invalid mapping definition

illegal_state_exception: invalid mapping definition, expected a single map underneath [_doc] but it was: [{_meta={beat=metricbeat, version=7.16.2}, dynamic_templates=[{labels={path_match=labels.*, mapping={type=keyword}, match_mapping_type=string}}, {container.labels={path_match=container.labels.*, mapping={type=keyword}, match_mapping_type=string}}, {fields={path_match=fields.*, mapping={type=keyword}, match_mapping_type=string}}, {docker.container.labels={path_match=docker.container.labels.*, mapping={type=keyword}, match_mapping_type=string}}, {kubernetes.labels.*={path_match=kubernetes.labels.*, mapping={type=keyword}, match_mapping_type=*}}, {kubernetes.annotations.*={path_match=kubernetes.annotations.*, mapping={type=keyword}, match_mapping_type=*}}, {kubernetes.selectors.*={path_match=kubernetes.selectors.*, mapping={type=keyword}, match_mapping_type=*}}, {airflow.*.1m_rate={path_match=airflow.*.1m_rate, mapping={type=double}, match_mapping_type=*}}, {airflow.*.5m_rate={path_match=airflow.*.5m_rate, mapping={type=double}, match_mapping_type=*}}, {airflow.*.15m_rate={path_match=airflow.*.15m_rate, mapping={type=double}, match_mapping_type=*}}, {airflow.*.count={path_match=airflow.*.count, mapping={type=double}, match_mapping_type=*}}, {airflow.*.max={path_match=airflow.*.max, mapping={type=double}, match_mapping_type=*}}, {airflow.*.mean_rate={path_match=airflow.*.mean_rate, mapping={type=double}, match_mapping_type=*}}, {airflow.*.mean={path_match=airflow.*.mean, mapping={type=double}, match_mapping_type=*}}, {airflow.*.median={path_match=airflow.*.median, mapping={type=double}, match_mapping_type=*}}, {airflow.*.min={path_match=airflow.*.min, mapping={type=double}, match_mapping_type=*}}, {airflow.*.p75={path_match=airflow.*.p75, mapping={type=double}, match_mapping_type=*}}, {airflow.*.p95={path_match=airflow.*.p95, mapping={type=double}, match_mapping_type=*}}, {airflow.*.p99_9={path_match=airflow.*.p99_9, mapping={type=double}, match_mapping_type=*}}, {airflow.*.p99={path_match=airflow.*.p99, mapping={type=double}, match_mapping_type=*}}, {airflow.*.stddev={path_match=airflow.*.stddev, mapping={type=double}, match_mapping_type=*}}, {airflow.*.value={path_match=airflow.*.value, mapping={type=double}, match_mapping_type=*}}, {aws.tags.*={path_match=aws.tags.*, mapping={type=keyword}, match_mapping_type=*}}, {aws.dimensions.*={path_match=aws.dimensions.*, mapping={type=keyword}, match_mapping_type=*}}, {aws.*.metrics.*.*={path_match=aws.*.metrics.*.*, mapping={type=double}, match_mapping_type=*}}, {aws.billing.group_by.*={path_match=aws.billing.group_by.*, mapping={type=keyword}, match_mapping_type=*}}, {task_stats.memory.stats.*={path_match=task_stats.memory.stats.*, mapping={type=long}, match_mapping_type=*}}, {azure.resource.tags.*={path_match=azure.resource.tags.*, mapping={type=keyword}, match_mapping_type=*}}, {azure.dimensions.*={path_match=azure.dimensions.*, mapping={type=keyword}, match_mapping_type=*}}, {azure.metrics.*.*={path_match=azure.metrics.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.app_insights.metrics.*.*={path_match=azure.app_insights.metrics.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.compute_vm.*.*={path_match=azure.compute_vm.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.compute_vm_scaleset.*.*={path_match=azure.compute_vm_scaleset.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.container_instance.*.*={path_match=azure.container_instance.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.container_registry.*.*={path_match=azure.container_registry.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.container_service.*.*={path_match=azure.container_service.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.database_account.*.*={path_match=azure.database_account.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.storage.*.*={path_match=azure.storage.*.*, mapping={type=float}, match_mapping_type=*}}, {azure.storage_account.*.*={path_match=azure.storage_account.*.*, mapping={type=float}, match_mapping_type=*}}, {coredns.stats.dns.request.duration.ns.bucket.*={path_match=coredns.stats.dns.request.duration.ns.bucket.*, mapping={type=long}, match_mapping_type=long}}, {coredns.stats.dns.request.size.bytes.bucket.*={path_match=coredns.stats.dns.request.size.bytes.bucket.*, mapping={type=long}, match_mapping_type=long}}, {coredns.stats.dns.response.size.bytes.bucket.*={path_match=coredns.stats.dns.response.size.bytes.bucket.*, mapping={type=long}, match_mapping_type=long}}, {docker.cpu.core.*.pct={path_match=docker.cpu.core.*.pct, mapping={scaling_factor=1000, type=scaled_float}, match_mapping_type=*}}, {docker.cpu.core.*.norm.pct={path_match=docker.cpu.core.*.norm.pct, mapping={scaling_factor=1000, type=scaled_float}, match_mapping_type=*}}, {docker.cpu.core.*.ticks={path_match=docker.cpu.core.*.ticks, mapping={type=long}, match_mapping_type=long}}, {docker.event.actor.attributes={path_match=docker.event.actor.attributes.*, mapping={type=keyword}, match_mapping_type=string}}, {docker.image.labels={path_match=docker.image.labels.*, mapping={type=keyword}, match_mapping_type=string}}, {docker.memory.stats.*={path_match=docker.memory.stats.*, mapping={type=long}, match_mapping_type=*}}, {etcd.disk.wal_fsync_duration.ns.bucket.*={path_match=etcd.disk.wal_fsync_duration.ns.bucket.*, mapping={type=long}, match_mapping_type=long}}, {etcd.disk.backend_commit_duration.ns.bucket.*={path_match=etcd.disk.backend_commit_duration.ns.bucket.*, mapping={type=long}, match_mapping_type=long}}, {gcp.metrics.*.*.*.*={path_match=gcp.metrics.*.*.*.*, mapping={type=double}, match_mapping_type=*}}, {istio.citadel.grpc.server.handling.latency.ms.bucket.*={path_match=istio.citadel.grpc.server.handling.latency.ms.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.galley.runtime.processor.event_span.duration.ms.bucket.*={path_match=istio.galley.runtime.processor.event_span.duration.ms.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.galley.runtime.processor.snapshot_events.bucket.*={path_match=istio.galley.runtime.processor.snapshot_events.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.galley.runtime.processor.snapshot_lifetime.duration.ms.bucket.*={path_match=istio.galley.runtime.processor.snapshot_lifetime.duration.ms.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.mesh.request.duration.ms.bucket.*={path_match=istio.mesh.request.duration.ms.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.mesh.request.size.bytes.bucket.*={path_match=istio.mesh.request.size.bytes.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.mesh.response.size.bytes.bucket.*={path_match=istio.mesh.response.size.bytes.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.pilot.xds.push.time.ms.bucket.*={path_match=istio.pilot.xds.push.time.ms.bucket.*, mapping={type=long}, match_mapping_type=long}}, {istio.pilot.proxy.conv.ms.bucket.*={path_match=istio.pilot.proxy.conv.ms.bucket.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.apiserver.http.request.duration.us.percentile.*={path_match=kubernetes.apiserver.http.request.duration.us.percentile.*, mapping={type=double}, match_mapping_type=double}}, {kubernetes.apiserver.http.request.size.bytes.percentile.*={path_match=kubernetes.apiserver.http.request.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.apiserver.http.response.size.bytes.percentile.*={path_match=kubernetes.apiserver.http.response.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.apiserver.request.latency.bucket.*={path_match=kubernetes.apiserver.request.latency.bucket.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.apiserver.request.duration.us.bucket.*={path_match=kubernetes.apiserver.request.duration.us.bucket.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.controllermanager.http.request.duration.us.percentile.*={path_match=kubernetes.controllermanager.http.request.duration.us.percentile.*, mapping={type=double}, match_mapping_type=double}}, {kubernetes.controllermanager.http.request.size.bytes.percentile.*={path_match=kubernetes.controllermanager.http.request.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.controllermanager.http.response.size.bytes.percentile.*={path_match=kubernetes.controllermanager.http.response.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.proxy.http.request.duration.us.percentile.*={path_match=kubernetes.proxy.http.request.duration.us.percentile.*, mapping={type=double}, match_mapping_type=double}}, {kubernetes.proxy.http.request.size.bytes.percentile.*={path_match=kubernetes.proxy.http.request.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.proxy.http.response.size.bytes.percentile.*={path_match=kubernetes.proxy.http.response.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.proxy.sync.rules.duration.us.bucket.*={path_match=kubernetes.proxy.sync.rules.duration.us.bucket.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.proxy.sync.networkprogramming.duration.us.bucket.*={path_match=kubernetes.proxy.sync.networkprogramming.duration.us.bucket.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.scheduler.http.request.duration.us.percentile.*={path_match=kubernetes.scheduler.http.request.duration.us.percentile.*, mapping={type=double}, match_mapping_type=double}}, {kubernetes.scheduler.http.request.size.bytes.percentile.*={path_match=kubernetes.scheduler.http.request.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.scheduler.http.response.size.bytes.percentile.*={path_match=kubernetes.scheduler.http.response.size.bytes.percentile.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.scheduler.scheduling.e2e.duration.us.bucket.*={path_match=kubernetes.scheduler.scheduling.e2e.duration.us.bucket.*, mapping={type=long}, match_mapping_type=long}}, {kubernetes.scheduler.scheduling.duration.seconds.percentile.*={path_match=kubernetes.scheduler.scheduling.duration.seconds.percentile.*, mapping={type=double}, match_mapping_type=double}}, {munin.metrics.*={path_match=munin.metrics.*, mapping={type=double}, match_mapping_type=*}}, {openmetrics.labels.*={path_match=openmetrics.labels.*, mapping={type=keyword}, match_mapping_type=string}}, {openmetrics.metrics.*={path_match=openmetrics.metrics.*, mapping={type=double}, match_mapping_type=*}}, {prometheus.labels.*={path_match=prometheus.labels.*, mapping={type=keyword}, match_mapping_type=string}}, {prometheus.metrics.*={path_match=prometheus.metrics.*, mapping={type=double}, match_mapping_type=*}}, {prometheus.query.*={path_match=prometheus.query.*, mapping={type=double}, match_mapping_type=*}}, {prometheus.*.value={path_match=prometheus.*.value, mapping={type=double}, match_mapping_type=*}}, {prometheus.*.counter={path_match=prometheus.*.counter, mapping={type=double}, match_mapping_type=*}}, {prometheus.*.rate={path_match=prometheus.*.rate, mapping={type=double}, match_mapping_type=*}}, {prometheus.*.histogram={path_match=prometheus.*.histogram, mapping={type=histogram}, match_mapping_type=*}}, {sql.metrics.numeric.*={path_match=sql.metrics.numeric.*, mapping={type=double}, match_mapping_type=double}}, {sql.metrics.string.*={path_match=sql.metrics.string.*, mapping={type=keyword}, match_mapping_type=string}}, {sql.metrics.boolean.*={path_match=sql.metrics.boolean.*, mapping={type=keyword}, match_mapping_type=string}}, {statsd.*.count={path_match=statsd.*.count, mapping={type=long}, match_mapping_type=long}}, {statsd.*.*={path_match=statsd.*.*, mapping={type=float}, match_mapping_type=*}}, {system.process.env={path_match=system.process.env.*, mapping={type=keyword}, match_mapping_type=string}}, {system.process.cgroup.cpuacct.percpu={path_match=system.process.cgroup.cpuacct.percpu.*, mapping={type=long}, match_mapping_type=long}}, {system.raid.disks.states.*={path_match=system.raid.disks.states.*, mapping={type=keyword}, match_mapping_type=string}}, {traefik.health.response.status_codes.*={path_match=traefik.health.response.status_codes.*, mapping={type=long}, match_mapping_type=long}}, {vsphere.virtualmachine.custom_fields={path_match=vsphere.virtualmachine.custom_fields.*, mapping={type=keyword}, match_mapping_type=string}}, {windows.perfmon.metrics.*.*={path_match=windows.perfmon.metrics.*.*, mapping={type=float}, match_mapping_type=*}}, {strings_as_keyword={mapping={ignore_above=1024, type=keyword}, match_mapping_type=string}}], date_detection=false, properties={container={properties={image={properties={name={ignore_above=1024, type=keyword}, tag={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, runtime={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, labels={type=object}}}, tomcat={properties={cache={properties={lookup={properties={total={type=long}}}, hit={properties={total={type=long}}}, mbean={ignore_above=1024, type=keyword}, size={properties={total={properties={kb={type=long}}}, max={properties={kb={type=long}}}}}, ttl={properties={ms={type=long}}}}}, memory={properties={other={properties={usage={properties={init={type=long}, committed={type=long}, max={type=long}, used={type=long}}}}}, mbean={ignore_above=1024, type=keyword}, heap={properties={usage={properties={init={type=long}, committed={type=long}, max={type=long}, used={type=long}}}}}}}, threading={properties={total={type=long}, current={type=long}, max={type=long}, busy={type=long}, cpu={properties={time={properties={ms={type=long}}}}}, started={properties={total={type=long}}}, keep_alive={properties={total={type=long}, timeout={properties={ms={type=long}}}}}, peak={type=long}, user={properties={time={properties={ms={type=long}}}}}}}, requests={properties={total={type=long}, mbean={ignore_above=1024, type=keyword}, bytes={properties={received={type=long}, sent={type=long}}}, processing={properties={ms={type=long}}}, errors={properties={total={type=long}}}}}}}, type={ignore_above=1024, type=keyword}, redis={properties={keyspace={properties={expires={type=long}, keys={type=long}, id={ignore_above=1024, type=keyword}, avg_ttl={type=long}}}, key={properties={expire={properties={ttl={type=long}}}, name={ignore_above=1024, type=keyword}, length={type=long}, id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, info={properties={replication={properties={slave={properties={is_readonly={type=boolean}, offset={type=long}, priority={type=long}}}, role={ignore_above=1024, type=keyword}, backlog={properties={size={type=long}, active={type=long}, first_byte_offset={type=long}, histlen={type=long}}}, connected_slaves={type=long}, master_offset={type=long}, master={properties={second_offset={type=long}, offset={type=long}, link_status={ignore_above=1024, type=keyword}, last_io_seconds_ago={type=long}, sync={properties={in_progress={type=boolean}, left_bytes={type=long}, last_io_seconds_ago={type=long}}}}}}}, cluster={properties={enabled={type=boolean}}}, server={properties={tcp_port={type=long}, git_dirty={ignore_above=1024, type=keyword}, run_id={ignore_above=1024, type=keyword}, gcc_version={ignore_above=1024, type=keyword}, uptime={type=long}, mode={ignore_above=1024, type=keyword}, arch_bits={ignore_above=1024, type=keyword}, hz={type=long}, build_id={ignore_above=1024, type=keyword}, multiplexing_api={ignore_above=1024, type=keyword}, git_sha1={ignore_above=1024, type=keyword}, config_file={ignore_above=1024, type=keyword}, lru_clock={type=long}}}, memory={properties={active_defrag={properties={is_running={type=boolean}}}, allocator_stats={properties={rss={properties={bytes={type=long}, ratio={type=float}}}, active={type=long}, fragmentation={properties={bytes={type=long}, ratio={type=float}}}, allocated={type=long}, resident={type=long}}}, allocator={ignore_above=1024, type=keyword}, max={properties={value={type=long}, policy={ignore_above=1024, type=keyword}}}, used={properties={rss={type=long}, lua={type=long}, peak={type=long}, dataset={type=long}, value={type=long}}}, fragmentation={properties={bytes={type=long}, ratio={type=float}}}}}, clients={properties={connected={type=long}, longest_output_list={type=long}, max_input_buffer={type=long}, blocked={type=long}, biggest_input_buf={type=long}, max_output_buffer={type=long}}}, stats={properties={keyspace={properties={hits={type=long}, misses={type=long}}}, slave_expires_tracked_keys={type=long}, active_defrag={properties={hits={type=long}, key_misses={type=long}, misses={type=long}, key_hits={type=long}}}, latest_fork_usec={type=long}, keys={properties={expired={type=long}, evicted={type=long}}}, commands_processed={type=long}, instantaneous={properties={output_kbps={scaling_factor=1000, type=scaled_float}, input_kbps={scaling_factor=1000, type=scaled_float}, ops_per_sec={type=long}}}, net={properties={output={properties={bytes={type=long}}}, input={properties={bytes={type=long}}}}}, sync={properties={partial={properties={err={type=long}, ok={type=long}}}, full={type=long}}}, connections={properties={rejected={type=long}, received={type=long}}}, pubsub={properties={channels={type=long}, patterns={type=long}}}, migrate_cached_sockets={type=long}}}, slowlog={properties={count={type=long}}}, cpu={properties={used={properties={sys_children={scaling_factor=1000, type=scaled_float}, sys={scaling_factor=1000, type=scaled_float}, user={scaling_factor=1000, type=scaled_float}, user_children={scaling_factor=1000, type=scaled_float}}}}}, persistence={properties={rdb={properties={copy_on_write={properties={last_size={type=long}}}, last_save={properties={changes_since={type=long}, time={type=long}}}, bgsave={properties={in_progress={type=boolean}, last_time={properties={sec={type=long}}}, last_status={ignore_above=1024, type=keyword}, current_time={properties={sec={type=long}}}}}}}, aof={properties={fsync={properties={pending={type=long}, delayed={type=long}}}, copy_on_write={properties={last_size={type=long}}}, size={properties={current={type=long}, base={type=long}}}, bgrewrite={properties={last_status={ignore_above=1024, type=keyword}}}, buffer={properties={size={type=long}}}, write={properties={last_status={ignore_above=1024, type=keyword}}}, enabled={type=boolean}, rewrite={properties={in_progress={type=boolean}, scheduled={type=boolean}, last_time={properties={sec={type=long}}}, buffer={properties={size={type=long}}}, current_time={properties={sec={type=long}}}}}}}, loading={type=boolean}}}}}}}, observer={properties={product={ignore_above=1024, type=keyword}, os={properties={kernel={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, type={ignore_above=1024, type=keyword}, family={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, platform={ignore_above=1024, type=keyword}, full={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}, ip={type=ip}, serial_number={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, mac={ignore_above=1024, type=keyword}, egress={type=object, properties={vlan={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, zone={ignore_above=1024, type=keyword}, interface={properties={name={ignore_above=1024, type=keyword}, alias={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, geo={properties={continent_name={ignore_above=1024, type=keyword}, region_iso_code={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, ingress={type=object, properties={vlan={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, zone={ignore_above=1024, type=keyword}, interface={properties={name={ignore_above=1024, type=keyword}, alias={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, hostname={ignore_above=1024, type=keyword}, vendor={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}}}, elasticsearch={properties={cluster={properties={pending_task={properties={time_in_queue={properties={ms={type=long}}}, source={ignore_above=1024, type=keyword}, priority={type=long}, insert_order={type=long}}}, stats={properties={indices={properties={shards={properties={primaries={type=long}, count={type=long}}}, fielddata={properties={memory={properties={bytes={type=long}}}}}, count={type=long}}}, nodes={properties={data={type=long}, count={type=long}, master={type=long}}}, status={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, state={properties={id={ignore_above=1024, type=keyword}}}}}, node={properties={jvm={properties={memory={properties={heap={properties={init={properties={bytes={type=long}}}, max={properties={bytes={type=long}}}}}, nonheap={properties={init={properties={bytes={type=long}}}, max={properties={bytes={type=long}}}}}}}, version={ignore_above=1024, type=keyword}}}, process={properties={mlockall={type=boolean}}}, stats={properties={jvm={properties={mem={properties={pools={properties={young={properties={max={properties={bytes={type=long}}}, peak={properties={bytes={type=long}}}, peak_max={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, old={properties={max={properties={bytes={type=long}}}, peak={properties={bytes={type=long}}}, peak_max={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, survivor={properties={max={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}, peak={properties={bytes={type=long}}}, peak_max={properties={bytes={type=long}}}}}}}}}, gc={properties={collectors={properties={young={properties={collection={properties={ms={type=long}, count={type=long}}}}}, old={properties={collection={properties={ms={type=long}, count={type=long}}}}}}}}}}}, indices={properties={docs={properties={deleted={type=long}, count={type=long}}}, store={properties={size={properties={bytes={type=long}}}}}, segments={properties={memory={properties={bytes={type=long}}}, count={type=long}}}}}, fs={properties={summary={properties={total={properties={bytes={type=long}}}, available={properties={bytes={type=long}}}, free={properties={bytes={type=long}}}}}}}}}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}}}, ccr={properties={leader={properties={index={ignore_above=1024, type=keyword}, max_seq_no={type=long}}}, follower={properties={time_since_last_read={properties={ms={type=long}}}, index={ignore_above=1024, type=keyword}, shard={properties={number={type=long}}}, global_checkpoint={type=long}, operations_written={type=long}}}}}, enrich={properties={executed_searches={properties={total={type=long}}}, remote_requests={properties={total={type=long}, current={type=long}}}, queue={properties={size={type=long}}}}}, index={properties={summary={properties={primaries={properties={docs={properties={deleted={type=long}, count={type=long}}}, store={properties={size={properties={bytes={type=long}}}}}, segments={properties={memory={properties={bytes={type=long}}}, count={type=long}}}}}, total={properties={docs={properties={deleted={type=long}, count={type=long}}}, store={properties={size={properties={bytes={type=long}}}}}, segments={properties={memory={properties={bytes={type=long}}}, count={type=long}}}}}}}, total={properties={docs={properties={deleted={type=long}, count={type=long}}}, store={properties={size={properties={bytes={type=long}}}}}, segments={properties={memory={properties={bytes={type=long}}}, count={type=long}}}}}, name={ignore_above=1024, type=keyword}, recovery={properties={stage={ignore_above=1024, type=keyword}, source={properties={host={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, id={type=long}, type={ignore_above=1024, type=keyword}, primary={type=boolean}, target={properties={host={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}}}, shard={properties={number={type=long}, relocating_node={properties={name={ignore_above=1024, type=keyword}}}, state={ignore_above=1024, type=keyword}, primary={type=boolean}}}, ml={properties={job={properties={data_counts={properties={processed_record_count={type=long}, invalid_date_count={type=long}}}, id={ignore_above=1024, type=keyword}, state={ignore_above=1024, type=keyword}}}}}}}, php_fpm={properties={process={properties={start_time={type=date}, start_since={type=long}, request_duration={type=long}, last_request_cpu={type=long}, last_request_memory={type=long}, state={ignore_above=1024, type=keyword}, requests={type=long}, script={ignore_above=1024, type=keyword}}}, pool={properties={start_since={type=long}, start_time={type=date}, processes={properties={total={type=long}, max_children_reached={type=long}, idle={type=long}, active={type=long}, max_active={type=long}}}, name={ignore_above=1024, type=keyword}, slow_requests={type=long}, process_manager={ignore_above=1024, type=keyword}, connections={properties={listen_queue_len={type=long}, queued={type=long}, max_listen_queue={type=long}, accepted={type=long}}}}}}}, gcp={properties={compute={properties={instance={properties={disk={properties={read_ops_count={properties={value={type=long}}}, read={properties={bytes={type=long}}}, write_ops_count={properties={value={type=long}}}, write={properties={bytes={type=long}}}}}, memory={properties={balloon={properties={ram_size={properties={value={type=long}}}, swap_in={properties={bytes={type=long}}}, ram_used={properties={value={type=long}}}, swap_out={properties={bytes={type=long}}}}}}}, cpu={properties={usage_time={properties={sec={type=double}}}, usage={properties={pct={type=double}}}, reserved_cores={properties={value={type=double}}}}}, uptime_total={properties={sec={type=long}}}, uptime={properties={sec={type=long}}}, network={properties={ingress={properties={bytes={type=long}, packets={properties={count={type=long}}}}}, egress={properties={bytes={type=long}, packets={properties={count={type=long}}}}}}}}}, firewall={properties={dropped={properties={bytes={type=long}}}, dropped_packets_count={properties={value={type=long}}}}}}}, gke={properties={container={properties={memory={properties={request={properties={bytes={type=long}}}, page_fault={properties={count={type=long}}}, limit={properties={bytes={type=long}}}, limit_utilization={properties={pct={type=double}}}, request_utilization={properties={pct={type=double}}}, used={properties={bytes={type=long}}}}}, restart={properties={count={type=long}}}, cpu={properties={request_cores={properties={value={type=double}}}, core_usage_time={properties={sec={type=double}}}, request_utilization={properties={pct={type=double}}}, limit_utilization={properties={pct={type=double}}}, limit_cores={properties={value={type=double}}}}}, ephemeral_storage={properties={request={properties={bytes={type=long}}}, limit={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, uptime={properties={sec={type=double}}}}}, node={properties={memory={properties={allocatable={properties={bytes={type=long}}}, allocatable_utilization={properties={pct={type=double}}}, total={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, cpu={properties={allocatable_utilization={properties={pct={type=double}}}, core_usage_time={properties={sec={type=double}}}, total_cores={properties={value={type=double}}}, allocatable_cores={properties={value={type=double}}}}}, pid_used={properties={value={type=long}}}, ephemeral_storage={properties={allocatable={properties={bytes={type=long}}}, total={properties={bytes={type=long}}}, inodes_total={properties={value={type=long}}}, inodes_free={properties={value={type=long}}}, used={properties={bytes={type=long}}}}}, pid_limit={properties={value={type=long}}}, network={properties={received_bytes={properties={count={type=long}}}, sent_bytes={properties={count={type=long}}}}}}}, pod={properties={volume={properties={total={properties={bytes={type=long}}}, utilization={properties={pct={type=double}}}, used={properties={bytes={type=long}}}}}, network={properties={received={properties={bytes={type=long}}}, sent={properties={bytes={type=long}}}}}}}, node_daemon={properties={memory={properties={used={properties={bytes={type=long}}}}}, cpu={properties={core_usage_time={properties={sec={type=double}}}}}}}}}, storage={properties={api={properties={request={properties={count={type=long}}}}}, storage={properties={total={properties={bytes={type=long}}}, total_byte_seconds={properties={bytes={type=long}}}, object={properties={count={type=long}}}}}, authz={properties={acl_based_object_access_={properties={ount={type=long}}}, object_specific_acl_mutation={properties={count={type=long}}}, acl_operations={properties={count={type=long}}}}}, network={properties={received={properties={bytes={type=long}}}, sent={properties={bytes={type=long}}}}}}}, metrics={properties={*={properties={*={properties={*={properties={*={type=object}}}}}}}}}, loadbalancing={properties={l3={properties={external={properties={ingress={properties={bytes={type=long}}}, ingress_packets={properties={count={type=long}}}, egress_packets={properties={count={type=long}}}, egress={properties={bytes={type=long}}}}}, internal={properties={ingress={properties={bytes={type=long}}}, ingress_packets={properties={count={type=long}}}, egress={properties={bytes={type=long}}}, egress_packets={properties={count={type=long}}}}}}}, https={properties={request={properties={bytes={type=long}, count={type=long}}}, backend_request={properties={bytes={type=long}, count={type=long}}}, response={properties={bytes={type=long}}}, backend_response={properties={bytes={type=long}}}}}, tcp_ssl_proxy={properties={ingress={properties={bytes={type=long}}}, new_connections={properties={value={type=long}}}, open_connections={properties={value={type=long}}}, closed_connections={properties={value={type=long}}}, egress={properties={bytes={type=long}}}}}}}, pubsub={properties={topic={properties={byte_cost={properties={bytes={type=long}}}, retained_acked_bytes_by_region={properties={bytes={type=long}}}, message_sizes={properties={bytes={type=long}}}, unacked_bytes_by_region={properties={bytes={type=long}}}, send_message_operation={properties={count={type=long}}}, streaming_pull_response={properties={count={type=long}}}, send_request={properties={count={type=long}}}, oldest_unacked_message_age_by_region={properties={value={type=long}}}, oldest_retained_acked_message_age_by_region={properties={value={type=long}}}, config_updates={properties={count={type=long}}}}}, subscription={properties={streaming_pull_message_operation={properties={count={type=long}}}, retained_acked={properties={bytes={type=long}}}, pull_message_operation={properties={count={type=long}}}, config_updates={properties={count={type=long}}}, mod_ack_deadline_message_operation={properties={count={type=long}}}, push_request={properties={count={type=long}}}, retained_acked_bytes_by_region={properties={bytes={type=long}}}, byte_cost={properties={bytes={type=long}}}, num_undelivered_messages={properties={value={type=long}}}, streaming_pull_ack_request={properties={count={type=long}}}, num_outstanding_messages={properties={value={type=long}}}, streaming_pull_response={properties={count={type=long}}}, streaming_pull_ack_message_operation={properties={count={type=long}}}, dead_letter_message={properties={count={type=long}}}, mod_ack_deadline_message={properties={count={type=long}}}, streaming_pull_mod_ack_deadline_request={properties={count={type=long}}}, push_request_latencies={properties={value={type=long}}}, pull_request={properties={count={type=long}}}, mod_ack_deadline_request={properties={count={type=long}}}, oldest_retained_acked_message_age_by_region={properties={value={type=long}}}, oldest_unacked_message_age={properties={sec={type=long}}}, oldest_retained_acked_message_age={properties={sec={type=long}}}, seek_request={properties={count={type=long}}}, ack_message={properties={count={type=long}}}, sent_message={properties={count={type=long}}}, streaming_pull_mod_ack_deadline_message_operation={properties={count={type=long}}}, backlog={properties={bytes={type=long}}}, unacked_bytes_by_region={properties={bytes={type=long}}}, pull_ack_message_operation={properties={count={type=long}}}, oldest_unacked_message_age_by_region={properties={value={type=long}}}, pull_ack_request={properties={count={type=long}}}}}, snapshot={properties={backlog={properties={bytes={type=long}}}, oldest_message_age_by_region={properties={sec={type=long}}}, num_messages_by_region={properties={value={type=long}}}, backlog_bytes_by_region={properties={bytes={type=long}}}, config_updates={properties={count={type=long}}}, oldest_message_age={properties={sec={type=long}}}, num_messages={properties={value={type=long}}}}}}}, labels={type=object}, billing={properties={total={type=float}, cost_type={ignore_above=1024, type=keyword}, project_id={ignore_above=1024, type=keyword}, invoice_month={ignore_above=1024, type=keyword}}}}}, uwsgi={properties={status={properties={core={properties={write_errors={type=long}, worker_pid={type=long}, requests={properties={routed={type=long}, offloaded={type=long}, total={type=long}, static={type=long}}}, id={type=long}, read_errors={type=long}}}, total={properties={write_errors={type=long}, pid={type=long}, requests={type=long}, exceptions={type=long}, read_errors={type=long}}}, worker={properties={respawn_count={type=long}, tx={type=long}, delta_requests={type=long}, pid={type=long}, requests={type=long}, exceptions={type=long}, harakiri_count={type=long}, signals={type=long}, rss={type=long}, signal_queue={type=long}, running_time={type=long}, avg_rt={type=long}, id={type=long}, vsz={type=long}, status={ignore_above=1024, type=keyword}, accepting={type=long}}}}}}}, kibana={properties={stats={properties={request={properties={total={type=long}, disconnects={type=long}}}, process={properties={memory={properties={heap={properties={total={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}, size_limit={properties={bytes={type=long}}}, uptime={properties={ms={type=long}}}}}}}, event_loop_delay={properties={ms={scaling_factor=1000, type=scaled_float}}}}}, name={ignore_above=1024, type=keyword}, host={properties={name={ignore_above=1024, type=keyword}}}, index={ignore_above=1024, type=keyword}, response_time={properties={avg={properties={ms={type=long}}}, max={properties={ms={type=long}}}}}, concurrent_connections={type=long}, snapshot={type=boolean}, status={ignore_above=1024, type=keyword}}}, status={properties={name={ignore_above=1024, type=keyword}, metrics={properties={requests={properties={total={type=long}, disconnects={type=long}}}, concurrent_connections={type=long}}}, status={properties={overall={properties={state={ignore_above=1024, type=keyword}}}}}}}}}, azure={properties={app_state={properties={end_date={type=date}, requests_count={properties={sum={type=float}}}, performance_counters_memory_available_bytes={properties={avg={type=float}}}, users_count={properties={unique={type=float}}}, performance_counters_process_private_bytes={properties={avg={type=float}}}, browser_timings_total_duration={properties={avg={type=float}}}, exceptions_count={properties={sum={type=float}}}, browser_timings_processing_duration={properties={avg={type=float}}}, exceptions_server={properties={sum={type=float}}}, browser_timings_network_duration={properties={avg={type=float}}}, performance_counters_processiobytes_per_second={properties={avg={type=float}}}, sessions_count={properties={unique={type=float}}}, users_authenticated={properties={unique={type=float}}}, browser_timings_send_duration={properties={avg={type=float}}}, browser_timings_receive_uration={properties={avg={type=float}}}, performance_counters_process_cpu_percentage_total={properties={avg={type=float}}}, performance_counters_process_cpu_percentage={properties={avg={type=float}}}, requests_failed={properties={sum={type=float}}}, exceptions_browser={properties={sum={type=float}}}, start_date={type=date}}}, compute_vm_scaleset={properties={*={properties={*={type=object}}}}}, container_instance={properties={*={properties={*={type=object}}}}}, resource={properties={name={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, group={ignore_above=1024, type=keyword}, tags={properties={*={type=object}}}}}, database_account={properties={*={properties={*={type=object}}}}}, storage={properties={*={properties={*={type=object}}}}}, container_registry={properties={*={properties={*={type=object}}}}}, application_id={ignore_above=1024, type=keyword}, billing={properties={pretax_cost={type=float}, product={ignore_above=1024, type=keyword}, usage_start={type=date}, usage_end={type=date}, actual_cost={type=float}, department_name={ignore_above=1024, type=keyword}, account_name={ignore_above=1024, type=keyword}, usage_date={type=date}, currency={ignore_above=1024, type=keyword}, forecast_cost={type=float}, billing_period_id={ignore_above=1024, type=keyword}}}, subscription_id={ignore_above=1024, type=keyword}, timegrain={ignore_above=1024, type=keyword}, container_service={properties={*={properties={*={type=object}}}}}, namespace={ignore_above=1024, type=keyword}, compute_vm={properties={*={properties={*={type=object}}}}}, metrics={properties={*={properties={*={type=object}}}}}, storage_account={properties={*={properties={*={type=object}}}}}, app_insights={properties={end_date={type=date}, metrics={properties={*={properties={*={type=object}}}}}, start_date={type=date}}}, dimensions={properties={*={type=object}}}}}, zookeeper={properties={server={properties={mode={ignore_above=1024, type=keyword}, zxid={ignore_above=1024, type=keyword}, outstanding={type=long}, latency={properties={avg={type=long}, min={type=long}, max={type=long}}}, count={type=long}, version_date={type=date}, received={type=long}, epoch={type=long}, node_count={type=long}, sent={type=long}, connections={type=long}}}, connection={properties={queued={type=long}, received={type=long}, interest_ops={type=long}, sent={type=long}}}, mntr={properties={ephemerals_count={type=long}, num_alive_connections={type=long}, max_file_descriptor_count={type=long}, outstanding_requests={type=long}, approximate_data_size={type=long}, latency={properties={avg={type=long}, min={type=long}, max={type=long}}}, znode_count={type=long}, open_file_descriptor_count={type=long}, pending_syncs={type=long}, version={path=service.version, type=alias}, packets={properties={received={type=long}, sent={type=long}}}, hostname={ignore_above=1024, type=keyword}, followers={type=long}, synced_followers={type=long}, watch_count={type=long}, server_state={ignore_above=1024, type=keyword}}}}}, dns={properties={op_code={ignore_above=1024, type=keyword}, resolved_ip={type=ip}, response_code={ignore_above=1024, type=keyword}, question={properties={registered_domain={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, answers={type=object, properties={data={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}, ttl={type=long}}}, header_flags={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, vulnerability={properties={severity={ignore_above=1024, type=keyword}, reference={ignore_above=1024, type=keyword}, score={properties={environmental={type=float}, version={ignore_above=1024, type=keyword}, temporal={type=float}, base={type=float}}}, report_id={ignore_above=1024, type=keyword}, scanner={properties={vendor={ignore_above=1024, type=keyword}}}, description={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}, category={ignore_above=1024, type=keyword}, classification={ignore_above=1024, type=keyword}, enumeration={ignore_above=1024, type=keyword}}}, appsearch={properties={stats={properties={jvm={properties={memory_usage={properties={heap_used={properties={bytes={type=long}}}, heap_committed={properties={bytes={type=long}}}, non_heap_committed={properties={bytes={type=long}}}, non_heap_init={properties={bytes={type=long}}}, heap_init={properties={bytes={type=long}}}, heap_max={properties={bytes={type=long}}}}}}}, queues={properties={engine_destroyer={properties={count={type=long}}}, document_destroyer={properties={count={type=long}}}, schema_updater={properties={count={type=long}}}, reindexer={properties={count={type=long}}}, analytics_events={properties={count={type=long}}}, failed={properties={count={type=long}}}, mailer={properties={count={type=long}}}, index_adder={properties={count={type=long}}}, refresh_document_counts={properties={count={type=long}}}, indexed_doc_remover={properties={count={type=long}}}}}, requests={properties={web={properties={response_time={properties={avg={properties={ms={type=long}}}, max={properties={ms={type=long}}}}}}}, count={type=long}, api={properties={duration={properties={avg={properties={ms={type=long}}}, max={properties={ms={type=long}}}}}}}}}}}}}, tags={ignore_above=1024, type=keyword}, labels={type=object}, orchestrator={properties={cluster={properties={name={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, url={ignore_above=1024, type=keyword}}}, resource={properties={name={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, organization={ignore_above=1024, type=keyword}, namespace={ignore_above=1024, type=keyword}, api_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}}}}}, system={properties={diskio={properties={read={properties={bytes={type=long}, count={type=long}, time={type=long}}}, iostat={properties={request={properties={avg_size={type=float}}}, service_time={type=float}, read={properties={request={properties={merges_per_sec={type=float}, per_sec={type=float}}}, await={type=float}, per_sec={properties={bytes={type=float}}}}}, busy={type=float}, await={type=float}, write={properties={request={properties={merges_per_sec={type=float}, per_sec={type=float}}}, await={type=float}, per_sec={properties={bytes={type=float}}}}}, queue={properties={avg_size={type=float}}}}}, io={properties={ops={type=long}, time={type=long}}}, name={ignore_above=1024, type=keyword}, serial_number={ignore_above=1024, type=keyword}, write={properties={bytes={type=long}, count={type=long}, time={type=long}}}}}, process={properties={summary={properties={running={type=long}, total={type=long}, stopped={type=long}, idle={type=long}, zombie={type=long}, dead={type=long}, sleeping={type=long}, unknown={type=long}}}, memory={properties={rss={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=long}}}, size={type=long}, share={type=long}}}, cmdline={ignore_above=2048, type=keyword}, cpu={properties={start_time={type=date}, total={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, value={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, system={properties={ticks={type=long}}}, user={properties={ticks={type=long}}}}}, state={ignore_above=1024, type=keyword}, cgroup={properties={blkio={properties={path={ignore_above=1024, type=keyword}, total={properties={bytes={type=long}, ios={type=long}}}, id={ignore_above=1024, type=keyword}}}, path={ignore_above=1024, type=keyword}, memory={properties={path={ignore_above=1024, type=keyword}, mem={properties={high={properties={bytes={type=long}}}, failures={type=long}, low={properties={bytes={type=long}}}, max={properties={bytes={type=long}}}, usage={properties={max={properties={bytes={type=long}}}, bytes={type=long}}}, limit={properties={bytes={type=long}}}, events={properties={fail={type=long}, high={type=long}, oom_kill={type=long}, low={type=long}, max={type=long}, oom={type=long}}}}}, stats={properties={inactive_anon={properties={bytes={type=long}}}, cache={properties={bytes={type=long}}}, rss_huge={properties={bytes={type=long}}}, mapped_file={properties={bytes={type=long}}}, swap={properties={bytes={type=long}}}, unevictable={properties={bytes={type=long}}}, active_anon={properties={bytes={type=long}}}, pages_in={type=long}, *={type=object, properties={bytes={type=object}}}, hierarchical_memory_limit={properties={bytes={type=long}}}, page_faults={type=long}, pages_out={type=long}, inactive_file={properties={bytes={type=long}}}, rss={properties={bytes={type=long}}}, hierarchical_memsw_limit={properties={bytes={type=long}}}, major_page_faults={type=long}, active_file={properties={bytes={type=long}}}}}, memsw={properties={high={properties={bytes={type=long}}}, failures={type=long}, low={properties={bytes={type=long}}}, max={properties={bytes={type=long}}}, usage={properties={max={properties={bytes={type=long}}}, bytes={type=long}}}, limit={properties={bytes={type=long}}}, events={properties={fail={type=long}, high={type=long}, oom_kill={type=long}, low={type=long}, max={type=long}, oom={type=long}}}}}, kmem_tcp={properties={failures={type=long}, usage={properties={max={properties={bytes={type=long}}}, bytes={type=long}}}, limit={properties={bytes={type=long}}}}}, kmem={properties={failures={type=long}, usage={properties={max={properties={bytes={type=long}}}, bytes={type=long}}}, limit={properties={bytes={type=long}}}}}, id={ignore_above=1024, type=keyword}}}, io={properties={path={ignore_above=1024, type=keyword}, stats={properties={*={type=object, properties={*={type=object, properties={bytes={type=object}, ios={type=object}}}}}}}, pressure={properties={some={properties={total={type=long}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}, full={properties={total={type=long}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}}}, id={ignore_above=1024, type=keyword}}}, cpu={properties={cfs={properties={shares={type=long}, period={properties={us={type=long}}}, quota={properties={us={type=long}}}}}, path={ignore_above=1024, type=keyword}, rt={properties={period={properties={us={type=long}}}, runtime={properties={us={type=long}}}}}, stats={properties={system={properties={pct={type=float}, ns={type=long}, norm={properties={pct={type=float}}}}}, usage={properties={pct={type=float}, ns={type=long}, norm={properties={pct={type=float}}}}}, periods={type=long}, user={properties={pct={type=float}, ns={type=long}, norm={properties={pct={type=float}}}}}, throttled={properties={ns={type=long}, periods={type=long}, us={type=long}}}}}, pressure={properties={some={properties={total={type=long}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}, full={properties={total={type=long}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}}}, id={ignore_above=1024, type=keyword}}}, id={ignore_above=1024, type=keyword}, cpuacct={properties={path={ignore_above=1024, type=keyword}, total={properties={pct={scaling_factor=1000, type=scaled_float}, ns={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, stats={properties={system={properties={pct={scaling_factor=1000, type=scaled_float}, ns={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, user={properties={pct={scaling_factor=1000, type=scaled_float}, ns={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}, percpu={type=object}, id={ignore_above=1024, type=keyword}}}, cgroups_version={type=long}}}, env={type=object}, fd={properties={limit={properties={hard={type=long}, soft={type=long}}}, open={type=long}}}}}, memory={properties={hugepages={properties={total={type=long}, default_size={type=long}, surplus={type=long}, reserved={type=long}, swap={properties={out={properties={pages={type=long}, fallback={type=long}}}}}, used={properties={pct={type=long}, bytes={type=long}}}, free={type=long}}}, actual={properties={used={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=long}}}, free={type=long}}}, total={type=long}, swap={properties={total={type=long}, readahead={properties={pages={type=long}, cached={type=long}}}, in={properties={pages={type=long}}}, used={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=long}}}, free={type=long}, out={properties={pages={type=long}}}}}, cached={type=long}, page_stats={properties={pgscan_kswapd={properties={pages={type=long}}}, pgscan_direct={properties={pages={type=long}}}, pgsteal_direct={properties={pages={type=long}}}, direct_efficiency={properties={pct={scaling_factor=1000, type=scaled_float}}}, pgfree={properties={pages={type=long}}}, pgsteal_kswapd={properties={pages={type=long}}}, kswapd_efficiency={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, used={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=long}}}, free={type=long}}}, cpu={properties={total={properties={pct={scaling_factor=1000, type=scaled_float}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, cores={type=long}, system={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, softirq={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, idle={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, steal={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, irq={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, iowait={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, user={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, nice={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}, users={properties={seat={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, leader={type=long}, service={ignore_above=1024, type=keyword}, scope={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, state={ignore_above=1024, type=keyword}, remote={type=boolean}, type={ignore_above=1024, type=keyword}, remote_host={ignore_above=1024, type=keyword}}}, filesystem={properties={device_name={ignore_above=1024, type=keyword}, total={type=long}, mount_point={ignore_above=1024, type=keyword}, free_files={type=long}, available={type=long}, files={type=long}, used={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=long}}}, type={ignore_above=1024, type=keyword}, free={type=long}}}, network={properties={in={properties={bytes={type=long}, dropped={type=long}, packets={type=long}, errors={type=long}}}, name={ignore_above=1024, type=keyword}, out={properties={bytes={type=long}, dropped={type=long}, packets={type=long}, errors={type=long}}}}}, uptime={properties={duration={properties={ms={type=long}}}}}, core={properties={total={properties={pct={scaling_factor=1000, type=scaled_float}}}, system={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, softirq={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, idle={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, steal={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, irq={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, id={type=long}, iowait={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, user={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}, nice={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}}}}}, entropy={properties={pct={scaling_factor=1000, type=scaled_float}, available_bits={type=long}}}, load={properties={1={scaling_factor=100, type=scaled_float}, cores={type=long}, 15={scaling_factor=100, type=scaled_float}, 5={scaling_factor=100, type=scaled_float}, norm={properties={1={scaling_factor=100, type=scaled_float}, 15={scaling_factor=100, type=scaled_float}, 5={scaling_factor=100, type=scaled_float}}}}}, service={properties={exec_code={ignore_above=1024, type=keyword}, sub_state={ignore_above=1024, type=keyword}, unit_file={properties={vendor_preset={ignore_above=1024, type=keyword}, state={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, load_state={ignore_above=1024, type=keyword}, resources={properties={memory={properties={usage={properties={bytes={type=long}}}}}, cpu={properties={usage={properties={ns={type=long}}}}}, tasks={properties={count={type=long}}}, network={properties={in={properties={bytes={type=long}, packets={type=long}}}, out={properties={bytes={type=long}, packets={type=long}}}}}}}, state={ignore_above=1024, type=keyword}, state_since={type=date}}}, fsstat={properties={total_files={type=long}, count={type=long}, total_size={properties={total={type=long}, used={type=long}, free={type=long}}}}}, socket={properties={summary={properties={all={properties={listening={type=long}, count={type=long}}}, tcp={properties={all={properties={established={type=long}, listening={type=long}, syn_sent={type=long}, syn_recv={type=long}, closing={type=long}, time_wait={type=long}, last_ack={type=long}, count={type=long}, orphan={type=long}, close_wait={type=long}, fin_wait1={type=long}, fin_wait2={type=long}}}, memory={type=long}}}, udp={properties={all={properties={count={type=long}}}, memory={type=long}}}}}, process={properties={cmdline={ignore_above=1024, type=keyword}}}, remote={properties={port={type=long}, etld_plus_one={ignore_above=1024, type=keyword}, ip={type=ip}, host={ignore_above=1024, type=keyword}, host_error={ignore_above=1024, type=keyword}}}, local={properties={port={type=long}, ip={type=ip}}}}}, network_summary={properties={tcp={properties={*={type=object}}}, udp={properties={*={type=object}}}, ip={properties={*={type=object}}}, udp_lite={properties={*={type=object}}}, icmp={properties={*={type=object}}}}}, raid={properties={sync_action={ignore_above=1024, type=keyword}, disks={properties={total={type=long}, active={type=long}, failed={type=long}, spare={type=long}, states={properties={*={type=object}}}}}, level={ignore_above=1024, type=keyword}, blocks={properties={total={type=long}, synced={type=long}}}, name={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}}}}}, kafka={properties={consumergroup={properties={partition={type=long}, offset={type=long}, meta={ignore_above=1024, type=keyword}, client={properties={member_id={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, topic={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, error={properties={code={type=long}}}, broker={properties={address={ignore_above=1024, type=keyword}, id={type=long}}}, consumer_lag={type=long}}}, partition={properties={partition={properties={leader={type=long}, replica={type=long}, insync_replica={type=boolean}, id={type=long}, error={properties={code={type=long}}}, is_leader={type=boolean}}}, offset={properties={oldest={type=long}, newest={type=long}}}, topic={properties={name={ignore_above=1024, type=keyword}, error={properties={code={type=long}}}}}, id={type=long}, topic_id={ignore_above=1024, type=keyword}, broker={properties={address={ignore_above=1024, type=keyword}, id={type=long}}}, topic_broker_id={ignore_above=1024, type=keyword}}}, producer={properties={record_size_max={type=long}, batch_size_avg={type=float}, io_wait={type=float}, record_send_rate={type=float}, response_rate={type=float}, message_rate={type=float}, records_per_request={type=float}, out={properties={bytes_per_sec={type=float}}}, record_error_rate={type=float}, mbean={ignore_above=1024, type=keyword}, batch_size_max={type=long}, available_buffer_bytes={type=float}, record_size_avg={type=float}, record_retry_rate={type=float}, request_rate={type=float}}}, topic={properties={name={ignore_above=1024, type=keyword}, error={properties={code={type=long}}}}}, broker={properties={replication={properties={unclean_leader_elections={type=float}, leader_elections={type=float}}}, request={properties={fetch={properties={failed_per_second={type=float}, failed={type=float}}}, channel={properties={queue={properties={size={type=long}}}}}, produce={properties={failed_per_second={type=float}, failed={type=float}}}}}, mbean={ignore_above=1024, type=keyword}, address={ignore_above=1024, type=keyword}, log={properties={flush_rate={type=float}}}, session={properties={zookeeper={properties={disconnect={type=float}, readonly={type=float}, expire={type=float}, sync={type=float}}}}}, topic={properties={messages_in={type=float}, net={properties={in={properties={bytes_per_sec={type=float}}}, rejected={properties={bytes_per_sec={type=float}}}, out={properties={bytes_per_sec={type=float}}}}}}}, id={type=long}, messages_in={type=float}, net={properties={in={properties={bytes_per_sec={type=float}}}, rejected={properties={bytes_per_sec={type=float}}}, out={properties={bytes_per_sec={type=float}}}}}}}, consumer={properties={zookeeper_commits={type=float}, max_lag={type=float}, records_consumed={type=float}, mbean={ignore_above=1024, type=keyword}, in={properties={bytes_per_sec={type=float}}}, bytes_consumed={type=float}, fetch_rate={type=float}, messages_in={type=float}, kafka_commits={type=float}}}}}, openmetrics={properties={metrics={properties={*={type=object}}}, labels={properties={*={type=object}}}}}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}, memcached={properties={stats={properties={read={properties={bytes={type=long}}}, bytes={properties={current={type=long}, limit={type=long}}}, get={properties={hits={type=long}, misses={type=long}}}, evictions={type=long}, threads={type=long}, pid={type=long}, cmd={properties={set={type=long}, get={type=long}}}, written={properties={bytes={type=long}}}, items={properties={current={type=long}, total={type=long}}}, connections={properties={current={type=long}, total={type=long}}}, uptime={properties={sec={type=long}}}}}}}, nats={properties={server={properties={id={ignore_above=1024, type=keyword}, time={type=date}}}, routes={properties={total={type=long}}}, subscriptions={properties={cache={properties={fanout={properties={avg={type=double}, max={type=long}}}, size={type=long}, hit_rate={scaling_factor=1000, type=scaled_float}}}, total={type=long}, removes={type=long}, matches={type=long}, inserts={type=long}}}, route={properties={pending_size={type=long}, subscriptions={type=long}, port={type=long}, in={properties={bytes={type=long}, messages={type=long}}}, remote_id={ignore_above=1024, type=keyword}, ip={type=ip}, out={properties={bytes={type=long}, messages={type=long}}}}}, stats={properties={total_connections={type=long}, cores={type=long}, mem={properties={bytes={type=long}}}, in={properties={bytes={type=long}, messages={type=long}}}, slow_consumers={type=long}, http={properties={req_stats={properties={uri={properties={varz={type=long}, root={type=long}, connz={type=long}, routez={type=long}, subsz={type=long}}}}}}}, cpu={scaling_factor=1000, type=scaled_float}, remotes={type=long}, uptime={type=long}, out={properties={bytes={type=long}, messages={type=long}}}}}, connection={properties={subscriptions={type=long}, in={properties={bytes={type=long}, messages={type=long}}}, name={ignore_above=1024, type=keyword}, idle_time={type=long}, out={properties={bytes={type=long}, messages={type=long}}}, pending_bytes={type=long}, uptime={type=long}}}, connections={properties={total={type=long}}}}}, server={properties={nat={properties={port={type=long}, ip={type=ip}}}, address={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, ip={type=ip}, mac={ignore_above=1024, type=keyword}, packets={type=long}, geo={properties={region_iso_code={ignore_above=1024, type=keyword}, continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, registered_domain={ignore_above=1024, type=keyword}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}}}, port={type=long}, bytes={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, user={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}}}, log={properties={file={properties={path={ignore_above=1024, type=keyword}}}, original={ignore_above=1024, index=false, type=keyword, doc_values=false}, level={ignore_above=1024, type=keyword}, logger={ignore_above=1024, type=keyword}, origin={properties={file={properties={line={type=long}, name={ignore_above=1024, type=keyword}}}, function={ignore_above=1024, type=keyword}}}, syslog={type=object, properties={severity={properties={code={type=long}, name={ignore_above=1024, type=keyword}}}, priority={type=long}, facility={properties={code={type=long}, name={ignore_above=1024, type=keyword}}}}}}}, geo={properties={region_iso_code={ignore_above=1024, type=keyword}, continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, location={type=geo_point}, region_name={ignore_above=1024, type=keyword}, postal_code={ignore_above=1024, type=keyword}}}, iis={properties={application_pool={properties={net_clr={properties={throw_to_catch_depth_per_sec={type=float}, finallys_per_sec={type=float}, filters_per_sec={type=float}, total_exceptions_thrown={type=long}}}, process={properties={io_read_operations_per_sec={type=float}, virtual_bytes={type=float}, private_bytes={type=float}, cpu_usage_perc={type=float}, thread_count={type=long}, handle_count={type=long}, io_write_operations_per_sec={type=float}, working_set={type=float}, page_faults_per_sec={type=float}}}, name={ignore_above=1024, type=keyword}}}, website={properties={name={ignore_above=1024, type=keyword}, network={properties={bytes_sent_per_sec={type=float}, delete_requests_per_sec={type=float}, maximum_connections={type=float}, get_requests_per_sec={type=float}, total_put_requests={type=float}, put_requests_per_sec={type=float}, bytes_received_per_sec={type=float}, total_post_requests={type=float}, total_connection_attempts={type=float}, service_uptime={type=float}, total_bytes_received={type=float}, current_connections={type=float}, post_requests_per_sec={type=float}, total_get_requests={type=float}, total_bytes_sent={type=float}, total_delete_requests={type=float}}}}}, webserver={properties={process={properties={io_read_operations_per_sec={type=float}, virtual_bytes={type=float}, private_bytes={type=float}, worker_process_count={type=float}, cpu_usage_perc={type=float}, thread_count={type=long}, handle_count={type=float}, io_write_operations_per_sec={type=float}, working_set={type=float}, page_faults_per_sec={type=float}}}, cache={properties={total_uris_cached={type=float}, file_cache_misses={type=float}, maximum_file_cache_memory_usage={type=float}, total_files_cached={type=float}, current_files_cached={type=float}, uri_cache_misses={type=float}, file_cache_hits={type=float}, uri_cache_hits={type=float}, output_cache_total_misses={type=float}, output_cache_total_hits={type=float}, output_cache_current_items={type=float}, output_cache_current_memory_usage={type=float}, current_uris_cached={type=float}, current_file_cache_memory_usage={type=float}}}, asp_net={properties={application_restarts={type=float}, request_wait_time={type=long}}}, asp_net_application={properties={requests_executing={type=float}, pipeline_instance_count={type=float}, errors_total_per_sec={type=float}, requests_per_sec={type=float}, requests_in_application_queue={type=float}}}, network={properties={bytes_sent_per_sec={type=float}, delete_requests_per_sec={type=float}, total_anonymous_users={type=float}, anonymous_users_per_sec={type=float}, current_anonymous_users={type=float}, maximum_connections={type=float}, get_requests_per_sec={type=float}, bytes_received_per_sec={type=float}, total_post_requests={type=float}, current_non_anonymous_users={type=float}, service_uptime={type=float}, total_connection_attempts={type=float}, total_bytes_received={type=float}, total_non_anonymous_users={type=float}, current_connections={type=float}, post_requests_per_sec={type=float}, total_get_requests={type=float}, total_bytes_sent={type=float}, total_delete_requests={type=float}}}}}}}, file={properties={extension={ignore_above=1024, type=keyword}, gid={ignore_above=1024, type=keyword}, drive_letter={ignore_above=1, type=keyword}, accessed={type=date}, type={ignore_above=1024, type=keyword}, mtime={type=date}, directory={ignore_above=1024, type=keyword}, mode={ignore_above=1024, type=keyword}, inode={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, uid={ignore_above=1024, type=keyword}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, timestamp={type=date}, status={ignore_above=1024, type=keyword}}}, fork_name={ignore_above=1024, type=keyword}, ctime={type=date}, elf={properties={imports={type=flattened}, shared_libraries={ignore_above=1024, type=keyword}, byte_order={ignore_above=1024, type=keyword}, exports={type=flattened}, cpu_type={ignore_above=1024, type=keyword}, header={properties={object_version={ignore_above=1024, type=keyword}, data={ignore_above=1024, type=keyword}, os_abi={ignore_above=1024, type=keyword}, entrypoint={type=long}, abi_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, creation_date={type=date}, telfhash={ignore_above=1024, type=keyword}, sections={type=nested, properties={chi2={type=long}, virtual_address={type=long}, entropy={type=long}, physical_offset={ignore_above=1024, type=keyword}, flags={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, physical_size={type=long}, type={ignore_above=1024, type=keyword}, virtual_size={type=long}}}, segments={type=nested, properties={type={ignore_above=1024, type=keyword}, sections={ignore_above=1024, type=keyword}}}, architecture={ignore_above=1024, type=keyword}}}, group={ignore_above=1024, type=keyword}, owner={ignore_above=1024, type=keyword}, created={type=date}, target_path={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, x509={properties={not_after={type=date}, public_key_exponent={index=false, type=long, doc_values=false}, subject={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}, not_before={type=date}, public_key_algorithm={ignore_above=1024, type=keyword}, public_key_curve={ignore_above=1024, type=keyword}, signature_algorithm={ignore_above=1024, type=keyword}, serial_number={ignore_above=1024, type=keyword}, public_key_size={type=long}, version_number={ignore_above=1024, type=keyword}, alternative_names={ignore_above=1024, type=keyword}, issuer={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}}}, size={type=long}, mime_type={ignore_above=1024, type=keyword}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, attributes={ignore_above=1024, type=keyword}, device={ignore_above=1024, type=keyword}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}}}, vlan={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, couchbase={properties={bucket={properties={item_count={type=long}, disk={properties={used={properties={bytes={type=long}}}, fetches={type=double}}}, memory={properties={used={properties={bytes={type=long}}}}}, data={properties={used={properties={bytes={type=long}}}}}, quota={properties={use={properties={pct={scaling_factor=1000, type=scaled_float}}}, ram={properties={bytes={type=long}}}}}, name={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, ops_per_sec={type=double}}}, cluster={properties={quota={properties={memory={properties={mb={type=double}}}, index_memory={properties={mb={type=double}}}}}, hdd={properties={total={properties={bytes={type=long}}}, quota={properties={total={properties={bytes={type=long}}}}}, used={properties={by_data={properties={bytes={type=long}}}, value={properties={bytes={type=long}}}}}, free={properties={bytes={type=long}}}}}, max_bucket_count={type=long}, ram={properties={total={properties={bytes={type=long}}}, quota={properties={total={properties={per_node={properties={bytes={type=long}}}, value={properties={bytes={type=long}}}}}, used={properties={per_node={properties={bytes={type=long}}}, value={properties={bytes={type=long}}}}}}}, used={properties={by_data={properties={bytes={type=long}}}, value={properties={bytes={type=long}}}}}}}}}, node={properties={memory={properties={total={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}, free={properties={bytes={type=long}}}}}, swap={properties={total={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, get_hits={type=double}, cmd_get={type=double}, couch={properties={docs={properties={data_size={properties={bytes={type=long}}}, disk_size={properties={bytes={type=long}}}}}, spatial={properties={data_size={properties={bytes={type=long}}}, disk_size={properties={bytes={type=long}}}}}, views={properties={data_size={properties={bytes={type=long}}}, disk_size={properties={bytes={type=long}}}}}}}, current_items={properties={total={type=long}, value={type=long}}}, uptime={properties={sec={type=long}}}, hostname={ignore_above=1024, type=keyword}, ops={type=double}, mcd_memory={properties={reserved={properties={bytes={type=long}}}, allocated={properties={bytes={type=long}}}}}, ep_bg_fetched={type=long}, cpu_utilization_rate={properties={pct={scaling_factor=1000, type=scaled_float}}}, vb_replica_curr_items={type=long}}}}}, task_stats={properties={identifier={ignore_above=1024, type=keyword}, diskio={properties={read={properties={summary={properties={service_time={type=long}, ops={type=long}, wait_time={type=long}, rate={type=long}, bytes={type=long}, queued={type=long}}}, service_time={type=long}, total={scaling_factor=1000, type=scaled_float}, ops={type=long}, wait_time={type=long}, rate={type=long}, bytes={type=long}, queued={type=long}, reads={scaling_factor=1000, type=scaled_float}, writes={scaling_factor=1000, type=scaled_float}, write={properties={service_time={type=long}, ops={type=long}, wait_time={type=long}, rate={type=long}, bytes={type=long}, queued={type=long}}}}}}}, memory={properties={stats={properties={*={type=object}}}}}, cpu={properties={total={properties={pct={scaling_factor=1000, type=scaled_float}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, system={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, kernel={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, user={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}, network={properties={inbound={properties={bytes={type=long}, dropped={type=long}, packets={type=long}, errors={type=long}}}, outbound={properties={bytes={type=long}, dropped={type=long}, errors={type=long}, packets={type=long}}}, interface={ignore_above=1024, type=keyword}}}}}, event={properties={reason={ignore_above=1024, type=keyword}, code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, reference={ignore_above=1024, type=keyword}, agent_id_status={ignore_above=1024, type=keyword}, duration={type=long}, ingested={type=date}, provider={ignore_above=1024, type=keyword}, action={ignore_above=1024, type=keyword}, end={type=date}, id={ignore_above=1024, type=keyword}, outcome={ignore_above=1024, type=keyword}, severity={type=long}, original={ignore_above=1024, index=false, type=keyword, doc_values=false}, risk_score={type=float}, created={type=date}, kind={ignore_above=1024, type=keyword}, module={ignore_above=1024, type=keyword}, start={type=date}, url={ignore_above=1024, type=keyword}, sequence={type=long}, risk_score_norm={type=float}, category={ignore_above=1024, type=keyword}, dataset={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}}}, munin={properties={plugin={properties={name={ignore_above=1024, type=keyword}}}, metrics={properties={*={type=object}}}}}, mssql={properties={database={properties={name={ignore_above=1024, type=keyword}, id={type=long}}}, performance={properties={logins_per_sec={type=long}, batch_requests_per_sec={type=long}, recompilations_per_sec={type=long}, logouts_per_sec={type=long}, lock_waits_per_sec={type=long}, active_temp_tables={type=long}, page_splits_per_sec={type=long}, compilations_per_sec={type=long}, buffer={properties={page_life_expectancy={properties={sec={type=long}}}, cache_hit={properties={pct={type=double}}}, target_pages={type=long}, database_pages={type=long}, checkpoint_pages_per_sec={type=long}}}, transactions={type=long}, user_connections={type=long}, connections_reset_per_sec={type=long}}}, transaction_log={properties={space_usage={properties={total={properties={bytes={type=long}}}, since_last_backup={properties={bytes={type=long}}}, used={properties={pct={type=float}, bytes={type=long}}}}}, stats={properties={recovery_size={properties={bytes={type=long}}}, since_last_checkpoint={properties={bytes={type=long}}}, backup_time={type=date}, total_size={properties={bytes={type=long}}}, active_size={properties={bytes={type=long}}}}}}}}}, activemq={properties={topic={properties={memory={properties={broker={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, mbean={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, messages={properties={enqueue={properties={count={type=long}, time={properties={avg={type=double}, min={type=long}, max={type=long}}}}}, expired={properties={count={type=long}}}, dispatch={properties={count={type=long}}}, size={properties={avg={type=long}}}, dequeue={properties={count={type=long}}}, inflight={properties={count={type=long}}}}}, consumers={properties={count={type=long}}}, producers={properties={count={type=long}}}}}, broker={properties={memory={properties={temp={properties={pct={scaling_factor=1000, type=scaled_float}}}, store={properties={pct={scaling_factor=1000, type=scaled_float}}}, broker={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, mbean={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, messages={properties={enqueue={properties={count={type=long}}}, dequeue={properties={count={type=long}}}, count={type=long}}}, consumers={properties={count={type=long}}}, connections={properties={count={type=long}}}, producers={properties={count={type=long}}}}}, queue={properties={memory={properties={broker={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, mbean={ignore_above=1024, type=keyword}, size={type=long}, name={ignore_above=1024, type=keyword}, messages={properties={enqueue={properties={count={type=long}, time={properties={avg={type=double}, min={type=long}, max={type=long}}}}}, dispatch={properties={count={type=long}}}, expired={properties={count={type=long}}}, size={properties={avg={type=long}}}, dequeue={properties={count={type=long}}}, inflight={properties={count={type=long}}}}}, consumers={properties={count={type=long}}}, producers={properties={count={type=long}}}}}}}, kvm={properties={dommemstat={properties={stat={properties={name={ignore_above=1024, type=keyword}, value={type=long}}}, name={ignore_above=1024, type=keyword}, id={type=long}}}, name={ignore_above=1024, type=keyword}, id={type=long}, status={properties={state={ignore_above=1024, type=keyword}}}}}, systemd={properties={unit={ignore_above=1024, type=keyword}, fragment_path={ignore_above=1024, type=keyword}}}, statsd={properties={*={properties={count={type=object}, *={type=object}}}}}, rabbitmq={properties={vhost={ignore_above=1024, type=keyword}, node={properties={msg={properties={store_read={properties={count={type=long}}}, store_write={properties={count={type=long}}}}}, proc={properties={total={type=long}, used={type=long}}}, io={properties={read={properties={avg={properties={ms={type=long}}}, bytes={type=long}, count={type=long}}}, reopen={properties={count={type=long}}}, write={properties={avg={properties={ms={type=long}}}, bytes={type=long}, count={type=long}}}, file_handle={properties={open_attempt={properties={avg={properties={ms={type=long}}}, count={type=long}}}}}, seek={properties={avg={properties={ms={type=long}}}, count={type=long}}}, sync={properties={avg={properties={ms={type=long}}}, count={type=long}}}}}, run={properties={queue={type=long}}}, processors={type=long}, type={ignore_above=1024, type=keyword}, uptime={type=long}, disk={properties={free={properties={bytes={type=long}, limit={properties={bytes={type=long}}}}}}}, mem={properties={limit={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, name={ignore_above=1024, type=keyword}, mnesia={properties={disk={properties={tx={properties={count={type=long}}}}}, ram={properties={tx={properties={count={type=long}}}}}}}, socket={properties={total={type=long}, used={type=long}}}, gc={properties={reclaimed={properties={bytes={type=long}}}, num={properties={count={type=long}}}}}, fd={properties={total={type=long}, used={type=long}}}, queue={properties={index={properties={read={properties={count={type=long}}}, journal_write={properties={count={type=long}}}, write={properties={count={type=long}}}}}}}}}, connection={properties={frame_max={type=long}, octet_count={properties={received={type=long}, sent={type=long}}}, client_provided={properties={name={ignore_above=1024, type=keyword}}}, channels={type=long}, channel_max={type=long}, port={type=long}, packet_count={properties={pending={type=long}, received={type=long}, sent={type=long}}}, peer={properties={port={type=long}, host={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, exchange={properties={durable={type=boolean}, internal={type=boolean}, name={ignore_above=1024, type=keyword}, auto_delete={type=boolean}, messages={properties={publish_in={properties={count={type=long}, details={properties={rate={type=float}}}}}, publish_out={properties={count={type=long}, details={properties={rate={type=float}}}}}}}}}, queue={properties={durable={type=boolean}, disk={properties={reads={properties={count={type=long}}}, writes={properties={count={type=long}}}}}, memory={properties={bytes={type=long}}}, name={ignore_above=1024, type=keyword}, auto_delete={type=boolean}, exclusive={type=boolean}, messages={properties={total={properties={count={type=long}, details={properties={rate={type=float}}}}}, ready={properties={count={type=long}, details={properties={rate={type=float}}}}}, unacknowledged={properties={count={type=long}, details={properties={rate={type=float}}}}}, persistent={properties={count={type=long}}}}}, arguments={properties={max_priority={type=long}}}, consumers={properties={count={type=long}, utilisation={properties={pct={type=long}}}}}, state={ignore_above=1024, type=keyword}}}}}, url={properties={extension={ignore_above=1024, type=keyword}, original={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, scheme={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, query={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, fragment={ignore_above=1024, type=keyword}, registered_domain={ignore_above=1024, type=keyword}, password={ignore_above=1024, type=keyword}, port={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, full={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, username={ignore_above=1024, type=keyword}}}, @timestamp={type=date}, vsphere={properties={datastore={properties={name={ignore_above=1024, type=keyword}, fstype={ignore_above=1024, type=keyword}, capacity={properties={total={properties={bytes={type=long}}}, used={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=long}}}, free={properties={bytes={type=long}}}}}}}, host={properties={memory={properties={total={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}, free={properties={bytes={type=long}}}}}, name={ignore_above=1024, type=keyword}, cpu={properties={total={properties={mhz={type=long}}}, used={properties={mhz={type=long}}}, free={properties={mhz={type=long}}}}}, network_names={ignore_above=1024, type=keyword}}}, virtualmachine={properties={memory={properties={total={properties={guest={properties={bytes={type=long}}}}}, used={properties={host={properties={bytes={type=long}}}, guest={properties={bytes={type=long}}}}}, free={properties={guest={properties={bytes={type=long}}}}}}}, os={ignore_above=1024, type=keyword}, custom_fields={type=object}, host={properties={hostname={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, cpu={properties={total={properties={mhz={type=long}}}, used={properties={mhz={type=long}}}, free={properties={mhz={type=long}}}}}, network_names={ignore_above=1024, type=keyword}}}}}, data_stream={properties={namespace={type=constant_keyword}, type={type=constant_keyword}, dataset={type=constant_keyword}}}, organization={properties={name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}}}, stan={properties={server={properties={id={ignore_above=1024, type=keyword}}}, cluster={properties={id={ignore_above=1024, type=keyword}}}, subscriptions={properties={last_sent={type=long}, offline={type=boolean}, pending={type=long}, stalled={type=boolean}, channel={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, queue={ignore_above=1024, type=keyword}}}, channels={properties={first_seq={type=long}, depth={type=long}, bytes={type=long}, name={ignore_above=1024, type=keyword}, messages={type=long}, last_seq={type=long}}}, stats={properties={subscriptions={type=long}, role={ignore_above=1024, type=keyword}, clients={type=long}, channels={type=long}, bytes={type=long}, messages={type=long}, state={ignore_above=1024, type=keyword}}}}}, cloudfoundry={properties={app={properties={id={ignore_above=1024, type=keyword}}}, container={properties={disk={properties={bytes={type=long}, quota={properties={bytes={type=long}}}}}, memory={properties={bytes={type=long}, quota={properties={bytes={type=long}}}}}, instance_index={type=long}, cpu={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, counter={properties={total={type=long}, name={ignore_above=1024, type=keyword}, delta={type=long}}}, type={ignore_above=1024, type=keyword}, value={properties={unit={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, value={type=float}}}}}, haproxy={properties={stat={properties={throttle={properties={pct={scaling_factor=1000, type=scaled_float}}}, server={properties={backup={type=long}, aborted={type=long}, active={type=long}, id={type=long}}}, request={properties={total={type=long}, rate={properties={max={type=long}, value={type=long}}}, denied_by_connection_rules={type=long}, denied_by_session_rules={type=long}, queued={properties={current={type=long}, max={type=long}}}, connection={properties={errors={type=long}}}, denied={type=long}, redispatched={type=long}, intercepted={type=long}, errors={type=long}}}, agent={properties={duration={type=long}, code={type=long}, fall={type=long}, description={ignore_above=1024, type=keyword}, health={type=long}, check={properties={fall={type=long}, health={type=long}, description={ignore_above=1024, type=keyword}, rise={type=long}}}, rise={type=long}, status={ignore_above=1024, type=keyword}}}, session={properties={current={type=long}, total={type=long}, max={type=long}, rate={properties={max={type=long}, limit={type=long}, value={type=long}}}, limit={type=long}}}, tracked={properties={id={type=long}}}, source={properties={address={norms=false, type=text}}}, out={properties={bytes={type=long}}}, component_type={type=long}, load_balancing_algorithm={ignore_above=1024, type=keyword}, client={properties={aborted={type=long}}}, connection={properties={retried={type=long}, reuse={properties={total={type=long}}}, cache={properties={hits={type=long}, lookup={properties={total={type=long}}}}}, total={type=long}, rate={type=long}, rate_max={type=long}, idle={properties={total={type=long}, limit={type=long}}}, time={properties={avg={type=long}}}, attempt={properties={total={type=long}}}}}, selected={properties={total={type=long}}}, cookie={ignore_above=1024, type=keyword}, in={properties={bytes={type=long}}}, last_change={type=long}, service_name={ignore_above=1024, type=keyword}, weight={type=long}, check={properties={duration={type=long}, agent={properties={last={type=long}}}, code={type=long}, health={properties={fail={type=long}, last={ignore_above=1024, type=keyword}}}, failed={type=long}, down={type=long}, status={ignore_above=1024, type=keyword}}}, proxy={properties={mode={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={type=long}}}, downtime={type=long}, response={properties={http={properties={1xx={type=long}, 2xx={type=long}, other={type=long}, 3xx={type=long}, 4xx={type=long}, 5xx={type=long}}}, time={properties={avg={type=long}}}, denied={type=long}, errors={type=long}}}, header={properties={rewrite={properties={failed={properties={total={type=long}}}}}}}, queue={properties={limit={type=long}, time={properties={avg={type=long}}}}}, status={ignore_above=1024, type=keyword}, compressor={properties={in={properties={bytes={type=long}}}, response={properties={bytes={type=long}}}, bypassed={properties={bytes={type=long}}}, out={properties={bytes={type=long}}}}}}}, info={properties={memory={properties={max={properties={bytes={type=long}}}}}, run_queue={type=long}, session={properties={rate={properties={max={type=long}, limit={type=long}, value={type=long}}}}}, busy_polling={type=long}, peers={properties={connected={type=long}, active={type=long}}}, requests={properties={total={type=long}, max={type=long}}}, ssl={properties={cache_misses={type=long}, rate={properties={max={type=long}, limit={type=long}, value={type=long}}}, cached_lookups={type=long}, backend={properties={key_rate={properties={max={type=long}, value={type=long}}}}}, frontend={properties={session_reuse={properties={pct={scaling_factor=1000, type=scaled_float}}}, key_rate={properties={max={type=long}, value={type=long}}}}}}}, failed_resolutions={type=long}, connection={properties={current={type=long}, total={type=long}, max={type=long}, rate={properties={max={type=long}, limit={type=long}, value={type=long}}}, ssl={properties={current={type=long}, total={type=long}, max={type=long}}}, hard_max={type=long}}}, sockets={properties={max={type=long}}}, tasks={type=long}, pipes={properties={max={type=long}, used={type=long}, free={type=long}}}, dropped_logs={type=long}, process_num={type=long}, processes={type=long}, zlib_mem_usage={properties={max={type=long}, value={type=long}}}, listeners={type=long}, compress={properties={bps={properties={rate_limit={type=long}, in={type=long}, out={type=long}}}}}, idle={properties={pct={scaling_factor=1000, type=scaled_float}}}, jobs={type=long}, pool={properties={used={type=long}, failed={type=long}, allocated={type=long}}}, threads={type=long}, uptime={properties={sec={type=long}}}, bytes={properties={out={properties={total={type=long}, rate={type=long}}}}}, stopping={type=long}, unstoppable_jobs={type=long}, ulimit_n={type=long}}}}}, metricset={properties={period={type=long}, name={ignore_above=1024, type=keyword}}}, aerospike={properties={namespace={properties={node={properties={host={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}}}, memory={properties={used={properties={total={properties={bytes={type=long}}}, data={properties={bytes={type=long}}}, sindex={properties={bytes={type=long}}}, index={properties={bytes={type=long}}}}}, free={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, objects={properties={total={type=long}, master={type=long}}}, name={ignore_above=1024, type=keyword}, client={properties={read={properties={success={type=long}, error={type=long}, not_found={type=long}, timeout={type=long}}}, delete={properties={success={type=long}, not_found={type=long}, error={type=long}, timeout={type=long}}}, write={properties={success={type=long}, error={type=long}, timeout={type=long}}}}}, stop_writes={type=boolean}, hwm_breached={type=boolean}, device={properties={total={properties={bytes={type=long}}}, available={properties={pct={scaling_factor=1000, type=scaled_float}}}, used={properties={bytes={type=long}}}, free={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}}}, transaction={properties={id={ignore_above=1024, type=keyword}}}, span={properties={id={ignore_above=1024, type=keyword}}}, etcd={properties={leader={properties={leader={ignore_above=1024, type=keyword}, followers={properties={counts={properties={followers={properties={counts={properties={fail={type=long}, success={type=long}}}}}}}, latency={properties={follower={properties={latency={properties={standardDeviation={scaling_factor=1000, type=scaled_float}}}}}, followers={properties={latency={properties={average={scaling_factor=1000, type=scaled_float}, current={scaling_factor=1000, type=scaled_float}, maximum={scaling_factor=1000, type=scaled_float}, minimum={type=long}}}}}}}}}}}, server={properties={grpc_started={properties={count={type=long}}}, proposals_pending={properties={count={type=long}}}, leader_changes={properties={count={type=long}}}, proposals_failed={properties={count={type=long}}}, has_leader={type=byte}, grpc_handled={properties={count={type=long}}}, proposals_committed={properties={count={type=long}}}}}, disk={properties={wal_fsync_duration={properties={ns={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, backend_commit_duration={properties={ns={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, mvcc_db_total_size={properties={bytes={type=long}}}}}, memory={properties={go_memstats_alloc={properties={bytes={type=long}}}}}, self={properties={recv={properties={appendrequest={properties={count={type=long}}}, bandwidthrate={scaling_factor=1000, type=scaled_float}, pkgrate={scaling_factor=1000, type=scaled_float}}}, name={ignore_above=1024, type=keyword}, leaderinfo={properties={leader={ignore_above=1024, type=keyword}, starttime={ignore_above=1024, type=keyword}, uptime={ignore_above=1024, type=keyword}}}, starttime={ignore_above=1024, type=keyword}, state={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, send={properties={appendrequest={properties={count={type=long}}}, bandwidthrate={scaling_factor=1000, type=scaled_float}, pkgrate={scaling_factor=1000, type=scaled_float}}}}}, store={properties={sets={properties={fail={type=long}, success={type=long}}}, compareandswap={properties={fail={type=long}, success={type=long}}}, expire={properties={count={type=long}}}, watchers={type=long}, update={properties={fail={type=long}, success={type=long}}}, create={properties={fail={type=long}, success={type=long}}}, gets={properties={fail={type=long}, success={type=long}}}, delete={properties={fail={type=long}, success={type=long}}}, compareanddelete={properties={fail={type=long}, success={type=long}}}}}, api_version={ignore_above=1024, type=keyword}, network={properties={client_grpc_sent={properties={bytes={type=long}}}, client_grpc_received={properties={bytes={type=long}}}}}}}, kubernetes={properties={container={properties={image={path=container.image.name, type=alias}, start_time={type=date}, memory={properties={request={properties={bytes={type=long}}}, rss={properties={bytes={type=double}}}, usage={properties={node={properties={pct={scaling_factor=1000, type=scaled_float}}}, bytes={type=double}, limit={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, majorpagefaults={type=double}, limit={properties={bytes={type=long}}}, available={properties={bytes={type=double}}}, workingset={properties={bytes={type=double}}}, pagefaults={type=double}}}, rootfs={properties={inodes={properties={used={type=double}}}, available={properties={bytes={type=double}}}, used={properties={bytes={type=double}}}, capacity={properties={bytes={type=double}}}}}, name={ignore_above=1024, type=keyword}, cpu={properties={request={properties={cores={type=float}, nanocores={type=long}}}, usage={properties={core={properties={ns={type=double}}}, node={properties={pct={scaling_factor=1000, type=scaled_float}}}, nanocores={type=double}, limit={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, limit={properties={cores={type=float}, nanocores={type=long}}}}}, id={ignore_above=1024, type=keyword}, logs={properties={inodes={properties={count={type=double}, used={type=double}, free={type=double}}}, available={properties={bytes={type=double}}}, used={properties={bytes={type=double}}}, capacity={properties={bytes={type=double}}}}}, status={properties={phase={ignore_above=1024, type=keyword}, reason={ignore_above=1024, type=keyword}, ready={type=boolean}, restarts={type=long}}}}}, persistentvolumeclaim={properties={phase={ignore_above=1024, type=keyword}, storage_class={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, volume_name={ignore_above=1024, type=keyword}, request_storage={properties={bytes={type=long}}}, access_mode={ignore_above=1024, type=keyword}}}, pod={properties={start_time={type=date}, uid={ignore_above=1024, type=keyword}, host_ip={type=ip}, memory={properties={rss={properties={bytes={type=double}}}, major_page_faults={type=double}, usage={properties={node={properties={pct={scaling_factor=1000, type=scaled_float}}}, bytes={type=double}, limit={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, available={properties={bytes={type=double}}}, page_faults={type=double}, working_set={properties={bytes={type=double}}}}}, ip={type=ip}, name={ignore_above=1024, type=keyword}, cpu={properties={usage={properties={node={properties={pct={scaling_factor=1000, type=scaled_float}}}, nanocores={type=double}, limit={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}, status={properties={phase={ignore_above=1024, type=keyword}, ready={ignore_above=1024, type=keyword}, scheduled={ignore_above=1024, type=keyword}}}, network={properties={tx={properties={bytes={type=double}, errors={type=double}}}, rx={properties={bytes={type=double}, errors={type=double}}}}}}}, annotations={properties={*={type=object}}}, resourcequota={properties={resource={ignore_above=1024, type=keyword}, created={properties={sec={type=double}}}, quota={type=double}, name={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, selectors={properties={*={type=object}}}, replicaset={properties={replicas={properties={desired={type=long}, ready={type=long}, labeled={type=long}, available={type=long}, observed={type=long}}}, name={ignore_above=1024, type=keyword}}}, controllermanager={properties={handler={ignore_above=1024, type=keyword}, node={properties={collector={properties={eviction={properties={count={type=long}}}, unhealthy={properties={count={type=long}}}, count={type=long}, health={properties={pct={type=long}}}}}}}, leader={properties={is_master={type=boolean}}}, process={properties={memory={properties={virtual={properties={bytes={type=long}}}, resident={properties={bytes={type=long}}}}}, fds={properties={open={properties={count={type=long}}}}}, cpu={properties={sec={type=double}}}, started={properties={sec={type=double}}}}}, code={ignore_above=1024, type=keyword}, method={ignore_above=1024, type=keyword}, zone={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, client={properties={request={properties={count={type=long}}}}}, http={properties={request={properties={duration={properties={us={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=double}}}}}, size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, count={type=long}}}, response={properties={size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, workqueue={properties={retries={properties={count={type=long}}}, depth={properties={count={type=long}}}, unfinished={properties={sec={type=double}}}, longestrunning={properties={sec={type=double}}}, adds={properties={count={type=long}}}}}}}, cronjob={properties={schedule={ignore_above=1024, type=keyword}, last_schedule={properties={sec={type=double}}}, created={properties={sec={type=double}}}, name={ignore_above=1024, type=keyword}, active={properties={count={type=long}}}, is_suspended={type=boolean}, next_schedule={properties={sec={type=double}}}, deadline={properties={sec={type=long}}}, concurrency={ignore_above=1024, type=keyword}}}, scheduler={properties={result={ignore_above=1024, type=keyword}, leader={properties={is_master={type=boolean}}}, handler={ignore_above=1024, type=keyword}, process={properties={memory={properties={virtual={properties={bytes={type=long}}}, resident={properties={bytes={type=long}}}}}, fds={properties={open={properties={count={type=long}}}}}, cpu={properties={sec={type=double}}}, started={properties={sec={type=double}}}}}, code={ignore_above=1024, type=keyword}, method={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, scheduling={properties={duration={properties={seconds={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=double}}}}}, pod={properties={preemption={properties={victims={properties={bucket={properties={*={type=long}}}, count={type=long}, sum={type=long}}}}}, attempts={properties={count={type=long}}}}}, e2e={properties={duration={properties={us={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, name={ignore_above=1024, type=keyword}, client={properties={request={properties={count={type=long}}}}}, http={properties={request={properties={duration={properties={us={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=double}}}}}, size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, count={type=long}}}, response={properties={size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, operation={ignore_above=1024, type=keyword}}}, persistentvolume={properties={phase={ignore_above=1024, type=keyword}, storage_class={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, capacity={properties={bytes={type=long}}}}}, statefulset={properties={generation={properties={desired={type=long}, observed={type=long}}}, created={type=long}, replicas={properties={desired={type=long}, ready={type=long}, observed={type=long}}}, name={ignore_above=1024, type=keyword}}}, event={properties={reason={ignore_above=1024, type=keyword}, metadata={properties={uid={ignore_above=1024, type=keyword}, generate_name={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, namespace={ignore_above=1024, type=keyword}, self_link={ignore_above=1024, type=keyword}, resource_version={ignore_above=1024, type=keyword}, timestamp={properties={created={type=date}}}}}, involved_object={properties={uid={ignore_above=1024, type=keyword}, kind={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, api_version={ignore_above=1024, type=keyword}, resource_version={ignore_above=1024, type=keyword}}}, count={type=long}, source={properties={component={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}}}, type={ignore_above=1024, type=keyword}, message={copy_to=message, norms=false, type=text}, timestamp={properties={first_occurrence={type=date}, last_occurrence={type=date}}}}}, deployment={properties={paused={type=boolean}, replicas={properties={desired={type=long}, unavailable={type=long}, available={type=long}, updated={type=long}}}, name={ignore_above=1024, type=keyword}}}, daemonset={properties={replicas={properties={desired={type=long}, unavailable={type=long}, ready={type=long}, available={type=long}}}, name={ignore_above=1024, type=keyword}}}, labels={properties={*={type=object}}}, storageclass={properties={provisioner={ignore_above=1024, type=keyword}, created={type=date}, name={ignore_above=1024, type=keyword}, reclaim_policy={ignore_above=1024, type=keyword}, volume_binding_mode={ignore_above=1024, type=keyword}}}, volume={properties={name={ignore_above=1024, type=keyword}, fs={properties={inodes={properties={count={type=double}, used={type=double}, free={type=double}}}, available={properties={bytes={type=double}}}, used={properties={pct={scaling_factor=1000, type=scaled_float}, bytes={type=double}}}, capacity={properties={bytes={type=double}}}}}}}, node={properties={start_time={type=date}, hostname={ignore_above=1024, type=keyword}, memory={properties={allocatable={properties={bytes={type=long}}}, rss={properties={bytes={type=double}}}, usage={properties={bytes={type=double}}}, majorpagefaults={type=double}, available={properties={bytes={type=double}}}, workingset={properties={bytes={type=double}}}, pagefaults={type=double}, capacity={properties={bytes={type=long}}}}}, pod={properties={allocatable={properties={total={type=long}}}, capacity={properties={total={type=long}}}}}, name={ignore_above=1024, type=keyword}, runtime={properties={imagefs={properties={available={properties={bytes={type=double}}}, used={properties={bytes={type=double}}}, capacity={properties={bytes={type=double}}}}}}}, cpu={properties={allocatable={properties={cores={type=float}}}, usage={properties={core={properties={ns={type=double}}}, nanocores={type=double}}}, capacity={properties={cores={type=long}}}}}, fs={properties={inodes={properties={count={type=double}, used={type=double}, free={type=double}}}, available={properties={bytes={type=double}}}, used={properties={bytes={type=double}}}, capacity={properties={bytes={type=double}}}}}, network={properties={tx={properties={bytes={type=double}, errors={type=double}}}, rx={properties={bytes={type=double}, errors={type=double}}}}}, status={properties={pid_pressure={ignore_above=1024, type=keyword}, out_of_disk={ignore_above=1024, type=keyword}, ready={ignore_above=1024, type=keyword}, disk_pressure={ignore_above=1024, type=keyword}, unschedulable={type=boolean}, memory_pressure={ignore_above=1024, type=keyword}}}}}, proxy={properties={handler={ignore_above=1024, type=keyword}, process={properties={memory={properties={virtual={properties={bytes={type=long}}}, resident={properties={bytes={type=long}}}}}, fds={properties={open={properties={count={type=long}}}}}, cpu={properties={sec={type=double}}}, started={properties={sec={type=double}}}}}, code={ignore_above=1024, type=keyword}, method={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, http={properties={request={properties={duration={properties={us={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=double}}}}}, size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, count={type=long}}}, response={properties={size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, client={properties={request={properties={count={type=long}}}}}, sync={properties={rules={properties={duration={properties={us={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, networkprogramming={properties={duration={properties={us={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}}}, system={properties={container={ignore_above=1024, type=keyword}, start_time={type=date}, memory={properties={rss={properties={bytes={type=double}}}, majorpagefaults={type=double}, usage={properties={bytes={type=double}}}, workingset={properties={bytes={type=double}}}, pagefaults={type=double}}}, cpu={properties={usage={properties={core={properties={ns={type=double}}}, nanocores={type=double}}}}}}}, service={properties={load_balancer_ip={ignore_above=1024, type=keyword}, created={type=date}, name={ignore_above=1024, type=keyword}, ingress_hostname={ignore_above=1024, type=keyword}, ingress_ip={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, external_name={ignore_above=1024, type=keyword}, external_ip={ignore_above=1024, type=keyword}, cluster_ip={ignore_above=1024, type=keyword}}}, namespace={ignore_above=1024, type=keyword}, job={properties={owner={properties={kind={ignore_above=1024, type=keyword}, is_controller={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}}}, parallelism={properties={desired={type=long}}}, name={ignore_above=1024, type=keyword}, completions={properties={desired={type=long}}}, pods={properties={active={type=long}, failed={type=long}, succeeded={type=long}}}, time={properties={created={type=date}, completed={type=date}}}, status={properties={failed={ignore_above=1024, type=keyword}, complete={ignore_above=1024, type=keyword}}}}}, apiserver={properties={request={properties={longrunning={properties={count={type=long}}}, handler={ignore_above=1024, type=keyword}, code={ignore_above=1024, type=keyword}, method={ignore_above=1024, type=keyword}, resource={ignore_above=1024, type=keyword}, subresource={ignore_above=1024, type=keyword}, kind={ignore_above=1024, type=keyword}, latency={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}, count={type=long}, verb={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, duration={properties={us={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, component={ignore_above=1024, type=keyword}, current={properties={count={type=long}}}, content_type={ignore_above=1024, type=keyword}, scope={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}, client={ignore_above=1024, type=keyword}, dry_run={ignore_above=1024, type=keyword}, group={ignore_above=1024, type=keyword}}}, process={properties={memory={properties={virtual={properties={bytes={type=long}}}, resident={properties={bytes={type=long}}}}}, fds={properties={open={properties={count={type=long}}}}}, cpu={properties={sec={type=double}}}, started={properties={sec={type=double}}}}}, audit={properties={rejected={properties={count={type=long}}}, event={properties={count={type=long}}}}}, client={properties={request={properties={count={type=long}}}}}, http={properties={request={properties={duration={properties={us={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=double}}}}}, size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, count={type=long}}}, response={properties={size={properties={bytes={properties={percentile={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, etcd={properties={object={properties={count={type=long}}}}}}}}}, agent={properties={hostname={ignore_above=1024, type=keyword}, build={properties={original={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, ephemeral_id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}}}, source={properties={nat={properties={port={type=long}, ip={type=ip}}}, address={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, ip={type=ip}, mac={ignore_above=1024, type=keyword}, packets={type=long}, geo={properties={region_iso_code={ignore_above=1024, type=keyword}, continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, location={type=geo_point}, region_name={ignore_above=1024, type=keyword}, postal_code={ignore_above=1024, type=keyword}}}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}}}, registered_domain={ignore_above=1024, type=keyword}, port={type=long}, bytes={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, user={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}}}, graphite={properties={server={properties={example={ignore_above=1024, type=keyword}}}}}, cloud={properties={availability_zone={ignore_above=1024, type=keyword}, image={properties={id={ignore_above=1024, type=keyword}}}, instance={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, provider={ignore_above=1024, type=keyword}, machine={properties={type={ignore_above=1024, type=keyword}}}, service={properties={name={ignore_above=1024, type=keyword}}}, project={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, region={ignore_above=1024, type=keyword}, account={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, logstash={properties={node={properties={jvm={properties={version={ignore_above=1024, type=keyword}}}, stats={properties={events={properties={filtered={type=long}, in={type=long}, out={type=long}}}}}}}}}, apache={properties={status={properties={hostname={ignore_above=1024, type=keyword}, load={properties={1={scaling_factor=100, type=scaled_float}, 15={scaling_factor=100, type=scaled_float}, 5={scaling_factor=100, type=scaled_float}}}, bytes_per_request={scaling_factor=1000, type=scaled_float}, bytes_per_sec={scaling_factor=1000, type=scaled_float}, cpu={properties={system={scaling_factor=1000, type=scaled_float}, load={scaling_factor=1000, type=scaled_float}, children_system={scaling_factor=1000, type=scaled_float}, children_user={scaling_factor=1000, type=scaled_float}, user={scaling_factor=1000, type=scaled_float}}}, scoreboard={properties={total={type=long}, waiting_for_connection={type=long}, keepalive={type=long}, idle_cleanup={type=long}, open_slot={type=long}, logging={type=long}, gracefully_finishing={type=long}, dns_lookup={type=long}, sending_reply={type=long}, closing_connection={type=long}, starting_up={type=long}, reading_request={type=long}}}, total_accesses={type=long}, total_kbytes={type=long}, workers={properties={idle={type=long}, busy={type=long}}}, connections={properties={async={properties={closing={type=long}, writing={type=long}, keep_alive={type=long}}}, total={type=long}}}, uptime={properties={server_uptime={type=long}, uptime={type=long}}}, requests_per_sec={scaling_factor=1000, type=scaled_float}}}}}, ecs={properties={version={ignore_above=1024, type=keyword}}}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, timestamp={type=date}, status={ignore_above=1024, type=keyword}}}, timeseries={properties={instance={ignore_above=1024, type=keyword}}}, host={properties={os={properties={build={ignore_above=1024, type=keyword}, kernel={ignore_above=1024, type=keyword}, codename={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, family={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, platform={ignore_above=1024, type=keyword}, full={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}}}, ip={type=ip}, cpu={properties={usage={scaling_factor=1000, type=scaled_float}}}, type={ignore_above=1024, type=keyword}, mac={ignore_above=1024, type=keyword}, uptime={type=long}, network={properties={ingress={properties={bytes={type=long}, packets={type=long}}}, egress={properties={bytes={type=long}, packets={type=long}}}}}, geo={properties={region_iso_code={ignore_above=1024, type=keyword}, continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, disk={properties={read={properties={bytes={type=long}}}, write={properties={bytes={type=long}}}}}, hostname={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, containerized={type=boolean}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, user={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, architecture={ignore_above=1024, type=keyword}}}, beat={properties={stats={properties={runtime={properties={goroutines={type=long}}}, libbeat={properties={output={properties={read={properties={bytes={type=long}, errors={type=long}}}, type={ignore_above=1024, type=keyword}, write={properties={bytes={type=long}, errors={type=long}}}, events={properties={batches={type=long}, duplicates={type=long}, total={type=long}, dropped={type=long}, toomany={type=long}, active={type=long}, failed={type=long}, acked={type=long}}}}}}}, uptime={properties={ms={type=long}}}}}, state={properties={output={properties={name={ignore_above=1024, type=keyword}}}, management={properties={enabled={type=boolean}}}, module={properties={count={type=long}}}, queue={properties={name={ignore_above=1024, type=keyword}}}}}, id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, mysql={properties={performance={properties={table_io_waits={properties={count={properties={fetch={type=long}}}, index={properties={name={ignore_above=1024, type=keyword}}}, object={properties={schema={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}}}}}, events_statements={properties={avg={properties={timer={properties={wait={type=long}}}}}, last={properties={seen={type=date}}}, max={properties={timer={properties={wait={type=long}}}}}, quantile={properties={95={type=long}}}, digest={norms=false, type=text}, count={properties={star={type=long}}}}}}}, galera_status={properties={connected={ignore_above=1024, type=keyword}, cluster={properties={size={type=long}, conf_id={type=long}, status={ignore_above=1024, type=keyword}}}, evs={properties={state={ignore_above=1024, type=keyword}, evict={ignore_above=1024, type=keyword}}}, apply={properties={oooe={type=double}, oool={type=double}, window={type=double}}}, flow_ctl={properties={paused_ns={type=long}, paused={type=double}, recv={type=long}, sent={type=long}}}, ready={ignore_above=1024, type=keyword}, last_committed={type=long}, commit={properties={oooe={type=double}, window={type=long}}}, cert={properties={index_size={type=long}, deps_distance={type=double}, interval={type=double}}}, repl={properties={bytes={type=long}, keys={type=long}, keys_bytes={type=long}, count={type=long}, other_bytes={type=long}, data_bytes={type=long}}}, received={properties={bytes={type=long}, count={type=long}}}, local={properties={replays={type=long}, recv={properties={queue_max={type=long}, queue_avg={type=double}, queue_min={type=long}, queue={type=long}}}, bf_aborts={type=long}, commits={type=long}, state={ignore_above=1024, type=keyword}, cert_failures={type=long}, send={properties={queue_max={type=long}, queue_avg={type=double}, queue_min={type=long}, queue={type=long}}}}}}}, status={properties={flush_commands={type=long}, handler={properties={rollback={type=long}, prepare={type=long}, read={properties={next={type=long}, last={type=long}, prev={type=long}, rnd={type=long}, rnd_next={type=long}, first={type=long}, key={type=long}}}, savepoint={type=long}, commit={type=long}, mrr_init={type=long}, update={type=long}, delete={type=long}, savepoint_rollback={type=long}, write={type=long}, external_lock={type=long}}}, cache={properties={ssl={properties={hits={type=long}, size={type=long}, misses={type=long}}}, table={properties={open_cache={properties={hits={type=long}, overflows={type=long}, misses={type=long}}}}}}}, aborted={properties={clients={type=long}, connects={type=long}}}, created={properties={tmp={properties={tables={type=long}, files={type=long}, disk_tables={type=long}}}}}, questions={type=long}, threads={properties={connected={type=long}, running={type=long}, created={type=long}, cached={type=long}}}, max_used_connections={type=long}, delayed={properties={insert_threads={type=long}, writes={type=long}, errors={type=long}}}, innodb={properties={rows={properties={inserted={type=long}, deleted={type=long}, reads={type=long}, updated={type=long}}}, buffer_pool={properties={pages={properties={dirty={type=long}, total={type=long}, data={type=long}, latched={type=long}, free={type=long}, flushed={type=long}, misc={type=long}}}, read={properties={ahead={type=long}, ahead_evicted={type=long}, ahead_rnd={type=long}, requests={type=long}}}, bytes={properties={dirty={type=long}, data={type=long}}}, dump_status={type=long}, pool={properties={resize_status={type=long}, reads={type=long}, wait_free={type=long}}}, write_requests={type=long}, load_status={type=long}}}}}, binlog={properties={cache={properties={disk_use={type=long}, use={type=long}}}}}, queries={type=long}, command={properties={select={type=long}, insert={type=long}, update={type=long}, delete={type=long}}}, opened_tables={type=long}, bytes={properties={received={type=long}, sent={type=long}}}, connection={properties={errors={properties={internal={type=long}, select={type=long}, max={type=long}, peer_address={type=long}, accept={type=long}, tcpwrap={type=long}}}}}, open={properties={tables={type=long}, streams={type=long}, files={type=long}}}, connections={type=long}}}}}, elf={properties={imports={type=flattened}, shared_libraries={ignore_above=1024, type=keyword}, byte_order={ignore_above=1024, type=keyword}, exports={type=flattened}, cpu_type={ignore_above=1024, type=keyword}, header={properties={object_version={ignore_above=1024, type=keyword}, data={ignore_above=1024, type=keyword}, entrypoint={type=long}, os_abi={ignore_above=1024, type=keyword}, abi_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, creation_date={type=date}, sections={type=nested, properties={chi2={type=long}, virtual_address={type=long}, entropy={type=long}, physical_offset={ignore_above=1024, type=keyword}, flags={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, physical_size={type=long}, type={ignore_above=1024, type=keyword}, virtual_size={type=long}}}, telfhash={ignore_above=1024, type=keyword}, segments={type=nested, properties={type={ignore_above=1024, type=keyword}, sections={ignore_above=1024, type=keyword}}}, architecture={ignore_above=1024, type=keyword}}}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, enterprisesearch={properties={cluster_uuid={ignore_above=1024, type=keyword}, stats={properties={connectors={properties={pool={properties={publish_worker_pool={properties={total_completed={type=long}, size={type=long}, idle={type=long}, busy={type=long}, queue_depth={type=long}, total_scheduled={type=long}}}, extract_worker_pool={properties={total_completed={type=long}, size={type=long}, idle={type=long}, busy={type=long}, queue_depth={type=long}, total_scheduled={type=long}}}, subextract_worker_pool={properties={total_completed={type=long}, size={type=long}, idle={type=long}, busy={type=long}, queue_depth={type=long}, total_scheduled={type=long}}}}}, job_store={properties={waiting={type=long}, job_types={properties={permissions={type=long}, incremental={type=long}, delete={type=long}, full={type=long}}}, working={type=long}}}}}, queues={properties={engine_destroyer={properties={count={type=long}}}, process_crawl={properties={count={type=long}}}, failed={properties={count={type=long}}}, mailer={properties={count={type=long}}}}}, http={properties={request_duration={properties={std_dev={properties={ms={type=long}}}, max={properties={ms={type=long}}}, mean={properties={ms={type=long}}}}}, responses={properties={1xx={type=long}, 2xx={type=long}, 3xx={type=long}, 4xx={type=long}, 5xx={type=long}}}, connections={properties={total={type=long}, current={type=long}, max={type=long}}}, network={properties={received={properties={bytes_per_sec={type=long}, bytes={type=long}}}, sent={properties={bytes_per_sec={type=long}, bytes={type=long}}}}}}}, product_usage={properties={app_search={properties={total_engines={type=long}}}, workplace_search={properties={total_org_sources={type=long}, total_private_sources={type=long}}}}}}}, health={properties={jvm={properties={memory_usage={properties={heap_used={properties={bytes={type=long}}}, heap_committed={properties={bytes={type=long}}}, non_heap_committed={properties={bytes={type=long}}}, non_heap_init={properties={bytes={type=long}}}, heap_init={properties={bytes={type=long}}}, heap_max={properties={bytes={type=long}}}, object_pending_finalization_count={type=long}}}, threads={properties={current={type=long}, total_started={type=long}, max={type=long}, daemon={type=long}}}, gc={properties={collection_count={type=long}, collection_time={properties={ms={type=long}}}}}, version={ignore_above=1024, type=keyword}}}, process={properties={pid={type=long}, filebeat={properties={restart_count={type=long}, pid={type=long}, time_since_last_restart={properties={sec={type=long}}}}}, uptime={properties={sec={type=long}}}}}, crawler={properties={workers={properties={pool_size={type=long}, available={type=long}, active={type=long}}}}}, name={ignore_above=1024, type=keyword}, version={properties={number={ignore_above=1024, type=keyword}, build_hash={ignore_above=1024, type=keyword}}}}}}}, package={properties={installed={type=date}, build_version={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, reference={ignore_above=1024, type=keyword}, license={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, install_scope={ignore_above=1024, type=keyword}, size={type=long}, checksum={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, oracle={properties={performance={properties={io_reloads={type=double}, cursors={properties={total={type=double}, avg={type=double}, cache_hit={properties={pct={type=double}}}, max={type=double}, session={properties={cache_hits={type=long}}}, opened={properties={current={type=long}, total={type=long}}}, parse={properties={total={type=long}, real={type=long}}}}}, cache={properties={physical_reads={type=long}, get={properties={db_blocks={type=long}, consistent={type=long}}}, buffer={properties={hit={properties={pct={type=double}}}}}}}, pin_requests={type=double}, machine={ignore_above=1024, type=keyword}, lock_requests={type=long}, buffer_pool={ignore_above=1024, type=keyword}, username={ignore_above=1024, type=keyword}}}, tablespace={properties={data_file={properties={size={properties={max={properties={bytes={type=long}}}, bytes={type=long}, free={properties={bytes={type=long}}}}}, online_status={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={type=long}, status={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, space={properties={total={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}, free={properties={bytes={type=long}}}}}}}}}, nginx={properties={stubstatus={properties={current={type=long}, hostname={ignore_above=1024, type=keyword}, waiting={type=long}, accepts={type=long}, writing={type=long}, handled={type=long}, dropped={type=long}, reading={type=long}, active={type=long}, requests={type=long}}}}}, airflow={properties={operator_name={ignore_above=1024, type=keyword}, job_name={ignore_above=1024, type=keyword}, task_id={ignore_above=1024, type=keyword}, *={properties={mean_rate={type=object}, 1m_rate={type=object}, 15m_rate={type=object}, max={type=object}, count={type=object}, p95={type=object}, p99_9={type=object}, p75={type=object}, p99={type=object}, min={type=object}, median={type=object}, mean={type=object}, stddev={type=object}, value={type=object}, 5m_rate={type=object}}}, dag_id={ignore_above=1024, type=keyword}, dag_file={ignore_above=1024, type=keyword}, pool_name={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}}}, x509={properties={not_after={type=date}, public_key_exponent={index=false, type=long, doc_values=false}, subject={properties={country={ignore_above=1024, type=keyword}, state_or_province={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}, not_before={type=date}, public_key_curve={ignore_above=1024, type=keyword}, public_key_algorithm={ignore_above=1024, type=keyword}, signature_algorithm={ignore_above=1024, type=keyword}, version_number={ignore_above=1024, type=keyword}, public_key_size={type=long}, serial_number={ignore_above=1024, type=keyword}, alternative_names={ignore_above=1024, type=keyword}, issuer={properties={country={ignore_above=1024, type=keyword}, state_or_province={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}}}, consul={properties={agent={properties={autopilot={properties={healthy={type=boolean}}}, runtime={properties={goroutines={type=long}, garbage_collector={properties={runs={type=long}, pause={properties={current={properties={ns={type=long}}}, total={properties={ns={type=long}}}}}}}, alloc={properties={bytes={type=long}}}, sys={properties={bytes={type=long}}}, malloc_count={type=long}, heap_objects={type=long}}}}}}}, http={properties={request={properties={referrer={ignore_above=1024, type=keyword}, headers={type=object}, method={ignore_above=1024, type=keyword}, mime_type={ignore_above=1024, type=keyword}, bytes={type=long}, id={ignore_above=1024, type=keyword}, body={properties={bytes={type=long}, content={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}}}, response={properties={headers={type=object}, status_code={type=long}, code={ignore_above=1024, type=keyword}, phrase={ignore_above=1024, type=keyword}, mime_type={ignore_above=1024, type=keyword}, bytes={type=long}, body={properties={bytes={type=long}, content={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}}}, version={ignore_above=1024, type=keyword}}}, fields={type=object}, couchdb={properties={server={properties={httpd_request_methods={properties={HEAD={type=long}, DELETE={type=long}, POST={type=long}, GET={type=long}, COPY={type=long}, PUT={type=long}}}, httpd={properties={temporary_view_reads={type=long}, view_reads={type=long}, clients_requesting_changes={type=long}, bulk_requests={type=long}, requests={type=long}}}, couchdb={properties={database_reads={type=long}, open_databases={type=long}, open_os_files={type=long}, database_writes={type=long}, request_time={type=long}, auth_cache_hits={type=long}, auth_cache_misses={type=long}}}, httpd_status_codes={properties={200={type=long}, 201={type=long}, 400={type=long}, 202={type=long}, 301={type=long}, 412={type=long}, 500={type=long}, 401={type=long}, 304={type=long}, 403={type=long}, 404={type=long}, 405={type=long}, 409={type=long}}}}}}}, coredns={properties={stats={properties={server={ignore_above=1024, type=keyword}, zone={ignore_above=1024, type=keyword}, proto={ignore_above=1024, type=keyword}, dns={properties={request={properties={duration={properties={ns={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, size={properties={bytes={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, count={type=long}, do={properties={count={type=long}}}, type={properties={count={type=long}}}}}, cache={properties={hits={properties={count={type=long}}}, misses={properties={count={type=long}}}}}, response={properties={size={properties={bytes={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, rcode={properties={count={type=long}}}}}}}, rcode={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, family={ignore_above=1024, type=keyword}, panic={properties={count={type=long}}}}}}}, golang={properties={expvar={properties={cmdline={ignore_above=1024, type=keyword}}}, heap={properties={system={properties={stack={type=long}, total={type=long}, obtained={type=long}, released={type=long}}}, cmdline={ignore_above=1024, type=keyword}, allocations={properties={total={type=long}, idle={type=long}, frees={type=long}, objects={type=long}, active={type=long}, mallocs={type=long}, allocated={type=long}}}, gc={properties={next_gc_limit={type=long}, total_count={type=long}, total_pause={properties={ns={type=long}}}, cpu_fraction={type=float}, pause={properties={avg={properties={ns={type=long}}}, max={properties={ns={type=long}}}, count={type=long}, sum={properties={ns={type=long}}}}}}}}}}}, traefik={properties={health={properties={response={properties={status_codes={properties={*={type=object}}}, count={type=long}, avg_time={properties={us={type=long}}}}}, uptime={properties={sec={type=long}}}}}}}, destination={properties={nat={properties={port={type=long}, ip={type=ip}}}, address={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, ip={type=ip}, packets={type=long}, mac={ignore_above=1024, type=keyword}, geo={properties={region_iso_code={ignore_above=1024, type=keyword}, continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}}}, registered_domain={ignore_above=1024, type=keyword}, port={type=long}, bytes={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, user={properties={full_name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}}}, rule={properties={reference={ignore_above=1024, type=keyword}, license={ignore_above=1024, type=keyword}, author={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, ruleset={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, category={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, uuid={ignore_above=1024, type=keyword}}}, interface={properties={name={ignore_above=1024, type=keyword}, alias={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, error={properties={code={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, stack_trace={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, type={ignore_above=1024, type=keyword}, message={norms=false, type=text}}}, istio={properties={galley={properties={source_kube_event_success_total={type=long}, name={ignore_above=1024, type=keyword}, namespace={ignore_above=1024, type=keyword}, runtime={properties={state_type_instances={type=long}, strategy={properties={on_change={type=long}, timer_quiesce_reached={type=long}}}, processor={properties={snapshot_lifetime={properties={duration={properties={ms={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, event_span={properties={duration={properties={ms={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, snapshot_events={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, collection={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, istio={properties={networking={properties={gateways={type=long}, sidecars={type=long}, envoyfilters={type=long}, virtualservices={type=long}, destinationrules={type=long}}}, mesh={properties={MeshConfig={type=long}}}, policy={properties={instances={type=long}, handlers={type=long}, rules={type=long}, attributemanifests={type=long}}}, authentication={properties={policies={type=long}, meshpolicies={type=long}}}}}, validation={properties={cert_key={properties={updates={type=long}}}, config={properties={load={type=long}, updates={type=long}}}}}}}, pilot={properties={no={properties={ip={type=long}}}, cluster={norms=false, type=text}, proxy={properties={conv={properties={ms={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, virt={properties={services={type=long}}}, xds={properties={internal={properties={errors={type=long}}}, eds={properties={instances={type=long}}}, count={type=long}, pushes={type=long}, push={properties={context={properties={errors={type=long}}}, time={properties={ms={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, services={type=long}, type={norms=false, type=text}, conflict={properties={listener={properties={inbound={type=long}, outbound={properties={tcp={properties={over={properties={current={properties={tcp={type=long}, http={type=long}}}}}}}, http={properties={over={properties={current={properties={tcp={type=long}}}, https={type=long}}}}}}}}}}}}}, mixer={properties={handler={properties={failures={properties={build={type=long}, close={type=long}}}, handlers={properties={new={type=long}, closed={type=long}, reused={type=long}}}, daemons={type=long}, name={ignore_above=1024, type=keyword}}}, dispatcher_destinations_per_variety_total={type=long}, variety={ignore_above=1024, type=keyword}, istio={properties={mcp={properties={request={properties={acks={type=long}}}}}}}, config={properties={template={properties={configs={type=long}, errors={properties={config={type=long}}}}}, unsatisfied={properties={action_handler={type=long}}}, handler={properties={configs={type=long}, errors={properties={validation={type=long}}}}}, adapter={properties={info={properties={configs={type=long}, errors={properties={config={type=long}}}}}}}, instance={properties={configs={type=long}, errors={properties={config={type=long}}}}}, rule={properties={configs={type=long}, errors={properties={match={type=long}, config={type=long}}}}}, attributes={type=long}}}}}, citadel={properties={secret_controller_svc_acc_created_cert={properties={count={type=long}}}, server_root_cert_expiry_seconds={type=float}, grpc={properties={server={properties={msg={properties={received={type=long}, sent={type=long}}}, handled={type=long}, started={type=long}, handling={properties={latency={properties={ms={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}}}, method={ignore_above=1024, type=keyword}, service={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}}}, mesh={properties={request={properties={duration={properties={ms={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}, protocol={ignore_above=1024, type=keyword}, size={properties={bytes={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, instance={norms=false, type=text}, response={properties={code={type=long}, size={properties={bytes={properties={bucket={properties={*={type=object}}}, count={type=long}, sum={type=long}}}}}}}, destination={properties={principal={ignore_above=1024, type=keyword}, app={ignore_above=1024, type=keyword}, service={properties={name={ignore_above=1024, type=keyword}, namespace={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}}}, workload={properties={name={ignore_above=1024, type=keyword}, namespace={ignore_above=1024, type=keyword}}}, version={ignore_above=1024, type=keyword}}}, connection={properties={security={properties={policy={ignore_above=1024, type=keyword}}}}}, reporter={ignore_above=1024, type=keyword}, requests={type=long}, source={properties={principal={ignore_above=1024, type=keyword}, app={ignore_above=1024, type=keyword}, workload={properties={namespace={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}}}, version={ignore_above=1024, type=keyword}}}, job={ignore_above=1024, type=keyword}}}}}, network={properties={transport={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, inner={type=object, properties={vlan={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, packets={type=long}, protocol={ignore_above=1024, type=keyword}, community_id={ignore_above=1024, type=keyword}, forwarded_ip={type=ip}, application={ignore_above=1024, type=keyword}, vlan={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, bytes={type=long}, name={ignore_above=1024, type=keyword}, iana_number={ignore_above=1024, type=keyword}, direction={ignore_above=1024, type=keyword}}}, sql={properties={driver={ignore_above=1024, type=keyword}, query={ignore_above=1024, type=keyword}, metrics={properties={boolean={properties={*={type=object}}}, string={properties={*={type=object}}}, numeric={properties={*={type=object}}}}}}}, docker={properties={container={properties={size={properties={rw={type=long}, root_fs={type=long}}}, created={type=date}, ip_addresses={type=ip}, command={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}, tags={ignore_above=1024, type=keyword}, labels={type=object}}}, diskio={properties={summary={properties={service_time={type=long}, ops={type=long}, wait_time={type=long}, rate={type=long}, bytes={type=long}, queued={type=long}}}, total={scaling_factor=1000, type=scaled_float}, read={properties={service_time={type=long}, ops={type=long}, wait_time={type=long}, rate={type=long}, bytes={type=long}, queued={type=long}}}, reads={scaling_factor=1000, type=scaled_float}, writes={scaling_factor=1000, type=scaled_float}, write={properties={service_time={type=long}, ops={type=long}, wait_time={type=long}, rate={type=long}, bytes={type=long}, queued={type=long}}}}}, healthcheck={properties={failingstreak={type=long}, event={properties={end_date={type=date}, output={ignore_above=1024, type=keyword}, exit_code={type=long}, start_date={type=date}}}, status={ignore_above=1024, type=keyword}}}, image={properties={size={properties={virtual={type=long}, regular={type=long}}}, created={type=date}, id={properties={parent={ignore_above=1024, type=keyword}, current={ignore_above=1024, type=keyword}}}, labels={type=object}, tags={ignore_above=1024, type=keyword}}}, memory={properties={fail={properties={count={scaling_factor=1000, type=scaled_float}}}, rss={properties={pct={scaling_factor=1000, type=scaled_float}, total={type=long}}}, stats={properties={*={type=object}}}, usage={properties={pct={scaling_factor=1000, type=scaled_float}, total={type=long}, max={type=long}}}, limit={type=long}, commit={properties={total={type=long}, peak={type=long}}}, private_working_set={properties={total={type=long}}}}}, cpu={properties={core={properties={*={properties={pct={type=object}, ticks={type=object}, norm={properties={pct={type=object}}}}}}}, total={properties={pct={scaling_factor=1000, type=scaled_float}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, system={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, kernel={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}, user={properties={pct={scaling_factor=1000, type=scaled_float}, ticks={type=long}, norm={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}, event={properties={actor={properties={attributes={type=object}, id={ignore_above=1024, type=keyword}}}, action={ignore_above=1024, type=keyword}, from={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}}}, network_summary={properties={tcp={properties={*={type=object}}}, udp={properties={*={type=object}}}, ip={properties={*={type=object}}}, udp_lite={properties={*={type=object}}}, namespace={properties={pid={type=long}, id={type=long}}}, icmp={properties={*={type=object}}}}}, info={properties={images={type=long}, containers={properties={running={type=long}, paused={type=long}, stopped={type=long}, total={type=long}}}, id={ignore_above=1024, type=keyword}}}, network={properties={in={properties={bytes={type=long}, dropped={scaling_factor=1000, type=scaled_float}, errors={type=long}, packets={type=long}}}, inbound={properties={bytes={type=long}, dropped={type=long}, errors={type=long}, packets={type=long}}}, outbound={properties={bytes={type=long}, dropped={type=long}, packets={type=long}, errors={type=long}}}, interface={ignore_above=1024, type=keyword}, out={properties={bytes={type=long}, dropped={scaling_factor=1000, type=scaled_float}, errors={type=long}, packets={type=long}}}}}}}, trace={properties={id={ignore_above=1024, type=keyword}}}, related={properties={hosts={ignore_above=1024, type=keyword}, ip={type=ip}, user={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}}}, postgresql={properties={database={properties={temporary={properties={bytes={type=long}, files={type=long}}}, blocks={properties={hit={type=long}, read={type=long}, time={properties={read={properties={ms={type=long}}}, write={properties={ms={type=long}}}}}}}, stats_reset={type=date}, number_of_backends={type=long}, name={ignore_above=1024, type=keyword}, conflicts={type=long}, oid={type=long}, rows={properties={inserted={type=long}, deleted={type=long}, returned={type=long}, updated={type=long}, fetched={type=long}}}, transactions={properties={rollback={type=long}, commit={type=long}}}, deadlocks={type=long}}}, activity={properties={backend_type={ignore_above=1024, type=keyword}, waiting={type=boolean}, backend_start={type=date}, wait_event_type={ignore_above=1024, type=keyword}, query={ignore_above=1024, type=keyword}, transaction_start={type=date}, query_start={type=date}, pid={type=long}, database={properties={name={ignore_above=1024, type=keyword}, oid={type=long}}}, wait_event={ignore_above=1024, type=keyword}, application_name={ignore_above=1024, type=keyword}, client={properties={hostname={ignore_above=1024, type=keyword}, address={ignore_above=1024, type=keyword}, port={type=long}}}, state={ignore_above=1024, type=keyword}, state_change={type=date}, user={properties={name={ignore_above=1024, type=keyword}, id={type=long}}}}}, bgwriter={properties={buffers={properties={checkpoints={type=long}, backend={type=long}, clean={type=long}, clean_full={type=long}, backend_fsync={type=long}, allocated={type=long}}}, stats_reset={type=date}, checkpoints={properties={requested={type=long}, times={properties={write={properties={ms={type=float}}}, sync={properties={ms={type=float}}}}}, scheduled={type=long}}}}}, statement={properties={database={properties={oid={type=long}}}, query={properties={memory={properties={shared={properties={hit={type=long}, read={type=long}, dirtied={type=long}, written={type=long}}}, temp={properties={read={type=long}, written={type=long}}}, local={properties={hit={type=long}, read={type=long}, dirtied={type=long}, written={type=long}}}}}, calls={type=long}, id={type=long}, text={ignore_above=1024, type=keyword}, time={properties={total={properties={ms={type=float}}}, min={properties={ms={type=float}}}, max={properties={ms={type=float}}}, mean={properties={ms={type=long}}}, stddev={properties={ms={type=long}}}}}, rows={type=long}}}, user={properties={id={type=long}}}}}}}, linux={properties={memory={properties={hugepages={properties={default_size={type=long}, total={type=long}, surplus={type=long}, reserved={type=long}, used={properties={pct={type=long}, bytes={type=long}}}, free={type=long}}}, page_stats={properties={pgscan_kswapd={properties={pages={type=long}}}, pgscan_direct={properties={pages={type=long}}}, pgsteal_direct={properties={pages={type=long}}}, direct_efficiency={properties={pct={scaling_factor=1000, type=scaled_float}}}, pgfree={properties={pages={type=long}}}, pgsteal_kswapd={properties={pages={type=long}}}, kswapd_efficiency={properties={pct={scaling_factor=1000, type=scaled_float}}}}}}}, ksm={properties={stats={properties={stable_node_chains={type=long}, stable_node_dups={type=long}, pages_shared={type=long}, pages_unshared={type=long}, pages_sharing={type=long}, full_scans={type=long}}}}}, iostat={properties={request={properties={avg_size={type=float}}}, service_time={type=float}, read={properties={request={properties={merges_per_sec={type=float}, per_sec={type=float}}}, await={type=float}, per_sec={properties={bytes={type=float}}}}}, busy={type=float}, await={type=float}, write={properties={request={properties={merges_per_sec={type=float}, per_sec={type=float}}}, await={type=float}, per_sec={properties={bytes={type=float}}}}}, queue={properties={avg_size={type=float}}}}}, pressure={properties={memory={properties={some={properties={total={properties={time={properties={us={type=long}}}}}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}, full={properties={total={properties={time={properties={us={type=long}}}}}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}}}, io={properties={some={properties={total={properties={time={properties={us={type=long}}}}}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}, full={properties={total={properties={time={properties={us={type=long}}}}}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}}}, cpu={properties={some={properties={total={properties={time={properties={us={type=long}}}}}, 300={properties={pct={type=float}}}, 60={properties={pct={type=float}}}, 10={properties={pct={type=float}}}}}}}}}, conntrack={properties={summary={properties={search_restart={type=long}, drop={type=long}, entries={type=long}, found={type=long}, insert_failed={type=long}, invalid={type=long}, early_drop={type=long}, ignore={type=long}}}}}, pageinfo={properties={nodes={properties={*={type=object}}}, buddy_info={properties={DMA={properties={0={type=long}, 1={type=long}, 2={type=long}, 3={type=long}, 4={type=long}, 5={type=long}, 6={type=long}, 7={type=long}, 8={type=long}, 9={type=long}, 10={type=long}}}}}}}}}, client={properties={nat={properties={port={type=long}, ip={type=ip}}}, address={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, ip={type=ip}, mac={ignore_above=1024, type=keyword}, packets={type=long}, geo={properties={region_iso_code={ignore_above=1024, type=keyword}, continent_name={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}}}}}, registered_domain={ignore_above=1024, type=keyword}, port={type=long}, bytes={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, user={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}}}, prometheus={properties={query={properties={*={type=object}}}, *={properties={histogram={type=object}, rate={type=object}, counter={type=object}, value={type=object}}}, metrics={properties={*={type=object}}}, labels={properties={*={type=object}}}}}, mongodb={properties={collstats={properties={total={properties={count={type=long}, time={properties={us={type=long}}}}}, name={ignore_above=1024, type=keyword}, insert={properties={count={type=long}, time={properties={us={type=long}}}}}, update={properties={count={type=long}, time={properties={us={type=long}}}}}, lock={properties={read={properties={count={type=long}, time={properties={us={type=long}}}}}, write={properties={count={type=long}, time={properties={us={type=long}}}}}}}, getmore={properties={count={type=long}, time={properties={us={type=long}}}}}, collection={ignore_above=1024, type=keyword}, queries={properties={count={type=long}, time={properties={us={type=long}}}}}, remove={properties={count={type=long}, time={properties={us={type=long}}}}}, commands={properties={count={type=long}, time={properties={us={type=long}}}}}, db={ignore_above=1024, type=keyword}}}, dbstats={properties={data_size={properties={bytes={type=long}}}, data_file_version={properties={minor={type=long}, major={type=long}}}, num_extents={type=long}, ns_size_mb={properties={mb={type=long}}}, index_size={properties={bytes={type=long}}}, objects={type=long}, extent_free_list={properties={size={properties={bytes={type=long}}}, num={type=long}}}, file_size={properties={bytes={type=long}}}, indexes={type=long}, avg_obj_size={properties={bytes={type=long}}}, collections={type=long}, storage_size={properties={bytes={type=long}}}, db={ignore_above=1024, type=keyword}}}, replstatus={properties={oplog={properties={size={properties={used={type=long}, allocated={type=long}}}, last={properties={timestamp={type=long}}}, window={type=long}, first={properties={timestamp={type=long}}}}}, optimes={properties={durable={type=long}, applied={type=long}, last_committed={type=long}}}, lag={properties={min={type=long}, max={type=long}}}, set_name={ignore_above=1024, type=keyword}, members={properties={secondary={properties={optimes={ignore_above=1024, type=keyword}, hosts={ignore_above=1024, type=keyword}, count={type=long}}}, rollback={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}, recovering={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}, arbiter={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}, unhealthy={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}, startup2={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}, down={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}, primary={properties={optime={ignore_above=1024, type=keyword}, host={ignore_above=1024, type=keyword}}}, unknown={properties={hosts={ignore_above=1024, type=keyword}, count={type=long}}}}}, headroom={properties={min={type=long}, max={type=long}}}, server_date={type=date}}}, metrics={properties={replication={properties={initial_sync={properties={failures={type=long}, failed_attempts={type=long}, completed={type=long}}}, apply={properties={batches={properties={count={type=long}, time={properties={ms={type=long}}}}}, ops={type=long}, attempts_to_become_secondary={type=long}}}, executor={properties={shutting_down={type=boolean}, counters={properties={cancels={type=long}, waits={type=long}, scheduled={properties={failures={type=long}, work={type=long}, netcmd={type=long}, exclusive={type=long}, work_at={type=long}, dbwork={type=long}}}, event_wait={type=long}, event_created={type=long}}}, event_waiters={type=long}, queues={properties={in_progress={properties={exclusive={type=long}, dbwork={type=long}, network={type=long}}}, ready={type=long}, sleepers={type=long}, free={type=long}}}, unsignaled_events={type=long}, network_interface={ignore_above=1024, type=keyword}}}, buffer={properties={size={properties={bytes={type=long}}}, count={type=long}, max_size={properties={bytes={type=long}}}}}, preload={properties={docs={properties={count={type=long}, time={properties={ms={type=long}}}}}, indexes={properties={count={type=long}, time={properties={ms={type=long}}}}}}}, network={properties={ops={type=long}, bytes={type=long}, reders_created={type=long}, getmores={properties={count={type=long}, time={properties={ms={type=long}}}}}}}}}, cursor={properties={timed_out={type=long}, open={properties={pinned={type=long}, total={type=long}, no_timeout={type=long}}}}}, get_last_error={properties={write_wait={properties={ms={type=long}, count={type=long}}}, write_timeouts={type=long}}}, document={properties={deleted={type=long}, inserted={type=long}, returned={type=long}, updated={type=long}}}, storage={properties={free_list={properties={search={properties={bucket_exhausted={type=long}, scanned={type=long}, requests={type=long}}}}}}}, ttl={properties={deleted_documents={properties={count={type=long}}}, passes={properties={count={type=long}}}}}, operation={properties={write_conflicts={type=long}, scan_and_order={type=long}}}, query_executor={properties={scanned_documents={properties={count={type=long}}}, scanned_indexes={properties={count={type=long}}}}}, commands={properties={last_commands={properties={total={type=long}, failed={type=long}}}, ping={properties={total={type=long}, failed={type=long}}}, replset_get_status={properties={total={type=long}, failed={type=long}}}, server_status={properties={total={type=long}, failed={type=long}}}, update={properties={total={type=long}, failed={type=long}}}, insert={properties={total={type=long}, failed={type=long}}}, distinct={properties={total={type=long}, failed={type=long}}}, aggregate={properties={total={type=long}, failed={type=long}}}, get_more={properties={total={type=long}, failed={type=long}}}, get_log={properties={total={type=long}, failed={type=long}}}, coll_stats={properties={total={type=long}, failed={type=long}}}, find={properties={total={type=long}, failed={type=long}}}, replset_get_rbid={properties={total={type=long}, failed={type=long}}}, is_self={properties={total={type=long}, failed={type=long}}}, replset_heartbeat={properties={total={type=long}, failed={type=long}}}, list_databased={properties={total={type=long}, failed={type=long}}}, host_info={properties={total={type=long}, failed={type=long}}}, db_stats={properties={total={type=long}, failed={type=long}}}, is_master={properties={total={type=long}, failed={type=long}}}, get_last_error={properties={total={type=long}, failed={type=long}}}, profile={properties={total={type=long}, failed={type=long}}}, count={properties={total={type=long}, failed={type=long}}}, get_cmd_line_opts={properties={total={type=long}, failed={type=long}}}, get_parameter={properties={total={type=long}, failed={type=long}}}, replset_update_position={properties={total={type=long}, failed={type=long}}}, build_info={properties={total={type=long}, failed={type=long}}}, last_collections={properties={total={type=long}, failed={type=long}}}, connection_pool_stats={properties={total={type=long}, failed={type=long}}}, whatsmyuri={properties={total={type=long}, failed={type=long}}}, list_indexes={properties={total={type=long}, failed={type=long}}}}}}}, status={properties={wired_tiger={properties={cache={properties={dirty={properties={bytes={type=long}}}, pages={properties={read={type=long}, write={type=long}, evicted={type=long}}}, maximum={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, log={properties={max_file_size={properties={bytes={type=long}}}, size={properties={bytes={type=long}}}, scans={type=long}, syncs={type=long}, writes={type=long}, write={properties={bytes={type=long}}}, flushes={type=long}}}, concurrent_transactions={properties={read={properties={total_tickets={type=long}, available={type=long}, out={type=long}}}, write={properties={total_tickets={type=long}, available={type=long}, out={type=long}}}}}}}, process={path=process.name, type=alias}, memory={properties={virtual={properties={mb={type=long}}}, bits={type=long}, mapped={properties={mb={type=long}}}, mapped_with_journal={properties={mb={type=long}}}, resident={properties={mb={type=long}}}}}, journaling={properties={commits_in_write_lock={type=long}, early_commits={type=long}, times={properties={commits_in_write_lock={properties={ms={type=long}}}, dt={properties={ms={type=long}}}, write_to_journal={properties={ms={type=long}}}, commits={properties={ms={type=long}}}, write_to_data_files={properties={ms={type=long}}}, prep_log_buffer={properties={ms={type=long}}}, remap_private_view={properties={ms={type=long}}}}}, journaled={properties={mb={type=long}}}, commits={type=long}, write_to_data_files={properties={mb={type=long}}}, compression={type=long}}}, write_backs_queued={type=boolean}, version={path=service.version, type=alias}, locks={properties={database={properties={wait={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}, us={properties={r={type=long}, R={type=long}, W={type=long}, w={type=long}}}}}, deadlock={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, acquire={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}}}, oplog={properties={wait={properties={count={properties={R={type=long}, r={type=long}, W={type=long}, w={type=long}}}, us={properties={R={type=long}, r={type=long}, w={type=long}, W={type=long}}}}}, deadlock={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, acquire={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}}}, meta_data={properties={wait={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}, us={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, deadlock={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, acquire={properties={count={properties={R={type=long}, r={type=long}, w={type=long}, W={type=long}}}}}}}, global={properties={wait={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}, us={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, deadlock={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, acquire={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}}}, collection={properties={wait={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}, us={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, deadlock={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}, acquire={properties={count={properties={r={type=long}, R={type=long}, w={type=long}, W={type=long}}}}}}}}}, network={properties={in={properties={bytes={type=long}}}, requests={type=long}, out={properties={bytes={type=long}}}}}, uptime={properties={ms={type=long}}}, asserts={properties={msg={type=long}, rollovers={type=long}, warning={type=long}, user={type=long}, regular={type=long}}}, global_lock={properties={active_clients={properties={total={type=long}, readers={type=long}, writers={type=long}}}, current_queue={properties={total={type=long}, readers={type=long}, writers={type=long}}}, total_time={properties={us={type=long}}}}}, ops={properties={counters={properties={query={type=long}, insert={type=long}, update={type=long}, getmore={type=long}, delete={type=long}, command={type=long}}}, latencies={properties={reads={properties={latency={type=long}, count={type=long}}}, writes={properties={latency={type=long}, count={type=long}}}, commands={properties={latency={type=long}, count={type=long}}}}}, replicated={properties={query={type=long}, update={type=long}, insert={type=long}, getmore={type=long}, delete={type=long}, command={type=long}}}}}, extra_info={properties={heap_usage={properties={bytes={type=long}}}, page_faults={type=long}}}, local_time={type=date}, background_flushing={properties={average={properties={ms={type=long}}}, total={properties={ms={type=long}}}, last={properties={ms={type=long}}}, last_finished={type=date}, flushes={type=long}}}, storage_engine={properties={name={ignore_above=1024, type=keyword}}}, connections={properties={current={type=long}, available={type=long}, total_created={type=long}}}}}}}, user_agent={properties={original={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, os={properties={kernel={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, type={ignore_above=1024, type=keyword}, family={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, platform={ignore_above=1024, type=keyword}, full={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}, name={ignore_above=1024, type=keyword}, device={properties={name={ignore_above=1024, type=keyword}}}, version={ignore_above=1024, type=keyword}}}, jolokia={properties={server={properties={product={ignore_above=1024, type=keyword}, vendor={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}}}, agent={properties={id={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}}}, secured={type=boolean}, url={ignore_above=1024, type=keyword}}}, syncgateway={properties={replication={properties={metrics={properties={attachment={properties={transferred={properties={bytes={type=long}, count={type=long}}}}}, docs={properties={checked_sent={type=double}, pushed={properties={count={type=long}, failed={type=long}}}}}}}, id={ignore_above=1024, type=keyword}}}, syncgateway={properties={security={properties={auth={properties={failed={properties={count={type=double}}}}}, docs_rejected={properties={count={type=double}}}, access_errors={properties={count={type=double}}}}}, cache={properties={revs={properties={hits={type=double}, misses={type=double}}}, channel={properties={hits={type=double}, revs={properties={tombstone={type=double}, removal={type=double}, active={type=double}}}, misses={type=double}}}}}, name={ignore_above=1024, type=keyword}, memstats={properties={Mallocs={type=double}, MCacheSys={type=double}, StackInuse={type=double}, NumGC={type=double}, EnableGC={type=long}, HeapSys={type=double}, NumForcedGC={type=double}, Lookups={type=double}, NextGC={type=double}, DebugGC={type=long}, MCacheInuse={type=double}, Alloc={type=double}, GCSys={type=double}, HeapReleased={type=double}, MSpanSys={type=double}, HeapObjects={type=double}, BuckHashSys={type=double}, PauseTotalNs={type=double}, Frees={type=double}, GCCPUFraction={type=double}, Sys={type=double}, TotalAlloc={type=double}, LastGC={type=double}, OtherSys={type=double}, StackSys={type=double}, HeapIdle={type=double}, HeapAlloc={type=double}, HeapInuse={type=double}, MSpanInuse={type=double}}}, metrics={properties={replications={properties={total={type=long}, active={type=long}}}, docs={properties={writes={properties={bytes={type=long}, count={type=long}, conflict={properties={count={type=long}}}}}}}}}, gsi={properties={views={properties={role_access={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, all_docs={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, sessions={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, resync={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, access={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, tombstones={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, channels={properties={star={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, principals={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}, sequences={properties={query={properties={count={type=double}, time={type=double}, error={properties={count={type=double}}}}}}}}}}}, cbl={properties={replication={properties={pull={properties={request_changes={properties={count={type=double}, time={type=double}}}, rev={properties={processing_time={type=double}, send={properties={latency={type=double}, count={type=double}}}}}, total={properties={continuous={type=double}, one_shot={type=double}}}, attachment={properties={bytes={type=long}, count={type=long}}}, active={properties={continuous={type=double}, count={type=double}, one_shot={type=double}}}, caught_up={type=double}, since_zero={type=double}}}, push={properties={attachment={properties={bytes={type=double}, count={type=double}}}, propose_change={properties={count={type=double}, time={type=double}}}, doc_push_count={type=double}, sync_function={properties={count={type=double}, time={type=double}}}, write_processing_time={type=double}}}}}}}}}, memory={properties={StackInuse={type=double}, Mallocs={type=double}, MCacheSys={type=double}, NumGC={type=double}, EnableGC={type=long}, HeapSys={type=double}, NumForcedGC={type=double}, Lookups={type=double}, NextGC={type=double}, MCacheInuse={type=double}, Alloc={type=double}, DebugGC={type=long}, GCSys={type=double}, HeapReleased={type=double}, MSpanSys={type=double}, HeapObjects={type=double}, BuckHashSys={type=double}, PauseTotalNs={type=double}, Frees={type=double}, GCCPUFraction={type=double}, Sys={type=double}, TotalAlloc={type=double}, LastGC={type=double}, OtherSys={type=double}, StackSys={type=double}, HeapIdle={type=double}, HeapAlloc={type=double}, HeapInuse={type=double}, MSpanInuse={type=double}}}, resources={properties={go_memstats={properties={stack={properties={inuse={type=long}, sys={type=long}}}, heap={properties={idle={type=long}, inuse={type=long}, alloc={type=long}, released={type=long}}}, sys={type=long}, pause={properties={ns={type=long}}}}}, process={properties={memory_resident={type=long}, cpu_percent_utilization={type=long}}}, admin_net_bytes={properties={recv={type=long}, sent={type=long}}}, system_memory_total={type=long}, pub_net={properties={recv={properties={bytes={type=long}}}, sent={properties={bytes={type=long}}}}}, goroutines_high_watermark={type=long}, error_count={type=long}, num_goroutines={type=long}, warn_count={type=long}}}}}, registry={properties={hive={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, data={properties={strings={ignore_above=1024, type=keyword}, bytes={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, value={ignore_above=1024, type=keyword}, key={ignore_above=1024, type=keyword}}}, process={properties={parent={properties={pgid={type=long}, start={type=date}, pid={type=long}, working_directory={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, thread={properties={name={ignore_above=1024, type=keyword}, id={type=long}}}, title={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, entity_id={ignore_above=1024, type=keyword}, executable={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, ppid={type=long}, uptime={type=long}, args={ignore_above=1024, type=keyword}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, timestamp={type=date}, status={ignore_above=1024, type=keyword}}}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, exit_code={type=long}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, end={type=date}, args_count={type=long}, elf={properties={imports={type=flattened}, shared_libraries={ignore_above=1024, type=keyword}, byte_order={ignore_above=1024, type=keyword}, exports={type=flattened}, cpu_type={ignore_above=1024, type=keyword}, header={properties={object_version={ignore_above=1024, type=keyword}, data={ignore_above=1024, type=keyword}, os_abi={ignore_above=1024, type=keyword}, entrypoint={type=long}, abi_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, creation_date={type=date}, sections={type=nested, properties={chi2={type=long}, virtual_address={type=long}, entropy={type=long}, physical_offset={ignore_above=1024, type=keyword}, flags={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, physical_size={type=long}, type={ignore_above=1024, type=keyword}, virtual_size={type=long}}}, telfhash={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}, segments={type=nested, properties={type={ignore_above=1024, type=keyword}, sections={ignore_above=1024, type=keyword}}}}}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}, command_line={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}, memory={properties={pct={scaling_factor=1000, type=scaled_float}}}, pgid={type=long}, start={type=date}, cpu={properties={pct={scaling_factor=1000, type=scaled_float}, start_time={type=date}}}, pid={type=long}, working_directory={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, thread={properties={name={ignore_above=1024, type=keyword}, id={type=long}}}, entity_id={ignore_above=1024, type=keyword}, title={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, executable={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, ppid={type=long}, uptime={type=long}, args={ignore_above=1024, type=keyword}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}, timestamp={type=date}}}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, exit_code={type=long}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, end={type=date}, args_count={type=long}, state={ignore_above=1024, type=keyword}, elf={properties={imports={type=flattened}, shared_libraries={ignore_above=1024, type=keyword}, byte_order={ignore_above=1024, type=keyword}, exports={type=flattened}, cpu_type={ignore_above=1024, type=keyword}, header={properties={object_version={ignore_above=1024, type=keyword}, data={ignore_above=1024, type=keyword}, entrypoint={type=long}, os_abi={ignore_above=1024, type=keyword}, abi_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, creation_date={type=date}, telfhash={ignore_above=1024, type=keyword}, sections={type=nested, properties={chi2={type=long}, virtual_address={type=long}, entropy={type=long}, physical_offset={ignore_above=1024, type=keyword}, flags={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, physical_size={type=long}, type={ignore_above=1024, type=keyword}, virtual_size={type=long}}}, architecture={ignore_above=1024, type=keyword}, segments={type=nested, properties={type={ignore_above=1024, type=keyword}, sections={ignore_above=1024, type=keyword}}}}}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}, command_line={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}, os={properties={kernel={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, family={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, platform={ignore_above=1024, type=keyword}, full={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}, dll={properties={path={ignore_above=1024, type=keyword}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}, timestamp={type=date}}}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, name={ignore_above=1024, type=keyword}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}}}, windows={properties={service={properties={start_name={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, exit_code={ignore_above=1024, type=keyword}, pid={type=long}, state={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, display_name={ignore_above=1024, type=keyword}, start_type={ignore_above=1024, type=keyword}, path_name={ignore_above=1024, type=keyword}, uptime={properties={ms={type=long}}}}}, perfmon={properties={instance={ignore_above=1024, type=keyword}, metrics={properties={*={properties={*={type=object}}}}}}}}}, message={norms=false, type=text}, envoyproxy={properties={server={properties={server={properties={debug_assertion_failures={type=long}, days_until_first_cert_expiring={type=long}, dynamic_unknown_fields={type=long}, stats_recent_lookups={type=long}, watchdog_miss={type=long}, version={type=long}, concurrency={type=long}, uptime={type=long}, memory_allocated={type=long}, total_connections={type=long}, hot_restart_epoch={type=long}, watchdog_mega_miss={type=long}, memory_heap_size={type=long}, parent_connections={type=long}, state={type=long}, static_unknown_fields={type=long}, live={type=long}}}, stats={properties={overflow={type=long}}}, runtime={properties={override_dir_not_exists={type=long}, override_dir_exists={type=long}, load_error={type=long}, load_success={type=long}, admin_overrides_active={type=long}, deprecated_feature_use={type=long}, num_keys={type=long}, num_layers={type=long}}}, http2={properties={tx_reset={type=long}, rx_reset={type=long}, header_overflow={type=long}, headers_cb_no_stream={type=long}, rx_messaging_error={type=long}, too_many_header_frames={type=long}, trailers={type=long}}}, listener_manager={properties={total_listeners_active={type=long}, total_listeners_warming={type=long}, listener_stopped={type=long}, listener_added={type=long}, listener_modified={type=long}, listener_create_success={type=long}, listener_create_failure={type=long}, total_listeners_draining={type=long}, listener_removed={type=long}}}, filesystem={properties={write_completed={type=long}, flushed_by_timer={type=long}, write_total_buffered={type=long}, write_failed={type=long}, write_buffered={type=long}, reopen_failed={type=long}}}, cluster_manager={properties={warming_clusters={type=long}, cluster_updated={type=long}, cluster_updated_via_merge={type=long}, active_clusters={type=long}, update_merge_cancelled={type=long}, update_out_of_merge_window={type=long}, cluster_added={type=long}, cluster_removed={type=long}, cluster_modified={type=long}}}}}}}, ceph={properties={cluster_status={properties={osd={properties={num_up_osds={type=long}, nearfull={type=boolean}, num_osds={type=long}, epoch={type=long}, num_remapped_pgs={type=long}, num_in_osds={type=long}, full={type=boolean}}}, pg_state={properties={state_name={type=long}, count={type=long}, version={type=long}}}, pg={properties={used_bytes={type=long}, total_bytes={type=long}, data_bytes={type=long}, avail_bytes={type=long}}}, misplace={properties={total={type=long}, objects={type=long}, ratio={scaling_factor=1000, type=scaled_float}}}, degraded={properties={total={type=long}, objects={type=long}, ratio={scaling_factor=1000, type=scaled_float}}}, version={type=long}, traffic={properties={write_bytes={type=long}, read_op_per_sec={type=long}, write_op_per_sec={type=long}, read_bytes={type=long}}}}}, osd_tree={properties={primary_affinity={type=float}, type_id={type=long}, father={ignore_above=1024, type=keyword}, reweight={type=long}, crush_weight={type=float}, type={ignore_above=1024, type=keyword}, depth={type=long}, children={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, exists={type=boolean}, device_class={ignore_above=1024, type=keyword}, id={type=long}, status={ignore_above=1024, type=keyword}}}, mgr_osd_pool_stats={properties={pool_id={type=long}, pool_name={ignore_above=1024, type=keyword}, client_io_rate={type=object}}}, pool_disk={properties={stats={properties={objects={type=long}, available={properties={bytes={type=long}}}, used={properties={bytes={type=long}, kb={type=long}}}}}, name={ignore_above=1024, type=keyword}, id={type=long}}}, cluster_health={properties={overall_status={ignore_above=1024, type=keyword}, timechecks={properties={round={properties={value={type=long}, status={ignore_above=1024, type=keyword}}}, epoch={type=long}}}}}, mgr_osd_perf={properties={stats={properties={commit_latency_ns={type=long}, commit_latency_ms={type=long}, apply_latency_ns={type=long}, apply_latency_ms={type=long}}}, id={type=long}}}, osd_df={properties={total={properties={byte={type=long}}}, name={ignore_above=1024, type=keyword}, available={properties={bytes={type=long}}}, pg_num={type=long}, device_class={ignore_above=1024, type=keyword}, id={type=long}, used={properties={pct={scaling_factor=1000, type=scaled_float}, byte={type=long}}}}}, cluster_disk={properties={total={properties={bytes={type=long}}}, available={properties={bytes={type=long}}}, used={properties={bytes={type=long}}}}}, monitor_health={properties={last_updated={type=date}, total={properties={kb={type=long}}}, store_stats={properties={total={properties={bytes={type=long}}}, last_updated={type=long}, log={properties={bytes={type=long}}}, sst={properties={bytes={type=long}}}, misc={properties={bytes={type=long}}}}}, name={ignore_above=1024, type=keyword}, available={properties={pct={type=long}, kb={type=long}}}, health={ignore_above=1024, type=keyword}, used={properties={kb={type=long}}}}}}}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, service={properties={node={properties={name={ignore_above=1024, type=keyword}}}, environment={ignore_above=1024, type=keyword}, hostname={ignore_above=1024, type=keyword}, address={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, state={ignore_above=1024, type=keyword}, ephemeral_id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}}}, tls={properties={established={type=boolean}, cipher={ignore_above=1024, type=keyword}, server={properties={not_after={type=date}, x509={properties={not_after={type=date}, public_key_exponent={index=false, type=long, doc_values=false}, subject={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}, not_before={type=date}, public_key_algorithm={ignore_above=1024, type=keyword}, public_key_curve={ignore_above=1024, type=keyword}, signature_algorithm={ignore_above=1024, type=keyword}, version_number={ignore_above=1024, type=keyword}, public_key_size={type=long}, serial_number={ignore_above=1024, type=keyword}, alternative_names={ignore_above=1024, type=keyword}, issuer={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}}}, subject={ignore_above=1024, type=keyword}, ja3s={ignore_above=1024, type=keyword}, not_before={type=date}, certificate={ignore_above=1024, type=keyword}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}, issuer={ignore_above=1024, type=keyword}, certificate_chain={ignore_above=1024, type=keyword}}}, curve={ignore_above=1024, type=keyword}, client={properties={not_after={type=date}, x509={properties={not_after={type=date}, public_key_exponent={index=false, type=long, doc_values=false}, subject={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}, not_before={type=date}, public_key_curve={ignore_above=1024, type=keyword}, public_key_algorithm={ignore_above=1024, type=keyword}, signature_algorithm={ignore_above=1024, type=keyword}, public_key_size={type=long}, version_number={ignore_above=1024, type=keyword}, serial_number={ignore_above=1024, type=keyword}, alternative_names={ignore_above=1024, type=keyword}, issuer={properties={country={ignore_above=1024, type=keyword}, state_or_province={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}}}, server_name={ignore_above=1024, type=keyword}, subject={ignore_above=1024, type=keyword}, supported_ciphers={ignore_above=1024, type=keyword}, not_before={type=date}, certificate={ignore_above=1024, type=keyword}, ja3={ignore_above=1024, type=keyword}, issuer={ignore_above=1024, type=keyword}, certificate_chain={ignore_above=1024, type=keyword}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}}}, next_protocol={ignore_above=1024, type=keyword}, resumed={type=boolean}, version={ignore_above=1024, type=keyword}, version_protocol={ignore_above=1024, type=keyword}}}, threat={properties={indicator={properties={registry={properties={hive={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, data={properties={strings={ignore_above=1024, type=keyword}, bytes={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, value={ignore_above=1024, type=keyword}, key={ignore_above=1024, type=keyword}}}, first_seen={type=date}, last_seen={type=date}, confidence={ignore_above=1024, type=keyword}, ip={type=ip}, description={ignore_above=1024, type=keyword}, sightings={type=long}, type={ignore_above=1024, type=keyword}, url={properties={extension={ignore_above=1024, type=keyword}, original={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, scheme={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, query={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, registered_domain={ignore_above=1024, type=keyword}, fragment={ignore_above=1024, type=keyword}, password={ignore_above=1024, type=keyword}, port={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, full={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, username={ignore_above=1024, type=keyword}}}, scanner_stats={type=long}, geo={properties={continent_name={ignore_above=1024, type=keyword}, region_iso_code={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, reference={ignore_above=1024, type=keyword}, x509={properties={not_after={type=date}, public_key_exponent={index=false, type=long, doc_values=false}, not_before={type=date}, subject={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}, public_key_algorithm={ignore_above=1024, type=keyword}, public_key_curve={ignore_above=1024, type=keyword}, signature_algorithm={ignore_above=1024, type=keyword}, public_key_size={type=long}, serial_number={ignore_above=1024, type=keyword}, version_number={ignore_above=1024, type=keyword}, alternative_names={ignore_above=1024, type=keyword}, issuer={properties={state_or_province={ignore_above=1024, type=keyword}, country={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}}}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}}}, marking={properties={tlp={ignore_above=1024, type=keyword}}}, file={properties={extension={ignore_above=1024, type=keyword}, gid={ignore_above=1024, type=keyword}, drive_letter={ignore_above=1, type=keyword}, mtime={type=date}, type={ignore_above=1024, type=keyword}, accessed={type=date}, directory={ignore_above=1024, type=keyword}, inode={ignore_above=1024, type=keyword}, mode={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, uid={ignore_above=1024, type=keyword}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, timestamp={type=date}, status={ignore_above=1024, type=keyword}}}, fork_name={ignore_above=1024, type=keyword}, ctime={type=date}, elf={properties={imports={type=flattened}, shared_libraries={ignore_above=1024, type=keyword}, exports={type=flattened}, byte_order={ignore_above=1024, type=keyword}, cpu_type={ignore_above=1024, type=keyword}, header={properties={object_version={ignore_above=1024, type=keyword}, data={ignore_above=1024, type=keyword}, entrypoint={type=long}, os_abi={ignore_above=1024, type=keyword}, abi_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, creation_date={type=date}, sections={type=nested, properties={chi2={type=long}, virtual_address={type=long}, entropy={type=long}, physical_offset={ignore_above=1024, type=keyword}, flags={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, physical_size={type=long}, type={ignore_above=1024, type=keyword}, virtual_size={type=long}}}, telfhash={ignore_above=1024, type=keyword}, segments={type=nested, properties={type={ignore_above=1024, type=keyword}, sections={ignore_above=1024, type=keyword}}}, architecture={ignore_above=1024, type=keyword}}}, group={ignore_above=1024, type=keyword}, owner={ignore_above=1024, type=keyword}, created={type=date}, target_path={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, size={type=long}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, mime_type={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, attributes={ignore_above=1024, type=keyword}, device={ignore_above=1024, type=keyword}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}}}, port={type=long}, provider={ignore_above=1024, type=keyword}, modified_at={type=date}, email={properties={address={ignore_above=1024, type=keyword}}}}}, framework={ignore_above=1024, type=keyword}, software={properties={reference={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, alias={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, platforms={ignore_above=1024, type=keyword}}}, technique={properties={reference={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, subtechnique={properties={reference={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}}}, id={ignore_above=1024, type=keyword}}}, enrichments={type=nested, properties={indicator={type=object, properties={registry={properties={hive={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, data={properties={strings={ignore_above=1024, type=keyword}, bytes={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}, value={ignore_above=1024, type=keyword}, key={ignore_above=1024, type=keyword}}}, first_seen={type=date}, last_seen={type=date}, ip={type=ip}, confidence={ignore_above=1024, type=keyword}, sightings={type=long}, description={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, url={properties={extension={ignore_above=1024, type=keyword}, original={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, scheme={ignore_above=1024, type=keyword}, top_level_domain={ignore_above=1024, type=keyword}, query={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword}, password={ignore_above=1024, type=keyword}, registered_domain={ignore_above=1024, type=keyword}, fragment={ignore_above=1024, type=keyword}, port={type=long}, domain={ignore_above=1024, type=keyword}, subdomain={ignore_above=1024, type=keyword}, username={ignore_above=1024, type=keyword}, full={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}}}, scanner_stats={type=long}, geo={properties={continent_name={ignore_above=1024, type=keyword}, region_iso_code={ignore_above=1024, type=keyword}, city_name={ignore_above=1024, type=keyword}, country_iso_code={ignore_above=1024, type=keyword}, timezone={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, country_name={ignore_above=1024, type=keyword}, continent_code={ignore_above=1024, type=keyword}, region_name={ignore_above=1024, type=keyword}, location={type=geo_point}, postal_code={ignore_above=1024, type=keyword}}}, reference={ignore_above=1024, type=keyword}, x509={properties={not_after={type=date}, public_key_exponent={index=false, type=long, doc_values=false}, not_before={type=date}, subject={properties={country={ignore_above=1024, type=keyword}, state_or_province={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}, public_key_algorithm={ignore_above=1024, type=keyword}, public_key_curve={ignore_above=1024, type=keyword}, signature_algorithm={ignore_above=1024, type=keyword}, public_key_size={type=long}, serial_number={ignore_above=1024, type=keyword}, version_number={ignore_above=1024, type=keyword}, alternative_names={ignore_above=1024, type=keyword}, issuer={properties={country={ignore_above=1024, type=keyword}, state_or_province={ignore_above=1024, type=keyword}, organization={ignore_above=1024, type=keyword}, distinguished_name={ignore_above=1024, type=keyword}, locality={ignore_above=1024, type=keyword}, common_name={ignore_above=1024, type=keyword}, organizational_unit={ignore_above=1024, type=keyword}}}}}, as={properties={number={type=long}, organization={properties={name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}}}}}, file={properties={extension={ignore_above=1024, type=keyword}, gid={ignore_above=1024, type=keyword}, drive_letter={ignore_above=1, type=keyword}, accessed={type=date}, type={ignore_above=1024, type=keyword}, mtime={type=date}, directory={ignore_above=1024, type=keyword}, inode={ignore_above=1024, type=keyword}, mode={ignore_above=1024, type=keyword}, path={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, uid={ignore_above=1024, type=keyword}, code_signature={properties={valid={type=boolean}, digest_algorithm={ignore_above=1024, type=keyword}, signing_id={ignore_above=1024, type=keyword}, trusted={type=boolean}, subject_name={ignore_above=1024, type=keyword}, exists={type=boolean}, team_id={ignore_above=1024, type=keyword}, timestamp={type=date}, status={ignore_above=1024, type=keyword}}}, ctime={type=date}, fork_name={ignore_above=1024, type=keyword}, elf={properties={imports={type=flattened}, shared_libraries={ignore_above=1024, type=keyword}, byte_order={ignore_above=1024, type=keyword}, exports={type=flattened}, cpu_type={ignore_above=1024, type=keyword}, header={properties={object_version={ignore_above=1024, type=keyword}, data={ignore_above=1024, type=keyword}, entrypoint={type=long}, os_abi={ignore_above=1024, type=keyword}, abi_version={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}, version={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}}}, creation_date={type=date}, telfhash={ignore_above=1024, type=keyword}, sections={type=nested, properties={chi2={type=long}, virtual_address={type=long}, entropy={type=long}, physical_offset={ignore_above=1024, type=keyword}, flags={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, physical_size={type=long}, type={ignore_above=1024, type=keyword}, virtual_size={type=long}}}, architecture={ignore_above=1024, type=keyword}, segments={type=nested, properties={type={ignore_above=1024, type=keyword}, sections={ignore_above=1024, type=keyword}}}}}, group={ignore_above=1024, type=keyword}, owner={ignore_above=1024, type=keyword}, created={type=date}, target_path={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, size={type=long}, pe={properties={file_version={ignore_above=1024, type=keyword}, product={ignore_above=1024, type=keyword}, imphash={ignore_above=1024, type=keyword}, description={ignore_above=1024, type=keyword}, company={ignore_above=1024, type=keyword}, original_file_name={ignore_above=1024, type=keyword}, architecture={ignore_above=1024, type=keyword}}}, mime_type={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, attributes={ignore_above=1024, type=keyword}, device={ignore_above=1024, type=keyword}, hash={properties={sha1={ignore_above=1024, type=keyword}, sha256={ignore_above=1024, type=keyword}, sha512={ignore_above=1024, type=keyword}, ssdeep={ignore_above=1024, type=keyword}, md5={ignore_above=1024, type=keyword}}}}}, marking={properties={tlp={ignore_above=1024, type=keyword}}}, port={type=long}, provider={ignore_above=1024, type=keyword}, modified_at={type=date}, email={properties={address={ignore_above=1024, type=keyword}}}}}, matched={properties={field={ignore_above=1024, type=keyword}, atomic={ignore_above=1024, type=keyword}, index={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}, type={ignore_above=1024, type=keyword}}}}}, tactic={properties={reference={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, group={properties={reference={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, alias={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, aws={properties={rds={properties={transaction_logs_generation={type=long}, aurora_replica={properties={lag={properties={ms={type=long}}}, lag_max={properties={ms={type=long}}}, lag_min={properties={ms={type=long}}}}}, latency={properties={dml={type=float}, read={type=float}, select={type=float}, commit={type=float}, update={type=float}, insert={type=float}, ddl={type=float}, write={type=float}, delete={type=float}}}, read_io={properties={ops_per_sec={type=float}}}, backup_storage_billed_total={properties={bytes={type=long}}}, rds_to_aurora_postgresql_replica_lag={properties={sec={type=long}}}, maximum_used_transaction_ids={type=long}, database_connections={type=long}, db_instance={properties={identifier={ignore_above=1024, type=keyword}, role={ignore_above=1024, type=keyword}, engine_name={ignore_above=1024, type=keyword}, arn={ignore_above=1024, type=keyword}, class={ignore_above=1024, type=keyword}, db_cluster_identifier={ignore_above=1024, type=keyword}, status={ignore_above=1024, type=keyword}}}, failed_sql_server_agent_jobs={type=long}, disk_usage={properties={transaction_logs={properties={mb={type=long}}}, bin_log={properties={bytes={type=long}}}, replication_slot={properties={mb={type=long}}}}}, login_failures={type=long}, engine_uptime={properties={sec={type=long}}}, throughput={properties={dml={type=float}, read={type=float}, select={type=float}, network_transmit={type=float}, network_receive={type=float}, commit={type=float}, insert={type=float}, update={type=float}, delete={type=float}, ddl={type=float}, write={type=float}, network={type=float}}}, deadlocks={type=long}, backtrack_change_records={properties={stored={type=long}, creation_rate={type=long}}}, volume_used={properties={bytes={type=long}}}, cache_hit_ratio={properties={buffer={type=long}, result_set={type=long}}}, aurora_volume_left_total={properties={bytes={type=long}}}, aurora_bin_log_replica_lag={type=long}, cpu={properties={total={properties={pct={scaling_factor=1000, type=scaled_float}}}, credit_balance={type=long}, credit_usage={type=long}}}, replica_lag={properties={sec={type=long}}}, oldest_replication_slot_lag={properties={mb={type=long}}}, swap_usage={properties={bytes={type=long}}}, disk_queue_depth={type=float}, transactions={properties={blocked={type=long}, active={type=long}}}, queries={type=long}, volume={properties={read={properties={iops={type=long}}}, write={properties={iops={type=long}}}}}, free_storage={properties={bytes={type=long}}}, burst_balance={properties={pct={scaling_factor=1000, type=scaled_float}}}, free_local_storage={properties={bytes={type=long}}}, backtrack_window={properties={actual={type=long}, alert={type=long}}}, write_io={properties={ops_per_sec={type=float}}}, aurora_global_db={properties={data_transfer={properties={bytes={type=long}}}, replication_lag={properties={ms={type=long}}}, replicated_write_io={properties={bytes={type=long}}}}}, storage_used={properties={backup_retention_period={properties={bytes={type=long}}}, snapshot={properties={bytes={type=long}}}}}, freeable_memory={properties={bytes={type=long}}}}}, s3={properties={bucket={properties={name={ignore_above=1024, type=keyword}}}}}, usage={properties={metrics={properties={ResourceCount={properties={sum={type=long}}}, CallCount={properties={sum={type=long}}}}}}}, *={properties={metrics={properties={*={properties={*={type=object}}}}}}}, applicationelb={properties={metrics={properties={HTTPCode_ELB_503_Count={properties={sum={type=long}}}, IPv6ProcessedBytes={properties={sum={type=long}}}, HTTP_Fixed_Response_Count={properties={sum={type=long}}}, HTTP_Redirect_Url_Limit_Exceeded_Count={properties={sum={type=long}}}, RejectedConnectionCount={properties={sum={type=long}}}, HTTPCode_ELB_5XX_Count={properties={sum={type=long}}}, HTTPCode_ELB_502_Count={properties={sum={type=long}}}, RequestCount={properties={sum={type=long}}}, ProcessedBytes={properties={sum={type=long}}}, HTTP_Redirect_Count={properties={sum={type=long}}}, IPv6RequestCount={properties={sum={type=long}}}, ClientTLSNegotiationErrorCount={properties={sum={type=long}}}, HTTPCode_ELB_504_Count={properties={sum={type=long}}}, HTTPCode_ELB_4XX_Count={properties={sum={type=long}}}, NewConnectionCount={properties={sum={type=long}}}, RuleEvaluations={properties={sum={type=long}}}, HTTPCode_ELB_3XX_Count={properties={sum={type=long}}}, ConsumedLCUs={properties={avg={type=double}}}, ActiveConnectionCount={properties={sum={type=long}}}, HTTPCode_ELB_500_Count={properties={sum={type=long}}}}}}}, kinesis={properties={metrics={properties={GetRecords_Success={properties={sum={type=long}}}, IncomingBytes={properties={avg={type=double}}}, PutRecord_Bytes={properties={avg={type=double}}}, GetRecords_IteratorAgeMilliseconds={properties={avg={type=double}}}, PutRecords_SuccessfulRecords={properties={sum={type=long}}}, SubscribeToShardEvent_MillisBehindLatest={properties={avg={type=long}}}, PutRecord_Latency={properties={avg={type=double}}}, PutRecords_TotalRecords={properties={sum={type=long}}}, IncomingRecords={properties={avg={type=double}}}, PutRecords_ThrottledRecords={properties={sum={type=long}}}, WriteProvisionedThroughputExceeded={properties={avg={type=long}}}, GetRecords_Bytes={properties={avg={type=double}}}, PutRecords_Bytes={properties={avg={type=double}}}, SubscribeToShard_RateExceeded={properties={avg={type=long}}}, SubscribeToShardEvent_Success={properties={avg={type=long}}}, ReadProvisionedThroughputExceeded={properties={avg={type=long}}}, GetRecords_Latency={properties={avg={type=double}}}, PutRecords_Latency={properties={avg={type=double}}}, PutRecords_FailedRecords={properties={sum={type=long}}}, SubscribeToShardEvent_Records={properties={sum={type=long}}}, SubscribeToShard_Success={properties={avg={type=long}}}, GetRecords_Records={properties={sum={type=long}}}, PutRecord_Success={properties={avg={type=double}}}, PutRecords_Success={properties={avg={type=long}}}, SubscribeToShardEvent_Bytes={properties={avg={type=long}}}}}}}, s3_request={properties={latency={properties={total_request={properties={ms={type=long}}}, first_byte={properties={ms={type=long}}}}}, uploaded={properties={bytes={type=long}}}, requests={properties={head={type=long}, total={type=long}, select_scanned={properties={bytes={type=long}}}, select={type=long}, post={type=long}, get={type=long}, list={type=long}, delete={type=long}, select_returned={properties={bytes={type=long}}}, put={type=long}}}, downloaded={properties={bytes={type=long}}}, errors={properties={4xx={type=long}, 5xx={type=long}}}}}, dynamodb={properties={metrics={properties={ReplicationLatency={properties={avg={type=double}, max={type=double}}}, MaxProvisionedTableReadCapacityUtilization={properties={max={type=double}}}, ConsumedReadCapacityUnits={properties={avg={type=double}, sum={type=long}}}, AccountMaxTableLevelReads={properties={max={type=long}}}, WriteThrottleEvents={properties={sum={type=long}}}, ProvisionedWriteCapacityUnits={properties={avg={type=double}}}, ThrottledRequests={properties={sum={type=long}}}, AccountProvisionedReadCapacityUtilization={properties={avg={type=double}}}, ConditionalCheckFailedRequests={properties={sum={type=long}}}, AccountProvisionedWriteCapacityUtilization={properties={avg={type=double}}}, TransactionConflict={properties={avg={type=double}, sum={type=long}}}, MaxProvisionedTableWriteCapacityUtilization={properties={max={type=double}}}, ProvisionedReadCapacityUnits={properties={avg={type=double}}}, SystemErrors={properties={sum={type=long}}}, ReadThrottleEvents={properties={sum={type=long}}}, SuccessfulRequestLatency={properties={avg={type=double}, max={type=double}}}, AccountMaxReads={properties={max={type=long}}}, PendingReplicationCount={properties={sum={type=long}}}, ConsumedWriteCapacityUnits={properties={avg={type=double}, sum={type=long}}}, AccountMaxWrites={properties={max={type=long}}}, OnlineIndexPercentageProgress={properties={avg={type=double}}}, AccountMaxTableLevelWrites={properties={max={type=long}}}}}}}, billing={properties={end_date={ignore_above=1024, type=keyword}, BlendedCost={properties={amount={type=double}, unit={ignore_above=1024, type=keyword}}}, group_definition={properties={type={ignore_above=1024, type=keyword}, key={ignore_above=1024, type=keyword}}}, AmortizedCost={properties={amount={type=double}, unit={ignore_above=1024, type=keyword}}}, ServiceName={ignore_above=1024, type=keyword}, Currency={ignore_above=1024, type=keyword}, NormalizedUsageAmount={properties={amount={type=double}, unit={ignore_above=1024, type=keyword}}}, group_by={properties={*={type=object}}}, UsageQuantity={properties={amount={type=double}, unit={ignore_above=1024, type=keyword}}}, UnblendedCost={properties={amount={type=double}, unit={ignore_above=1024, type=keyword}}}, start_date={ignore_above=1024, type=keyword}, EstimatedCharges={type=long}}}, tags={properties={*={type=object}}}, transitgateway={properties={metrics={properties={PacketsOut={properties={sum={type=long}}}, PacketDropCountNoRoute={properties={sum={type=long}}}, BytesOut={properties={sum={type=long}}}, BytesIn={properties={sum={type=long}}}, PacketsIn={properties={sum={type=long}}}, PacketDropCountBlackhole={properties={sum={type=long}}}}}}}, lambda={properties={metrics={properties={UnreservedConcurrentExecutions={properties={avg={type=double}}}, ProvisionedConcurrencyUtilization={properties={max={type=long}}}, ProvisionedConcurrencyInvocations={properties={sum={type=long}}}, Duration={properties={avg={type=double}}}, Errors={properties={avg={type=double}}}, IteratorAge={properties={avg={type=double}}}, ConcurrentExecutions={properties={avg={type=double}}}, ProvisionedConcurrencySpilloverInvocations={properties={sum={type=long}}}, Invocations={properties={avg={type=double}}}, DeadLetterErrors={properties={avg={type=double}}}, ProvisionedConcurrentExecutions={properties={max={type=long}}}, DestinationDeliveryFailures={properties={avg={type=double}}}, Throttles={properties={avg={type=double}}}}}}}, networkelb={properties={metrics={properties={HealthyHostCount={properties={max={type=long}}}, TCP_ELB_Reset_Count={properties={sum={type=long}}}, ActiveFlowCount={properties={avg={type=double}}}, ActiveFlowCount_UDP={properties={avg={type=double}}}, ActiveFlowCount_TCP={properties={avg={type=double}}}, TCP_Client_Reset_Count={properties={sum={type=long}}}, NewFlowCount_TLS={properties={sum={type=long}}}, ProcessedBytes={properties={sum={type=long}}}, ActiveFlowCount_TLS={properties={avg={type=double}}}, ProcessedBytes_TLS={properties={sum={type=long}}}, TCP_Target_Reset_Count={properties={sum={type=long}}}, UnHealthyHostCount={properties={max={type=long}}}, ClientTLSNegotiationErrorCount={properties={sum={type=long}}}, NewFlowCount={properties={sum={type=long}}}, ConsumedLCUs={properties={avg={type=double}}}, TargetTLSNegotiationErrorCount={properties={sum={type=long}}}}}}}, sqs={properties={messages={properties={visible={type=long}, deleted={type=long}, not_visible={type=long}, delayed={type=long}, received={type=long}, sent={type=long}}}, empty_receives={type=long}, sent_message_size={properties={bytes={type=long}}}, oldest_message_age={properties={sec={type=long}}}, queue={properties={name={ignore_above=1024, type=keyword}}}}}, ec2={properties={diskio={properties={read={properties={count_per_sec={type=long}, bytes_per_sec={scaling_factor=1000, type=scaled_float}, bytes={type=long}, count={type=long}}}, write={properties={count_per_sec={type=long}, bytes_per_sec={scaling_factor=1000, type=scaled_float}, bytes={type=long}, count={type=long}}}}}, instance={properties={core={properties={count={type=long}}}, image={properties={id={ignore_above=1024, type=keyword}}}, private={properties={ip={type=ip}, dns_name={ignore_above=1024, type=keyword}}}, threads_per_core={type=long}, public={properties={ip={type=ip}, dns_name={ignore_above=1024, type=keyword}}}, state={properties={code={type=long}, name={ignore_above=1024, type=keyword}}}, monitoring={properties={state={ignore_above=1024, type=keyword}}}}}, cpu={properties={surplus_credit_balance={type=long}, total={properties={pct={scaling_factor=1000, type=scaled_float}}}, surplus_credits_charged={type=long}, credit_balance={type=long}, credit_usage={type=long}}}, status={properties={check_failed={type=long}, check_failed_instance={type=long}, check_failed_system={type=long}}}, network={properties={in={properties={packets_per_sec={scaling_factor=1000, type=scaled_float}, bytes_per_sec={scaling_factor=1000, type=scaled_float}, bytes={type=long}, packets={type=long}}}, out={properties={packets_per_sec={scaling_factor=1000, type=scaled_float}, bytes_per_sec={scaling_factor=1000, type=scaled_float}, bytes={type=long}, packets={type=long}}}}}}}, vpn={properties={metrics={properties={TunnelDataOut={properties={sum={type=double}}}, TunnelDataIn={properties={sum={type=double}}}, TunnelState={properties={avg={type=double}}}}}}}, linked_account={properties={name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}, ebs={properties={metrics={properties={VolumeConsumedReadWriteOps={properties={avg={type=double}}}, VolumeQueueLength={properties={avg={type=double}}}, BurstBalance={properties={avg={type=double}}}, VolumeTotalReadTime={properties={sum={type=double}}}, VolumeTotalWriteTime={properties={sum={type=double}}}, VolumeWriteBytes={properties={avg={type=double}}}, VolumeWriteOps={properties={avg={type=double}}}, VolumeReadBytes={properties={avg={type=double}}}, VolumeReadOps={properties={avg={type=double}}}, VolumeThroughputPercentage={properties={avg={type=double}}}, VolumeIdleTime={properties={sum={type=double}}}}}}}, sns={properties={metrics={properties={NumberOfNotificationsFilteredOut={properties={sum={type=long}}}, NumberOfNotificationsFilteredOut-InvalidAttributes={properties={sum={type=long}}}, NumberOfNotificationsDelivered={properties={sum={type=long}}}, SMSSuccessRate={properties={avg={type=double}}}, NumberOfMessagesPublished={properties={sum={type=long}}}, NumberOfNotificationsFailedToRedriveToDlq={properties={sum={type=long}}}, SMSMonthToDateSpentUSD={properties={sum={type=long}}}, PublishSize={properties={avg={type=double}}}, NumberOfNotificationsFailed={properties={sum={type=long}}}, NumberOfNotificationsFilteredOut-NoMessageAttributes={properties={sum={type=long}}}, NumberOfNotificationsRedrivenToDlq={properties={sum={type=long}}}}}}}, elb={properties={metrics={properties={HealthyHostCount={properties={max={type=long}}}, HTTPCode_Backend_5XX={properties={sum={type=long}}}, SpilloverCount={properties={sum={type=long}}}, SurgeQueueLength={properties={max={type=long}}}, EstimatedALBConsumedLCUs={properties={avg={type=double}}}, BackendConnectionErrors={properties={sum={type=long}}}, EstimatedALBActiveConnectionCount={properties={avg={type=double}}}, RequestCount={properties={sum={type=long}}}, Latency={properties={avg={type=double}}}, UnHealthyHostCount={properties={max={type=long}}}, HTTPCode_ELB_5XX={properties={sum={type=long}}}, HTTPCode_ELB_4XX={properties={sum={type=long}}}, HTTPCode_Backend_4XX={properties={sum={type=long}}}, EstimatedProcessedBytes={properties={avg={type=double}}}, HTTPCode_Backend_3XX={properties={sum={type=long}}}, EstimatedALBNewConnectionCount={properties={avg={type=double}}}, HTTPCode_Backend_2XX={properties={sum={type=long}}}}}}}, cloudwatch={properties={namespace={ignore_above=1024, type=keyword}}}, s3_daily_storage={properties={bucket={properties={size={properties={bytes={type=long}}}}}, number_of_objects={type=long}}}, natgateway={properties={metrics={properties={PacketsInFromSource={properties={sum={type=long}}}, ErrorPortAllocation={properties={sum={type=long}}}, PacketsOutToDestination={properties={sum={type=long}}}, PacketsOutToSource={properties={sum={type=long}}}, BytesOutToDestination={properties={sum={type=long}}}, ConnectionEstablishedCount={properties={sum={type=long}}}, ConnectionAttemptCount={properties={sum={type=long}}}, PacketsInFromDestination={properties={sum={type=long}}}, BytesInFromDestination={properties={sum={type=long}}}, PacketsDropCount={properties={sum={type=long}}}, BytesInFromSource={properties={sum={type=long}}}, BytesOutToSource={properties={sum={type=long}}}, IdleTimeoutCount={properties={sum={type=long}}}, ActiveConnectionCount={properties={max={type=long}}}}}}}, dimensions={properties={*={type=object}}}}}, user={properties={effective={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, domain={ignore_above=1024, type=keyword}, roles={ignore_above=1024, type=keyword}, name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, full_name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, changes={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, fields={text={norms=false, type=text}}, type=keyword}, id={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, target={properties={full_name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, roles={ignore_above=1024, type=keyword}, domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword, fields={text={norms=false, type=text}}}, id={ignore_above=1024, type=keyword}, email={ignore_above=1024, type=keyword}, hash={ignore_above=1024, type=keyword}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}, group={properties={domain={ignore_above=1024, type=keyword}, name={ignore_above=1024, type=keyword}, id={ignore_above=1024, type=keyword}}}}}}}]