-
-
-
-
-
{"index_patterns":"logstash-*","version":60001,"settings":{"index.refresh_interval":"5s","number_of_shards":1},"mappings":{"dynamic_templates":[{"message_field":{"path_match":"message","match_mapping_type":"string","mapping":{"type":"text","norms":false}}},{"string_fields":{"match":"*","match_mapping_type":"string","mapping":{"type":"text","norms":false,"fields":{"keyword":{"type":"keyword","ignore_above":256}}}}}],"properties":{"@timestamp":{"type":"date"},"@version":{"type":"keyword"},"geoip":{"dynamic":true,"properties":{"ip":{"type":"ip"},"location":{"type":"geo_point"},"latitude":{"type":"half_float"},"longitude":{"type":"half_float"}}}}}}
{"index":{"_id":null,"_index":"logsv1-2019.09.06","_type":"_doc","routing":null}}\n{"@timestamp":"2019-09-06T07:40:09.011Z","input":{"type":"log"},"type":"beats","@version":"1","ecs":{"version":"1.0.1"},"tags":["beats_input_codec_plain_applied"],"host":{"name":"squad"},"message":"Sep  6 13:10:01 squad CRON[20833]: pam_unix(cron:session): session opened for user root by (uid=0)","agent":{"type":"filebeat","version":"7.3.1","hostname":"squad","ephemeral_id":"ef68c38b-2b50-4269-af2c-ca9f1687c62a","id":"18aded70-5948-4fd7-b312-3c788d1c4fff"},"fields":{"env":"local"},"log":{"file":{"path":"/var/log/auth.log"},"offset":287995}}\n
{"index":{"_id":null,"_index":"logsv1-2019.09.06","_type":"_doc","routing":null}}\n{"@timestamp":"2019-09-06T07:40:09.012Z","input":{"type":"log"},"type":"beats","@version":"1","ecs":{"version":"1.0.1"},"tags":["beats_input_codec_plain_applied"],"host":{"name":"squad"},"message":"Sep  6 13:10:01 squad CRON[20833]: pam_unix(cron:session): session closed for user root","agent":{"type":"filebeat","version":"7.3.1","hostname":"squad","ephemeral_id":"ef68c38b-2b50-4269-af2c-ca9f1687c62a","id":"18aded70-5948-4fd7-b312-3c788d1c4fff"},"fields":{"env":"local"},"log":{"file":{"path":"/var/log/auth.log"},"offset":288094}}\n