{
  "query": {
    "match_all": {}
  },
  "aggs": {
    "count(agent)": {
      "value_count": {
        "field": "agent.keyword"
      }
    },
    "agent": {
      "cardinality": {
        "field": "agent.keyword"
      }
    },
    "beat.hostname": {
      "cardinality": {
        "field": "beat.hostname.keyword"
      }
    },
    "beat.name": {
      "cardinality": {
        "field": "beat.name.keyword"
      }
    },
    "beat.version": {
      "cardinality": {
        "field": "beat.version.keyword"
      }
    },
    "bytes": {
      "cardinality": {
        "field": "bytes.keyword"
      }
    },
    "geoip.city_name": {
      "cardinality": {
        "field": "geoip.city_name.keyword"
      }
    },
    "geoip.continent_code": {
      "cardinality": {
        "field": "geoip.continent_code.keyword"
      }
    },
    "geoip.country_code2": {
      "cardinality": {
        "field": "geoip.country_code2.keyword"
      }
    },
    "geoip.country_code3": {
      "cardinality": {
        "field": "geoip.country_code3.keyword"
      }
    },
    "geoip.country_name": {
      "cardinality": {
        "field": "geoip.country_name.keyword"
      }
    },
    "geoip.dma_code": {
      "cardinality": {
        "field": "geoip.dma_code"
      }
    },
    "geoip.ip": {
      "cardinality": {
        "field": "geoip.ip.keyword"
      }
    },
    "geoip.latitude": {
      "cardinality": {
        "field": "geoip.latitude"
      }
    },
    "geoip.location.lat": {
      "cardinality": {
        "field": "geoip.location.lat"
      }
    },
    "geoip.location.lon": {
      "cardinality": {
        "field": "geoip.location.lon"
      }
    },
    "geoip.longitude": {
      "cardinality": {
        "field": "geoip.longitude"
      }
    },
    "geoip.postal_code": {
      "cardinality": {
        "field": "geoip.postal_code.keyword"
      }
    },
    "geoip.region_code": {
      "cardinality": {
        "field": "geoip.region_code.keyword"
      }
    },
    "geoip.region_name": {
      "cardinality": {
        "field": "geoip.region_name.keyword"
      }
    },
    "geoip.timezone": {
      "cardinality": {
        "field": "geoip.timezone.keyword"
      }
    },
    "host.name": {
      "cardinality": {
        "field": "host.name.keyword"
      }
    },
    "http_version": {
      "cardinality": {
        "field": "http_version.keyword"
      }
    },
    "input.type": {
      "cardinality": {
        "field": "input.type.keyword"
      }
    },
    "message": {
      "cardinality": {
        "field": "message.keyword"
      }
    },
    "offset": {
      "cardinality": {
        "field": "offset"
      }
    },
    "prospector.type": {
      "cardinality": {
        "field": "prospector.type.keyword"
      }
    },
    "referrer": {
      "cardinality": {
        "field": "referrer.keyword"
      }
    },
    "remote_ip": {
      "cardinality": {
        "field": "remote_ip.keyword"
      }
    },
    "request": {
      "cardinality": {
        "field": "request.keyword"
      }
    },
    "request_action": {
      "cardinality": {
        "field": "request_action.keyword"
      }
    },
    "response": {
      "cardinality": {
        "field": "response.keyword"
      }
    },
    "source": {
      "cardinality": {
        "field": "source.keyword"
      }
    },
    "tags": {
      "cardinality": {
        "field": "tags.keyword"
      }
    },
    "time": {
      "cardinality": {
        "field": "time.keyword"
      }
    },
    "user_agent.build": {
      "cardinality": {
        "field": "user_agent.build.keyword"
      }
    },
    "user_agent.device": {
      "cardinality": {
        "field": "user_agent.device.keyword"
      }
    },
    "user_agent.major": {
      "cardinality": {
        "field": "user_agent.major.keyword"
      }
    },
    "user_agent.minor": {
      "cardinality": {
        "field": "user_agent.minor.keyword"
      }
    },
    "user_agent.name": {
      "cardinality": {
        "field": "user_agent.name.keyword"
      }
    },
    "user_agent.os": {
      "cardinality": {
        "field": "user_agent.os.keyword"
      }
    },
    "user_agent.os_major": {
      "cardinality": {
        "field": "user_agent.os_major.keyword"
      }
    },
    "user_agent.os_minor": {
      "cardinality": {
        "field": "user_agent.os_minor.keyword"
      }
    },
    "user_agent.os_name": {
      "cardinality": {
        "field": "user_agent.os_name.keyword"
      }
    },
    "user_agent.patch": {
      "cardinality": {
        "field": "user_agent.patch.keyword"
      }
    },
    "user_name": {
      "cardinality": {
        "field": "user_name.keyword"
      }
    },
    "timeline": {
      "date_histogram": {
        "interval": "1d",
        "field": "@timestamp"
      }
    }
  },
  "size": 0
}