string",
  263. "index" : "not_analyzed"
  264. },
  265. "SN" : {
  266. "type" : "string",
  267. "norms" : {
  268. "enabled" : false
  269. },
  270. "fielddata" : {
  271. "format" : "disabled"
  272. },
  273. "fields" : {
  274. "raw" : {
  275. "type" : "string",
  276. "index" : "not_analyzed",
  277. "ignore_above" : 256
  278. }
  279. }
  280. },
  281. "app" : {
  282. "type" : "string",
  283. "norms" : {
  284. "enabled" : false
  285. },
  286. "fielddata" : {
  287. "format" : "disabled"
  288. },
  289. "fields" : {
  290. "raw" : {
  291. "type" : "string",
  292. "index" : "not_analyzed",
  293. "ignore_above" : 256
  294. }
  295. }
  296. },
  297. "app_cat" : {
  298. "type" : "string",
  299. "norms" : {
  300. "enabled" : false
  301. },
  302. "fielddata" : {
  303. "format" : "disabled"
  304. },
  305. "fields" : {
  306. "raw" : {
  307. "type" : "string",
  308. "index" : "not_analyzed",
  309. "ignore_above" : 256
  310. }
  311. }
  312. },
  313. "app_type" : {
  314. "type" : "string",
  315. "norms" : {
  316. "enabled" : false
  317. },
  318. "fielddata" : {
  319. "format" : "disabled"
  320. },
  321. "fields" : {
  322. "raw" : {
  323. "type" : "string",
  324. "index" : "not_analyzed",
  325. "ignore_above" : 256
  326. }
  327. }
  328. },
  329. "appact" : {
  330. "type" : "string",
  331. "norms" : {
  332. "enabled" : false
  333. },
  334. "fielddata" : {
  335. "format" : "disabled"
  336. },
  337. "fields" : {
  338. "raw" : {
  339. "type" : "string",
  340. "index" : "not_analyzed",
  341. "ignore_above" : 256
  342. }
  343. }
  344. },
  345. "appcat" : {
  346. "type" : "string",
  347. "norms" : {
  348. "enabled" : false
  349. },
  350. "fielddata" : {
  351. "format" : "disabled"
  352. },
  353. "fields" : {
  354. "raw" : {
  355. "type" : "string",
  356. "index" : "not_analyzed",
  357. "ignore_above" : 256
  358. }
  359. }
  360. },
  361. "appid" : {
  362. "type" : "string",
  363. "norms" : {
  364. "enabled" : false
  365. },
  366. "fielddata" : {
  367. "format" : "disabled"
  368. },
  369. "fields" : {
  370. "raw" : {
  371. "type" : "string",
  372. "index" : "not_analyzed",
  373. "ignore_above" : 256
  374. }
  375. }
  376. },
  377. "applist" : {
  378. "type" : "string",
  379. "norms" : {
  380. "enabled" : false
  381. },
  382. "fielddata" : {
  383. "format" : "disabled"
  384. },
  385. "fields" : {
  386. "raw" : {
  387. "type" : "string",
  388. "index" : "not_analyzed",
  389. "ignore_above" : 256
  390. }
  391. }
  392. },
  393. "apprisk" : {
  394. "type" : "string",
  395. "norms" : {
  396. "enabled" : false
  397. },
  398. "fielddata" : {
  399. "format" : "disabled"
  400. },
  401. "fields" : {
  402. "raw" : {
  403. "type" : "string",
  404. "index" : "not_analyzed",
  405. "ignore_above" : 256
  406. }
  407. }
  408. },
  409. "carrier_ep" : {
  410. "type" : "string",
  411. "norms" : {
  412. "enabled" : false
  413. },
  414. "fielddata" : {
  415. "format" : "disabled"
  416. },
  417. "fields" : {
  418. "raw" : {
  419. "type" : "string",
  420. "index" : "not_analyzed",
  421. "ignore_above" : 256
  422. }
  423. }
  424. },
  425. "countapp" : {
  426. "type" : "string",
  427. "norms" : {
  428. "enabled" : false
  429. },
  430. "fielddata" : {
  431. "format" : "disabled"
  432. },
  433. "fields" : {
  434. "raw" : {
  435. "type" : "string",
  436. "index" : "not_analyzed",
  437. "ignore_above" : 256
  438. }
  439. }
  440. },
  441. "countdlp" : {
  442. "type" : "string",
  443. "norms" : {
  444. "enabled" : false
  445. },
  446. "fielddata" : {
  447. "format" : "disabled"
  448. },
  449. "fields" : {
  450. "raw" : {
  451. "type" : "string",
  452. "index" : "not_analyzed",
  453. "ignore_above" : 256
  454. }
  455. }
  456. },
  457. "countweb" : {
  458. "type" : "string",
  459. "norms" : {
  460. "enabled" : false
  461. },
  462. "fielddata" : {
  463. "format" : "disabled"
  464. },
  465. "fields" : {
  466. "raw" : {
  467. "type" : "string",
  468. "index" : "not_analyzed",
  469. "ignore_above" : 256
  470. }
  471. }
  472. },
  473. "craction" : {
  474. "type" : "string",
  475. "norms" : {
  476. "enabled" : false
  477. },
  478. "fielddata" : {
  479. "format" : "disabled"
  480. },
  481. "fields" : {
  482. "raw" : {
  483. "type" : "string",
  484. "index" : "not_analyzed",
  485. "ignore_above" : 256
  486. }
  487. }
  488. },
  489. "crlevel" : {
  490. "type" : "string",
  491. "norms" : {
  492. "enabled" : false
  493. },
  494. "fielddata" : {
  495. "format" : "disabled"
  496. },
  497. "fields" : {
  498. "raw" : {
  499. "type" : "string",
  500. "index" : "not_analyzed",
  501. "ignore_above" : 256
  502. }
  503. }
  504. },
  505. "crscore" : {
  506. "type" : "string",
  507. "norms" : {
  508. "enabled" : false
  509. },
  510. "fielddata" : {
  511. "format" : "disabled"
  512. },
  513. "fields" : {
  514. "raw" : {
  515. "type" : "string",
  516. "index" : "not_analyzed",
  517. "ignore_above" : 256
  518. }
  519. }
  520. },
  521. "date" : {
  522. "type" : "date",
  523. "format" : "strict_date_optional_time||epoch_millis"
  524. },
  525. "device_id" : {
  526. "type" : "string",
  527. "norms" : {
  528. "enabled" : false
  529. },
  530. "fielddata" : {
  531. "format" : "disabled"
  532. },
  533. "fields" : {
  534. "raw" : {
  535. "type" : "string",
  536. "index" : "not_analyzed",
  537. "ignore_above" : 256
  538. }
  539. }
  540. },
  541. "devid" : {
  542. "type" : "string",
  543. "norms" : {
  544. "enabled" : false
  545. },
  546. "fielddata" : {
  547. "format" : "disabled"
  548. },
  549. "fields" : {
  550. "raw" : {
  551. "type" : "string",
  552. "index" : "not_analyzed",
  553. "ignore_above" : 256
  554. }
  555. }
  556. },
  557. "devname" : {
  558. "type" : "string",
  559. "norms" : {
  560. "enabled" : false
  561. },
  562. "fielddata" : {
  563. "format" : "disabled"
  564. },
  565. "fields" : {
  566. "raw" : {
  567. "type" : "string",
  568. "index" : "not_analyzed",
  569. "ignore_above" : 256
  570. }
  571. }
  572. },
  573. "devtype" : {
  574. "type" : "string",
  575. "norms" : {
  576. "enabled" : false
  577. },
  578. "fielddata" : {
  579. "format" : "disabled"
  580. },
  581. "fields" : {
  582. "raw" : {
  583. "type" : "string",
  584. "index" : "not_analyzed",
  585. "ignore_above" : 256
  586. }
  587. }
  588. },
  589. "dir_disp" : {
  590. "type" : "string",
  591. "norms" : {
  592. "enabled" : false
  593. },
  594. "fielddata" : {
  595. "format" : "disabled"
  596. },
  597. "fields" : {
  598. "raw" : {
  599. "type" : "string",
  600. "index" : "not_analyzed",
  601. "ignore_above" : 256
  602. }
  603. }
  604. },
  605. "dst" : {
  606. "type" : "string",
  607. "norms" : {
  608. "enabled" : false
  609. },
  610. "fielddata" : {
  611. "format" : "disabled"
  612. },
  613. "fields" : {
  614. "raw" : {
  615. "type" : "string",
  616. "index" : "not_analyzed",
  617. "ignore_above" : 256
  618. }
  619. }
  620. },
  621. "dst_country" : {
  622. "type" : "string",
  623. "norms" : {
  624. "enabled" : false
  625. },
  626. "fielddata" : {
  627. "format" : "disabled"
  628. },
  629. "fields" : {
  630. "raw" : {
  631. "type" : "string",
  632. "index" : "not_analyzed",
  633. "ignore_above" : 256
  634. }
  635. }
  636. },
  637. "dst_int" : {
  638. "type" : "string",
  639. "norms" : {
  640. "enabled" : false
  641. },
  642. "fielddata" : {
  643. "format" : "disabled"
  644. },
  645. "fields" : {
  646. "raw" : {
  647. "type" : "string",
  648. "index" : "not_analyzed",
  649. "ignore_above" : 256
  650. }
  651. }
  652. },
  653. "dst_port" : {
  654. "type" : "string",
  655. "norms" : {
  656. "enabled" : false
  657. },
  658. "fielddata" : {
  659. "format" : "disabled"
  660. },
  661. "fields" : {
  662. "raw" : {
  663. "type" : "string",
  664. "index" : "not_analyzed",
  665. "ignore_above" : 256
  666. }
  667. }
  668. },
  669. "dstcountry" : {
  670. "type" : "string",
  671. "norms" : {
  672. "enabled" : false
  673. },
  674. "fielddata" : {
  675. "format" : "disabled"
  676. },
  677. "fields" : {
  678. "raw" : {
  679. "type" : "string",
  680. "index" : "not_analyzed",
  681. "ignore_above" : 256
  682. }
  683. }
  684. },
  685. "dstintf" : {
  686. "type" : "string",
  687. "norms" : {
  688. "enabled" : false
  689. },
  690. "fielddata" : {
  691. "format" : "disabled"
  692. },
  693. "fields" : {
  694. "raw" : {
  695. "type" : "string",
  696. "index" : "not_analyzed",
  697. "ignore_above" : 256
  698. }
  699. }
  700. },
  701. "dstip" : {
  702. "type" : "string",
  703. "norms" : {
  704. "enabled" : false
  705. },
  706. "fielddata" : {
  707. "format" : "disabled"
  708. },
  709. "fields" : {
  710. "raw" : {
  711. "type" : "string",
  712. "index" : "not_analyzed",
  713. "ignore_above" : 256
  714. }
  715. }
  716. },
  717. "dstname" : {
  718. "type" : "string",
  719. "norms" : {
  720. "enabled" : false
  721. },
  722. "fielddata" : {
  723. "format" : "disabled"
  724. },
  725. "fields" : {
  726. "raw" : {
  727. "type" : "string",
  728. "index" : "not_analyzed",
  729. "ignore_above" : 256
  730. }
  731. }
  732. },
  733. "dstport" : {
  734. "type" : "string",
  735. "norms" : {
  736. "enabled" : false
  737. },
  738. "fielddata" : {
  739. "format" : "disabled"
  740. },
  741. "fields" : {
  742. "raw" : {
  743. "type" : "string",
  744. "index" : "not_analyzed",
  745. "ignore_above" : 256
  746. }
  747. }
  748. },
  749. "duration" : {
  750. "type" : "string",
  751. "norms" : {
  752. "enabled" : false
  753. },
  754. "fielddata" : {
  755. "format" : "disabled"
  756. },
  757. "fields" : {
  758. "raw" : {
  759. "type" : "string",
  760. "index" : "not_analyzed",
  761. "ignore_above" : 256
  762. }
  763. }
  764. },
  765. "geoip" : {
  766. "dynamic" : "true",
  767. "properties" : {
  768. "area_code" : {
  769. "type" : "long"
  770. },
  771. "city_name" : {
  772. "type" : "string",
  773. "norms" : {
  774. "enabled" : false
  775. },
  776. "fielddata" : {
  777. "format" : "disabled"
  778. },
  779. "fields" : {
  780. "raw" : {
  781. "type" : "string",
  782. "index" : "not_analyzed",
  783. "ignore_above" : 256
  784. }
  785. }
  786. },
  787. "continent_code" : {
  788. "type" : "string",
  789. "norms" : {
  790. "enabled" : false
  791. },
  792. "fielddata" : {
  793. "format" : "disabled"
  794. },
  795. "fields" : {
  796. "raw" : {
  797. "type" : "string",
  798. "index" : "not_analyzed",
  799. "ignore_above" : 256
  800. }
  801. }
  802. },
  803. "country_code2" : {
  804. "type" : "string",
  805. "norms" : {
  806. "enabled" : false
  807. },
  808. "fielddata" : {
  809. "format" : "disabled"
  810. },
  811. "fields" : {
  812. "raw" : {
  813. "type" : "string",
  814. "index" : "not_analyzed",
  815. "ignore_above" : 256
  816. }
  817. }
  818. },
  819. "country_code3" : {
  820. "type" : "string",
  821. "norms" : {
  822. "enabled" : false
  823. },
  824. "fielddata" : {
  825. "format" : "disabled"
  826. },
  827. "fields" : {
  828. "raw" : {
  829. "type" : "string",
  830. "index" : "not_analyzed",
  831. "ignore_above" : 256
  832. }
  833. }
  834. },
  835. "country_name" : {
  836. "type" : "string",
  837. "norms" : {
  838. "enabled" : false
  839. },
  840. "fielddata" : {
  841. "format" : "disabled"
  842. },
  843. "fields" : {
  844. "raw" : {
  845. "type" : "string",
  846. "index" : "not_analyzed",
  847. "ignore_above" : 256
  848. }
  849. }
  850. },
  851. "dma_code" : {
  852. "type" : "long"
  853. },
  854. "ip" : {
  855. "type" : "ip"
  856. },
  857. "latitude" : {
  858. "type" : "float"
  859. },
  860. "location" : {
  861. "type" : "geo_point"
  862. },
  863. "longitude" : {
  864. "type" : "float"
  865. },
  866. "postal_code" : {
  867. "type" : "string",
  868. "norms" : {
  869. "enabled" : false
  870. },
  871. "fielddata" : {
  872. "format" : "disabled"
  873. },
  874. "fields" : {
  875. "raw" : {
  876. "type" : "string",
  877. "index" : "not_analyzed",
  878. "ignore_above" : 256
  879. }
  880. }
  881. },
  882. "real_region_name" : {
  883. "type" : "string",
  884. "norms" : {
  885. "enabled" : false
  886. },
  887. "fielddata" : {
  888. "format" : "disabled"
  889. },
  890. "fields" : {
  891. "raw" : {
  892. "type" : "string",
  893. "index" : "not_analyzed",
  894. "ignore_above" : 256
  895. }
  896. }
  897. },
  898. "region_name" : {
  899. "type" : "string",
  900. "norms" : {
  901. "enabled" : false
  902. },
  903. "fielddata" : {
  904. "format" : "disabled"
  905. },
  906. "fields" : {
  907. "raw" : {
  908. "type" : "string",
  909. "index" : "not_analyzed",
  910. "ignore_above" : 256
  911. }
  912. }
  913. },
  914. "timezone" : {
  915. "type" : "string",
  916. "norms" : {
  917. "enabled" : false
  918. },
  919. "fielddata" : {
  920. "format" : "disabled"
  921. },
  922. "fields" : {
  923. "raw" : {
  924. "type" : "string",
  925. "index" : "not_analyzed",
  926. "ignore_above" : 256
  927. }
  928. }
  929. }
  930. }
  931. },
  932. "group" : {
  933. "type" : "string",
  934. "norms" : {
  935. "enabled" : false
  936. },
  937. "fielddata" : {
  938. "format" : "disabled"
  939. },
  940. "fields" : {
  941. "raw" : {
  942. "type" : "string",
  943. "index" : "not_analyzed",
  944. "ignore_above" : 256
  945. }
  946. }
  947. },
  948. "host" : {
  949. "type" : "string",
  950. "norms" : {
  951. "enabled" : false
  952. },
  953. "fielddata" : {
  954. "format" : "disabled"
  955. },
  956. "fields" : {
  957. "raw" : {
  958. "type" : "string",
  959. "index" : "not_analyzed",
  960. "ignore_above" : 256
  961. }
  962. }
  963. },
  964. "identidx" : {
  965. "type" : "string",
  966. "norms" : {
  967. "enabled" : false
  968. },
  969. "fielddata" : {
  970. "format" : "disabled"
  971. },
  972. "fields" : {
  973. "raw" : {
  974. "type" : "string",
  975. "index" : "not_analyzed",
  976. "ignore_above" : 256
  977. }
  978. }
  979. },
  980. "kv" : {
  981. "type" : "string",
  982. "norms" : {
  983. "enabled" : false
  984. },
  985. "fielddata" : {
  986. "format" : "disabled"
  987. },
  988. "fields" : {
  989. "raw" : {
  990. "type" : "string",
  991. "index" : "not_analyzed",
  992. "ignore_above" : 256
  993. }
  994. }
  995. },
  996. "lanin" : {
  997. "type" : "string",
  998. "norms" : {
  999. "enabled" : false
  1000. },
  1001. "fielddata" : {
  1002. "format" : "disabled"
  1003. },
  1004. "fields" : {
  1005. "raw" : {
  1006. "type" : "string",
  1007. "index" : "not_analyzed",
  1008. "ignore_above" : 256
  1009. }
  1010. }
  1011. },
  1012. "lanout" : {
  1013. "type" : "string",
  1014. "norms" : {
  1015. "enabled" : false
  1016. },
  1017. "fielddata" : {
  1018. "format" : "disabled"
  1019. },
  1020. "fields" : {
  1021. "raw" : {
  1022. "type" : "string",
  1023. "index" : "not_analyzed",
  1024. "ignore_above" : 256
  1025. }
  1026. }
  1027. },
  1028. "level" : {
  1029. "type" : "string",
  1030. "norms" : {
  1031. "enabled" : false
  1032. },
  1033. "fielddata" : {
  1034. "format" : "disabled"
  1035. },
  1036. "fields" : {
  1037. "raw" : {
  1038. "type" : "string",
  1039. "index" : "not_analyzed",
  1040. "ignore_above" : 256
  1041. }
  1042. }
  1043. },
  1044. "log_id" : {
  1045. "type" : "string",
  1046. "norms" : {
  1047. "enabled" : false
  1048. },
  1049. "fielddata" : {
  1050. "format" : "disabled"
  1051. },
  1052. "fields" : {
  1053. "raw" : {
  1054. "type" : "string",
  1055. "index" : "not_analyzed",
  1056. "ignore_above" : 256
  1057. }
  1058. }
  1059. },
  1060. "logid" : {
  1061. "type" : "string",
  1062. "norms" : {
  1063. "enabled" : false
  1064. },
  1065. "fielddata" : {
  1066. "format" : "disabled"
  1067. },
  1068. "fields" : {
  1069. "raw" : {
  1070. "type" : "string",
  1071. "index" : "not_analyzed",
  1072. "ignore_above" : 256
  1073. }
  1074. }
  1075. },
  1076. "mastersrcmac" : {
  1077. "type" : "string",
  1078. "norms" : {
  1079. "enabled" : false
  1080. },
  1081. "fielddata" : {
  1082. "format" : "disabled"
  1083. },
  1084. "fields" : {
  1085. "raw" : {
  1086. "type" : "string",
  1087. "index" : "not_analyzed",
  1088. "ignore_above" : 256
  1089. }
  1090. }
  1091. },
  1092. "msg" : {
  1093. "type" : "string",
  1094. "norms" : {
  1095. "enabled" : false
  1096. },
  1097. "fielddata" : {
  1098. "format" : "disabled"
  1099. },
  1100. "fields" : {
  1101. "raw" : {
  1102. "type" : "string",
  1103. "index" : "not_analyzed",
  1104. "ignore_above" : 256
  1105. }
  1106. }
  1107. },
  1108. "osname" : {
  1109. "type" : "string",
  1110. "norms" : {
  1111. "enabled" : false
  1112. },
  1113. "fielddata" : {
  1114. "format" : "disabled"
  1115. },
  1116. "fields" : {
  1117. "raw" : {
  1118. "type" : "string",
  1119. "index" : "not_analyzed",
  1120. "ignore_above" : 256
  1121. }
  1122. }
  1123. },
  1124. "osversion" : {
  1125. "type" : "string",
  1126. "norms" : {
  1127. "enabled" : false
  1128. },
  1129. "fielddata" : {
  1130. "format" : "disabled"
  1131. },
  1132. "fields" : {
  1133. "raw" : {
  1134. "type" : "string",
  1135. "index" : "not_analyzed",
  1136. "ignore_above" : 256
  1137. }
  1138. }
  1139. },
  1140. "path" : {
  1141. "type" : "string",
  1142. "norms" : {
  1143. "enabled" : false
  1144. },
  1145. "fielddata" : {
  1146. "format" : "disabled"
  1147. },
  1148. "fields" : {
  1149. "raw" : {
  1150. "type" : "string",
  1151. "index" : "not_analyzed",
  1152. "ignore_above" : 256
  1153. }
  1154. }
  1155. },
  1156. "perip_drop" : {
  1157. "type" : "string",
  1158. "norms" : {
  1159. "enabled" : false
  1160. },
  1161. "fielddata" : {
  1162. "format" : "disabled"
  1163. },
  1164. "fields" : {
  1165. "raw" : {
  1166. "type" : "string",
  1167. "index" : "not_analyzed",
  1168. "ignore_above" : 256
  1169. }
  1170. }
  1171. },
  1172. "perip_name" : {
  1173. "type" : "string",
  1174. "norms" : {
  1175. "enabled" : false
  1176. },
  1177. "fielddata" : {
  1178. "format" : "disabled"
  1179. },
  1180. "fields" : {
  1181. "raw" : {
  1182. "type" : "string",
  1183. "index" : "not_analyzed",
  1184. "ignore_above" : 256
  1185. }
  1186. }
  1187. },
  1188. "policyid" : {
  1189. "type" : "string",
  1190. "norms" : {
  1191. "enabled" : false
  1192. },
  1193. "fielddata" : {
  1194. "format" : "disabled"
  1195. },
  1196. "fields" : {
  1197. "raw" : {
  1198. "type" : "string",
  1199. "index" : "not_analyzed",
  1200. "ignore_above" : 256
  1201. }
  1202. }
  1203. },
  1204. "poluuid" : {
  1205. "type" : "string",
  1206. "norms" : {
  1207. "enabled" : false
  1208. },
  1209. "fielddata" : {
  1210. "format" : "disabled"
  1211. },
  1212. "fields" : {
  1213. "raw" : {
  1214. "type" : "string",
  1215. "index" : "not_analyzed",
  1216. "ignore_above" : 256
  1217. }
  1218. }
  1219. },
  1220. "pri" : {
  1221. "type" : "string",
  1222. "norms" : {
  1223. "enabled" : false
  1224. },
  1225. "fielddata" : {
  1226. "format" : "disabled"
  1227. },
  1228. "fields" : {
  1229. "raw" : {
  1230. "type" : "string",
  1231. "index" : "not_analyzed",
  1232. "ignore_above" : 256
  1233. }
  1234. }
  1235. },
  1236. "profilegroup" : {
  1237. "type" : "string",
  1238. "norms" : {
  1239. "enabled" : false
  1240. },
  1241. "fielddata" : {
  1242. "format" : "disabled"
  1243. },
  1244. "fields" : {
  1245. "raw" : {
  1246. "type" : "string",
  1247. "index" : "not_analyzed",
  1248. "ignore_above" : 256
  1249. }
  1250. }
  1251. },
  1252. "proto" : {
  1253. "type" : "string",
  1254. "norms" : {
  1255. "enabled" : false
  1256. },
  1257. "fielddata" : {
  1258. "format" : "disabled"
  1259. },
  1260. "fields" : {
  1261. "raw" : {
  1262. "type" : "string",
  1263. "index" : "not_analyzed",
  1264. "ignore_above" : 256
  1265. }
  1266. }
  1267. },
  1268. "rcvd" : {
  1269. "type" : "string",
  1270. "norms" : {
  1271. "enabled" : false
  1272. },
  1273. "fielddata" : {
  1274. "format" : "disabled"
  1275. },
  1276. "fields" : {
  1277. "raw" : {
  1278. "type" : "string",
  1279. "index" : "not_analyzed",
  1280. "ignore_above" : 256
  1281. }
  1282. }
  1283. },
  1284. "rcvd_pkt" : {
  1285. "type" : "string",
  1286. "norms" : {
  1287. "enabled" : false
  1288. },
  1289. "fielddata" : {
  1290. "format" : "disabled"
  1291. },
  1292. "fields" : {
  1293. "raw" : {
  1294. "type" : "string",
  1295. "index" : "not_analyzed",
  1296. "ignore_above" : 256
  1297. }
  1298. }
  1299. },
  1300. "rcvdbyte" : {
  1301. "type" : "string",
  1302. "norms" : {
  1303. "enabled" : false
  1304. },
  1305. "fielddata" : {
  1306. "format" : "disabled"
  1307. },
  1308. "fields" : {
  1309. "raw" : {
  1310. "type" : "string",
  1311. "index" : "not_analyzed",
  1312. "ignore_above" : 256
  1313. }
  1314. }
  1315. },
  1316. "rcvdpkt" : {
  1317. "type" : "string",
  1318. "norms" : {
  1319. "enabled" : false
  1320. },
  1321. "fielddata" : {
  1322. "format" : "disabled"
  1323. },
  1324. "fields" : {
  1325. "raw" : {
  1326. "type" : "string",
  1327. "index" : "not_analyzed",
  1328. "ignore_above" : 256
  1329. }
  1330. }
  1331. },
  1332. "rule" : {
  1333. "type" : "string",
  1334. "norms" : {
  1335. "enabled" : false
  1336. },
  1337. "fielddata" : {
  1338. "format" : "disabled"
  1339. },
  1340. "fields" : {
  1341. "raw" : {
  1342. "type" : "string",
  1343. "index" : "not_analyzed",
  1344. "ignore_above" : 256
  1345. }
  1346. }
  1347. },
  1348. "sent" : {
  1349. "type" : "string",
  1350. "norms" : {
  1351. "enabled" : false
  1352. },
  1353. "fielddata" : {
  1354. "format" : "disabled"
  1355. },
  1356. "fields" : {
  1357. "raw" : {
  1358. "type" : "string",
  1359. "index" : "not_analyzed",
  1360. "ignore_above" : 256
  1361. }
  1362. }
  1363. },
  1364. "sent_pkt" : {
  1365. "type" : "string",
  1366. "norms" : {
  1367. "enabled" : false
  1368. },
  1369. "fielddata" : {
  1370. "format" : "disabled"
  1371. },
  1372. "fields" : {
  1373. "raw" : {
  1374. "type" : "string",
  1375. "index" : "not_analyzed",
  1376. "ignore_above" : 256
  1377. }
  1378. }
  1379. },
  1380. "sentbyte" : {
  1381. "type" : "string",
  1382. "norms" : {
  1383. "enabled" : false
  1384. },
  1385. "fielddata" : {
  1386. "format" : "disabled"
  1387. },
  1388. "fields" : {
  1389. "raw" : {
  1390. "type" : "string",
  1391. "index" : "not_analyzed",
  1392. "ignore_above" : 256
  1393. }
  1394. }
  1395. },
  1396. "sentpkt" : {
  1397. "type" : "string",
  1398. "norms" : {
  1399. "enabled" : false
  1400. },
  1401. "fielddata" : {
  1402. "format" : "disabled"
  1403. },
  1404. "fields" : {
  1405. "raw" : {
  1406. "type" : "string",
  1407. "index" : "not_analyzed",
  1408. "ignore_above" : 256
  1409. }
  1410. }
  1411. },
  1412. "service" : {
  1413. "type" : "string",
  1414. "norms" : {
  1415. "enabled" : false
  1416. },
  1417. "fielddata" : {
  1418. "format" : "disabled"
  1419. },
  1420. "fields" : {
  1421. "raw" : {
  1422. "type" : "string",
  1423. "index" : "not_analyzed",
  1424. "ignore_above" : 256
  1425. }
  1426. }
  1427. },
  1428. "sessionid" : {
  1429. "type" : "string",
  1430. "norms" : {
  1431. "enabled" : false
  1432. },
  1433. "fielddata" : {
  1434. "format" : "disabled"
  1435. },
  1436. "fields" : {
  1437. "raw" : {
  1438. "type" : "string",
  1439. "index" : "not_analyzed",
  1440. "ignore_above" : 256
  1441. }
  1442. }
  1443. },
  1444. "shaper_drop_rcvd" : {
  1445. "type" : "string",
  1446. "norms" : {
  1447. "enabled" : false
  1448. },
  1449. "fielddata" : {
  1450. "format" : "disabled"
  1451. },
  1452. "fields" : {
  1453. "raw" : {
  1454. "type" : "string",
  1455. "index" : "not_analyzed",
  1456. "ignore_above" : 256
  1457. }
  1458. }
  1459. },
  1460. "shaper_drop_sent" : {
  1461. "type" : "string",
  1462. "norms" : {
  1463. "enabled" : false
  1464. },
  1465. "fielddata" : {
  1466. "format" : "disabled"
  1467. },
  1468. "fields" : {
  1469. "raw" : {
  1470. "type" : "string",
  1471. "index" : "not_analyzed",
  1472. "ignore_above" : 256
  1473. }
  1474. }
  1475. },
  1476. "shaper_rcvd_name" : {
  1477. "type" : "string",
  1478. "norms" : {
  1479. "enabled" : false
  1480. },
  1481. "fielddata" : {
  1482. "format" : "disabled"
  1483. },
  1484. "fields" : {
  1485. "raw" : {
  1486. "type" : "string",
  1487. "index" : "not_analyzed",
  1488. "ignore_above" : 256
  1489. }
  1490. }
  1491. },
  1492. "shaper_sent_name" : {
  1493. "type" : "string",
  1494. "norms" : {
  1495. "enabled" : false
  1496. },
  1497. "fielddata" : {
  1498. "format" : "disabled"
  1499. },
  1500. "fields" : {
  1501. "raw" : {
  1502. "type" : "string",
  1503. "index" : "not_analyzed",
  1504. "ignore_above" : 256
  1505. }
  1506. }
  1507. },
  1508. "shaperdroprcvdbyte" : {
  1509. "type" : "string",
  1510. "norms" : {
  1511. "enabled" : false
  1512. },
  1513. "fielddata" : {
  1514. "format" : "disabled"
  1515. },
  1516. "fields" : {
  1517. "raw" : {
  1518. "type" : "string",
  1519. "index" : "not_analyzed",
  1520. "ignore_above" : 256
  1521. }
  1522. }
  1523. },
  1524. "shaperdropsentbyte" : {
  1525. "type" : "string",
  1526. "norms" : {
  1527. "enabled" : false
  1528. },
  1529. "fielddata" : {
  1530. "format" : "disabled"
  1531. },
  1532. "fields" : {
  1533. "raw" : {
  1534. "type" : "string",
  1535. "index" : "not_analyzed",
  1536. "ignore_above" : 256
  1537. }
  1538. }
  1539. },
  1540. "shaperrcvdname" : {
  1541. "type" : "string",
  1542. "norms" : {
  1543. "enabled" : false
  1544. },
  1545. "fielddata" : {
  1546. "format" : "disabled"
  1547. },
  1548. "fields" : {
  1549. "raw" : {
  1550. "type" : "string",
  1551. "index" : "not_analyzed",
  1552. "ignore_above" : 256
  1553. }
  1554. }
  1555. },
  1556. "shapersentname" : {
  1557. "type" : "string",
  1558. "norms" : {
  1559. "enabled" : false
  1560. },
  1561. "fielddata" : {
  1562. "format" : "disabled"
  1563. },
  1564. "fields" : {
  1565. "raw" : {
  1566. "type" : "string",
  1567. "index" : "not_analyzed",
  1568. "ignore_above" : 256
  1569. }
  1570. }
  1571. },
  1572. "src" : {
  1573. "type" : "string",
  1574. "norms" : {
  1575. "enabled" : false
  1576. },
  1577. "fielddata" : {
  1578. "format" : "disabled"
  1579. },
  1580. "fields" : {
  1581. "raw" : {
  1582. "type" : "string",
  1583. "index" : "not_analyzed",
  1584. "ignore_above" : 256
  1585. }
  1586. }
  1587. },
  1588. "src_country" : {
  1589. "type" : "string",
  1590. "norms" : {
  1591. "enabled" : false
  1592. },
  1593. "fielddata" : {
  1594. "format" : "disabled"
  1595. },
  1596. "fields" : {
  1597. "raw" : {
  1598. "type" : "string",
  1599. "index" : "not_analyzed",
  1600. "ignore_above" : 256
  1601. }
  1602. }
  1603. },
  1604. "src_int" : {
  1605. "type" : "string",
  1606. "norms" : {
  1607. "enabled" : false
  1608. },
  1609. "fielddata" : {
  1610. "format" : "disabled"
  1611. },
  1612. "fields" : {
  1613. "raw" : {
  1614. "type" : "string",
  1615. "index" : "not_analyzed",
  1616. "ignore_above" : 256
  1617. }
  1618. }
  1619. },
  1620. "src_port" : {
  1621. "type" : "string",
  1622. "norms" : {
  1623. "enabled" : false
  1624. },
  1625. "fielddata" : {
  1626. "format" : "disabled"
  1627. },
  1628. "fields" : {
  1629. "raw" : {
  1630. "type" : "string",
  1631. "index" : "not_analyzed",
  1632. "ignore_above" : 256
  1633. }
  1634. }
  1635. },
  1636. "srccountry" : {
  1637. "type" : "string",
  1638. "norms" : {
  1639. "enabled" : false
  1640. },
  1641. "fielddata" : {
  1642. "format" : "disabled"
  1643. },
  1644. "fields" : {
  1645. "raw" : {
  1646. "type" : "string",
  1647. "index" : "not_analyzed",
  1648. "ignore_above" : 256
  1649. }
  1650. }
  1651. },
  1652. "srcintf" : {
  1653. "type" : "string",
  1654. "norms" : {
  1655. "enabled" : false
  1656. },
  1657. "fielddata" : {
  1658. "format" : "disabled"
  1659. },
  1660. "fields" : {
  1661. "raw" : {
  1662. "type" : "string",
  1663. "index" : "not_analyzed",
  1664. "ignore_above" : 256
  1665. }
  1666. }
  1667. },
  1668. "srcip" : {
  1669. "type" : "string",
  1670. "norms" : {
  1671. "enabled" : false
  1672. },
  1673. "fielddata" : {
  1674. "format" : "disabled"
  1675. },
  1676. "fields" : {
  1677. "raw" : {
  1678. "type" : "string",
  1679. "index" : "not_analyzed",
  1680. "ignore_above" : 256
  1681. }
  1682. }
  1683. },
  1684. "srcmac" : {
  1685. "type" : "string",
  1686. "norms" : {
  1687. "enabled" : false
  1688. },
  1689. "fielddata" : {
  1690. "format" : "disabled"
  1691. },
  1692. "fields" : {
  1693. "raw" : {
  1694. "type" : "string",
  1695. "index" : "not_analyzed",
  1696. "ignore_above" : 256
  1697. }
  1698. }
  1699. },
  1700. "srcname" : {
  1701. "type" : "string",
  1702. "norms" : {
  1703. "enabled" : false
  1704. },
  1705. "fielddata" : {
  1706. "format" : "disabled"
  1707. },
  1708. "fields" : {
  1709. "raw" : {
  1710. "type" : "string",
  1711. "index" : "not_analyzed",
  1712. "ignore_above" : 256
  1713. }
  1714. }
  1715. },
  1716. "srcport" : {
  1717. "type" : "string",
  1718. "norms" : {
  1719. "enabled" : false
  1720. },
  1721. "fielddata" : {
  1722. "format" : "disabled"
  1723. },
  1724. "fields" : {
  1725. "raw" : {
  1726. "type" : "string",
  1727. "index" : "not_analyzed",
  1728. "ignore_above" : 256
  1729. }
  1730. }
  1731. },
  1732. "status" : {
  1733. "type" : "string",
  1734. "norms" : {
  1735. "enabled" : false
  1736. },
  1737. "fielddata" : {
  1738. "format" : "disabled"
  1739. },
  1740. "fields" : {
  1741. "raw" : {
  1742. "type" : "string",
  1743. "index" : "not_analyzed",
  1744. "ignore_above" : 256
  1745. }
  1746. }
  1747. },
  1748. "subapp" : {
  1749. "type" : "string",
  1750. "norms" : {
  1751. "enabled" : false
  1752. },
  1753. "fielddata" : {
  1754. "format" : "disabled"
  1755. },
  1756. "fields" : {
  1757. "raw" : {
  1758. "type" : "string",
  1759. "index" : "not_analyzed",
  1760. "ignore_above" : 256
  1761. }
  1762. }
  1763. },
  1764. "subappcat" : {
  1765. "type" : "string",
  1766. "norms" : {
  1767. "enabled" : false
  1768. },
  1769. "fielddata" : {
  1770. "format" : "disabled"
  1771. },
  1772. "fields" : {
  1773. "raw" : {
  1774. "type" : "string",
  1775. "index" : "not_analyzed",
  1776. "ignore_above" : 256
  1777. }
  1778. }
  1779. },
  1780. "subtype" : {
  1781. "type" : "string",
  1782. "norms" : {
  1783. "enabled" : false
  1784. },
  1785. "fielddata" : {
  1786. "format" : "disabled"
  1787. },
  1788. "fields" : {
  1789. "raw" : {
  1790. "type" : "string",
  1791. "index" : "not_analyzed",
  1792. "ignore_above" : 256
  1793. }
  1794. }
  1795. },
  1796. "time" : {
  1797. "type" : "string",
  1798. "norms" : {
  1799. "enabled" : false
  1800. },
  1801. "fielddata" : {
  1802. "format" : "disabled"
  1803. },
  1804. "fields" : {
  1805. "raw" : {
  1806. "type" : "string",
  1807. "index" : "not_analyzed",
  1808. "ignore_above" : 256
  1809. }
  1810. }
  1811. },
  1812. "tran_disp" : {
  1813. "type" : "string",
  1814. "norms" : {
  1815. "enabled" : false
  1816. },
  1817. "fielddata" : {
  1818. "format" : "disabled"
  1819. },
  1820. "fields" : {
  1821. "raw" : {
  1822. "type" : "string",
  1823. "index" : "not_analyzed",
  1824. "ignore_above" : 256
  1825. }
  1826. }
  1827. },
  1828. "tran_ip" : {
  1829. "type" : "string",
  1830. "norms" : {
  1831. "enabled" : false
  1832. },
  1833. "fielddata" : {
  1834. "format" : "disabled"
  1835. },
  1836. "fields" : {
  1837. "raw" : {
  1838. "type" : "string",
  1839. "index" : "not_analyzed",
  1840. "ignore_above" : 256
  1841. }
  1842. }
  1843. },
  1844. "tran_port" : {
  1845. "type" : "string",
  1846. "norms" : {
  1847. "enabled" : false
  1848. },
  1849. "fielddata" : {
  1850. "format" : "disabled"
  1851. },
  1852. "fields" : {
  1853. "raw" : {
  1854. "type" : "string",
  1855. "index" : "not_analyzed",
  1856. "ignore_above" : 256
  1857. }
  1858. }
  1859. },
  1860. "tran_sip" : {
  1861. "type" : "string",
  1862. "norms" : {
  1863. "enabled" : false
  1864. },
  1865. "fielddata" : {
  1866. "format" : "disabled"
  1867. },
  1868. "fields" : {
  1869. "raw" : {
  1870. "type" : "string",
  1871. "index" : "not_analyzed",
  1872. "ignore_above" : 256
  1873. }
  1874. }
  1875. },
  1876. "tran_sport" : {
  1877. "type" : "string",
  1878. "norms" : {
  1879. "enabled" : false
  1880. },
  1881. "fielddata" : {
  1882. "format" : "disabled"
  1883. },
  1884. "fields" : {
  1885. "raw" : {
  1886. "type" : "string",
  1887. "index" : "not_analyzed",
  1888. "ignore_above" : 256
  1889. }
  1890. }
  1891. },
  1892. "trandisp" : {
  1893. "type" : "string",
  1894. "norms" : {
  1895. "enabled" : false
  1896. },
  1897. "fielddata" : {
  1898. "format" : "disabled"
  1899. },
  1900. "fields" : {
  1901. "raw" : {
  1902. "type" : "string",
  1903. "index" : "not_analyzed",
  1904. "ignore_above" : 256
  1905. }
  1906. }
  1907. },
  1908. "tranip" : {
  1909. "type" : "string",
  1910. "norms" : {
  1911. "enabled" : false
  1912. },
  1913. "fielddata" : {
  1914. "format" : "disabled"
  1915. },
  1916. "fields" : {
  1917. "raw" : {
  1918. "type" : "string",
  1919. "index" : "not_analyzed",
  1920. "ignore_above" : 256
  1921. }
  1922. }
  1923. },
  1924. "tranport" : {
  1925. "type" : "string",
  1926. "norms" : {
  1927. "enabled" : false
  1928. },
  1929. "fielddata" : {
  1930. "format" : "disabled"
  1931. },
  1932. "fields" : {
  1933. "raw" : {
  1934. "type" : "string",
  1935. "index" : "not_analyzed",
  1936. "ignore_above" : 256
  1937. }
  1938. }
  1939. },
  1940. "transip" : {
  1941. "type" : "string",
  1942. "norms" : {
  1943. "enabled" : false
  1944. },
  1945. "fielddata" : {
  1946. "format" : "disabled"
  1947. },
  1948. "fields" : {
  1949. "raw" : {
  1950. "type" : "string",
  1951. "index" : "not_analyzed",
  1952. "ignore_above" : 256
  1953. }
  1954. }
  1955. },
  1956. "transport" : {
  1957. "type" : "string",
  1958. "norms" : {
  1959. "enabled" : false
  1960. },
  1961. "fielddata" : {
  1962. "format" : "disabled"
  1963. },
  1964. "fields" : {
  1965. "raw" : {
  1966. "type" : "string",
  1967. "index" : "not_analyzed",
  1968. "ignore_above" : 256
  1969. }
  1970. }
  1971. },
  1972. "type" : {
  1973. "type" : "string",
  1974. "norms" : {
  1975. "enabled" : false
  1976. },
  1977. "fielddata" : {
  1978. "format" : "disabled"
  1979. },
  1980. "fields" : {
  1981. "raw" : {
  1982. "type" : "string",
  1983. "index" : "not_analyzed",
  1984. "ignore_above" : 256
  1985. }
  1986. }
  1987. },
  1988. "unauthuser" : {
  1989. "type" : "string",
  1990. "norms" : {
  1991. "enabled" : false
  1992. },
  1993. "fielddata" : {
  1994. "format" : "disabled"
  1995. },
  1996. "fields" : {
  1997. "raw" : {
  1998. "type" : "string",
  1999. "index" : "not_analyzed",
  2000. "ignore_above" : 256
  2001. }
  2002. }
  2003. },
  2004. "unauthusersource" : {
  2005. "type" : "string",
  2006. "norms" : {
  2007. "enabled" : false
  2008. },
  2009. "fielddata" : {
  2010. "format" : "disabled"
  2011. },
  2012. "fields" : {
  2013. "raw" : {
  2014. "type" : "string",
  2015. "index" : "not_analyzed",
  2016. "ignore_above" : 256
  2017. }
  2018. }
  2019. },
  2020. "user" : {
  2021. "type" : "string",
  2022. "norms" : {
  2023. "enabled" : false
  2024. },
  2025. "fielddata" : {
  2026. "format" : "disabled"
  2027. },
  2028. "fields" : {
  2029. "raw" : {
  2030. "type" : "string",
  2031. "index" : "not_analyzed",
  2032. "ignore_above" : 256
  2033. }
  2034. }
  2035. },
  2036. "utmaction" : {
  2037. "type" : "string",
  2038. "norms" : {
  2039. "enabled" : false
  2040. },
  2041. "fielddata" : {
  2042. "format" : "disabled"
  2043. },
  2044. "fields" : {
  2045. "raw" : {
  2046. "type" : "string",
  2047. "index" : "not_analyzed",
  2048. "ignore_above" : 256
  2049. }
  2050. }
  2051. },
  2052. "vd" : {
  2053. "type" : "string",
  2054. "norms" : {
  2055. "enabled" : false
  2056. },
  2057. "fielddata" : {
  2058. "format" : "disabled"
  2059. },
  2060. "fields" : {
  2061. "raw" : {
  2062. "type" : "string",
  2063. "index" : "not_analyzed",
  2064. "ignore_above" : 256
  2065. }
  2066. }
  2067. },
  2068. "vpn" : {
  2069. "type" : "string",
  2070. "norms" : {
  2071. "enabled" : false
  2072. },
  2073. "fielddata" : {
  2074. "format" : "disabled"
  2075. },
  2076. "fields" : {
  2077. "raw" : {
  2078. "type" : "string",
  2079. "index" : "not_analyzed",
  2080. "ignore_above" : 256
  2081. }
  2082. }
  2083. },
  2084. "vpn_tunnel" : {
  2085. "type" : "string",
  2086. "norms" : {
  2087. "enabled" : false
  2088. },
  2089. "fielddata" : {
  2090. "format" : "disabled"
  2091. },
  2092. "fields" : {
  2093. "raw" : {
  2094. "type" : "string",
  2095. "index" : "not_analyzed",
  2096. "ignore_above" : 256
  2097. }
  2098. }
  2099. },
  2100. "vpntype" : {
  2101. "type" : "string",
  2102. "norms" : {
  2103. "enabled" : false
  2104. },
  2105. "fielddata" : {
  2106. "format" : "disabled"
  2107. },
  2108. "fields" : {
  2109. "raw" : {
  2110. "type" : "string",
  2111. "index" : "not_analyzed",
  2112. "ignore_above" : 256
  2113. }
  2114. }
  2115. },
  2116. "wanin" : {
  2117. "type" : "string",
  2118. "norms" : {
  2119. "enabled" : false
  2120. },
  2121. "fielddata" : {
  2122. "format" : "disabled"
  2123. },
  2124. "fields" : {
  2125. "raw" : {
  2126. "type" : "string",
  2127. "index" : "not_analyzed",
  2128. "ignore_above" : 256
  2129. }
  2130. }
  2131. },
  2132. "wanoptapptype" : {
  2133. "type" : "string",
  2134. "norms" : {
  2135. "enabled" : false
  2136. },
  2137. "fielddata" : {
  2138. "format" : "disabled"
  2139. },
  2140. "fields" : {
  2141. "raw" : {
  2142. "type" : "string",
  2143. "index" : "not_analyzed",
  2144. "ignore_above" : 256
  2145. }
  2146. }
  2147. },
  2148. "wanout" : {
  2149. "type" : "string",
  2150. "norms" : {
  2151. "enabled" : false
  2152. },
  2153. "fielddata" : {
  2154. "format" : "disabled"
  2155. },
  2156. "fields" : {
  2157. "raw" : {
  2158. "type" : "string",
  2159. "index" : "not_analyzed",
  2160. "ignore_above" : 256
  2161. }
  2162. }
  2163. }
  2164. }
  2165. },
  2166. "utm" : {
  2167. "_all" : {
  2168. "enabled" : true,
  2169. "omit_norms" : true
  2170. },
  2171. "dynamic_templates" : [ {
  2172. "message_field" : {
  2173. "mapping" : {
  2174. "fielddata" : {
  2175. "format" : "disabled"
  2176. },
  2177. "index" : "analyzed",
  2178. "omit_norms" : true,
  2179. "type" : "string"
  2180. },
  2181. "match" : "message",
  2182. "match_mapping_type" : "string"
  2183. }
  2184. }, {
  2185. "string_fields" : {
  2186. "mapping" : {
  2187. "fielddata" : {
  2188. "format" : "disabled"
  2189. },
  2190. "index" : "analyzed",
  2191. "omit_norms" : true,
  2192. "type" : "string",
  2193. "fields" : {
  2194. "raw" : {
  2195. "ignore_above" : 256,
  2196. "index" : "not_analyzed",
  2197. "type" : "string",
  2198. "doc_values" : true
  2199. }
  2200. }
  2201. },
  2202. "match" : "*",
  2203. "match_mapping_type" : "string"
  2204. }
  2205. }, {
  2206. "float_fields" : {
  2207. "mapping" : {
  2208. "type" : "float",
  2209. "doc_values" : true
  2210. },
  2211. "match" : "*",
  2212. "match_mapping_type" : "float"
  2213. }
  2214. }, {
  2215. "double_fields" : {
  2216. "mapping" : {
  2217. "type" : "double",
  2218. "doc_values" : true
  2219. },
  2220. "match" : "*",
  2221. "match_mapping_type" : "double"
  2222. }
  2223. }, {
  2224. "byte_fields" : {
  2225. "mapping" : {
  2226. "type" : "byte",
  2227. "doc_values" : true
  2228. },
  2229. "match" : "*",
  2230. "match_mapping_type" : "byte"
  2231. }
  2232. }, {
  2233. "short_fields" : {
  2234. "mapping" : {
  2235. "type" : "short",
  2236. "doc_values" : true
  2237. },
  2238. "match" : "*",
  2239. "match_mapping_type" : "short"
  2240. }
  2241. }, {
  2242. "integer_fields" : {
  2243. "mapping" : {
  2244. "type" : "integer",
  2245. "doc_values" : true
  2246. },
  2247. "match" : "*",
  2248. "match_mapping_type" : "integer"
  2249. }
  2250. }, {
  2251. "long_fields" : {
  2252. "mapping" : {
  2253. "type" : "long",
  2254. "doc_values" : true
  2255. },
  2256. "match" : "*",
  2257. "match_mapping_type" : "long"
  2258. }
  2259. }, {
  2260. "date_fields" : {
  2261. "mapping" : {
  2262. "type" : "date",
  2263. "doc_values" : true
  2264. },
  2265. "match" : "*",
  2266. "match_mapping_type" : "date"
  2267. }
  2268. }, {
  2269. "geo_point_fields" : {
  2270. "mapping" : {
  2271. "type" : "geo_point",
  2272. "doc_values" : true
  2273. },
  2274. "match" : "*",
  2275. "match_mapping_type" : "geo_point"
  2276. }
  2277. } ],
  2278. "properties" : {
  2279. "@timestamp" : {
  2280. "type" : "date",
  2281. "format" : "strict_date_optional_time||epoch_millis"
  2282. },
  2283. "@version" : {
  2284. "type" : "string",
  2285. "index" : "not_analyzed"
  2286. },
  2287. "action" : {
  2288. "type" : "string",
  2289. "norms" : {
  2290. "enabled" : false
  2291. },
  2292. "fielddata" : {
  2293. "format" : "disabled"
  2294. },
  2295. "fields" : {
  2296. "raw" : {
  2297. "type" : "string",
  2298. "index" : "not_analyzed",
  2299. "ignore_above" : 256
  2300. }
  2301. }
  2302. },
  2303. "agent" : {
  2304. "type" : "string",
  2305. "norms" : {
  2306. "enabled" : false
  2307. },
  2308. "fielddata" : {
  2309. "format" : "disabled"
  2310. },
  2311. "fields" : {
  2312. "raw" : {
  2313. "type" : "string",
  2314. "index" : "not_analyzed",
  2315. "ignore_above" : 256
  2316. }
  2317. }
  2318. },
  2319. "app" : {
  2320. "type" : "string",
  2321. "norms" : {
  2322. "enabled" : false
  2323. },
  2324. "fielddata" : {
  2325. "format" : "disabled"
  2326. },
  2327. "fields" : {
  2328. "raw" : {
  2329. "type" : "string",
  2330. "index" : "not_analyzed",
  2331. "ignore_above" : 256
  2332. }
  2333. }
  2334. },
  2335. "appcat" : {
  2336. "type" : "string",
  2337. "norms" : {
  2338. "enabled" : false
  2339. },
  2340. "fielddata" : {
  2341. "format" : "disabled"
  2342. },
  2343. "fields" : {
  2344. "raw" : {
  2345. "type" : "string",
  2346. "index" : "not_analyzed",
  2347. "ignore_above" : 256
  2348. }
  2349. }
  2350. },
  2351. "appid" : {
  2352. "type" : "string",
  2353. "norms" : {
  2354. "enabled" : false
  2355. },
  2356. "fielddata" : {
  2357. "format" : "disabled"
  2358. },
  2359. "fields" : {
  2360. "raw" : {
  2361. "type" : "string",
  2362. "index" : "not_analyzed",
  2363. "ignore_above" : 256
  2364. }
  2365. }
  2366. },
  2367. "applist" : {
  2368. "type" : "string",
  2369. "norms" : {
  2370. "enabled" : false
  2371. },
  2372. "fielddata" : {
  2373. "format" : "disabled"
  2374. },
  2375. "fields" : {
  2376. "raw" : {
  2377. "type" : "string",
  2378. "index" : "not_analyzed",
  2379. "ignore_above" : 256
  2380. }
  2381. }
  2382. },
  2383. "apprisk" : {
  2384. "type" : "string",
  2385. "norms" : {
  2386. "enabled" : false
  2387. },
  2388. "fielddata" : {
  2389. "format" : "disabled"
  2390. },
  2391. "fields" : {
  2392. "raw" : {
  2393. "type" : "string",
  2394. "index" : "not_analyzed",
  2395. "ignore_above" : 256
  2396. }
  2397. }
  2398. },
  2399. "cat" : {
  2400. "type" : "string",
  2401. "norms" : {
  2402. "enabled" : false
  2403. },
  2404. "fielddata" : {
  2405. "format" : "disabled"
  2406. },
  2407. "fields" : {
  2408. "raw" : {
  2409. "type" : "string",
  2410. "index" : "not_analyzed",
  2411. "ignore_above" : 256
  2412. }
  2413. }
  2414. },
  2415. "catdesc" : {
  2416. "type" : "string",
  2417. "norms" : {
  2418. "enabled" : false
  2419. },
  2420. "fielddata" : {
  2421. "format" : "disabled"
  2422. },
  2423. "fields" : {
  2424. "raw" : {
  2425. "type" : "string",
  2426. "index" : "not_analyzed",
  2427. "ignore_above" : 256
  2428. }
  2429. }
  2430. },
  2431. "crlevel" : {
  2432. "type" : "string",
  2433. "norms" : {
  2434. "enabled" : false
  2435. },
  2436. "fielddata" : {
  2437. "format" : "disabled"
  2438. },
  2439. "fields" : {
  2440. "raw" : {
  2441. "type" : "string",
  2442. "index" : "not_analyzed",
  2443. "ignore_above" : 256
  2444. }
  2445. }
  2446. },
  2447. "crscore" : {
  2448. "type" : "string",
  2449. "norms" : {
  2450. "enabled" : false
  2451. },
  2452. "fielddata" : {
  2453. "format" : "disabled"
  2454. },
  2455. "fields" : {
  2456. "raw" : {
  2457. "type" : "string",
  2458. "index" : "not_analyzed",
  2459. "ignore_above" : 256
  2460. }
  2461. }
  2462. },
  2463. "date" : {
  2464. "type" : "date",
  2465. "format" : "strict_date_optional_time||epoch_millis"
  2466. },
  2467. "devid" : {
  2468. "type" : "string",
  2469. "norms" : {
  2470. "enabled" : false
  2471. },
  2472. "fielddata" : {
  2473. "format" : "disabled"
  2474. },
  2475. "fields" : {
  2476. "raw" : {
  2477. "type" : "string",
  2478. "index" : "not_analyzed",
  2479. "ignore_above" : 256
  2480. }
  2481. }
  2482. },
  2483. "devname" : {
  2484. "type" : "string",
  2485. "norms" : {
  2486. "enabled" : false
  2487. },
  2488. "fielddata" : {
  2489. "format" : "disabled"
  2490. },
  2491. "fields" : {
  2492. "raw" : {
  2493. "type" : "string",
  2494. "index" : "not_analyzed",
  2495. "ignore_above" : 256
  2496. }
  2497. }
  2498. },
  2499. "direction" : {
  2500. "type" : "string",
  2501. "norms" : {
  2502. "enabled" : false
  2503. },
  2504. "fielddata" : {
  2505. "format" : "disabled"
  2506. },
  2507. "fields" : {
  2508. "raw" : {
  2509. "type" : "string",
  2510. "index" : "not_analyzed",
  2511. "ignore_above" : 256
  2512. }
  2513. }
  2514. },
  2515. "dlpextra" : {
  2516. "type" : "string",
  2517. "norms" : {
  2518. "enabled" : false
  2519. },
  2520. "fielddata" : {
  2521. "format" : "disabled"
  2522. },
  2523. "fields" : {
  2524. "raw" : {
  2525. "type" : "string",
  2526. "index" : "not_analyzed",
  2527. "ignore_above" : 256
  2528. }
  2529. }
  2530. },
  2531. "dstintf" : {
  2532. "type" : "string",
  2533. "norms" : {
  2534. "enabled" : false
  2535. },
  2536. "fielddata" : {
  2537. "format" : "disabled"
  2538. },
  2539. "fields" : {
  2540. "raw" : {
  2541. "type" : "string",
  2542. "index" : "not_analyzed",
  2543. "ignore_above" : 256
  2544. }
  2545. }
  2546. },
  2547. "dstip" : {
  2548. "type" : "string",
  2549. "norms" : {
  2550. "enabled" : false
  2551. },
  2552. "fielddata" : {
  2553. "format" : "disabled"
  2554. },
  2555. "fields" : {
  2556. "raw" : {
  2557. "type" : "string",
  2558. "index" : "not_analyzed",
  2559. "ignore_above" : 256
  2560. }
  2561. }
  2562. },
  2563. "dstport" : {
  2564. "type" : "string",
  2565. "norms" : {
  2566. "enabled" : false
  2567. },
  2568. "fielddata" : {
  2569. "format" : "disabled"
  2570. },
  2571. "fields" : {
  2572. "raw" : {
  2573. "type" : "string",
  2574. "index" : "not_analyzed",
  2575. "ignore_above" : 256
  2576. }
  2577. }
  2578. },
  2579. "epoch" : {
  2580. "type" : "string",
  2581. "norms" : {
  2582. "enabled" : false
  2583. },
  2584. "fielddata" : {
  2585. "format" : "disabled"
  2586. },
  2587. "fields" : {
  2588. "raw" : {
  2589. "type" : "string",
  2590. "index" : "not_analyzed",
  2591. "ignore_above" : 256
  2592. }
  2593. }
  2594. },
  2595. "eventid" : {
  2596. "type" : "string",
  2597. "norms" : {
  2598. "enabled" : false
  2599. },
  2600. "fielddata" : {
  2601. "format" : "disabled"
  2602. },
  2603. "fields" : {
  2604. "raw" : {
  2605. "type" : "string",
  2606. "index" : "not_analyzed",
  2607. "ignore_above" : 256
  2608. }
  2609. }
  2610. },
  2611. "eventtype" : {
  2612. "type" : "string",
  2613. "norms" : {
  2614. "enabled" : false
  2615. },
  2616. "fielddata" : {
  2617. "format" : "disabled"
  2618. },
  2619. "fields" : {
  2620. "raw" : {
  2621. "type" : "string",
  2622. "index" : "not_analyzed",
  2623. "ignore_above" : 256
  2624. }
  2625. }
  2626. },
  2627. "filename" : {
  2628. "type" : "string",
  2629. "norms" : {
  2630. "enabled" : false
  2631. },
  2632. "fielddata" : {
  2633. "format" : "disabled"
  2634. },
  2635. "fields" : {
  2636. "raw" : {
  2637. "type" : "string",
  2638. "index" : "not_analyzed",
  2639. "ignore_above" : 256
  2640. }
  2641. }
  2642. },
  2643. "filesize" : {
  2644. "type" : "string",
  2645. "norms" : {
  2646. "enabled" : false
  2647. },
  2648. "fielddata" : {
  2649. "format" : "disabled"
  2650. },
  2651. "fields" : {
  2652. "raw" : {
  2653. "type" : "string",
  2654. "index" : "not_analyzed",
  2655. "ignore_above" : 256
  2656. }
  2657. }
  2658. },
  2659. "filetype" : {
  2660. "type" : "string",
  2661. "norms" : {
  2662. "enabled" : false
  2663. },
  2664. "fielddata" : {
  2665. "format" : "disabled"
  2666. },
  2667. "fields" : {
  2668. "raw" : {
  2669. "type" : "string",
  2670. "index" : "not_analyzed",
  2671. "ignore_above" : 256
  2672. }
  2673. }
  2674. },
  2675. "filtercat" : {
  2676. "type" : "string",
  2677. "norms" : {
  2678. "enabled" : false
  2679. },
  2680. "fielddata" : {
  2681. "format" : "disabled"
  2682. },
  2683. "fields" : {
  2684. "raw" : {
  2685. "type" : "string",
  2686. "index" : "not_analyzed",
  2687. "ignore_above" : 256
  2688. }
  2689. }
  2690. },
  2691. "filteridx" : {
  2692. "type" : "string",
  2693. "norms" : {
  2694. "enabled" : false
  2695. },
  2696. "fielddata" : {
  2697. "format" : "disabled"
  2698. },
  2699. "fields" : {
  2700. "raw" : {
  2701. "type" : "string",
  2702. "index" : "not_analyzed",
  2703. "ignore_above" : 256
  2704. }
  2705. }
  2706. },
  2707. "filtertype" : {
  2708. "type" : "string",
  2709. "norms" : {
  2710. "enabled" : false
  2711. },
  2712. "fielddata" : {
  2713. "format" : "disabled"
  2714. },
  2715. "fields" : {
  2716. "raw" : {
  2717. "type" : "string",
  2718. "index" : "not_analyzed",
  2719. "ignore_above" : 256
  2720. }
  2721. }
  2722. },
  2723. "geoip" : {
  2724. "dynamic" : "true",
  2725. "properties" : {
  2726. "area_code" : {
  2727. "type" : "long"
  2728. },
  2729. "city_name" : {
  2730. "type" : "string",
  2731. "norms" : {
  2732. "enabled" : false
  2733. },
  2734. "fielddata" : {
  2735. "format" : "disabled"
  2736. },
  2737. "fields" : {
  2738. "raw" : {
  2739. "type" : "string",
  2740. "index" : "not_analyzed",
  2741. "ignore_above" : 256
  2742. }
  2743. }
  2744. },
  2745. "continent_code" : {
  2746. "type" : "string",
  2747. "norms" : {
  2748. "enabled" : false
  2749. },
  2750. "fielddata" : {
  2751. "format" : "disabled"
  2752. },
  2753. "fields" : {
  2754. "raw" : {
  2755. "type" : "string",
  2756. "index" : "not_analyzed",
  2757. "ignore_above" : 256
  2758. }
  2759. }
  2760. },
  2761. "country_code2" : {
  2762. "type" : "string",
  2763. "norms" : {
  2764. "enabled" : false
  2765. },
  2766. "fielddata" : {
  2767. "format" : "disabled"
  2768. },
  2769. "fields" : {
  2770. "raw" : {
  2771. "type" : "string",
  2772. "index" : "not_analyzed",
  2773. "ignore_above" : 256
  2774. }
  2775. }
  2776. },
  2777. "country_code3" : {
  2778. "type" : "string",
  2779. "norms" : {
  2780. "enabled" : false
  2781. },
  2782. "fielddata" : {
  2783. "format" : "disabled"
  2784. },
  2785. "fields" : {
  2786. "raw" : {
  2787. "type" : "string",
  2788. "index" : "not_analyzed",
  2789. "ignore_above" : 256
  2790. }
  2791. }
  2792. },
  2793. "country_name" : {
  2794. "type" : "string",
  2795. "norms" : {
  2796. "enabled" : false
  2797. },
  2798. "fielddata" : {
  2799. "format" : "disabled"
  2800. },
  2801. "fields" : {
  2802. "raw" : {
  2803. "type" : "string",
  2804. "index" : "not_analyzed",
  2805. "ignore_above" : 256
  2806. }
  2807. }
  2808. },
  2809. "dma_code" : {
  2810. "type" : "long"
  2811. },
  2812. "ip" : {
  2813. "type" : "ip"
  2814. },
  2815. "latitude" : {
  2816. "type" : "float"
  2817. },
  2818. "location" : {
  2819. "type" : "geo_point"
  2820. },
  2821. "longitude" : {
  2822. "type" : "float"
  2823. },
  2824. "postal_code" : {
  2825. "type" : "string",
  2826. "norms" : {
  2827. "enabled" : false
  2828. },
  2829. "fielddata" : {
  2830. "format" : "disabled"
  2831. },
  2832. "fields" : {
  2833. "raw" : {
  2834. "type" : "string",
  2835. "index" : "not_analyzed",
  2836. "ignore_above" : 256
  2837. }
  2838. }
  2839. },
  2840. "real_region_name" : {
  2841. "type" : "string",
  2842. "norms" : {
  2843. "enabled" : false
  2844. },
  2845. "fielddata" : {
  2846. "format" : "disabled"
  2847. },
  2848. "fields" : {
  2849. "raw" : {
  2850. "type" : "string",
  2851. "index" : "not_analyzed",
  2852. "ignore_above" : 256
  2853. }
  2854. }
  2855. },
  2856. "region_name" : {
  2857. "type" : "string",
  2858. "norms" : {
  2859. "enabled" : false
  2860. },
  2861. "fielddata" : {
  2862. "format" : "disabled"
  2863. },
  2864. "fields" : {
  2865. "raw" : {
  2866. "type" : "string",
  2867. "index" : "not_analyzed",
  2868. "ignore_above" : 256
  2869. }
  2870. }
  2871. },
  2872. "timezone" : {
  2873. "type" : "string",
  2874. "norms" : {
  2875. "enabled" : false
  2876. },
  2877. "fielddata" : {
  2878. "format" : "disabled"
  2879. },
  2880. "fields" : {
  2881. "raw" : {
  2882. "type" : "string",
  2883. "index" : "not_analyzed",
  2884. "ignore_above" : 256
  2885. }
  2886. }
  2887. }
  2888. }
  2889. },
  2890. "group" : {
  2891. "type" : "string",
  2892. "norms" : {
  2893. "enabled" : false
  2894. },
  2895. "fielddata" : {
  2896. "format" : "disabled"
  2897. },
  2898. "fields" : {
  2899. "raw" : {
  2900. "type" : "string",
  2901. "index" : "not_analyzed",
  2902. "ignore_above" : 256
  2903. }
  2904. }
  2905. },
  2906. "host" : {
  2907. "type" : "string",
  2908. "norms" : {
  2909. "enabled" : false
  2910. },
  2911. "fielddata" : {
  2912. "format" : "disabled"
  2913. },
  2914. "fields" : {
  2915. "raw" : {
  2916. "type" : "string",
  2917. "index" : "not_analyzed",
  2918. "ignore_above" : 256
  2919. }
  2920. }
  2921. },
  2922. "hostname" : {
  2923. "type" : "string",
  2924. "norms" : {
  2925. "enabled" : false
  2926. },
  2927. "fielddata" : {
  2928. "format" : "disabled"
  2929. },
  2930. "fields" : {
  2931. "raw" : {
  2932. "type" : "string",
  2933. "index" : "not_analyzed",
  2934. "ignore_above" : 256
  2935. }
  2936. }
  2937. },
  2938. "keyword" : {
  2939. "type" : "string",
  2940. "norms" : {
  2941. "enabled" : false
  2942. },
  2943. "fielddata" : {
  2944. "format" : "disabled"
  2945. },
  2946. "fields" : {
  2947. "raw" : {
  2948. "type" : "string",
  2949. "index" : "not_analyzed",
  2950. "ignore_above" : 256
  2951. }
  2952. }
  2953. },
  2954. "kv" : {
  2955. "type" : "string",
  2956. "norms" : {
  2957. "enabled" : false
  2958. },
  2959. "fielddata" : {
  2960. "format" : "disabled"
  2961. },
  2962. "fields" : {
  2963. "raw" : {
  2964. "type" : "string",
  2965. "index" : "not_analyzed",
  2966. "ignore_above" : 256
  2967. }
  2968. }
  2969. },
  2970. "level" : {
  2971. "type" : "string",
  2972. "norms" : {
  2973. "enabled" : false
  2974. },
  2975. "fielddata" : {
  2976. "format" : "disabled"
  2977. },
  2978. "fields" : {
  2979. "raw" : {
  2980. "type" : "string",
  2981. "index" : "not_analyzed",
  2982. "ignore_above" : 256
  2983. }
  2984. }
  2985. },
  2986. "logid" : {
  2987. "type" : "string",
  2988. "norms" : {
  2989. "enabled" : false
  2990. },
  2991. "fielddata" : {
  2992. "format" : "disabled"
  2993. },
  2994. "fields" : {
  2995. "raw" : {
  2996. "type" : "string",
  2997. "index" : "not_analyzed",
  2998. "ignore_above" : 256
  2999. }
  3000. }
  3001. },
  3002. "method" : {
  3003. "type" : "string",
  3004. "norms" : {
  3005. "enabled" : false
  3006. },
  3007. "fielddata" : {
  3008. "format" : "disabled"
  3009. },
  3010. "fields" : {
  3011. "raw" : {
  3012. "type" : "string",
  3013. "index" : "not_analyzed",
  3014. "ignore_above" : 256
  3015. }
  3016. }
  3017. },
  3018. "msg" : {
  3019. "type" : "string",
  3020. "norms" : {
  3021. "enabled" : false
  3022. },
  3023. "fielddata" : {
  3024. "format" : "disabled"
  3025. },
  3026. "fields" : {
  3027. "raw" : {
  3028. "type" : "string",
  3029. "index" : "not_analyzed",
  3030. "ignore_above" : 256
  3031. }
  3032. }
  3033. },
  3034. "path" : {
  3035. "type" : "string",
  3036. "norms" : {
  3037. "enabled" : false
  3038. },
  3039. "fielddata" : {
  3040. "format" : "disabled"
  3041. },
  3042. "fields" : {
  3043. "raw" : {
  3044. "type" : "string",
  3045. "index" : "not_analyzed",
  3046. "ignore_above" : 256
  3047. }
  3048. }
  3049. },
  3050. "policyid" : {
  3051. "type" : "string",
  3052. "norms" : {
  3053. "enabled" : false
  3054. },
  3055. "fielddata" : {
  3056. "format" : "disabled"
  3057. },
  3058. "fields" : {
  3059. "raw" : {
  3060. "type" : "string",
  3061. "index" : "not_analyzed",
  3062. "ignore_above" : 256
  3063. }
  3064. }
  3065. },
  3066. "profile" : {
  3067. "type" : "string",
  3068. "norms" : {
  3069. "enabled" : false
  3070. },
  3071. "fielddata" : {
  3072. "format" : "disabled"
  3073. },
  3074. "fields" : {
  3075. "raw" : {
  3076. "type" : "string",
  3077. "index" : "not_analyzed",
  3078. "ignore_above" : 256
  3079. }
  3080. }
  3081. },
  3082. "proto" : {
  3083. "type" : "string",
  3084. "norms" : {
  3085. "enabled" : false
  3086. },
  3087. "fielddata" : {
  3088. "format" : "disabled"
  3089. },
  3090. "fields" : {
  3091. "raw" : {
  3092. "type" : "string",
  3093. "index" : "not_analyzed",
  3094. "ignore_above" : 256
  3095. }
  3096. }
  3097. },
  3098. "rcvdbyte" : {
  3099. "type" : "string",
  3100. "norms" : {
  3101. "enabled" : false
  3102. },
  3103. "fielddata" : {
  3104. "format" : "disabled"
  3105. },
  3106. "fields" : {
  3107. "raw" : {
  3108. "type" : "string",
  3109. "index" : "not_analyzed",
  3110. "ignore_above" : 256
  3111. }
  3112. }
  3113. },
  3114. "reqtype" : {
  3115. "type" : "string",
  3116. "norms" : {
  3117. "enabled" : false
  3118. },
  3119. "fielddata" : {
  3120. "format" : "disabled"
  3121. },
  3122. "fields" : {
  3123. "raw" : {
  3124. "type" : "string",
  3125. "index" : "not_analyzed",
  3126. "ignore_above" : 256
  3127. }
  3128. }
  3129. },
  3130. "sentbyte" : {
  3131. "type" : "string",
  3132. "norms" : {
  3133. "enabled" : false
  3134. },
  3135. "fielddata" : {
  3136. "format" : "disabled"
  3137. },
  3138. "fields" : {
  3139. "raw" : {
  3140. "type" : "string",
  3141. "index" : "not_analyzed",
  3142. "ignore_above" : 256
  3143. }
  3144. }
  3145. },
  3146. "service" : {
  3147. "type" : "string",
  3148. "norms" : {
  3149. "enabled" : false
  3150. },
  3151. "fielddata" : {
  3152. "format" : "disabled"
  3153. },
  3154. "fields" : {
  3155. "raw" : {
  3156. "type" : "string",
  3157. "index" : "not_analyzed",
  3158. "ignore_above" : 256
  3159. }
  3160. }
  3161. },
  3162. "sessionid" : {
  3163. "type" : "string",
  3164. "norms" : {
  3165. "enabled" : false
  3166. },
  3167. "fielddata" : {
  3168. "format" : "disabled"
  3169. },
  3170. "fields" : {
  3171. "raw" : {
  3172. "type" : "string",
  3173. "index" : "not_analyzed",
  3174. "ignore_above" : 256
  3175. }
  3176. }
  3177. },
  3178. "severity" : {
  3179. "type" : "string",
  3180. "norms" : {
  3181. "enabled" : false
  3182. },
  3183. "fielddata" : {
  3184. "format" : "disabled"
  3185. },
  3186. "fields" : {
  3187. "raw" : {
  3188. "type" : "string",
  3189. "index" : "not_analyzed",
  3190. "ignore_above" : 256
  3191. }
  3192. }
  3193. },
  3194. "srcintf" : {
  3195. "type" : "string",
  3196. "norms" : {
  3197. "enabled" : false
  3198. },
  3199. "fielddata" : {
  3200. "format" : "disabled"
  3201. },
  3202. "fields" : {
  3203. "raw" : {
  3204. "type" : "string",
  3205. "index" : "not_analyzed",
  3206. "ignore_above" : 256
  3207. }
  3208. }
  3209. },
  3210. "srcip" : {
  3211. "type" : "string",
  3212. "norms" : {
  3213. "enabled" : false
  3214. },
  3215. "fielddata" : {
  3216. "format" : "disabled"
  3217. },
  3218. "fields" : {
  3219. "raw" : {
  3220. "type" : "string",
  3221. "index" : "not_analyzed",
  3222. "ignore_above" : 256
  3223. }
  3224. }
  3225. },
  3226. "srcport" : {
  3227. "type" : "string",
  3228. "norms" : {
  3229. "enabled" : false
  3230. },
  3231. "fielddata" : {
  3232. "format" : "disabled"
  3233. },
  3234. "fields" : {
  3235. "raw" : {
  3236. "type" : "string",
  3237. "index" : "not_analyzed",
  3238. "ignore_above" : 256
  3239. }
  3240. }
  3241. },
  3242. "subtype" : {
  3243. "type" : "string",
  3244. "norms" : {
  3245. "enabled" : false
  3246. },
  3247. "fielddata" : {
  3248. "format" : "disabled"
  3249. },
  3250. "fields" : {
  3251. "raw" : {
  3252. "type" : "string",
  3253. "index" : "not_analyzed",
  3254. "ignore_above" : 256
  3255. }
  3256. }
  3257. },
  3258. "time" : {
  3259. "type" : "string",
  3260. "norms" : {
  3261. "enabled" : false
  3262. },
  3263. "fielddata" : {
  3264. "format" : "disabled"
  3265. },
  3266. "fields" : {
  3267. "raw" : {
  3268. "type" : "string",
  3269. "index" : "not_analyzed",
  3270. "ignore_above" : 256
  3271. }
  3272. }
  3273. },
  3274. "type" : {
  3275. "type" : "string",
  3276. "norms" : {
  3277. "enabled" : false
  3278. },
  3279. "fielddata" : {
  3280. "format" : "disabled"
  3281. },
  3282. "fields" : {
  3283. "raw" : {
  3284. "type" : "string",
  3285. "index" : "not_analyzed",
  3286. "ignore_above" : 256
  3287. }
  3288. }
  3289. },
  3290. "url" : {
  3291. "type" : "string",
  3292. "norms" : {
  3293. "enabled" : false
  3294. },
  3295. "fielddata" : {
  3296. "format" : "disabled"
  3297. },
  3298. "fields" : {
  3299. "raw" : {
  3300. "type" : "string",
  3301. "index" : "not_analyzed",
  3302. "ignore_above" : 256
  3303. }
  3304. }
  3305. },
  3306. "urlfilteridx" : {
  3307. "type" : "string",
  3308. "norms" : {
  3309. "enabled" : false
  3310. },
  3311. "fielddata" : {
  3312. "format" : "disabled"
  3313. },
  3314. "fields" : {
  3315. "raw" : {
  3316. "type" : "string",
  3317. "index" : "not_analyzed",
  3318. "ignore_above" : 256
  3319. }
  3320. }
  3321. },
  3322. "urlfilterlist" : {
  3323. "type" : "string",
  3324. "norms" : {
  3325. "enabled" : false
  3326. },
  3327. "fielddata" : {
  3328. "format" : "disabled"
  3329. },
  3330. "fields" : {
  3331. "raw" : {
  3332. "type" : "string",
  3333. "index" : "not_analyzed",
  3334. "ignore_above" : 256
  3335. }
  3336. }
  3337. },
  3338. "user" : {
  3339. "type" : "string",
  3340. "norms" : {
  3341. "enabled" : false
  3342. },
  3343. "fielddata" : {
  3344. "format" : "disabled"
  3345. },
  3346. "fields" : {
  3347. "raw" : {
  3348. "type" : "string",
  3349. "index" : "not_analyzed",
  3350. "ignore_above" : 256
  3351. }
  3352. }
  3353. },
  3354. "vd" : {
  3355. "type" : "string",
  3356. "norms" : {
  3357. "enabled" : false
  3358. },
  3359. "fielddata" : {
  3360. "format" : "disabled"
  3361. },
  3362. "fields" : {
  3363. "raw" : {
  3364. "type" : "string",
  3365. "index" : "not_analyzed",
  3366. "ignore_above" : 256
  3367. }
  3368. }
  3369. }
  3370. }
  3371. },
  3372. "event" : {
  3373. "_all" : {
  3374. "enabled" : true,
  3375. "omit_norms" : true
  3376. },
  3377. "dynamic_templates" : [ {
  3378. "message_field" : {
  3379. "mapping" : {
  3380. "fielddata" : {
  3381. "format" : "disabled"
  3382. },
  3383. "index" : "analyzed",
  3384. "omit_norms" : true,
  3385. "type" : "string"
  3386. },
  3387. "match" : "message",
  3388. "match_mapping_type" : "string"
  3389. }
  3390. }, {
  3391. "string_fields" : {
  3392. "mapping" : {
  3393. "fielddata" : {
  3394. "format" : "disabled"
  3395. },
  3396. "index" : "analyzed",
  3397. "omit_norms" : true,
  3398. "type" : "string",
  3399. "fields" : {
  3400. "raw" : {
  3401. "ignore_above" : 256,
  3402. "index" : "not_analyzed",
  3403. "type" : "string",
  3404. "doc_values" : true
  3405. }
  3406. }
  3407. },
  3408. "match" : "*",
  3409. "match_mapping_type" : "string"
  3410. }
  3411. }, {
  3412. "float_fields" : {
  3413. "mapping" : {
  3414. "type" : "float",
  3415. "doc_values" : true
  3416. },
  3417. "match" : "*",
  3418. "match_mapping_type" : "float"
  3419. }
  3420. }, {
  3421. "double_fields" : {
  3422. "mapping" : {
  3423. "type" : "double",
  3424. "doc_values" : true
  3425. },
  3426. "match" : "*",
  3427. "match_mapping_type" : "double"
  3428. }
  3429. }, {
  3430. "byte_fields" : {
  3431. "mapping" : {
  3432. "type" : "byte",
  3433. "doc_values" : true
  3434. },
  3435. "match" : "*",
  3436. "match_mapping_type" : "byte"
  3437. }
  3438. }, {
  3439. "short_fields" : {
  3440. "mapping" : {
  3441. "type" : "short",
  3442. "doc_values" : true
  3443. },
  3444. "match" : "*",
  3445. "match_mapping_type" : "short"
  3446. }
  3447. }, {
  3448. "integer_fields" : {
  3449. "mapping" : {
  3450. "type" : "integer",
  3451. "doc_values" : true
  3452. },
  3453. "match" : "*",
  3454. "match_mapping_type" : "integer"
  3455. }
  3456. }, {
  3457. "long_fields" : {
  3458. "mapping" : {
  3459. "type" : "long",
  3460. "doc_values" : true
  3461. },
  3462. "match" : "*",
  3463. "match_mapping_type" : "long"
  3464. }
  3465. }, {
  3466. "date_fields" : {
  3467. "mapping" : {
  3468. "type" : "date",
  3469. "doc_values" : true
  3470. },
  3471. "match" : "*",
  3472. "match_mapping_type" : "date"
  3473. }
  3474. }, {
  3475. "geo_point_fields" : {
  3476. "mapping" : {
  3477. "type" : "geo_point",
  3478. "doc_values" : true
  3479. },
  3480. "match" : "*",
  3481. "match_mapping_type" : "geo_point"
  3482. }
  3483. } ],
  3484. "properties" : {
  3485. "@timestamp" : {
  3486. "type" : "date",
  3487. "format" : "strict_date_optional_time||epoch_millis"
  3488. },
  3489. "@version" : {
  3490. "type" : "string",
  3491. "index" : "not_analyzed"
  3492. },
  3493. "action" : {
  3494. "type" : "string",
  3495. "norms" : {
  3496. "enabled" : false
  3497. },
  3498. "fielddata" : {
  3499. "format" : "disabled"
  3500. },
  3501. "fields" : {
  3502. "raw" : {
  3503. "type" : "string",
  3504. "index" : "not_analyzed",
  3505. "ignore_above" : 256
  3506. }
  3507. }
  3508. },
  3509. "assignip" : {
  3510. "type" : "string",
  3511. "norms" : {
  3512. "enabled" : false
  3513. },
  3514. "fielddata" : {
  3515. "format" : "disabled"
  3516. },
  3517. "fields" : {
  3518. "raw" : {
  3519. "type" : "string",
  3520. "index" : "not_analyzed",
  3521. "ignore_above" : 256
  3522. }
  3523. }
  3524. },
  3525. "authproto" : {
  3526. "type" : "string",
  3527. "norms" : {
  3528. "enabled" : false
  3529. },
  3530. "fielddata" : {
  3531. "format" : "disabled"
  3532. },
  3533. "fields" : {
  3534. "raw" : {
  3535. "type" : "string",
  3536. "index" : "not_analyzed",
  3537. "ignore_above" : 256
  3538. }
  3539. }
  3540. },
  3541. "aven" : {
  3542. "type" : "string",
  3543. "norms" : {
  3544. "enabled" : false
  3545. },
  3546. "fielddata" : {
  3547. "format" : "disabled"
  3548. },
  3549. "fields" : {
  3550. "raw" : {
  3551. "type" : "string",
  3552. "index" : "not_analyzed",
  3553. "ignore_above" : 256
  3554. }
  3555. }
  3556. },
  3557. "bandwidth" : {
  3558. "type" : "string",
  3559. "norms" : {
  3560. "enabled" : false
  3561. },
  3562. "fielddata" : {
  3563. "format" : "disabled"
  3564. },
  3565. "fields" : {
  3566. "raw" : {
  3567. "type" : "string",
  3568. "index" : "not_analyzed",
  3569. "ignore_above" : 256
  3570. }
  3571. }
  3572. },
  3573. "cfgattr" : {
  3574. "type" : "string",
  3575. "norms" : {
  3576. "enabled" : false
  3577. },
  3578. "fielddata" : {
  3579. "format" : "disabled"
  3580. },
  3581. "fields" : {
  3582. "raw" : {
  3583. "type" : "string",
  3584. "index" : "not_analyzed",
  3585. "ignore_above" : 256
  3586. }
  3587. }
  3588. },
  3589. "cfgobj" : {
  3590. "type" : "string",
  3591. "norms" : {
  3592. "enabled" : false
  3593. },
  3594. "fielddata" : {
  3595. "format" : "disabled"
  3596. },
  3597. "fields" : {
  3598. "raw" : {
  3599. "type" : "string",
  3600. "index" : "not_analyzed",
  3601. "ignore_above" : 256
  3602. }
  3603. }
  3604. },
  3605. "cfgpath" : {
  3606. "type" : "string",
  3607. "norms" : {
  3608. "enabled" : false
  3609. },
  3610. "fielddata" : {
  3611. "format" : "disabled"
  3612. },
  3613. "fields" : {
  3614. "raw" : {
  3615. "type" : "string",
  3616. "index" : "not_analyzed",
  3617. "ignore_above" : 256
  3618. }
  3619. }
  3620. },
  3621. "cfgtid" : {
  3622. "type" : "string",
  3623. "norms" : {
  3624. "enabled" : false
  3625. },
  3626. "fielddata" : {
  3627. "format" : "disabled"
  3628. },
  3629. "fields" : {
  3630. "raw" : {
  3631. "type" : "string",
  3632. "index" : "not_analyzed",
  3633. "ignore_above" : 256
  3634. }
  3635. }
  3636. },
  3637. "clusterid" : {
  3638. "type" : "string",
  3639. "norms" : {
  3640. "enabled" : false
  3641. },
  3642. "fielddata" : {
  3643. "format" : "disabled"
  3644. },
  3645. "fields" : {
  3646. "raw" : {
  3647. "type" : "string",
  3648. "index" : "not_analyzed",
  3649. "ignore_above" : 256
  3650. }
  3651. }
  3652. },
  3653. "cookies" : {
  3654. "type" : "string",
  3655. "norms" : {
  3656. "enabled" : false
  3657. },
  3658. "fielddata" : {
  3659. "format" : "disabled"
  3660. },
  3661. "fields" : {
  3662. "raw" : {
  3663. "type" : "string",
  3664. "index" : "not_analyzed",
  3665. "ignore_above" : 256
  3666. }
  3667. }
  3668. },
  3669. "count" : {
  3670. "type" : "string",
  3671. "norms" : {
  3672. "enabled" : false
  3673. },
  3674. "fielddata" : {
  3675. "format" : "disabled"
  3676. },
  3677. "fields" : {
  3678. "raw" : {
  3679. "type" : "string",
  3680. "index" : "not_analyzed",
  3681. "ignore_above" : 256
  3682. }
  3683. }
  3684. },
  3685. "cpu" : {
  3686. "type" : "string",
  3687. "norms" : {
  3688. "enabled" : false
  3689. },
  3690. "fielddata" : {
  3691. "format" : "disabled"
  3692. },
  3693. "fields" : {
  3694. "raw" : {
  3695. "type" : "string",
  3696. "index" : "not_analyzed",
  3697. "ignore_above" : 256
  3698. }
  3699. }
  3700. },
  3701. "datarange" : {
  3702. "type" : "string",
  3703. "norms" : {
  3704. "enabled" : false
  3705. },
  3706. "fielddata" : {
  3707. "format" : "disabled"
  3708. },
  3709. "fields" : {
  3710. "raw" : {
  3711. "type" : "string",
  3712. "index" : "not_analyzed",
  3713. "ignore_above" : 256
  3714. }
  3715. }
  3716. },
  3717. "date" : {
  3718. "type" : "date",
  3719. "format" : "strict_date_optional_time||epoch_millis"
  3720. },
  3721. "desc" : {
  3722. "type" : "string",
  3723. "norms" : {
  3724. "enabled" : false
  3725. },
  3726. "fielddata" : {
  3727. "format" : "disabled"
  3728. },
  3729. "fields" : {
  3730. "raw" : {
  3731. "type" : "string",
  3732. "index" : "not_analyzed",
  3733. "ignore_above" : 256
  3734. }
  3735. }
  3736. },
  3737. "device_id" : {
  3738. "type" : "string",
  3739. "norms" : {
  3740. "enabled" : false
  3741. },
  3742. "fielddata" : {
  3743. "format" : "disabled"
  3744. },
  3745. "fields" : {
  3746. "raw" : {
  3747. "type" : "string",
  3748. "index" : "not_analyzed",
  3749. "ignore_above" : 256
  3750. }
  3751. }
  3752. },
  3753. "devid" : {
  3754. "type" : "string",
  3755. "norms" : {
  3756. "enabled" : false
  3757. },
  3758. "fielddata" : {
  3759. "format" : "disabled"
  3760. },
  3761. "fields" : {
  3762. "raw" : {
  3763. "type" : "string",
  3764. "index" : "not_analyzed",
  3765. "ignore_above" : 256
  3766. }
  3767. }
  3768. },
  3769. "devname" : {
  3770. "type" : "string",
  3771. "norms" : {
  3772. "enabled" : false
  3773. },
  3774. "fielddata" : {
  3775. "format" : "disabled"
  3776. },
  3777. "fields" : {
  3778. "raw" : {
  3779. "type" : "string",
  3780. "index" : "not_analyzed",
  3781. "ignore_above" : 256
  3782. }
  3783. }
  3784. },
  3785. "dhcp_msg" : {
  3786. "type" : "string",
  3787. "norms" : {
  3788. "enabled" : false
  3789. },
  3790. "fielddata" : {
  3791. "format" : "disabled"
  3792. },
  3793. "fields" : {
  3794. "raw" : {
  3795. "type" : "string",
  3796. "index" : "not_analyzed",
  3797. "ignore_above" : 256
  3798. }
  3799. }
  3800. },
  3801. "dir" : {
  3802. "type" : "string",
  3803. "norms" : {
  3804. "enabled" : false
  3805. },
  3806. "fielddata" : {
  3807. "format" : "disabled"
  3808. },
  3809. "fields" : {
  3810. "raw" : {
  3811. "type" : "string",
  3812. "index" : "not_analyzed",
  3813. "ignore_above" : 256
  3814. }
  3815. }
  3816. },
  3817. "disk" : {
  3818. "type" : "string",
  3819. "norms" : {
  3820. "enabled" : false
  3821. },
  3822. "fielddata" : {
  3823. "format" : "disabled"
  3824. },
  3825. "fields" : {
  3826. "raw" : {
  3827. "type" : "string",
  3828. "index" : "not_analyzed",
  3829. "ignore_above" : 256
  3830. }
  3831. }
  3832. },
  3833. "disklograte" : {
  3834. "type" : "string",
  3835. "norms" : {
  3836. "enabled" : false
  3837. },
  3838. "fielddata" : {
  3839. "format" : "disabled"
  3840. },
  3841. "fields" : {
  3842. "raw" : {
  3843. "type" : "string",
  3844. "index" : "not_analyzed",
  3845. "ignore_above" : 256
  3846. }
  3847. }
  3848. },
  3849. "dstip" : {
  3850. "type" : "string",
  3851. "norms" : {
  3852. "enabled" : false
  3853. },
  3854. "fielddata" : {
  3855. "format" : "disabled"
  3856. },
  3857. "fields" : {
  3858. "raw" : {
  3859. "type" : "string",
  3860. "index" : "not_analyzed",
  3861. "ignore_above" : 256
  3862. }
  3863. }
  3864. },
  3865. "dstport" : {
  3866. "type" : "string",
  3867. "norms" : {
  3868. "enabled" : false
  3869. },
  3870. "fielddata" : {
  3871. "format" : "disabled"
  3872. },
  3873. "fields" : {
  3874. "raw" : {
  3875. "type" : "string",
  3876. "index" : "not_analyzed",
  3877. "ignore_above" : 256
  3878. }
  3879. }
  3880. },
  3881. "duration" : {
  3882. "type" : "string",
  3883. "norms" : {
  3884. "enabled" : false
  3885. },
  3886. "fielddata" : {
  3887. "format" : "disabled"
  3888. },
  3889. "fields" : {
  3890. "raw" : {
  3891. "type" : "string",
  3892. "index" : "not_analyzed",
  3893. "ignore_above" : 256
  3894. }
  3895. }
  3896. },
  3897. "espauth" : {
  3898. "type" : "string",
  3899. "norms" : {
  3900. "enabled" : false
  3901. },
  3902. "fielddata" : {
  3903. "format" : "disabled"
  3904. },
  3905. "fields" : {
  3906. "raw" : {
  3907. "type" : "string",
  3908. "index" : "not_analyzed",
  3909. "ignore_above" : 256
  3910. }
  3911. }
  3912. },
  3913. "esptransform" : {
  3914. "type" : "string",
  3915. "norms" : {
  3916. "enabled" : false
  3917. },
  3918. "fielddata" : {
  3919. "format" : "disabled"
  3920. },
  3921. "fields" : {
  3922. "raw" : {
  3923. "type" : "string",
  3924. "index" : "not_analyzed",
  3925. "ignore_above" : 256
  3926. }
  3927. }
  3928. },
  3929. "fazlograte" : {
  3930. "type" : "string",
  3931. "norms" : {
  3932. "enabled" : false
  3933. },
  3934. "fielddata" : {
  3935. "format" : "disabled"
  3936. },
  3937. "fields" : {
  3938. "raw" : {
  3939. "type" : "string",
  3940. "index" : "not_analyzed",
  3941. "ignore_above" : 256
  3942. }
  3943. }
  3944. },
  3945. "fcni" : {
  3946. "type" : "string",
  3947. "norms" : {
  3948. "enabled" : false
  3949. },
  3950. "fielddata" : {
  3951. "format" : "disabled"
  3952. },
  3953. "fields" : {
  3954. "raw" : {
  3955. "type" : "string",
  3956. "index" : "not_analyzed",
  3957. "ignore_above" : 256
  3958. }
  3959. }
  3960. },
  3961. "fdni" : {
  3962. "type" : "string",
  3963. "norms" : {
  3964. "enabled" : false
  3965. },
  3966. "fielddata" : {
  3967. "format" : "disabled"
  3968. },
  3969. "fields" : {
  3970. "raw" : {
  3971. "type" : "string",
  3972. "index" : "not_analyzed",
  3973. "ignore_above" : 256
  3974. }
  3975. }
  3976. },
  3977. "field" : {
  3978. "type" : "string",
  3979. "norms" : {
  3980. "enabled" : false
  3981. },
  3982. "fielddata" : {
  3983. "format" : "disabled"
  3984. },
  3985. "fields" : {
  3986. "raw" : {
  3987. "type" : "string",
  3988. "index" : "not_analyzed",
  3989. "ignore_above" : 256
  3990. }
  3991. }
  3992. },
  3993. "file" : {
  3994. "type" : "string",
  3995. "norms" : {
  3996. "enabled" : false
  3997. },
  3998. "fielddata" : {
  3999. "format" : "disabled"
  4000. },
  4001. "fields" : {
  4002. "raw" : {
  4003. "type" : "string",
  4004. "index" : "not_analyzed",
  4005. "ignore_above" : 256
  4006. }
  4007. }
  4008. },
  4009. "filesize" : {
  4010. "type" : "string",
  4011. "norms" : {
  4012. "enabled" : false
  4013. },
  4014. "fielddata" : {
  4015. "format" : "disabled"
  4016. },
  4017. "fields" : {
  4018. "raw" : {
  4019. "type" : "string",
  4020. "index" : "not_analyzed",
  4021. "ignore_above" : 256
  4022. }
  4023. }
  4024. },
  4025. "ftp" : {
  4026. "type" : "string",
  4027. "norms" : {
  4028. "enabled" : false
  4029. },
  4030. "fielddata" : {
  4031. "format" : "disabled"
  4032. },
  4033. "fields" : {
  4034. "raw" : {
  4035. "type" : "string",
  4036. "index" : "not_analyzed",
  4037. "ignore_above" : 256
  4038. }
  4039. }
  4040. },
  4041. "geoip" : {
  4042. "dynamic" : "true",
  4043. "properties" : {
  4044. "area_code" : {
  4045. "type" : "long"
  4046. },
  4047. "city_name" : {
  4048. "type" : "string",
  4049. "norms" : {
  4050. "enabled" : false
  4051. },
  4052. "fielddata" : {
  4053. "format" : "disabled"
  4054. },
  4055. "fields" : {
  4056. "raw" : {
  4057. "type" : "string",
  4058. "index" : "not_analyzed",
  4059. "ignore_above" : 256
  4060. }
  4061. }
  4062. },
  4063. "continent_code" : {
  4064. "type" : "string",
  4065. "norms" : {
  4066. "enabled" : false
  4067. },
  4068. "fielddata" : {
  4069. "format" : "disabled"
  4070. },
  4071. "fields" : {
  4072. "raw" : {
  4073. "type" : "string",
  4074. "index" : "not_analyzed",
  4075. "ignore_above" : 256
  4076. }
  4077. }
  4078. },
  4079. "country_code2" : {
  4080. "type" : "string",
  4081. "norms" : {
  4082. "enabled" : false
  4083. },
  4084. "fielddata" : {
  4085. "format" : "disabled"
  4086. },
  4087. "fields" : {
  4088. "raw" : {
  4089. "type" : "string",
  4090. "index" : "not_analyzed",
  4091. "ignore_above" : 256
  4092. }
  4093. }
  4094. },
  4095. "country_code3" : {
  4096. "type" : "string",
  4097. "norms" : {
  4098. "enabled" : false
  4099. },
  4100. "fielddata" : {
  4101. "format" : "disabled"
  4102. },
  4103. "fields" : {
  4104. "raw" : {
  4105. "type" : "string",
  4106. "index" : "not_analyzed",
  4107. "ignore_above" : 256
  4108. }
  4109. }
  4110. },
  4111. "country_name" : {
  4112. "type" : "string",
  4113. "norms" : {
  4114. "enabled" : false
  4115. },
  4116. "fielddata" : {
  4117. "format" : "disabled"
  4118. },
  4119. "fields" : {
  4120. "raw" : {
  4121. "type" : "string",
  4122. "index" : "not_analyzed",
  4123. "ignore_above" : 256
  4124. }
  4125. }
  4126. },
  4127. "dma_code" : {
  4128. "type" : "long"
  4129. },
  4130. "ip" : {
  4131. "type" : "ip"
  4132. },
  4133. "latitude" : {
  4134. "type" : "float"
  4135. },
  4136. "location" : {
  4137. "type" : "geo_point"
  4138. },
  4139. "longitude" : {
  4140. "type" : "float"
  4141. },
  4142. "postal_code" : {
  4143. "type" : "string",
  4144. "norms" : {
  4145. "enabled" : false
  4146. },
  4147. "fielddata" : {
  4148. "format" : "disabled"
  4149. },
  4150. "fields" : {
  4151. "raw" : {
  4152. "type" : "string",
  4153. "index" : "not_analyzed",
  4154. "ignore_above" : 256
  4155. }
  4156. }
  4157. },
  4158. "real_region_name" : {
  4159. "type" : "string",
  4160. "norms" : {
  4161. "enabled" : false
  4162. },
  4163. "fielddata" : {
  4164. "format" : "disabled"
  4165. },
  4166. "fields" : {
  4167. "raw" : {
  4168. "type" : "string",
  4169. "index" : "not_analyzed",
  4170. "ignore_above" : 256
  4171. }
  4172. }
  4173. },
  4174. "region_name" : {
  4175. "type" : "string",
  4176. "norms" : {
  4177. "enabled" : false
  4178. },
  4179. "fielddata" : {
  4180. "format" : "disabled"
  4181. },
  4182. "fields" : {
  4183. "raw" : {
  4184. "type" : "string",
  4185. "index" : "not_analyzed",
  4186. "ignore_above" : 256
  4187. }
  4188. }
  4189. },
  4190. "timezone" : {
  4191. "type" : "string",
  4192. "norms" : {
  4193. "enabled" : false
  4194. },
  4195. "fielddata" : {
  4196. "format" : "disabled"
  4197. },
  4198. "fields" : {
  4199. "raw" : {
  4200. "type" : "string",
  4201. "index" : "not_analyzed",
  4202. "ignore_above" : 256
  4203. }
  4204. }
  4205. }
  4206. }
  4207. },
  4208. "group" : {
  4209. "type" : "string",
  4210. "norms" : {
  4211. "enabled" : false
  4212. },
  4213. "fielddata" : {
  4214. "format" : "disabled"
  4215. },
  4216. "fields" : {
  4217. "raw" : {
  4218. "type" : "string",
  4219. "index" : "not_analyzed",
  4220. "ignore_above" : 256
  4221. }
  4222. }
  4223. },
  4224. "host" : {
  4225. "type" : "string",
  4226. "norms" : {
  4227. "enabled" : false
  4228. },
  4229. "fielddata" : {
  4230. "format" : "disabled"
  4231. },
  4232. "fields" : {
  4233. "raw" : {
  4234. "type" : "string",
  4235. "index" : "not_analyzed",
  4236. "ignore_above" : 256
  4237. }
  4238. }
  4239. },
  4240. "hostname" : {
  4241. "type" : "string",
  4242. "norms" : {
  4243. "enabled" : false
  4244. },
  4245. "fielddata" : {
  4246. "format" : "disabled"
  4247. },
  4248. "fields" : {
  4249. "raw" : {
  4250. "type" : "string",
  4251. "index" : "not_analyzed",
  4252. "ignore_above" : 256
  4253. }
  4254. }
  4255. },
  4256. "http" : {
  4257. "type" : "string",
  4258. "norms" : {
  4259. "enabled" : false
  4260. },
  4261. "fielddata" : {
  4262. "format" : "disabled"
  4263. },
  4264. "fields" : {
  4265. "raw" : {
  4266. "type" : "string",
  4267. "index" : "not_analyzed",
  4268. "ignore_above" : 256
  4269. }
  4270. }
  4271. },
  4272. "id" : {
  4273. "type" : "string",
  4274. "norms" : {
  4275. "enabled" : false
  4276. },
  4277. "fielddata" : {
  4278. "format" : "disabled"
  4279. },
  4280. "fields" : {
  4281. "raw" : {
  4282. "type" : "string",
  4283. "index" : "not_analyzed",
  4284. "ignore_above" : 256
  4285. }
  4286. }
  4287. },
  4288. "identidx" : {
  4289. "type" : "string",
  4290. "norms" : {
  4291. "enabled" : false
  4292. },
  4293. "fielddata" : {
  4294. "format" : "disabled"
  4295. },
  4296. "fields" : {
  4297. "raw" : {
  4298. "type" : "string",
  4299. "index" : "not_analyzed",
  4300. "ignore_above" : 256
  4301. }
  4302. }
  4303. },
  4304. "idsdb" : {
  4305. "type" : "string",
  4306. "norms" : {
  4307. "enabled" : false
  4308. },
  4309. "fielddata" : {
  4310. "format" : "disabled"
  4311. },
  4312. "fields" : {
  4313. "raw" : {
  4314. "type" : "string",
  4315. "index" : "not_analyzed",
  4316. "ignore_above" : 256
  4317. }
  4318. }
  4319. },
  4320. "idsmn" : {
  4321. "type" : "string",
  4322. "norms" : {
  4323. "enabled" : false
  4324. },
  4325. "fielddata" : {
  4326. "format" : "disabled"
  4327. },
  4328. "fields" : {
  4329. "raw" : {
  4330. "type" : "string",
  4331. "index" : "not_analyzed",
  4332. "ignore_above" : 256
  4333. }
  4334. }
  4335. },
  4336. "idssn" : {
  4337. "type" : "string",
  4338. "norms" : {
  4339. "enabled" : false
  4340. },
  4341. "fielddata" : {
  4342. "format" : "disabled"
  4343. },
  4344. "fields" : {
  4345. "raw" : {
  4346. "type" : "string",
  4347. "index" : "not_analyzed",
  4348. "ignore_above" : 256
  4349. }
  4350. }
  4351. },
  4352. "imap" : {
  4353. "type" : "string",
  4354. "norms" : {
  4355. "enabled" : false
  4356. },
  4357. "fielddata" : {
  4358. "format" : "disabled"
  4359. },
  4360. "fields" : {
  4361. "raw" : {
  4362. "type" : "string",
  4363. "index" : "not_analyzed",
  4364. "ignore_above" : 256
  4365. }
  4366. }
  4367. },
  4368. "in_spi" : {
  4369. "type" : "string",
  4370. "norms" : {
  4371. "enabled" : false
  4372. },
  4373. "fielddata" : {
  4374. "format" : "disabled"
  4375. },
  4376. "fields" : {
  4377. "raw" : {
  4378. "type" : "string",
  4379. "index" : "not_analyzed",
  4380. "ignore_above" : 256
  4381. }
  4382. }
  4383. },
  4384. "init" : {
  4385. "type" : "string",
  4386. "norms" : {
  4387. "enabled" : false
  4388. },
  4389. "fielddata" : {
  4390. "format" : "disabled"
  4391. },
  4392. "fields" : {
  4393. "raw" : {
  4394. "type" : "string",
  4395. "index" : "not_analyzed",
  4396. "ignore_above" : 256
  4397. }
  4398. }
  4399. },
  4400. "ip" : {
  4401. "type" : "string",
  4402. "norms" : {
  4403. "enabled" : false
  4404. },
  4405. "fielddata" : {
  4406. "format" : "disabled"
  4407. },
  4408. "fields" : {
  4409. "raw" : {
  4410. "type" : "string",
  4411. "index" : "not_analyzed",
  4412. "ignore_above" : 256
  4413. }
  4414. }
  4415. },
  4416. "kv" : {
  4417. "type" : "string",
  4418. "norms" : {
  4419. "enabled" : false
  4420. },
  4421. "fielddata" : {
  4422. "format" : "disabled"
  4423. },
  4424. "fields" : {
  4425. "raw" : {
  4426. "type" : "string",
  4427. "index" : "not_analyzed",
  4428. "ignore_above" : 256
  4429. }
  4430. }
  4431. },
  4432. "lease" : {
  4433. "type" : "string",
  4434. "norms" : {
  4435. "enabled" : false
  4436. },
  4437. "fielddata" : {
  4438. "format" : "disabled"
  4439. },
  4440. "fields" : {
  4441. "raw" : {
  4442. "type" : "string",
  4443. "index" : "not_analyzed",
  4444. "ignore_above" : 256
  4445. }
  4446. }
  4447. },
  4448. "level" : {
  4449. "type" : "string",
  4450. "norms" : {
  4451. "enabled" : false
  4452. },
  4453. "fielddata" : {
  4454. "format" : "disabled"
  4455. },
  4456. "fields" : {
  4457. "raw" : {
  4458. "type" : "string",
  4459. "index" : "not_analyzed",
  4460. "ignore_above" : 256
  4461. }
  4462. }
  4463. },
  4464. "libav" : {
  4465. "type" : "string",
  4466. "norms" : {
  4467. "enabled" : false
  4468. },
  4469. "fielddata" : {
  4470. "format" : "disabled"
  4471. },
  4472. "fields" : {
  4473. "raw" : {
  4474. "type" : "string",
  4475. "index" : "not_analyzed",
  4476. "ignore_above" : 256
  4477. }
  4478. }
  4479. },
  4480. "locip" : {
  4481. "type" : "string",
  4482. "norms" : {
  4483. "enabled" : false
  4484. },
  4485. "fielddata" : {
  4486. "format" : "disabled"
  4487. },
  4488. "fields" : {
  4489. "raw" : {
  4490. "type" : "string",
  4491. "index" : "not_analyzed",
  4492. "ignore_above" : 256
  4493. }
  4494. }
  4495. },
  4496. "locport" : {
  4497. "type" : "string",
  4498. "norms" : {
  4499. "enabled" : false
  4500. },
  4501. "fielddata" : {
  4502. "format" : "disabled"
  4503. },
  4504. "fields" : {
  4505. "raw" : {
  4506. "type" : "string",
  4507. "index" : "not_analyzed",
  4508. "ignore_above" : 256
  4509. }
  4510. }
  4511. },
  4512. "log" : {
  4513. "type" : "string",
  4514. "norms" : {
  4515. "enabled" : false
  4516. },
  4517. "fielddata" : {
  4518. "format" : "disabled"
  4519. },
  4520. "fields" : {
  4521. "raw" : {
  4522. "type" : "string",
  4523. "index" : "not_analyzed",
  4524. "ignore_above" : 256
  4525. }
  4526. }
  4527. },
  4528. "log_id" : {
  4529. "type" : "string",
  4530. "norms" : {
  4531. "enabled" : false
  4532. },
  4533. "fielddata" : {
  4534. "format" : "disabled"
  4535. },
  4536. "fields" : {
  4537. "raw" : {
  4538. "type" : "string",
  4539. "index" : "not_analyzed",
  4540. "ignore_above" : 256
  4541. }
  4542. }
  4543. },
  4544. "logdesc" : {
  4545. "type" : "string",
  4546. "norms" : {
  4547. "enabled" : false
  4548. },
  4549. "fielddata" : {
  4550. "format" : "disabled"
  4551. },
  4552. "fields" : {
  4553. "raw" : {
  4554. "type" : "string",
  4555. "index" : "not_analyzed",
  4556. "ignore_above" : 256
  4557. }
  4558. }
  4559. },
  4560. "logid" : {
  4561. "type" : "string",
  4562. "norms" : {
  4563. "enabled" : false
  4564. },
  4565. "fielddata" : {
  4566. "format" : "disabled"
  4567. },
  4568. "fields" : {
  4569. "raw" : {
  4570. "type" : "string",
  4571. "index" : "not_analyzed",
  4572. "ignore_above" : 256
  4573. }
  4574. }
  4575. },
  4576. "logver" : {
  4577. "type" : "string",
  4578. "norms" : {
  4579. "enabled" : false
  4580. },
  4581. "fielddata" : {
  4582. "format" : "disabled"
  4583. },
  4584. "fields" : {
  4585. "raw" : {
  4586. "type" : "string",
  4587. "index" : "not_analyzed",
  4588. "ignore_above" : 256
  4589. }
  4590. }
  4591. },
  4592. "mac" : {
  4593. "type" : "string",
  4594. "norms" : {
  4595. "enabled" : false
  4596. },
  4597. "fielddata" : {
  4598. "format" : "disabled"
  4599. },
  4600. "fields" : {
  4601. "raw" : {
  4602. "type" : "string",
  4603. "index" : "not_analyzed",
  4604. "ignore_above" : 256
  4605. }
  4606. }
  4607. },
  4608. "mem" : {
  4609. "type" : "string",
  4610. "norms" : {
  4611. "enabled" : false
  4612. },
  4613. "fielddata" : {
  4614. "format" : "disabled"
  4615. },
  4616. "fields" : {
  4617. "raw" : {
  4618. "type" : "string",
  4619. "index" : "not_analyzed",
  4620. "ignore_above" : 256
  4621. }
  4622. }
  4623. },
  4624. "mode" : {
  4625. "type" : "string",
  4626. "norms" : {
  4627. "enabled" : false
  4628. },
  4629. "fielddata" : {
  4630. "format" : "disabled"
  4631. },
  4632. "fields" : {
  4633. "raw" : {
  4634. "type" : "string",
  4635. "index" : "not_analyzed",
  4636. "ignore_above" : 256
  4637. }
  4638. }
  4639. },
  4640. "msg" : {
  4641. "type" : "string",
  4642. "norms" : {
  4643. "enabled" : false
  4644. },
  4645. "fielddata" : {
  4646. "format" : "disabled"
  4647. },
  4648. "fields" : {
  4649. "raw" : {
  4650. "type" : "string",
  4651. "index" : "not_analyzed",
  4652. "ignore_above" : 256
  4653. }
  4654. }
  4655. },
  4656. "nat" : {
  4657. "type" : "string",
  4658. "norms" : {
  4659. "enabled" : false
  4660. },
  4661. "fielddata" : {
  4662. "format" : "disabled"
  4663. },
  4664. "fields" : {
  4665. "raw" : {
  4666. "type" : "string",
  4667. "index" : "not_analyzed",
  4668. "ignore_above" : 256
  4669. }
  4670. }
  4671. },
  4672. "new_status" : {
  4673. "type" : "string",
  4674. "norms" : {
  4675. "enabled" : false
  4676. },
  4677. "fielddata" : {
  4678. "format" : "disabled"
  4679. },
  4680. "fields" : {
  4681. "raw" : {
  4682. "type" : "string",
  4683. "index" : "not_analyzed",
  4684. "ignore_above" : 256
  4685. }
  4686. }
  4687. },
  4688. "nextstat" : {
  4689. "type" : "string",
  4690. "norms" : {
  4691. "enabled" : false
  4692. },
  4693. "fielddata" : {
  4694. "format" : "disabled"
  4695. },
  4696. "fields" : {
  4697. "raw" : {
  4698. "type" : "string",
  4699. "index" : "not_analyzed",
  4700. "ignore_above" : 256
  4701. }
  4702. }
  4703. },
  4704. "old_status" : {
  4705. "type" : "string",
  4706. "norms" : {
  4707. "enabled" : false
  4708. },
  4709. "fielddata" : {
  4710. "format" : "disabled"
  4711. },
  4712. "fields" : {
  4713. "raw" : {
  4714. "type" : "string",
  4715. "index" : "not_analyzed",
  4716. "ignore_above" : 256
  4717. }
  4718. }
  4719. },
  4720. "out_spi" : {
  4721. "type" : "string",
  4722. "norms" : {
  4723. "enabled" : false
  4724. },
  4725. "fielddata" : {
  4726. "format" : "disabled"
  4727. },
  4728. "fields" : {
  4729. "raw" : {
  4730. "type" : "string",
  4731. "index" : "not_analyzed",
  4732. "ignore_above" : 256
  4733. }
  4734. }
  4735. },
  4736. "outintf" : {
  4737. "type" : "string",
  4738. "norms" : {
  4739. "enabled" : false
  4740. },
  4741. "fielddata" : {
  4742. "format" : "disabled"
  4743. },
  4744. "fields" : {
  4745. "raw" : {
  4746. "type" : "string",
  4747. "index" : "not_analyzed",
  4748. "ignore_above" : 256
  4749. }
  4750. }
  4751. },
  4752. "path" : {
  4753. "type" : "string",
  4754. "norms" : {
  4755. "enabled" : false
  4756. },
  4757. "fielddata" : {
  4758. "format" : "disabled"
  4759. },
  4760. "fields" : {
  4761. "raw" : {
  4762. "type" : "string",
  4763. "index" : "not_analyzed",
  4764. "ignore_above" : 256
  4765. }
  4766. }
  4767. },
  4768. "policyid" : {
  4769. "type" : "string",
  4770. "norms" : {
  4771. "enabled" : false
  4772. },
  4773. "fielddata" : {
  4774. "format" : "disabled"
  4775. },
  4776. "fields" : {
  4777. "raw" : {
  4778. "type" : "string",
  4779. "index" : "not_analyzed",
  4780. "ignore_above" : 256
  4781. }
  4782. }
  4783. },
  4784. "poolname" : {
  4785. "type" : "string",
  4786. "norms" : {
  4787. "enabled" : false
  4788. },
  4789. "fielddata" : {
  4790. "format" : "disabled"
  4791. },
  4792. "fields" : {
  4793. "raw" : {
  4794. "type" : "string",
  4795. "index" : "not_analyzed",
  4796. "ignore_above" : 256
  4797. }
  4798. }
  4799. },
  4800. "pop3" : {
  4801. "type" : "string",
  4802. "norms" : {
  4803. "enabled" : false
  4804. },
  4805. "fielddata" : {
  4806. "format" : "disabled"
  4807. },
  4808. "fields" : {
  4809. "raw" : {
  4810. "type" : "string",
  4811. "index" : "not_analyzed",
  4812. "ignore_above" : 256
  4813. }
  4814. }
  4815. },
  4816. "portbegin" : {
  4817. "type" : "string",
  4818. "norms" : {
  4819. "enabled" : false
  4820. },
  4821. "fielddata" : {
  4822. "format" : "disabled"
  4823. },
  4824. "fields" : {
  4825. "raw" : {
  4826. "type" : "string",
  4827. "index" : "not_analyzed",
  4828. "ignore_above" : 256
  4829. }
  4830. }
  4831. },
  4832. "portend" : {
  4833. "type" : "string",
  4834. "norms" : {
  4835. "enabled" : false
  4836. },
  4837. "fielddata" : {
  4838. "format" : "disabled"
  4839. },
  4840. "fields" : {
  4841. "raw" : {
  4842. "type" : "string",
  4843. "index" : "not_analyzed",
  4844. "ignore_above" : 256
  4845. }
  4846. }
  4847. },
  4848. "pri" : {
  4849. "type" : "string",
  4850. "norms" : {
  4851. "enabled" : false
  4852. },
  4853. "fielddata" : {
  4854. "format" : "disabled"
  4855. },
  4856. "fields" : {
  4857. "raw" : {
  4858. "type" : "string",
  4859. "index" : "not_analyzed",
  4860. "ignore_above" : 256
  4861. }
  4862. }
  4863. },
  4864. "processtime" : {
  4865. "type" : "string",
  4866. "norms" : {
  4867. "enabled" : false
  4868. },
  4869. "fielddata" : {
  4870. "format" : "disabled"
  4871. },
  4872. "fields" : {
  4873. "raw" : {
  4874. "type" : "string",
  4875. "index" : "not_analyzed",
  4876. "ignore_above" : 256
  4877. }
  4878. }
  4879. },
  4880. "profile" : {
  4881. "type" : "string",
  4882. "norms" : {
  4883. "enabled" : false
  4884. },
  4885. "fielddata" : {
  4886. "format" : "disabled"
  4887. },
  4888. "fields" : {
  4889. "raw" : {
  4890. "type" : "string",
  4891. "index" : "not_analyzed",
  4892. "ignore_above" : 256
  4893. }
  4894. }
  4895. },
  4896. "proto" : {
  4897. "type" : "string",
  4898. "norms" : {
  4899. "enabled" : false
  4900. },
  4901. "fielddata" : {
  4902. "format" : "disabled"
  4903. },
  4904. "fields" : {
  4905. "raw" : {
  4906. "type" : "string",
  4907. "index" : "not_analyzed",
  4908. "ignore_above" : 256
  4909. }
  4910. }
  4911. },
  4912. "rcvdbyte" : {
  4913. "type" : "string",
  4914. "norms" : {
  4915. "enabled" : false
  4916. },
  4917. "fielddata" : {
  4918. "format" : "disabled"
  4919. },
  4920. "fields" : {
  4921. "raw" : {
  4922. "type" : "string",
  4923. "index" : "not_analyzed",
  4924. "ignore_above" : 256
  4925. }
  4926. }
  4927. },
  4928. "reason" : {
  4929. "type" : "string",
  4930. "norms" : {
  4931. "enabled" : false
  4932. },
  4933. "fielddata" : {
  4934. "format" : "disabled"
  4935. },
  4936. "fields" : {
  4937. "raw" : {
  4938. "type" : "string",
  4939. "index" : "not_analyzed",
  4940. "ignore_above" : 256
  4941. }
  4942. }
  4943. },
  4944. "remip" : {
  4945. "type" : "string",
  4946. "norms" : {
  4947. "enabled" : false
  4948. },
  4949. "fielddata" : {
  4950. "format" : "disabled"
  4951. },
  4952. "fields" : {
  4953. "raw" : {
  4954. "type" : "string",
  4955. "index" : "not_analyzed",
  4956. "ignore_above" : 256
  4957. }
  4958. }
  4959. },
  4960. "remport" : {
  4961. "type" : "string",
  4962. "norms" : {
  4963. "enabled" : false
  4964. },
  4965. "fielddata" : {
  4966. "format" : "disabled"
  4967. },
  4968. "fields" : {
  4969. "raw" : {
  4970. "type" : "string",
  4971. "index" : "not_analyzed",
  4972. "ignore_above" : 256
  4973. }
  4974. }
  4975. },
  4976. "reporttype" : {
  4977. "type" : "string",
  4978. "norms" : {
  4979. "enabled" : false
  4980. },
  4981. "fielddata" : {
  4982. "format" : "disabled"
  4983. },
  4984. "fields" : {
  4985. "raw" : {
  4986. "type" : "string",
  4987. "index" : "not_analyzed",
  4988. "ignore_above" : 256
  4989. }
  4990. }
  4991. },
  4992. "result" : {
  4993. "type" : "string",
  4994. "norms" : {
  4995. "enabled" : false
  4996. },
  4997. "fielddata" : {
  4998. "format" : "disabled"
  4999. },
  5000. "fields" : {
  5001. "raw" : {
  5002. "type" : "string",
  5003. "index" : "not_analyzed",
  5004. "ignore_above" : 256
  5005. }
  5006. }
  5007. },
  5008. "role" : {
  5009. "type" : "string",
  5010. "norms" : {
  5011. "enabled" : false
  5012. },
  5013. "fielddata" : {
  5014. "format" : "disabled"
  5015. },
  5016. "fields" : {
  5017. "raw" : {
  5018. "type" : "string",
  5019. "index" : "not_analyzed",
  5020. "ignore_above" : 256
  5021. }
  5022. }
  5023. },
  5024. "saddr" : {
  5025. "type" : "string",
  5026. "norms" : {
  5027. "enabled" : false
  5028. },
  5029. "fielddata" : {
  5030. "format" : "disabled"
  5031. },
  5032. "fields" : {
  5033. "raw" : {
  5034. "type" : "string",
  5035. "index" : "not_analyzed",
  5036. "ignore_above" : 256
  5037. }
  5038. }
  5039. },
  5040. "sentbyte" : {
  5041. "type" : "string",
  5042. "norms" : {
  5043. "enabled" : false
  5044. },
  5045. "fielddata" : {
  5046. "format" : "disabled"
  5047. },
  5048. "fields" : {
  5049. "raw" : {
  5050. "type" : "string",
  5051. "index" : "not_analyzed",
  5052. "ignore_above" : 256
  5053. }
  5054. }
  5055. },
  5056. "serial" : {
  5057. "type" : "string",
  5058. "norms" : {
  5059. "enabled" : false
  5060. },
  5061. "fielddata" : {
  5062. "format" : "disabled"
  5063. },
  5064. "fields" : {
  5065. "raw" : {
  5066. "type" : "string",
  5067. "index" : "not_analyzed",
  5068. "ignore_above" : 256
  5069. }
  5070. }
  5071. },
  5072. "server" : {
  5073. "type" : "string",
  5074. "norms" : {
  5075. "enabled" : false
  5076. },
  5077. "fielddata" : {
  5078. "format" : "disabled"
  5079. },
  5080. "fields" : {
  5081. "raw" : {
  5082. "type" : "string",
  5083. "index" : "not_analyzed",
  5084. "ignore_above" : 256
  5085. }
  5086. }
  5087. },
  5088. "setuprate" : {
  5089. "type" : "string",
  5090. "norms" : {
  5091. "enabled" : false
  5092. },
  5093. "fielddata" : {
  5094. "format" : "disabled"
  5095. },
  5096. "fields" : {
  5097. "raw" : {
  5098. "type" : "string",
  5099. "index" : "not_analyzed",
  5100. "ignore_above" : 256
  5101. }
  5102. }
  5103. },
  5104. "smtp" : {
  5105. "type" : "string",
  5106. "norms" : {
  5107. "enabled" : false
  5108. },
  5109. "fielddata" : {
  5110. "format" : "disabled"
  5111. },
  5112. "fields" : {
  5113. "raw" : {
  5114. "type" : "string",
  5115. "index" : "not_analyzed",
  5116. "ignore_above" : 256
  5117. }
  5118. }
  5119. },
  5120. "sn" : {
  5121. "type" : "string",
  5122. "norms" : {
  5123. "enabled" : false
  5124. },
  5125. "fielddata" : {
  5126. "format" : "disabled"
  5127. },
  5128. "fields" : {
  5129. "raw" : {
  5130. "type" : "string",
  5131. "index" : "not_analyzed",
  5132. "ignore_above" : 256
  5133. }
  5134. }
  5135. },
  5136. "srcip" : {
  5137. "type" : "string",
  5138. "norms" : {
  5139. "enabled" : false
  5140. },
  5141. "fielddata" : {
  5142. "format" : "disabled"
  5143. },
  5144. "fields" : {
  5145. "raw" : {
  5146. "type" : "string",
  5147. "index" : "not_analyzed",
  5148. "ignore_above" : 256
  5149. }
  5150. }
  5151. },
  5152. "srcport" : {
  5153. "type" : "string",
  5154. "norms" : {
  5155. "enabled" : false
  5156. },
  5157. "fielddata" : {
  5158. "format" : "disabled"
  5159. },
  5160. "fields" : {
  5161. "raw" : {
  5162. "type" : "string",
  5163. "index" : "not_analyzed",
  5164. "ignore_above" : 256
  5165. }
  5166. }
  5167. },
  5168. "stage" : {
  5169. "type" : "string",
  5170. "norms" : {
  5171. "enabled" : false
  5172. },
  5173. "fielddata" : {
  5174. "format" : "disabled"
  5175. },
  5176. "fields" : {
  5177. "raw" : {
  5178. "type" : "string",
  5179. "index" : "not_analyzed",
  5180. "ignore_above" : 256
  5181. }
  5182. }
  5183. },
  5184. "state" : {
  5185. "type" : "string",
  5186. "norms" : {
  5187. "enabled" : false
  5188. },
  5189. "fielddata" : {
  5190. "format" : "disabled"
  5191. },
  5192. "fields" : {
  5193. "raw" : {
  5194. "type" : "string",
  5195. "index" : "not_analyzed",
  5196. "ignore_above" : 256
  5197. }
  5198. }
  5199. },
  5200. "status" : {
  5201. "type" : "string",
  5202. "norms" : {
  5203. "enabled" : false
  5204. },
  5205. "fielddata" : {
  5206. "format" : "disabled"
  5207. },
  5208. "fields" : {
  5209. "raw" : {
  5210. "type" : "string",
  5211. "index" : "not_analyzed",
  5212. "ignore_above" : 256
  5213. }
  5214. }
  5215. },
  5216. "subtype" : {
  5217. "type" : "string",
  5218. "norms" : {
  5219. "enabled" : false
  5220. },
  5221. "fielddata" : {
  5222. "format" : "disabled"
  5223. },
  5224. "fields" : {
  5225. "raw" : {
  5226. "type" : "string",
  5227. "index" : "not_analyzed",
  5228. "ignore_above" : 256
  5229. }
  5230. }
  5231. },
  5232. "sync_status" : {
  5233. "type" : "string",
  5234. "norms" : {
  5235. "enabled" : false
  5236. },
  5237. "fielddata" : {
  5238. "format" : "disabled"
  5239. },
  5240. "fields" : {
  5241. "raw" : {
  5242. "type" : "string",
  5243. "index" : "not_analyzed",
  5244. "ignore_above" : 256
  5245. }
  5246. }
  5247. },
  5248. "sync_type" : {
  5249. "type" : "string",
  5250. "norms" : {
  5251. "enabled" : false
  5252. },
  5253. "fielddata" : {
  5254. "format" : "disabled"
  5255. },
  5256. "fields" : {
  5257. "raw" : {
  5258. "type" : "string",
  5259. "index" : "not_analyzed",
  5260. "ignore_above" : 256
  5261. }
  5262. }
  5263. },
  5264. "time" : {
  5265. "type" : "string",
  5266. "norms" : {
  5267. "enabled" : false
  5268. },
  5269. "fielddata" : {
  5270. "format" : "disabled"
  5271. },
  5272. "fields" : {
  5273. "raw" : {
  5274. "type" : "string",
  5275. "index" : "not_analyzed",
  5276. "ignore_above" : 256
  5277. }
  5278. }
  5279. },
  5280. "total_session" : {
  5281. "type" : "string",
  5282. "norms" : {
  5283. "enabled" : false
  5284. },
  5285. "fielddata" : {
  5286. "format" : "disabled"
  5287. },
  5288. "fields" : {
  5289. "raw" : {
  5290. "type" : "string",
  5291. "index" : "not_analyzed",
  5292. "ignore_above" : 256
  5293. }
  5294. }
  5295. },
  5296. "totalsession" : {
  5297. "type" : "string",
  5298. "norms" : {
  5299. "enabled" : false
  5300. },
  5301. "fielddata" : {
  5302. "format" : "disabled"
  5303. },
  5304. "fields" : {
  5305. "raw" : {
  5306. "type" : "string",
  5307. "index" : "not_analyzed",
  5308. "ignore_above" : 256
  5309. }
  5310. }
  5311. },
  5312. "tunnelid" : {
  5313. "type" : "string",
  5314. "norms" : {
  5315. "enabled" : false
  5316. },
  5317. "fielddata" : {
  5318. "format" : "disabled"
  5319. },
  5320. "fields" : {
  5321. "raw" : {
  5322. "type" : "string",
  5323. "index" : "not_analyzed",
  5324. "ignore_above" : 256
  5325. }
  5326. }
  5327. },
  5328. "tunnelip" : {
  5329. "type" : "string",
  5330. "norms" : {
  5331. "enabled" : false
  5332. },
  5333. "fielddata" : {
  5334. "format" : "disabled"
  5335. },
  5336. "fields" : {
  5337. "raw" : {
  5338. "type" : "string",
  5339. "index" : "not_analyzed",
  5340. "ignore_above" : 256
  5341. }
  5342. }
  5343. },
  5344. "tunneltype" : {
  5345. "type" : "string",
  5346. "norms" : {
  5347. "enabled" : false
  5348. },
  5349. "fielddata" : {
  5350. "format" : "disabled"
  5351. },
  5352. "fields" : {
  5353. "raw" : {
  5354. "type" : "string",
  5355. "index" : "not_analyzed",
  5356. "ignore_above" : 256
  5357. }
  5358. }
  5359. },
  5360. "type" : {
  5361. "type" : "string",
  5362. "norms" : {
  5363. "enabled" : false
  5364. },
  5365. "fielddata" : {
  5366. "format" : "disabled"
  5367. },
  5368. "fields" : {
  5369. "raw" : {
  5370. "type" : "string",
  5371. "index" : "not_analyzed",
  5372. "ignore_above" : 256
  5373. }
  5374. }
  5375. },
  5376. "ui" : {
  5377. "type" : "string",
  5378. "norms" : {
  5379. "enabled" : false
  5380. },
  5381. "fielddata" : {
  5382. "format" : "disabled"
  5383. },
  5384. "fields" : {
  5385. "raw" : {
  5386. "type" : "string",
  5387. "index" : "not_analyzed",
  5388. "ignore_above" : 256
  5389. }
  5390. }
  5391. },
  5392. "user" : {
  5393. "type" : "string",
  5394. "norms" : {
  5395. "enabled" : false
  5396. },
  5397. "fielddata" : {
  5398. "format" : "disabled"
  5399. },
  5400. "fields" : {
  5401. "raw" : {
  5402. "type" : "string",
  5403. "index" : "not_analyzed",
  5404. "ignore_above" : 256
  5405. }
  5406. }
  5407. },
  5408. "vd" : {
  5409. "type" : "string",
  5410. "norms" : {
  5411. "enabled" : false
  5412. },
  5413. "fielddata" : {
  5414. "format" : "disabled"
  5415. },
  5416. "fields" : {
  5417. "raw" : {
  5418. "type" : "string",
  5419. "index" : "not_analyzed",
  5420. "ignore_above" : 256
  5421. }
  5422. }
  5423. },
  5424. "vip" : {
  5425. "type" : "string",
  5426. "norms" : {
  5427. "enabled" : false
  5428. },
  5429. "fielddata" : {
  5430. "format" : "disabled"
  5431. },
  5432. "fields" : {
  5433. "raw" : {
  5434. "type" : "string",
  5435. "index" : "not_analyzed",
  5436. "ignore_above" : 256
  5437. }
  5438. }
  5439. },
  5440. "virdb" : {
  5441. "type" : "string",
  5442. "norms" : {
  5443. "enabled" : false
  5444. },
  5445. "fielddata" : {
  5446. "format" : "disabled"
  5447. },
  5448. "fields" : {
  5449. "raw" : {
  5450. "type" : "string",
  5451. "index" : "not_analyzed",
  5452. "ignore_above" : 256
  5453. }
  5454. }
  5455. },
  5456. "vpntunnel" : {
  5457. "type" : "string",
  5458. "norms" : {
  5459. "enabled" : false
  5460. },
  5461. "fielddata" : {
  5462. "format" : "disabled"
  5463. },
  5464. "fields" : {
  5465. "raw" : {
  5466. "type" : "string",
  5467. "index" : "not_analyzed",
  5468. "ignore_above" : 256
  5469. }
  5470. }
  5471. },
  5472. "xauthgroup" : {
  5473. "type" : "string",
  5474. "norms" : {
  5475. "enabled" : false
  5476. },
  5477. "fielddata" : {
  5478. "format" : "disabled"
  5479. },
  5480. "fields" : {
  5481. "raw" : {
  5482. "type" : "string",
  5483. "index" : "not_analyzed",
  5484. "ignore_above" : 256
  5485. }
  5486. }
  5487. },
  5488. "xauthuser" : {
  5489. "type" : "string",
  5490. "norms" : {
  5491. "enabled" : false
  5492. },
  5493. "fielddata" : {
  5494. "format" : "disabled"
  5495. },
  5496. "fields" : {
  5497. "raw" : {
  5498. "type" : "string",
  5499. "index" : "not_analyzed",
  5500. "ignore_above" : 256
  5501. }
  5502. }
  5503. }
  5504. }
  5505. }
  5506. }
  5507. },
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!