Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- {
- ".ds-metrics-kubernetes.container-inf067_osprod_prod-2025.02.10-000103": {
- "mappings": {
- "_meta": {
- "managed_by": "fleet",
- "managed": true,
- "package": {
- "name": "kubernetes"
- }
- },
- "_data_stream_timestamp": {
- "enabled": true
- },
- "_source": {
- "mode": "stored"
- },
- "dynamic_templates": [
- {
- "container.labels": {
- "path_match": "container.labels.*",
- "match_mapping_type": "string",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.node.labels.*": {
- "path_match": "kubernetes.node.labels.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.node.annotations.*": {
- "path_match": "kubernetes.node.annotations.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.labels.*": {
- "path_match": "kubernetes.labels.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.annotations.*": {
- "path_match": "kubernetes.annotations.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.namespace_labels.*": {
- "path_match": "kubernetes.namespace_labels.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.namespace_annotations.*": {
- "path_match": "kubernetes.namespace_annotations.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "kubernetes.selectors.*": {
- "path_match": "kubernetes.selectors.*",
- "match_mapping_type": "*",
- "mapping": {
- "type": "keyword"
- }
- }
- },
- {
- "ecs_timestamp": {
- "match": "@timestamp",
- "mapping": {
- "ignore_malformed": false,
- "type": "date"
- }
- }
- },
- {
- "ecs_message_match_only_text": {
- "path_match": [
- "message",
- "*.message"
- ],
- "unmatch_mapping_type": "object",
- "mapping": {
- "type": "match_only_text"
- }
- }
- },
- {
- "ecs_non_indexed_keyword": {
- "path_match": "event.original",
- "mapping": {
- "doc_values": false,
- "index": false,
- "type": "keyword"
- }
- }
- },
- {
- "ecs_non_indexed_long": {
- "path_match": "*.x509.public_key_exponent",
- "mapping": {
- "doc_values": false,
- "index": false,
- "type": "long"
- }
- }
- },
- {
- "ecs_ip": {
- "path_match": [
- "ip",
- "*.ip",
- "*_ip"
- ],
- "match_mapping_type": "string",
- "mapping": {
- "type": "ip"
- }
- }
- },
- {
- "ecs_wildcard": {
- "path_match": [
- "*.io.text",
- "*.message_id",
- "*registry.data.strings",
- "*url.path"
- ],
- "unmatch_mapping_type": "object",
- "mapping": {
- "type": "wildcard"
- }
- }
- },
- {
- "ecs_path_match_wildcard_and_match_only_text": {
- "path_match": [
- "*.body.content",
- "*url.full",
- "*url.original"
- ],
- "unmatch_mapping_type": "object",
- "mapping": {
- "fields": {
- "text": {
- "type": "match_only_text"
- }
- },
- "type": "wildcard"
- }
- }
- },
- {
- "ecs_match_wildcard_and_match_only_text": {
- "match": [
- "*command_line",
- "*stack_trace"
- ],
- "unmatch_mapping_type": "object",
- "mapping": {
- "fields": {
- "text": {
- "type": "match_only_text"
- }
- },
- "type": "wildcard"
- }
- }
- },
- {
- "ecs_path_match_keyword_and_match_only_text": {
- "path_match": [
- "*.title",
- "*.executable",
- "*.name",
- "*.working_directory",
- "*.full_name",
- "*file.path",
- "*file.target_path",
- "*os.full",
- "email.subject",
- "vulnerability.description",
- "user_agent.original"
- ],
- "unmatch_mapping_type": "object",
- "mapping": {
- "fields": {
- "text": {
- "type": "match_only_text"
- }
- },
- "type": "keyword"
- }
- }
- },
- {
- "ecs_date": {
- "path_match": [
- "*.timestamp",
- "*_timestamp",
- "*.not_after",
- "*.not_before",
- "*.accessed",
- "created",
- "*.created",
- "*.installed",
- "*.creation_date",
- "*.ctime",
- "*.mtime",
- "ingested",
- "*.ingested",
- "*.start",
- "*.end",
- "*.indicator.first_seen",
- "*.indicator.last_seen",
- "*.indicator.modified_at",
- "*threat.enrichments.matched.occurred"
- ],
- "unmatch_mapping_type": "object",
- "mapping": {
- "type": "date"
- }
- }
- },
- {
- "ecs_path_match_float": {
- "path_match": [
- "*.score.*",
- "*_score*"
- ],
- "path_unmatch": "*.version",
- "unmatch_mapping_type": "object",
- "mapping": {
- "type": "float"
- }
- }
- },
- {
- "ecs_usage_double_scaled_float": {
- "path_match": "*.usage",
- "match_mapping_type": [
- "double",
- "long",
- "string"
- ],
- "mapping": {
- "scaling_factor": 1000,
- "type": "scaled_float"
- }
- }
- },
- {
- "ecs_geo_point": {
- "path_match": "*.geo.location",
- "mapping": {
- "type": "geo_point"
- }
- }
- },
- {
- "ecs_flattened": {
- "path_match": [
- "*structured_data",
- "*exports",
- "*imports"
- ],
- "match_mapping_type": "object",
- "mapping": {
- "type": "flattened"
- }
- }
- },
- {
- "all_strings_to_keywords": {
- "match_mapping_type": "string",
- "mapping": {
- "ignore_above": 1024,
- "type": "keyword"
- }
- }
- },
- {
- "strings_as_keyword": {
- "match_mapping_type": "string",
- "mapping": {
- "ignore_above": 1024,
- "type": "keyword"
- }
- }
- }
- ],
- "date_detection": false,
- "properties": {
- "@timestamp": {
- "type": "date"
- },
- "agent": {
- "properties": {
- "ephemeral_id": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "id": {
- "type": "keyword",
- "time_series_dimension": true
- },
- "name": {
- "type": "keyword",
- "fields": {
- "text": {
- "type": "match_only_text"
- }
- }
- },
- "type": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "version": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "cloud": {
- "properties": {
- "account": {
- "properties": {
- "id": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "availability_zone": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "image": {
- "properties": {
- "id": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "instance": {
- "properties": {
- "id": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "machine": {
- "properties": {
- "type": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "project": {
- "properties": {
- "id": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "provider": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "region": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "container": {
- "dynamic": "true",
- "properties": {
- "cpu": {
- "properties": {
- "usage": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- },
- "id": {
- "type": "keyword",
- "time_series_dimension": true
- },
- "image": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "labels": {
- "type": "object",
- "dynamic": "true"
- },
- "memory": {
- "properties": {
- "usage": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "runtime": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "data_stream": {
- "properties": {
- "dataset": {
- "type": "constant_keyword",
- "value": "kubernetes.container"
- },
- "namespace": {
- "type": "constant_keyword",
- "value": "inf067_osprod_prod"
- },
- "type": {
- "type": "constant_keyword",
- "value": "metrics"
- }
- }
- },
- "ecs": {
- "properties": {
- "version": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "elastic_agent": {
- "properties": {
- "id": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "snapshot": {
- "type": "boolean"
- },
- "version": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "error": {
- "properties": {
- "message": {
- "type": "match_only_text"
- }
- }
- },
- "event": {
- "properties": {
- "agent_id_status": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "dataset": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "duration": {
- "type": "long"
- },
- "ingested": {
- "type": "date",
- "format": "strict_date_time_no_millis||strict_date_optional_time||epoch_millis"
- },
- "module": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "host": {
- "properties": {
- "architecture": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "containerized": {
- "type": "boolean"
- },
- "domain": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "hostname": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "id": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "ip": {
- "type": "ip"
- },
- "mac": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "os": {
- "properties": {
- "build": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "codename": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "family": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "kernel": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024,
- "fields": {
- "text": {
- "type": "match_only_text"
- }
- }
- },
- "platform": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "type": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "version": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "type": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "kubernetes": {
- "dynamic": "true",
- "properties": {
- "annotations": {
- "type": "object",
- "dynamic": "true"
- },
- "container": {
- "properties": {
- "cpu": {
- "properties": {
- "usage": {
- "properties": {
- "core": {
- "properties": {
- "ns": {
- "type": "long",
- "time_series_metric": "gauge"
- }
- }
- },
- "limit": {
- "properties": {
- "pct": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- },
- "nanocores": {
- "type": "long",
- "time_series_metric": "gauge"
- },
- "node": {
- "properties": {
- "pct": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- }
- }
- }
- }
- },
- "image": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "logs": {
- "properties": {
- "available": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- },
- "capacity": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- },
- "inodes": {
- "properties": {
- "count": {
- "type": "long",
- "time_series_metric": "gauge"
- },
- "free": {
- "type": "long",
- "time_series_metric": "gauge"
- },
- "used": {
- "type": "long",
- "time_series_metric": "gauge"
- }
- }
- },
- "used": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- }
- }
- },
- "memory": {
- "properties": {
- "available": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- },
- "majorpagefaults": {
- "type": "long",
- "time_series_metric": "counter"
- },
- "pagefaults": {
- "type": "long",
- "time_series_metric": "counter"
- },
- "rss": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- },
- "usage": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- },
- "limit": {
- "properties": {
- "pct": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- },
- "node": {
- "properties": {
- "pct": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- }
- }
- },
- "workingset": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- },
- "limit": {
- "properties": {
- "pct": {
- "type": "scaled_float",
- "meta": {
- "unit": "percent"
- },
- "scaling_factor": 1000,
- "time_series_metric": "gauge"
- }
- }
- }
- }
- }
- }
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "rootfs": {
- "properties": {
- "available": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- },
- "capacity": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- },
- "inodes": {
- "properties": {
- "used": {
- "type": "long",
- "time_series_metric": "gauge"
- }
- }
- },
- "used": {
- "properties": {
- "bytes": {
- "type": "long",
- "meta": {
- "unit": "byte"
- },
- "time_series_metric": "gauge"
- }
- }
- }
- }
- },
- "start_time": {
- "type": "date"
- }
- }
- },
- "cronjob": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "daemonset": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "deployment": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "job": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "labels": {
- "dynamic": "true",
- "properties": {
- "app": {
- "type": "keyword"
- },
- "app_kubernetes_io/component": {
- "type": "keyword"
- },
- "app_kubernetes_io/instance": {
- "type": "keyword"
- },
- "app_kubernetes_io/managed-by": {
- "type": "keyword"
- },
- "app_kubernetes_io/name": {
- "type": "keyword"
- },
- "app_kubernetes_io/part-of": {
- "type": "keyword"
- },
- "app_kubernetes_io/version": {
- "type": "keyword"
- },
- "batch_kubernetes_io/controller-uid": {
- "type": "keyword"
- },
- "batch_kubernetes_io/job-name": {
- "type": "keyword"
- },
- "compliance_openshift_io/scan-name": {
- "type": "keyword"
- },
- "component": {
- "type": "keyword"
- },
- "control-plane": {
- "type": "keyword"
- },
- "controller-revision-hash": {
- "type": "keyword"
- },
- "controller-uid": {
- "type": "keyword"
- },
- "deployment": {
- "type": "keyword"
- },
- "deploymentconfig": {
- "type": "keyword"
- },
- "dns_operator_openshift_io/daemonset-dns": {
- "type": "keyword"
- },
- "dns_operator_openshift_io/daemonset-node-resolver": {
- "type": "keyword"
- },
- "environment": {
- "type": "keyword"
- },
- "helm_sh/chart": {
- "type": "keyword"
- },
- "ingresscanary_operator_openshift_io/daemonset-ingresscanary": {
- "type": "keyword"
- },
- "ingresscontroller_operator_openshift_io/deployment-ingresscontroller": {
- "type": "keyword"
- },
- "ingresscontroller_operator_openshift_io/hash": {
- "type": "keyword"
- },
- "job-name": {
- "type": "keyword"
- },
- "k8s-app": {
- "type": "keyword"
- },
- "kubernetes_io/os": {
- "type": "keyword"
- },
- "name": {
- "type": "keyword"
- },
- "network-zone": {
- "type": "keyword"
- },
- "openshift-app": {
- "type": "keyword"
- },
- "openshift_io/component": {
- "type": "keyword"
- },
- "openshift_io/deployer-pod-for_name": {
- "type": "keyword"
- },
- "ovn-db-pod": {
- "type": "keyword"
- },
- "plattform": {
- "type": "keyword"
- },
- "pod-template-generation": {
- "type": "keyword"
- },
- "pod-template-hash": {
- "type": "keyword"
- },
- "region": {
- "type": "keyword"
- },
- "release": {
- "type": "keyword"
- },
- "replicaset": {
- "type": "keyword"
- },
- "self-node-remediation-operator": {
- "type": "keyword"
- },
- "statefulset_kubernetes_io/pod-name": {
- "type": "keyword"
- },
- "targetNode": {
- "type": "keyword"
- },
- "type": {
- "type": "keyword"
- },
- "workload": {
- "type": "keyword"
- }
- }
- },
- "namespace": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "namespace_annotations": {
- "type": "object",
- "dynamic": "true"
- },
- "namespace_labels": {
- "dynamic": "true",
- "properties": {
- CLEANED UP
- }
- },
- "namespace_uid": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "node": {
- "dynamic": "true",
- "properties": {
- "annotations": {
- "type": "object",
- "dynamic": "true"
- },
- "hostname": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "labels": {
- "dynamic": "true",
- "properties": {
- "beta_kubernetes_io/arch": {
- "type": "keyword"
- },
- "beta_kubernetes_io/os": {
- "type": "keyword"
- },
- "bxx": {
- "type": "keyword"
- },
- "cluster": {
- "type": "keyword"
- },
- "datacenter": {
- "type": "keyword"
- },
- "kubernetes_io/arch": {
- "type": "keyword"
- },
- "kubernetes_io/hostname": {
- "type": "keyword"
- },
- "kubernetes_io/os": {
- "type": "keyword"
- },
- "network-zone": {
- "type": "keyword"
- },
- "node-role_kubernetes_io/worker": {
- "type": "keyword"
- },
- "node_openshift_io/os_id": {
- "type": "keyword"
- },
- "node_openshift_io/os_version": {
- "type": "keyword"
- },
- "plattform": {
- "type": "keyword"
- },
- "region": {
- "type": "keyword"
- },
- "topology_kubernetes_io/zone": {
- "type": "keyword"
- },
- "vm-host": {
- "type": "keyword"
- }
- }
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "uid": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "pod": {
- "properties": {
- "ip": {
- "type": "ip"
- },
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "uid": {
- "type": "keyword",
- "time_series_dimension": true
- }
- }
- },
- "replicaset": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- },
- "selectors": {
- "type": "object",
- "dynamic": "true"
- },
- "statefulset": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- }
- }
- },
- "metricset": {
- "properties": {
- "name": {
- "type": "keyword",
- "fields": {
- "text": {
- "type": "match_only_text"
- }
- }
- },
- "period": {
- "type": "long"
- }
- }
- },
- "orchestrator": {
- "properties": {
- "cluster": {
- "properties": {
- "name": {
- "type": "keyword",
- "ignore_above": 1024
- },
- "url": {
- "type": "keyword",
- "time_series_dimension": true
- }
- }
- }
- }
- },
- "service": {
- "properties": {
- "address": {
- "type": "keyword",
- "time_series_dimension": true
- },
- "type": {
- "type": "keyword",
- "ignore_above": 1024
- }
- }
- }
- }
- }
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment