API tools faq
paste
Advertisement
Guest User

mappings2

a guest
Aug 4th, 2016
266
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 55.69 KB | None | 0 0
raw download clone embed print report
  1. [root@log01 indexes]# curl http://localhost:9200/winlogbeat-2016.08.04/_mapping?pretty
  2. {
  3. "winlogbeat-2016.08.04" : {
  4. "mappings" : {
  5. "wineventlog" : {
  6. "_all" : {
  7. "enabled" : true,
  8. "omit_norms" : true
  9. },
  10. "dynamic_templates" : [ {
  11. "template1" : {
  12. "mapping" : {
  13. "ignore_above" : 1024,
  14. "index" : "not_analyzed",
  15. "type" : "{dynamic_type}",
  16. "doc_values" : true
  17. },
  18. "match" : "*"
  19. }
  20. } ],
  21. "properties" : {
  22. "@timestamp" : {
  23. "type" : "date",
  24. "format" : "strict_date_optional_time||epoch_millis"
  25. },
  26. "@version" : {
  27. "type" : "string",
  28. "index" : "not_analyzed",
  29. "ignore_above" : 1024
  30. },
  31. "activity_id" : {
  32. "type" : "string",
  33. "index" : "not_analyzed",
  34. "ignore_above" : 1024
  35. },
  36. "beat" : {
  37. "properties" : {
  38. "hostname" : {
  39. "type" : "string",
  40. "index" : "not_analyzed",
  41. "ignore_above" : 1024
  42. },
  43. "name" : {
  44. "type" : "string",
  45. "index" : "not_analyzed",
  46. "ignore_above" : 1024
  47. }
  48. }
  49. },
  50. "computer_name" : {
  51. "type" : "string",
  52. "index" : "not_analyzed",
  53. "ignore_above" : 1024
  54. },
  55. "event_data" : {
  56. "properties" : {
  57. "AccessList" : {
  58. "type" : "string",
  59. "index" : "not_analyzed",
  60. "ignore_above" : 1024
  61. },
  62. "AccessList_Translated" : {
  63. "type" : "string",
  64. "index" : "not_analyzed",
  65. "ignore_above" : 1024
  66. },
  67. "AccessMask" : {
  68. "type" : "string",
  69. "index" : "not_analyzed",
  70. "ignore_above" : 1024
  71. },
  72. "AccessReason" : {
  73. "type" : "string",
  74. "index" : "not_analyzed",
  75. "ignore_above" : 1024
  76. },
  77. "AccountDomain" : {
  78. "type" : "string",
  79. "index" : "not_analyzed",
  80. "ignore_above" : 1024
  81. },
  82. "AccountExpires" : {
  83. "type" : "string",
  84. "index" : "not_analyzed",
  85. "ignore_above" : 1024
  86. },
  87. "AccountName" : {
  88. "type" : "string",
  89. "index" : "not_analyzed",
  90. "ignore_above" : 1024
  91. },
  92. "AccountSessionIdentifier" : {
  93. "type" : "string",
  94. "index" : "not_analyzed",
  95. "ignore_above" : 1024
  96. },
  97. "AdditionalInfo" : {
  98. "type" : "string",
  99. "index" : "not_analyzed",
  100. "ignore_above" : 1024
  101. },
  102. "AdditionalInfo2" : {
  103. "type" : "string",
  104. "index" : "not_analyzed",
  105. "ignore_above" : 1024
  106. },
  107. "AlertDesc" : {
  108. "type" : "string",
  109. "index" : "not_analyzed",
  110. "ignore_above" : 1024
  111. },
  112. "AlgorithmName" : {
  113. "type" : "string",
  114. "index" : "not_analyzed",
  115. "ignore_above" : 1024
  116. },
  117. "AllowedToDelegateTo" : {
  118. "type" : "string",
  119. "index" : "not_analyzed",
  120. "ignore_above" : 1024
  121. },
  122. "AppPoolID" : {
  123. "type" : "string",
  124. "index" : "not_analyzed",
  125. "ignore_above" : 1024
  126. },
  127. "AuditSourceName" : {
  128. "type" : "string",
  129. "index" : "not_analyzed",
  130. "ignore_above" : 1024
  131. },
  132. "AuthenticationPackageName" : {
  133. "type" : "string",
  134. "index" : "not_analyzed",
  135. "ignore_above" : 1024
  136. },
  137. "AuthenticationProvider" : {
  138. "type" : "string",
  139. "index" : "not_analyzed",
  140. "ignore_above" : 1024
  141. },
  142. "AuthenticationServer" : {
  143. "type" : "string",
  144. "index" : "not_analyzed",
  145. "ignore_above" : 1024
  146. },
  147. "AuthenticationType" : {
  148. "type" : "string",
  149. "index" : "not_analyzed",
  150. "ignore_above" : 1024
  151. },
  152. "Binary" : {
  153. "type" : "string",
  154. "index" : "not_analyzed",
  155. "ignore_above" : 1024
  156. },
  157. "BitlockerUserInputTime" : {
  158. "type" : "string",
  159. "index" : "not_analyzed",
  160. "ignore_above" : 1024
  161. },
  162. "BootMode" : {
  163. "type" : "string",
  164. "index" : "not_analyzed",
  165. "ignore_above" : 1024
  166. },
  167. "BootType" : {
  168. "type" : "string",
  169. "index" : "not_analyzed",
  170. "ignore_above" : 1024
  171. },
  172. "BuildVersion" : {
  173. "type" : "string",
  174. "index" : "not_analyzed",
  175. "ignore_above" : 1024
  176. },
  177. "CalledStationID" : {
  178. "type" : "string",
  179. "index" : "not_analyzed",
  180. "ignore_above" : 1024
  181. },
  182. "CallingStationID" : {
  183. "type" : "string",
  184. "index" : "not_analyzed",
  185. "ignore_above" : 1024
  186. },
  187. "ChainLoggingRate" : {
  188. "type" : "string",
  189. "index" : "not_analyzed",
  190. "ignore_above" : 1024
  191. },
  192. "ChainingCountFailure" : {
  193. "type" : "string",
  194. "index" : "not_analyzed",
  195. "ignore_above" : 1024
  196. },
  197. "ChainingCountRequests" : {
  198. "type" : "string",
  199. "index" : "not_analyzed",
  200. "ignore_above" : 1024
  201. },
  202. "ChainingCountSuccess" : {
  203. "type" : "string",
  204. "index" : "not_analyzed",
  205. "ignore_above" : 1024
  206. },
  207. "ClientAddress" : {
  208. "type" : "string",
  209. "index" : "not_analyzed",
  210. "ignore_above" : 1024
  211. },
  212. "ClientIPAddress" : {
  213. "type" : "string",
  214. "index" : "not_analyzed",
  215. "ignore_above" : 1024
  216. },
  217. "ClientName" : {
  218. "type" : "string",
  219. "index" : "not_analyzed",
  220. "ignore_above" : 1024
  221. },
  222. "ClientRealm" : {
  223. "type" : "string",
  224. "index" : "not_analyzed",
  225. "ignore_above" : 1024
  226. },
  227. "ClientVersion" : {
  228. "type" : "string",
  229. "index" : "not_analyzed",
  230. "ignore_above" : 1024
  231. },
  232. "ClientVersionLen" : {
  233. "type" : "string",
  234. "index" : "not_analyzed",
  235. "ignore_above" : 1024
  236. },
  237. "ComputerAccountChange" : {
  238. "type" : "string",
  239. "index" : "not_analyzed",
  240. "ignore_above" : 1024
  241. },
  242. "Context" : {
  243. "type" : "string",
  244. "index" : "not_analyzed",
  245. "ignore_above" : 1024
  246. },
  247. "CorruptionActionState" : {
  248. "type" : "string",
  249. "index" : "not_analyzed",
  250. "ignore_above" : 1024
  251. },
  252. "DCName" : {
  253. "type" : "string",
  254. "index" : "not_analyzed",
  255. "ignore_above" : 1024
  256. },
  257. "DSObjectName" : {
  258. "type" : "string",
  259. "index" : "not_analyzed",
  260. "ignore_above" : 1024
  261. },
  262. "DestinationDRA" : {
  263. "type" : "string",
  264. "index" : "not_analyzed",
  265. "ignore_above" : 1024
  266. },
  267. "Detail" : {
  268. "type" : "string",
  269. "index" : "not_analyzed",
  270. "ignore_above" : 1024
  271. },
  272. "DeviceName" : {
  273. "type" : "string",
  274. "index" : "not_analyzed",
  275. "ignore_above" : 1024
  276. },
  277. "DeviceNameLength" : {
  278. "type" : "string",
  279. "index" : "not_analyzed",
  280. "ignore_above" : 1024
  281. },
  282. "DeviceTime" : {
  283. "type" : "string",
  284. "index" : "not_analyzed",
  285. "ignore_above" : 1024
  286. },
  287. "DeviceVersionMajor" : {
  288. "type" : "string",
  289. "index" : "not_analyzed",
  290. "ignore_above" : 1024
  291. },
  292. "DeviceVersionMinor" : {
  293. "type" : "string",
  294. "index" : "not_analyzed",
  295. "ignore_above" : 1024
  296. },
  297. "DirtyPages" : {
  298. "type" : "string",
  299. "index" : "not_analyzed",
  300. "ignore_above" : 1024
  301. },
  302. "DisplayName" : {
  303. "type" : "string",
  304. "index" : "not_analyzed",
  305. "ignore_above" : 1024
  306. },
  307. "DnsHostName" : {
  308. "type" : "string",
  309. "index" : "not_analyzed",
  310. "ignore_above" : 1024
  311. },
  312. "DriveName" : {
  313. "type" : "string",
  314. "index" : "not_analyzed",
  315. "ignore_above" : 1024
  316. },
  317. "Dummy" : {
  318. "type" : "string",
  319. "index" : "not_analyzed",
  320. "ignore_above" : 1024
  321. },
  322. "EAPType" : {
  323. "type" : "string",
  324. "index" : "not_analyzed",
  325. "ignore_above" : 1024
  326. },
  327. "EndUSN" : {
  328. "type" : "string",
  329. "index" : "not_analyzed",
  330. "ignore_above" : 1024
  331. },
  332. "EngineName" : {
  333. "type" : "string",
  334. "index" : "not_analyzed",
  335. "ignore_above" : 1024
  336. },
  337. "EntryCount" : {
  338. "type" : "string",
  339. "index" : "not_analyzed",
  340. "ignore_above" : 1024
  341. },
  342. "Error" : {
  343. "type" : "string",
  344. "index" : "not_analyzed",
  345. "ignore_above" : 1024
  346. },
  347. "ErrorCode" : {
  348. "type" : "string",
  349. "index" : "not_analyzed",
  350. "ignore_above" : 1024
  351. },
  352. "ErrorDescription" : {
  353. "type" : "string",
  354. "index" : "not_analyzed",
  355. "ignore_above" : 1024
  356. },
  357. "ErrorDetails" : {
  358. "type" : "string",
  359. "index" : "not_analyzed",
  360. "ignore_above" : 1024
  361. },
  362. "ErrorState" : {
  363. "type" : "string",
  364. "index" : "not_analyzed",
  365. "ignore_above" : 1024
  366. },
  367. "EventSourceId" : {
  368. "type" : "string",
  369. "index" : "not_analyzed",
  370. "ignore_above" : 1024
  371. },
  372. "ExtendedQuarantineState" : {
  373. "type" : "string",
  374. "index" : "not_analyzed",
  375. "ignore_above" : 1024
  376. },
  377. "ExtensionId" : {
  378. "type" : "string",
  379. "index" : "not_analyzed",
  380. "ignore_above" : 1024
  381. },
  382. "ExtensionName" : {
  383. "type" : "string",
  384. "index" : "not_analyzed",
  385. "ignore_above" : 1024
  386. },
  387. "ExtraInfo" : {
  388. "type" : "string",
  389. "index" : "not_analyzed",
  390. "ignore_above" : 1024
  391. },
  392. "FailureReason" : {
  393. "type" : "string",
  394. "index" : "not_analyzed",
  395. "ignore_above" : 1024
  396. },
  397. "FailureReason_Translated" : {
  398. "type" : "string",
  399. "index" : "not_analyzed",
  400. "ignore_above" : 1024
  401. },
  402. "FinalStatus" : {
  403. "type" : "string",
  404. "index" : "not_analyzed",
  405. "ignore_above" : 1024
  406. },
  407. "FromFolder" : {
  408. "type" : "string",
  409. "index" : "not_analyzed",
  410. "ignore_above" : 1024
  411. },
  412. "FullyQualifiedSubjectMachineName" : {
  413. "type" : "string",
  414. "index" : "not_analyzed",
  415. "ignore_above" : 1024
  416. },
  417. "FullyQualifiedSubjectUserName" : {
  418. "type" : "string",
  419. "index" : "not_analyzed",
  420. "ignore_above" : 1024
  421. },
  422. "GPOList" : {
  423. "type" : "string",
  424. "index" : "not_analyzed",
  425. "ignore_above" : 1024
  426. },
  427. "Group" : {
  428. "type" : "string",
  429. "index" : "not_analyzed",
  430. "ignore_above" : 1024
  431. },
  432. "HandleId" : {
  433. "type" : "string",
  434. "index" : "not_analyzed",
  435. "ignore_above" : 1024
  436. },
  437. "HiveName" : {
  438. "type" : "string",
  439. "index" : "not_analyzed",
  440. "ignore_above" : 1024
  441. },
  442. "HiveNameLength" : {
  443. "type" : "string",
  444. "index" : "not_analyzed",
  445. "ignore_above" : 1024
  446. },
  447. "HomeDirectory" : {
  448. "type" : "string",
  449. "index" : "not_analyzed",
  450. "ignore_above" : 1024
  451. },
  452. "HomePath" : {
  453. "type" : "string",
  454. "index" : "not_analyzed",
  455. "ignore_above" : 1024
  456. },
  457. "IdleImplementation" : {
  458. "type" : "string",
  459. "index" : "not_analyzed",
  460. "ignore_above" : 1024
  461. },
  462. "IdleStateCount" : {
  463. "type" : "string",
  464. "index" : "not_analyzed",
  465. "ignore_above" : 1024
  466. },
  467. "ImagePath" : {
  468. "type" : "string",
  469. "index" : "not_analyzed",
  470. "ignore_above" : 1024
  471. },
  472. "ImpersonationLevel" : {
  473. "type" : "string",
  474. "index" : "not_analyzed",
  475. "ignore_above" : 1024
  476. },
  477. "ImpersonationLevel_Translated" : {
  478. "type" : "string",
  479. "index" : "not_analyzed",
  480. "ignore_above" : 1024
  481. },
  482. "IpAddress" : {
  483. "type" : "string",
  484. "index" : "not_analyzed",
  485. "ignore_above" : 1024
  486. },
  487. "IpPort" : {
  488. "type" : "string",
  489. "index" : "not_analyzed",
  490. "ignore_above" : 1024
  491. },
  492. "KeyFilePath" : {
  493. "type" : "string",
  494. "index" : "not_analyzed",
  495. "ignore_above" : 1024
  496. },
  497. "KeyLength" : {
  498. "type" : "string",
  499. "index" : "not_analyzed",
  500. "ignore_above" : 1024
  501. },
  502. "KeyName" : {
  503. "type" : "string",
  504. "index" : "not_analyzed",
  505. "ignore_above" : 1024
  506. },
  507. "KeyType" : {
  508. "type" : "string",
  509. "index" : "not_analyzed",
  510. "ignore_above" : 1024
  511. },
  512. "KeysUpdated" : {
  513. "type" : "string",
  514. "index" : "not_analyzed",
  515. "ignore_above" : 1024
  516. },
  517. "LastBootGood" : {
  518. "type" : "string",
  519. "index" : "not_analyzed",
  520. "ignore_above" : 1024
  521. },
  522. "LastShutdownGood" : {
  523. "type" : "string",
  524. "index" : "not_analyzed",
  525. "ignore_above" : 1024
  526. },
  527. "LmPackageName" : {
  528. "type" : "string",
  529. "index" : "not_analyzed",
  530. "ignore_above" : 1024
  531. },
  532. "LoggingResult" : {
  533. "type" : "string",
  534. "index" : "not_analyzed",
  535. "ignore_above" : 1024
  536. },
  537. "LogonGuid" : {
  538. "type" : "string",
  539. "index" : "not_analyzed",
  540. "ignore_above" : 1024
  541. },
  542. "LogonHours" : {
  543. "type" : "string",
  544. "index" : "not_analyzed",
  545. "ignore_above" : 1024
  546. },
  547. "LogonID" : {
  548. "type" : "string",
  549. "index" : "not_analyzed",
  550. "ignore_above" : 1024
  551. },
  552. "LogonProcessName" : {
  553. "type" : "string",
  554. "index" : "not_analyzed",
  555. "ignore_above" : 1024
  556. },
  557. "LogonType" : {
  558. "type" : "string",
  559. "index" : "not_analyzed",
  560. "ignore_above" : 1024
  561. },
  562. "LogonType_Translated" : {
  563. "type" : "string",
  564. "index" : "not_analyzed",
  565. "ignore_above" : 1024
  566. },
  567. "MachineInventory" : {
  568. "type" : "string",
  569. "index" : "not_analyzed",
  570. "ignore_above" : 1024
  571. },
  572. "MajorVersion" : {
  573. "type" : "string",
  574. "index" : "not_analyzed",
  575. "ignore_above" : 1024
  576. },
  577. "MaximumPerformancePercent" : {
  578. "type" : "string",
  579. "index" : "not_analyzed",
  580. "ignore_above" : 1024
  581. },
  582. "MinimumPerformancePercent" : {
  583. "type" : "string",
  584. "index" : "not_analyzed",
  585. "ignore_above" : 1024
  586. },
  587. "MinimumThrottlePercent" : {
  588. "type" : "string",
  589. "index" : "not_analyzed",
  590. "ignore_above" : 1024
  591. },
  592. "MinorVersion" : {
  593. "type" : "string",
  594. "index" : "not_analyzed",
  595. "ignore_above" : 1024
  596. },
  597. "Minutes" : {
  598. "type" : "string",
  599. "index" : "not_analyzed",
  600. "ignore_above" : 1024
  601. },
  602. "NASIPv4Address" : {
  603. "type" : "string",
  604. "index" : "not_analyzed",
  605. "ignore_above" : 1024
  606. },
  607. "NASIPv6Address" : {
  608. "type" : "string",
  609. "index" : "not_analyzed",
  610. "ignore_above" : 1024
  611. },
  612. "NASIdentifier" : {
  613. "type" : "string",
  614. "index" : "not_analyzed",
  615. "ignore_above" : 1024
  616. },
  617. "NASPort" : {
  618. "type" : "string",
  619. "index" : "not_analyzed",
  620. "ignore_above" : 1024
  621. },
  622. "NASPortType" : {
  623. "type" : "string",
  624. "index" : "not_analyzed",
  625. "ignore_above" : 1024
  626. },
  627. "NamingContext" : {
  628. "type" : "string",
  629. "index" : "not_analyzed",
  630. "ignore_above" : 1024
  631. },
  632. "NetworkPolicyName" : {
  633. "type" : "string",
  634. "index" : "not_analyzed",
  635. "ignore_above" : 1024
  636. },
  637. "NewProcessId" : {
  638. "type" : "string",
  639. "index" : "not_analyzed",
  640. "ignore_above" : 1024
  641. },
  642. "NewProcessName" : {
  643. "type" : "string",
  644. "index" : "not_analyzed",
  645. "ignore_above" : 1024
  646. },
  647. "NewSd" : {
  648. "type" : "string",
  649. "index" : "not_analyzed",
  650. "ignore_above" : 1024
  651. },
  652. "NewSize" : {
  653. "type" : "string",
  654. "index" : "not_analyzed",
  655. "ignore_above" : 1024
  656. },
  657. "NewState" : {
  658. "type" : "string",
  659. "index" : "not_analyzed",
  660. "ignore_above" : 1024
  661. },
  662. "NewUacValue" : {
  663. "type" : "string",
  664. "index" : "not_analyzed",
  665. "ignore_above" : 1024
  666. },
  667. "NominalFrequency" : {
  668. "type" : "string",
  669. "index" : "not_analyzed",
  670. "ignore_above" : 1024
  671. },
  672. "Number" : {
  673. "type" : "string",
  674. "index" : "not_analyzed",
  675. "ignore_above" : 1024
  676. },
  677. "NumberOfGroupPolicyObjects" : {
  678. "type" : "string",
  679. "index" : "not_analyzed",
  680. "ignore_above" : 1024
  681. },
  682. "ObjId" : {
  683. "type" : "string",
  684. "index" : "not_analyzed",
  685. "ignore_above" : 1024
  686. },
  687. "ObjectName" : {
  688. "type" : "string",
  689. "index" : "not_analyzed",
  690. "ignore_above" : 1024
  691. },
  692. "ObjectServer" : {
  693. "type" : "string",
  694. "index" : "not_analyzed",
  695. "ignore_above" : 1024
  696. },
  697. "ObjectType" : {
  698. "type" : "string",
  699. "index" : "not_analyzed",
  700. "ignore_above" : 1024
  701. },
  702. "OldSd" : {
  703. "type" : "string",
  704. "index" : "not_analyzed",
  705. "ignore_above" : 1024
  706. },
  707. "OldUacValue" : {
  708. "type" : "string",
  709. "index" : "not_analyzed",
  710. "ignore_above" : 1024
  711. },
  712. "Operation" : {
  713. "type" : "string",
  714. "index" : "not_analyzed",
  715. "ignore_above" : 1024
  716. },
  717. "OperationType" : {
  718. "type" : "string",
  719. "index" : "not_analyzed",
  720. "ignore_above" : 1024
  721. },
  722. "Options" : {
  723. "type" : "string",
  724. "index" : "not_analyzed",
  725. "ignore_above" : 1024
  726. },
  727. "OriginalSize" : {
  728. "type" : "string",
  729. "index" : "not_analyzed",
  730. "ignore_above" : 1024
  731. },
  732. "PackageName" : {
  733. "type" : "string",
  734. "index" : "not_analyzed",
  735. "ignore_above" : 1024
  736. },
  737. "PasswordLastSet" : {
  738. "type" : "string",
  739. "index" : "not_analyzed",
  740. "ignore_above" : 1024
  741. },
  742. "PerformanceImplementation" : {
  743. "type" : "string",
  744. "index" : "not_analyzed",
  745. "ignore_above" : 1024
  746. },
  747. "PreAuthType" : {
  748. "type" : "string",
  749. "index" : "not_analyzed",
  750. "ignore_above" : 1024
  751. },
  752. "PrimaryGroupId" : {
  753. "type" : "string",
  754. "index" : "not_analyzed",
  755. "ignore_above" : 1024
  756. },
  757. "PrivilegeList" : {
  758. "type" : "string",
  759. "index" : "not_analyzed",
  760. "ignore_above" : 1024
  761. },
  762. "ProcessID" : {
  763. "type" : "string",
  764. "index" : "not_analyzed",
  765. "ignore_above" : 1024
  766. },
  767. "ProcessId" : {
  768. "type" : "string",
  769. "index" : "not_analyzed",
  770. "ignore_above" : 1024
  771. },
  772. "ProcessName" : {
  773. "type" : "string",
  774. "index" : "not_analyzed",
  775. "ignore_above" : 1024
  776. },
  777. "ProcessingMode" : {
  778. "type" : "string",
  779. "index" : "not_analyzed",
  780. "ignore_above" : 1024
  781. },
  782. "ProcessingTimeInMilliseconds" : {
  783. "type" : "string",
  784. "index" : "not_analyzed",
  785. "ignore_above" : 1024
  786. },
  787. "ProfilePath" : {
  788. "type" : "string",
  789. "index" : "not_analyzed",
  790. "ignore_above" : 1024
  791. },
  792. "Properties" : {
  793. "type" : "string",
  794. "index" : "not_analyzed",
  795. "ignore_above" : 1024
  796. },
  797. "ProviderName" : {
  798. "type" : "string",
  799. "index" : "not_analyzed",
  800. "ignore_above" : 1024
  801. },
  802. "ProxyPolicyName" : {
  803. "type" : "string",
  804. "index" : "not_analyzed",
  805. "ignore_above" : 1024
  806. },
  807. "QfeVersion" : {
  808. "type" : "string",
  809. "index" : "not_analyzed",
  810. "ignore_above" : 1024
  811. },
  812. "QuarantineHelpURL" : {
  813. "type" : "string",
  814. "index" : "not_analyzed",
  815. "ignore_above" : 1024
  816. },
  817. "QuarantineSessionID" : {
  818. "type" : "string",
  819. "index" : "not_analyzed",
  820. "ignore_above" : 1024
  821. },
  822. "QuarantineSessionIdentifier" : {
  823. "type" : "string",
  824. "index" : "not_analyzed",
  825. "ignore_above" : 1024
  826. },
  827. "QuarantineState" : {
  828. "type" : "string",
  829. "index" : "not_analyzed",
  830. "ignore_above" : 1024
  831. },
  832. "QuarantineSystemHealthResult" : {
  833. "type" : "string",
  834. "index" : "not_analyzed",
  835. "ignore_above" : 1024
  836. },
  837. "RelativeTargetName" : {
  838. "type" : "string",
  839. "index" : "not_analyzed",
  840. "ignore_above" : 1024
  841. },
  842. "ResourceAttributes" : {
  843. "type" : "string",
  844. "index" : "not_analyzed",
  845. "ignore_above" : 1024
  846. },
  847. "ResourceManager" : {
  848. "type" : "string",
  849. "index" : "not_analyzed",
  850. "ignore_above" : 1024
  851. },
  852. "RestrictedSidCount" : {
  853. "type" : "string",
  854. "index" : "not_analyzed",
  855. "ignore_above" : 1024
  856. },
  857. "ReturnCode" : {
  858. "type" : "string",
  859. "index" : "not_analyzed",
  860. "ignore_above" : 1024
  861. },
  862. "RuleAttr" : {
  863. "type" : "string",
  864. "index" : "not_analyzed",
  865. "ignore_above" : 1024
  866. },
  867. "RuleId" : {
  868. "type" : "string",
  869. "index" : "not_analyzed",
  870. "ignore_above" : 1024
  871. },
  872. "RuleName" : {
  873. "type" : "string",
  874. "index" : "not_analyzed",
  875. "ignore_above" : 1024
  876. },
  877. "SMBShare" : {
  878. "type" : "string",
  879. "index" : "not_analyzed",
  880. "ignore_above" : 1024
  881. },
  882. "SamAccountName" : {
  883. "type" : "string",
  884. "index" : "not_analyzed",
  885. "ignore_above" : 1024
  886. },
  887. "ScriptPath" : {
  888. "type" : "string",
  889. "index" : "not_analyzed",
  890. "ignore_above" : 1024
  891. },
  892. "Server" : {
  893. "type" : "string",
  894. "index" : "not_analyzed",
  895. "ignore_above" : 1024
  896. },
  897. "ServerID" : {
  898. "type" : "string",
  899. "index" : "not_analyzed",
  900. "ignore_above" : 1024
  901. },
  902. "ServerURL" : {
  903. "type" : "string",
  904. "index" : "not_analyzed",
  905. "ignore_above" : 1024
  906. },
  907. "ServerVersion" : {
  908. "type" : "string",
  909. "index" : "not_analyzed",
  910. "ignore_above" : 1024
  911. },
  912. "ServerVersionLen" : {
  913. "type" : "string",
  914. "index" : "not_analyzed",
  915. "ignore_above" : 1024
  916. },
  917. "Service" : {
  918. "type" : "string",
  919. "index" : "not_analyzed",
  920. "ignore_above" : 1024
  921. },
  922. "ServiceName" : {
  923. "type" : "string",
  924. "index" : "not_analyzed",
  925. "ignore_above" : 1024
  926. },
  927. "ServicePrincipalNames" : {
  928. "type" : "string",
  929. "index" : "not_analyzed",
  930. "ignore_above" : 1024
  931. },
  932. "ServiceSid" : {
  933. "type" : "string",
  934. "index" : "not_analyzed",
  935. "ignore_above" : 1024
  936. },
  937. "ServiceType" : {
  938. "type" : "string",
  939. "index" : "not_analyzed",
  940. "ignore_above" : 1024
  941. },
  942. "ServiceVersion" : {
  943. "type" : "string",
  944. "index" : "not_analyzed",
  945. "ignore_above" : 1024
  946. },
  947. "SessionID" : {
  948. "type" : "string",
  949. "index" : "not_analyzed",
  950. "ignore_above" : 1024
  951. },
  952. "SessionId" : {
  953. "type" : "string",
  954. "index" : "not_analyzed",
  955. "ignore_above" : 1024
  956. },
  957. "SessionName" : {
  958. "type" : "string",
  959. "index" : "not_analyzed",
  960. "ignore_above" : 1024
  961. },
  962. "ShareLocalPath" : {
  963. "type" : "string",
  964. "index" : "not_analyzed",
  965. "ignore_above" : 1024
  966. },
  967. "ShareName" : {
  968. "type" : "string",
  969. "index" : "not_analyzed",
  970. "ignore_above" : 1024
  971. },
  972. "SidHistory" : {
  973. "type" : "string",
  974. "index" : "not_analyzed",
  975. "ignore_above" : 1024
  976. },
  977. "SourceAddr" : {
  978. "type" : "string",
  979. "index" : "not_analyzed",
  980. "ignore_above" : 1024
  981. },
  982. "SourceDRA" : {
  983. "type" : "string",
  984. "index" : "not_analyzed",
  985. "ignore_above" : 1024
  986. },
  987. "SourceHandleId" : {
  988. "type" : "string",
  989. "index" : "not_analyzed",
  990. "ignore_above" : 1024
  991. },
  992. "SourceProcessId" : {
  993. "type" : "string",
  994. "index" : "not_analyzed",
  995. "ignore_above" : 1024
  996. },
  997. "StartTime" : {
  998. "type" : "string",
  999. "index" : "not_analyzed",
  1000. "ignore_above" : 1024
  1001. },
  1002. "StartType" : {
  1003. "type" : "string",
  1004. "index" : "not_analyzed",
  1005. "ignore_above" : 1024
  1006. },
  1007. "StartUSN" : {
  1008. "type" : "string",
  1009. "index" : "not_analyzed",
  1010. "ignore_above" : 1024
  1011. },
  1012. "Status" : {
  1013. "type" : "string",
  1014. "index" : "not_analyzed",
  1015. "ignore_above" : 1024
  1016. },
  1017. "StatusCode" : {
  1018. "type" : "string",
  1019. "index" : "not_analyzed",
  1020. "ignore_above" : 1024
  1021. },
  1022. "Status_Translated" : {
  1023. "type" : "string",
  1024. "index" : "not_analyzed",
  1025. "ignore_above" : 1024
  1026. },
  1027. "SubStatus" : {
  1028. "type" : "string",
  1029. "index" : "not_analyzed",
  1030. "ignore_above" : 1024
  1031. },
  1032. "SubStatus_Translated" : {
  1033. "type" : "string",
  1034. "index" : "not_analyzed",
  1035. "ignore_above" : 1024
  1036. },
  1037. "SubjectDomainName" : {
  1038. "type" : "string",
  1039. "index" : "not_analyzed",
  1040. "ignore_above" : 1024
  1041. },
  1042. "SubjectLogonId" : {
  1043. "type" : "string",
  1044. "index" : "not_analyzed",
  1045. "ignore_above" : 1024
  1046. },
  1047. "SubjectMachineName" : {
  1048. "type" : "string",
  1049. "index" : "not_analyzed",
  1050. "ignore_above" : 1024
  1051. },
  1052. "SubjectMachineSID" : {
  1053. "type" : "string",
  1054. "index" : "not_analyzed",
  1055. "ignore_above" : 1024
  1056. },
  1057. "SubjectUserName" : {
  1058. "type" : "string",
  1059. "index" : "not_analyzed",
  1060. "ignore_above" : 1024
  1061. },
  1062. "SubjectUserSid" : {
  1063. "type" : "string",
  1064. "index" : "not_analyzed",
  1065. "ignore_above" : 1024
  1066. },
  1067. "SupportInfo1" : {
  1068. "type" : "string",
  1069. "index" : "not_analyzed",
  1070. "ignore_above" : 1024
  1071. },
  1072. "SupportInfo2" : {
  1073. "type" : "string",
  1074. "index" : "not_analyzed",
  1075. "ignore_above" : 1024
  1076. },
  1077. "TSId" : {
  1078. "type" : "string",
  1079. "index" : "not_analyzed",
  1080. "ignore_above" : 1024
  1081. },
  1082. "Target" : {
  1083. "type" : "string",
  1084. "index" : "not_analyzed",
  1085. "ignore_above" : 1024
  1086. },
  1087. "TargetDomainName" : {
  1088. "type" : "string",
  1089. "index" : "not_analyzed",
  1090. "ignore_above" : 1024
  1091. },
  1092. "TargetHandleId" : {
  1093. "type" : "string",
  1094. "index" : "not_analyzed",
  1095. "ignore_above" : 1024
  1096. },
  1097. "TargetInfo" : {
  1098. "type" : "string",
  1099. "index" : "not_analyzed",
  1100. "ignore_above" : 1024
  1101. },
  1102. "TargetLogonGuid" : {
  1103. "type" : "string",
  1104. "index" : "not_analyzed",
  1105. "ignore_above" : 1024
  1106. },
  1107. "TargetLogonId" : {
  1108. "type" : "string",
  1109. "index" : "not_analyzed",
  1110. "ignore_above" : 1024
  1111. },
  1112. "TargetProcessId" : {
  1113. "type" : "string",
  1114. "index" : "not_analyzed",
  1115. "ignore_above" : 1024
  1116. },
  1117. "TargetRealm" : {
  1118. "type" : "string",
  1119. "index" : "not_analyzed",
  1120. "ignore_above" : 1024
  1121. },
  1122. "TargetServerName" : {
  1123. "type" : "string",
  1124. "index" : "not_analyzed",
  1125. "ignore_above" : 1024
  1126. },
  1127. "TargetSid" : {
  1128. "type" : "string",
  1129. "index" : "not_analyzed",
  1130. "ignore_above" : 1024
  1131. },
  1132. "TargetUserName" : {
  1133. "type" : "string",
  1134. "index" : "not_analyzed",
  1135. "ignore_above" : 1024
  1136. },
  1137. "TargetUserSid" : {
  1138. "type" : "string",
  1139. "index" : "not_analyzed",
  1140. "ignore_above" : 1024
  1141. },
  1142. "Targetname" : {
  1143. "type" : "string",
  1144. "index" : "not_analyzed",
  1145. "ignore_above" : 1024
  1146. },
  1147. "TaskContentNew" : {
  1148. "type" : "string",
  1149. "index" : "not_analyzed",
  1150. "ignore_above" : 1024
  1151. },
  1152. "TaskName" : {
  1153. "type" : "string",
  1154. "index" : "not_analyzed",
  1155. "ignore_above" : 1024
  1156. },
  1157. "TicketEncryptionType" : {
  1158. "type" : "string",
  1159. "index" : "not_analyzed",
  1160. "ignore_above" : 1024
  1161. },
  1162. "TicketOptions" : {
  1163. "type" : "string",
  1164. "index" : "not_analyzed",
  1165. "ignore_above" : 1024
  1166. },
  1167. "TimeSource" : {
  1168. "type" : "string",
  1169. "index" : "not_analyzed",
  1170. "ignore_above" : 1024
  1171. },
  1172. "ToFolder" : {
  1173. "type" : "string",
  1174. "index" : "not_analyzed",
  1175. "ignore_above" : 1024
  1176. },
  1177. "TokenElevationType" : {
  1178. "type" : "string",
  1179. "index" : "not_analyzed",
  1180. "ignore_above" : 1024
  1181. },
  1182. "TransactionId" : {
  1183. "type" : "string",
  1184. "index" : "not_analyzed",
  1185. "ignore_above" : 1024
  1186. },
  1187. "TransmittedServices" : {
  1188. "type" : "string",
  1189. "index" : "not_analyzed",
  1190. "ignore_above" : 1024
  1191. },
  1192. "URL" : {
  1193. "type" : "string",
  1194. "index" : "not_analyzed",
  1195. "ignore_above" : 1024
  1196. },
  1197. "UpdatePath" : {
  1198. "type" : "string",
  1199. "index" : "not_analyzed",
  1200. "ignore_above" : 1024
  1201. },
  1202. "User" : {
  1203. "type" : "string",
  1204. "index" : "not_analyzed",
  1205. "ignore_above" : 1024
  1206. },
  1207. "UserAccountControl" : {
  1208. "type" : "string",
  1209. "index" : "not_analyzed",
  1210. "ignore_above" : 1024
  1211. },
  1212. "UserParameters" : {
  1213. "type" : "string",
  1214. "index" : "not_analyzed",
  1215. "ignore_above" : 1024
  1216. },
  1217. "UserPrincipalName" : {
  1218. "type" : "string",
  1219. "index" : "not_analyzed",
  1220. "ignore_above" : 1024
  1221. },
  1222. "UserSid" : {
  1223. "type" : "string",
  1224. "index" : "not_analyzed",
  1225. "ignore_above" : 1024
  1226. },
  1227. "UserWorkstations" : {
  1228. "type" : "string",
  1229. "index" : "not_analyzed",
  1230. "ignore_above" : 1024
  1231. },
  1232. "VMId" : {
  1233. "type" : "string",
  1234. "index" : "not_analyzed",
  1235. "ignore_above" : 1024
  1236. },
  1237. "VMIdLen" : {
  1238. "type" : "string",
  1239. "index" : "not_analyzed",
  1240. "ignore_above" : 1024
  1241. },
  1242. "VMName" : {
  1243. "type" : "string",
  1244. "index" : "not_analyzed",
  1245. "ignore_above" : 1024
  1246. },
  1247. "VMNameLen" : {
  1248. "type" : "string",
  1249. "index" : "not_analyzed",
  1250. "ignore_above" : 1024
  1251. },
  1252. "Workstation" : {
  1253. "type" : "string",
  1254. "index" : "not_analyzed",
  1255. "ignore_above" : 1024
  1256. },
  1257. "WorkstationName" : {
  1258. "type" : "string",
  1259. "index" : "not_analyzed",
  1260. "ignore_above" : 1024
  1261. },
  1262. "param1" : {
  1263. "type" : "string",
  1264. "index" : "not_analyzed",
  1265. "ignore_above" : 1024
  1266. },
  1267. "param10" : {
  1268. "type" : "string",
  1269. "index" : "not_analyzed",
  1270. "ignore_above" : 1024
  1271. },
  1272. "param11" : {
  1273. "type" : "string",
  1274. "index" : "not_analyzed",
  1275. "ignore_above" : 1024
  1276. },
  1277. "param12" : {
  1278. "type" : "string",
  1279. "index" : "not_analyzed",
  1280. "ignore_above" : 1024
  1281. },
  1282. "param13" : {
  1283. "type" : "string",
  1284. "index" : "not_analyzed",
  1285. "ignore_above" : 1024
  1286. },
  1287. "param14" : {
  1288. "type" : "string",
  1289. "index" : "not_analyzed",
  1290. "ignore_above" : 1024
  1291. },
  1292. "param15" : {
  1293. "type" : "string",
  1294. "index" : "not_analyzed",
  1295. "ignore_above" : 1024
  1296. },
  1297. "param16" : {
  1298. "type" : "string",
  1299. "index" : "not_analyzed",
  1300. "ignore_above" : 1024
  1301. },
  1302. "param17" : {
  1303. "type" : "string",
  1304. "index" : "not_analyzed",
  1305. "ignore_above" : 1024
  1306. },
  1307. "param18" : {
  1308. "type" : "string",
  1309. "index" : "not_analyzed",
  1310. "ignore_above" : 1024
  1311. },
  1312. "param19" : {
  1313. "type" : "string",
  1314. "index" : "not_analyzed",
  1315. "ignore_above" : 1024
  1316. },
  1317. "param2" : {
  1318. "type" : "string",
  1319. "index" : "not_analyzed",
  1320. "ignore_above" : 1024
  1321. },
  1322. "param20" : {
  1323. "type" : "string",
  1324. "index" : "not_analyzed",
  1325. "ignore_above" : 1024
  1326. },
  1327. "param21" : {
  1328. "type" : "string",
  1329. "index" : "not_analyzed",
  1330. "ignore_above" : 1024
  1331. },
  1332. "param22" : {
  1333. "type" : "string",
  1334. "index" : "not_analyzed",
  1335. "ignore_above" : 1024
  1336. },
  1337. "param23" : {
  1338. "type" : "string",
  1339. "index" : "not_analyzed",
  1340. "ignore_above" : 1024
  1341. },
  1342. "param24" : {
  1343. "type" : "string",
  1344. "index" : "not_analyzed",
  1345. "ignore_above" : 1024
  1346. },
  1347. "param25" : {
  1348. "type" : "string",
  1349. "index" : "not_analyzed",
  1350. "ignore_above" : 1024
  1351. },
  1352. "param26" : {
  1353. "type" : "string",
  1354. "index" : "not_analyzed",
  1355. "ignore_above" : 1024
  1356. },
  1357. "param27" : {
  1358. "type" : "string",
  1359. "index" : "not_analyzed",
  1360. "ignore_above" : 1024
  1361. },
  1362. "param28" : {
  1363. "type" : "string",
  1364. "index" : "not_analyzed",
  1365. "ignore_above" : 1024
  1366. },
  1367. "param29" : {
  1368. "type" : "string",
  1369. "index" : "not_analyzed",
  1370. "ignore_above" : 1024
  1371. },
  1372. "param3" : {
  1373. "type" : "string",
  1374. "index" : "not_analyzed",
  1375. "ignore_above" : 1024
  1376. },
  1377. "param30" : {
  1378. "type" : "string",
  1379. "index" : "not_analyzed",
  1380. "ignore_above" : 1024
  1381. },
  1382. "param4" : {
  1383. "type" : "string",
  1384. "index" : "not_analyzed",
  1385. "ignore_above" : 1024
  1386. },
  1387. "param5" : {
  1388. "type" : "string",
  1389. "index" : "not_analyzed",
  1390. "ignore_above" : 1024
  1391. },
  1392. "param6" : {
  1393. "type" : "string",
  1394. "index" : "not_analyzed",
  1395. "ignore_above" : 1024
  1396. },
  1397. "param7" : {
  1398. "type" : "string",
  1399. "index" : "not_analyzed",
  1400. "ignore_above" : 1024
  1401. },
  1402. "param8" : {
  1403. "type" : "string",
  1404. "index" : "not_analyzed",
  1405. "ignore_above" : 1024
  1406. },
  1407. "param9" : {
  1408. "type" : "string",
  1409. "index" : "not_analyzed",
  1410. "ignore_above" : 1024
  1411. },
  1412. "string0" : {
  1413. "type" : "string",
  1414. "index" : "not_analyzed",
  1415. "ignore_above" : 1024
  1416. },
  1417. "updateGuid" : {
  1418. "type" : "string",
  1419. "index" : "not_analyzed",
  1420. "ignore_above" : 1024
  1421. },
  1422. "updateRevisionNumber" : {
  1423. "type" : "string",
  1424. "index" : "not_analyzed",
  1425. "ignore_above" : 1024
  1426. }
  1427. }
  1428. },
  1429. "event_id" : {
  1430. "type" : "long"
  1431. },
  1432. "host" : {
  1433. "type" : "string",
  1434. "index" : "not_analyzed",
  1435. "ignore_above" : 1024
  1436. },
  1437. "keywords" : {
  1438. "type" : "string",
  1439. "index" : "not_analyzed",
  1440. "ignore_above" : 1024
  1441. },
  1442. "level" : {
  1443. "type" : "string",
  1444. "index" : "not_analyzed",
  1445. "ignore_above" : 1024
  1446. },
  1447. "log_name" : {
  1448. "type" : "string",
  1449. "index" : "not_analyzed",
  1450. "ignore_above" : 1024
  1451. },
  1452. "message" : {
  1453. "type" : "string"
  1454. },
  1455. "opcode" : {
  1456. "type" : "string",
  1457. "index" : "not_analyzed",
  1458. "ignore_above" : 1024
  1459. },
  1460. "process_id" : {
  1461. "type" : "long"
  1462. },
  1463. "provider_guid" : {
  1464. "type" : "string",
  1465. "index" : "not_analyzed",
  1466. "ignore_above" : 1024
  1467. },
  1468. "record_number" : {
  1469. "type" : "string",
  1470. "index" : "not_analyzed",
  1471. "ignore_above" : 1024
  1472. },
  1473. "source_name" : {
  1474. "type" : "string",
  1475. "index" : "not_analyzed",
  1476. "ignore_above" : 1024
  1477. },
  1478. "tags" : {
  1479. "type" : "string",
  1480. "index" : "not_analyzed",
  1481. "ignore_above" : 1024
  1482. },
  1483. "task" : {
  1484. "type" : "string",
  1485. "index" : "not_analyzed",
  1486. "ignore_above" : 1024
  1487. },
  1488. "thread_id" : {
  1489. "type" : "long"
  1490. },
  1491. "type" : {
  1492. "type" : "string",
  1493. "index" : "not_analyzed",
  1494. "ignore_above" : 1024
  1495. },
  1496. "user" : {
  1497. "properties" : {
  1498. "domain" : {
  1499. "type" : "string",
  1500. "index" : "not_analyzed",
  1501. "ignore_above" : 1024
  1502. },
  1503. "identifier" : {
  1504. "type" : "string",
  1505. "index" : "not_analyzed",
  1506. "ignore_above" : 1024
  1507. },
  1508. "name" : {
  1509. "type" : "string",
  1510. "index" : "not_analyzed",
  1511. "ignore_above" : 1024
  1512. },
  1513. "type" : {
  1514. "type" : "string",
  1515. "index" : "not_analyzed",
  1516. "ignore_above" : 1024
  1517. }
  1518. }
  1519. },
  1520. "user_data" : {
  1521. "properties" : {
  1522. "AddServiceStatus" : {
  1523. "type" : "string",
  1524. "index" : "not_analyzed",
  1525. "ignore_above" : 1024
  1526. },
  1527. "AppName" : {
  1528. "type" : "string",
  1529. "index" : "not_analyzed",
  1530. "ignore_above" : 1024
  1531. },
  1532. "DeviceId" : {
  1533. "type" : "string",
  1534. "index" : "not_analyzed",
  1535. "ignore_above" : 1024
  1536. },
  1537. "DeviceInstanceID" : {
  1538. "type" : "string",
  1539. "index" : "not_analyzed",
  1540. "ignore_above" : 1024
  1541. },
  1542. "DriverDescription" : {
  1543. "type" : "string",
  1544. "index" : "not_analyzed",
  1545. "ignore_above" : 1024
  1546. },
  1547. "DriverFileName" : {
  1548. "type" : "string",
  1549. "index" : "not_analyzed",
  1550. "ignore_above" : 1024
  1551. },
  1552. "DriverName" : {
  1553. "type" : "string",
  1554. "index" : "not_analyzed",
  1555. "ignore_above" : 1024
  1556. },
  1557. "DriverProvider" : {
  1558. "type" : "string",
  1559. "index" : "not_analyzed",
  1560. "ignore_above" : 1024
  1561. },
  1562. "DriverVersion" : {
  1563. "type" : "string",
  1564. "index" : "not_analyzed",
  1565. "ignore_above" : 1024
  1566. },
  1567. "EventID" : {
  1568. "type" : "string",
  1569. "index" : "not_analyzed",
  1570. "ignore_above" : 1024
  1571. },
  1572. "FinalStatus" : {
  1573. "type" : "string",
  1574. "index" : "not_analyzed",
  1575. "ignore_above" : 1024
  1576. },
  1577. "InstallStatus" : {
  1578. "type" : "string",
  1579. "index" : "not_analyzed",
  1580. "ignore_above" : 1024
  1581. },
  1582. "IsDriverOEM" : {
  1583. "type" : "string",
  1584. "index" : "not_analyzed",
  1585. "ignore_above" : 1024
  1586. },
  1587. "MinimumFxVersion" : {
  1588. "type" : "string",
  1589. "index" : "not_analyzed",
  1590. "ignore_above" : 1024
  1591. },
  1592. "Namespace" : {
  1593. "type" : "string",
  1594. "index" : "not_analyzed",
  1595. "ignore_above" : 1024
  1596. },
  1597. "PrimaryService" : {
  1598. "type" : "string",
  1599. "index" : "not_analyzed",
  1600. "ignore_above" : 1024
  1601. },
  1602. "PublisherID" : {
  1603. "type" : "string",
  1604. "index" : "not_analyzed",
  1605. "ignore_above" : 1024
  1606. },
  1607. "RebootOption" : {
  1608. "type" : "string",
  1609. "index" : "not_analyzed",
  1610. "ignore_above" : 1024
  1611. },
  1612. "ResponseTime" : {
  1613. "type" : "string",
  1614. "index" : "not_analyzed",
  1615. "ignore_above" : 1024
  1616. },
  1617. "RmSessionId" : {
  1618. "type" : "string",
  1619. "index" : "not_analyzed",
  1620. "ignore_above" : 1024
  1621. },
  1622. "ServiceName" : {
  1623. "type" : "string",
  1624. "index" : "not_analyzed",
  1625. "ignore_above" : 1024
  1626. },
  1627. "SetupClass" : {
  1628. "type" : "string",
  1629. "index" : "not_analyzed",
  1630. "ignore_above" : 1024
  1631. },
  1632. "UTCStartTime" : {
  1633. "type" : "string",
  1634. "index" : "not_analyzed",
  1635. "ignore_above" : 1024
  1636. },
  1637. "UpdateService" : {
  1638. "type" : "string",
  1639. "index" : "not_analyzed",
  1640. "ignore_above" : 1024
  1641. },
  1642. "UpgradeDevice" : {
  1643. "type" : "string",
  1644. "index" : "not_analyzed",
  1645. "ignore_above" : 1024
  1646. },
  1647. "binaryData" : {
  1648. "type" : "string",
  1649. "index" : "not_analyzed",
  1650. "ignore_above" : 1024
  1651. },
  1652. "binaryDataSize" : {
  1653. "type" : "string",
  1654. "index" : "not_analyzed",
  1655. "ignore_above" : 1024
  1656. },
  1657. "param1" : {
  1658. "type" : "string",
  1659. "index" : "not_analyzed",
  1660. "ignore_above" : 1024
  1661. },
  1662. "param2" : {
  1663. "type" : "string",
  1664. "index" : "not_analyzed",
  1665. "ignore_above" : 1024
  1666. },
  1667. "param3" : {
  1668. "type" : "string",
  1669. "index" : "not_analyzed",
  1670. "ignore_above" : 1024
  1671. },
  1672. "xml_name" : {
  1673. "type" : "string",
  1674. "index" : "not_analyzed",
  1675. "ignore_above" : 1024
  1676. }
  1677. }
  1678. },
  1679. "version" : {
  1680. "type" : "long"
  1681. }
  1682. }
  1683. },
  1684. "_default_" : {
  1685. "_all" : {
  1686. "enabled" : true,
  1687. "omit_norms" : true
  1688. },
  1689. "dynamic_templates" : [ {
  1690. "template1" : {
  1691. "mapping" : {
  1692. "ignore_above" : 1024,
  1693. "index" : "not_analyzed",
  1694. "type" : "{dynamic_type}",
  1695. "doc_values" : true
  1696. },
  1697. "match" : "*"
  1698. }
  1699. } ],
  1700. "properties" : {
  1701. "@timestamp" : {
  1702. "type" : "date",
  1703. "format" : "strict_date_optional_time||epoch_millis"
  1704. },
  1705. "message" : {
  1706. "type" : "string"
  1707. }
  1708. }
  1709. }
  1710. }
  1711. }
  1712. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!