- {
- "logstash-2023.03.27": {
- "mappings": {
- "dynamic_templates": [
- {
- "id_fields": {
- "match": "*_id",
- "mapping": {
- "ignore_above": 256,
- "type": "keyword"
- }
- }
- },
- {
- "string_fields": {
- "match": "*",
- "match_mapping_type": "string",
- "mapping": {
- "norms": false,
- "type": "text"
- }
- }
- },
- {
- "boolean_fields": {
- "match": "*",
- "match_mapping_type": "boolean",
- "mapping": {
- "norms": false,
- "type": "text"
- }
- }
- },
- {
- "long_fields": {
- "match": "*",
- "match_mapping_type": "long",
- "mapping": {
- "norms": false,
- "type": "text"
- }
- }
- },
- {
- "double_fields": {
- "match": "*",
- "match_mapping_type": "double",
- "mapping": {
- "norms": false,
- "type": "text"
- }
- }
- }
- ],
- "date_detection": false,
- "numeric_detection": false,
- "properties": {
- "@timestamp": {
- "type": "date"
- },
- "@version": {
- "type": "text",
- "norms": false
- },
- "_all": {
- "type": "object",
- "enabled": false
- },
- "absolute_site_domain_name": {
- "type": "text",
- "norms": false
- },
- "access_type_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "accountdomain": {
- "type": "text",
- "norms": false
- },
- "accountname": {
- "type": "text",
- "norms": false
- },
- "accounttype": {
- "type": "text",
- "norms": false
- },
- "accreditations": {
- "type": "text",
- "norms": false
- },
- "action": {
- "type": "text",
- "norms": false
- },
- "action_data": {
- "type": "text",
- "norms": false
- },
- "action_name": {
- "type": "text",
- "norms": false
- },
- "actionname": {
- "type": "text",
- "norms": false
- },
- "actions": {
- "type": "text",
- "norms": false
- },
- "active": {
- "type": "text",
- "norms": false
- },
- "activityid": {
- "type": "text",
- "norms": false
- },
- "activityvalidationtimeout": {
- "type": "text",
- "norms": false
- },
- "actual_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "adapterguid": {
- "type": "text",
- "norms": false
- },
- "adaptername": {
- "type": "text",
- "norms": false
- },
- "adapterserialnumberlength": {
- "type": "text",
- "norms": false
- },
- "adaptersuffixname": {
- "type": "text",
- "norms": false
- },
- "added_by": {
- "type": "text",
- "norms": false
- },
- "additionalinfo": {
- "type": "text",
- "norms": false
- },
- "additionalinfohr": {
- "type": "text",
- "norms": false
- },
- "additionalsensecode": {
- "type": "text",
- "norms": false
- },
- "additionalsensecodequalifier": {
- "type": "text",
- "norms": false
- },
- "address": {
- "type": "text",
- "norms": false
- },
- "addresslength": {
- "type": "text",
- "norms": false
- },
- "addsense": {
- "type": "text",
- "norms": false
- },
- "addsenseq": {
- "type": "text",
- "norms": false
- },
- "adjustmentppm": {
- "type": "text",
- "norms": false
- },
- "admin_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "admin_user_name": {
- "type": "text",
- "norms": false
- },
- "affiliatename": {
- "type": "text",
- "norms": false
- },
- "aicc_data": {
- "type": "text",
- "norms": false
- },
- "aicc_request_headers": {
- "type": "text",
- "norms": false
- },
- "aicc_session_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "aicc_session_key": {
- "type": "text",
- "norms": false
- },
- "aicc_session_registration_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "aicc_sid": {
- "type": "text",
- "norms": false
- },
- "aicc_url": {
- "type": "text",
- "norms": false
- },
- "aide": {
- "dynamic": "true",
- "properties": {
- "file": {
- "type": "keyword"
- },
- "package": {
- "type": "keyword"
- },
- "packages_installed": {
- "type": "keyword"
- },
- "status": {
- "type": "keyword"
- }
- }
- },
- "alert": {
- "properties": {
- "action": {
- "type": "text",
- "norms": false
- },
- "category": {
- "type": "keyword",
- "ignore_above": 256
- },
- "gid": {
- "type": "text",
- "norms": false
- },
- "metadata": {
- "properties": {
- "affected_product": {
- "type": "text",
- "norms": false
- },
- "attack_target": {
- "type": "text",
- "norms": false
- },
- "confidence": {
- "type": "text",
- "norms": false
- },
- "created_at": {
- "type": "text",
- "norms": false
- },
- "cve": {
- "type": "text",
- "norms": false
- },
- "deployment": {
- "type": "text",
- "norms": false
- },
- "former_category": {
- "type": "text",
- "norms": false
- },
- "mitre_tactic_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "mitre_tactic_name": {
- "type": "text",
- "norms": false
- },
- "mitre_technique_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "mitre_technique_name": {
- "type": "text",
- "norms": false
- },
- "performance_impact": {
- "type": "text",
- "norms": false
- },
- "signature_severity": {
- "type": "text",
- "norms": false
- },
- "tag": {
- "type": "text",
- "norms": false
- },
- "updated_at": {
- "type": "text",
- "norms": false
- }
- }
- },
- "rev": {
- "type": "text",
- "norms": false
- },
- "severity": {
- "type": "text",
- "norms": false
- },
- "signature": {
- "type": "keyword",
- "ignore_above": 256
- },
- "signature_id": {
- "type": "keyword",
- "ignore_above": 256
- }
- }
- },
- "all_users": {
- "type": "text",
- "norms": false
- },
- "allntpservers": {
- "type": "text",
- "norms": false
- },
- "allow_auto_register": {
- "type": "text",
- "norms": false
- },
- "allow_create": {
- "type": "text",
- "norms": false
- },
- "allow_duplicate_emails": {
- "type": "text",
- "norms": false
- },
- "amount": {
- "type": "text",
- "norms": false
- },
- "app_proto": {
- "type": "keyword"
- },
- "apparmor": {
- "type": "text",
- "norms": false
- },
- "appcontainername": {
- "type": "text",
- "norms": false
- },
- "appdomain": {
- "type": "text",
- "norms": false
- },
- "applicablegpolist": {
- "type": "text",
- "norms": false
- },
- "applicationpath": {
- "type": "text",
- "norms": false
- },
- "apppoolid": {
- "type": "text",
- "norms": false
- },
- "approval_status_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "appsettings": {
- "type": "text",
- "norms": false
- },
- "apptype": {
- "type": "text",
- "norms": false
- },
- "appusermodelid": {
- "type": "text",
- "norms": false
- },
- "as_security_intelligence_creation_time": {
- "type": "text",
- "norms": false
- },
- "as_security_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "assign_components": {
- "type": "text",
- "norms": false
- },
- "assigned": {
- "type": "text",
- "norms": false
- },
- "assigned_credits": {
- "type": "text",
- "norms": false
- },
- "assigned_groups": {
- "type": "text",
- "norms": false
- },
- "assigned_labels": {
- "type": "text",
- "norms": false
- },
- "associated_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "asynchronousreadiocountsbucket1": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket10": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket11": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket12": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket2": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket3": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket4": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket5": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket6": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket7": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket8": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiocountsbucket9": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadiomaxlatency": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket1": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket10": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket11": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket12": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket2": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket3": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket4": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket5": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket6": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket7": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket8": {
- "type": "text",
- "norms": false
- },
- "asynchronousreadtotallatencybucket9": {
- "type": "text",
- "norms": false
- },
- "attributeid": {
- "type": "text",
- "norms": false
- },
- "attributes": {
- "type": "text",
- "norms": false
- },
- "audit_backlog": {
- "type": "text",
- "norms": false
- },
- "audit_backlog_limit": {
- "type": "text",
- "norms": false
- },
- "audit_lost": {
- "type": "text",
- "norms": false
- },
- "audit_rate_limit": {
- "type": "text",
- "norms": false
- },
- "auditsourcename": {
- "type": "text",
- "norms": false
- },
- "auth": {
- "properties": {
- "accessor": {
- "type": "text",
- "norms": false
- },
- "client_token": {
- "type": "text",
- "norms": false
- },
- "display_name": {
- "type": "text",
- "norms": false
- },
- "entity_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "metadata": {
- "properties": {
- "role": {
- "type": "text",
- "norms": false
- },
- "service_account_name": {
- "type": "text",
- "norms": false
- },
- "service_account_namespace": {
- "type": "text",
- "norms": false
- },
- "service_account_secret_name": {
- "type": "text",
- "norms": false
- },
- "service_account_uid": {
- "type": "text",
- "norms": false
- },
- "username": {
- "type": "text",
- "norms": false
- }
- }
- },
- "policies": {
- "type": "text",
- "norms": false
- },
- "policy_results": {
- "properties": {
- "allowed": {
- "type": "text",
- "norms": false
- },
- "granting_policies": {
- "properties": {
- "name": {
- "type": "text",
- "norms": false
- },
- "namespace_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "type": {
- "type": "text",
- "norms": false
- }
- }
- }
- }
- },
- "token_issue_time": {
- "type": "text",
- "norms": false
- },
- "token_policies": {
- "type": "text",
- "norms": false
- },
- "token_ttl": {
- "type": "text",
- "norms": false
- },
- "token_type": {
- "type": "text",
- "norms": false
- },
- "value": {
- "type": "text",
- "norms": false
- }
- }
- },
- "authenticationpackagename": {
- "type": "text",
- "norms": false
- },
- "authn_method": {
- "type": "text",
- "norms": false
- },
- "authrequired": {
- "type": "text",
- "norms": false
- },
- "autoregister": {
- "type": "text",
- "norms": false
- },
- "av_security_intelligence_creation_time": {
- "type": "text",
- "norms": false
- },
- "av_security_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "availabespacedeltastr": {
- "type": "text",
- "norms": false
- },
- "availabespacemaxstr": {
- "type": "text",
- "norms": false
- },
- "availabespaceminstr": {
- "type": "text",
- "norms": false
- },
- "availableclustersmax": {
- "type": "text",
- "norms": false
- },
- "availableclustersmin": {
- "type": "text",
- "norms": false
- },
- "avcenabled": {
- "type": "text",
- "norms": false
- },
- "averagebps": {
- "type": "text",
- "norms": false
- },
- "averageiops": {
- "type": "text",
- "norms": false
- },
- "averagelatencyns": {
- "type": "text",
- "norms": false
- },
- "averagelatencystr": {
- "type": "text",
- "norms": false
- },
- "avgdailydriftseconds": {
- "type": "text",
- "norms": false
- },
- "avgfileleveltrimsize": {
- "type": "text",
- "norms": false
- },
- "avgfileleveltrimtime": {
- "type": "text",
- "norms": false
- },
- "avgfreqdurationmins": {
- "type": "text",
- "norms": false
- },
- "avgfrequencyerrorppm": {
- "type": "text",
- "norms": false
- },
- "avgvolumetrimsize": {
- "type": "text",
- "norms": false
- },
- "avgvolumetrimtime": {
- "type": "text",
- "norms": false
- },
- "backupfailurelogpath": {
- "type": "text",
- "norms": false
- },
- "backupflags": {
- "type": "text",
- "norms": false
- },
- "backuppreviousstate": {
- "type": "text",
- "norms": false
- },
- "backupstate": {
- "type": "text",
- "norms": false
- },
- "backupsuccesslogpath": {
- "type": "text",
- "norms": false
- },
- "backuptarget": {
- "type": "text",
- "norms": false
- },
- "backuptemplateid": {
- "type": "text",
- "norms": false
- },
- "backuptime": {
- "type": "text",
- "norms": false
- },
- "backupwriteendtime": {
- "type": "text",
- "norms": false
- },
- "backupwritestarttime": {
- "type": "text",
- "norms": false
- },
- "bandwidthinkbps": {
- "type": "text",
- "norms": false
- },
- "bandwidthlimit": {
- "type": "text",
- "norms": false
- },
- "barrier": {
- "type": "text",
- "norms": false
- },
- "batch_process_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "bitmapreadbytes": {
- "type": "text",
- "norms": false
- },
- "bitmapreads": {
- "type": "text",
- "norms": false
- },
- "bitmapwritebytes": {
- "type": "text",
- "norms": false
- },
- "bitmapwrites": {
- "type": "text",
- "norms": false
- },
- "bls_course_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "bm_state": {
- "type": "text",
- "norms": false
- },
- "bmr": {
- "type": "text",
- "norms": false
- },
- "bms_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "bms_user_name": {
- "type": "text",
- "norms": false
- },
- "body": {
- "type": "text",
- "norms": false
- },
- "bootdevice": {
- "type": "text",
- "norms": false
- },
- "browser": {
- "type": "text",
- "norms": false
- },
- "browser_metrics": {
- "properties": {
- "build": {
- "type": "keyword"
- },
- "device": {
- "type": "keyword"
- },
- "major": {
- "type": "keyword"
- },
- "minor": {
- "type": "keyword"
- },
- "name": {
- "type": "keyword"
- },
- "os": {
- "type": "keyword"
- },
- "os_full": {
- "type": "text",
- "norms": false
- },
- "os_major": {
- "type": "keyword"
- },
- "os_minor": {
- "type": "keyword"
- },
- "os_name": {
- "type": "keyword"
- },
- "os_patch": {
- "type": "text",
- "norms": false
- },
- "os_version": {
- "type": "text",
- "norms": false
- },
- "patch": {
- "type": "keyword"
- },
- "version": {
- "type": "text",
- "norms": false
- }
- }
- },
- "browser_minor_version": {
- "type": "text",
- "norms": false
- },
- "browser_type": {
- "type": "text",
- "norms": false
- },
- "browser_version": {
- "type": "text",
- "norms": false
- },
- "browsersupportsactivexcontrols": {
- "type": "text",
- "norms": false
- },
- "browsersupportscookies": {
- "type": "text",
- "norms": false
- },
- "browsersupportsjavascript": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed1": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed10": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed11": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed12": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed2": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed3": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed4": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed5": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed6": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed7": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed8": {
- "type": "text",
- "norms": false
- },
- "bucketiofailed9": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency10_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency11_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency12_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency1_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency2_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency3_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency4_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency5_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency6_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency7_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency8_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiolatency9_100ns": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess1": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess10": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess11": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess12": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess2": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess3": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess4": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess5": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess6": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess7": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess8": {
- "type": "text",
- "norms": false
- },
- "bucketiosuccess9": {
- "type": "text",
- "norms": false
- },
- "buffersize": {
- "type": "text",
- "norms": false
- },
- "bustype": {
- "type": "text",
- "norms": false
- },
- "bytes": {
- "type": "long",
- "ignore_malformed": true
- },
- "bytestotal": {
- "type": "text",
- "norms": false
- },
- "bytestransferred": {
- "type": "text",
- "norms": false
- },
- "bytestransferredfrompeer": {
- "type": "text",
- "norms": false
- },
- "bytesuploaded": {
- "type": "text",
- "norms": false
- },
- "cabx": {
- "type": "text",
- "norms": false
- },
- "cache": {
- "type": "keyword"
- },
- "cachedrunsmisscount": {
- "type": "text",
- "norms": false
- },
- "cachedrunsmisscountformft": {
- "type": "text",
- "norms": false
- },
- "cachedrunsmisscountformftzone": {
- "type": "text",
- "norms": false
- },
- "cachehitratio": {
- "type": "text",
- "norms": false
- },
- "caller": {
- "type": "text",
- "norms": false
- },
- "callerpid": {
- "type": "text",
- "norms": false
- },
- "callerprocessid": {
- "type": "text",
- "norms": false
- },
- "callerprocessname": {
- "type": "text",
- "norms": false
- },
- "callingprocesscreatetime": {
- "type": "text",
- "norms": false
- },
- "callingprocessid": {
- "type": "text",
- "norms": false
- },
- "callingprocessprotection": {
- "type": "text",
- "norms": false
- },
- "callingprocesssectionsignaturelevel": {
- "type": "text",
- "norms": false
- },
- "callingprocesssignaturelevel": {
- "type": "text",
- "norms": false
- },
- "callingprocessstartkey": {
- "type": "text",
- "norms": false
- },
- "callingthreadcreatetime": {
- "type": "text",
- "norms": false
- },
- "callingthreadid": {
- "type": "text",
- "norms": false
- },
- "capability": {
- "type": "text",
- "norms": false
- },
- "capf1mjz7": {
- "type": "text",
- "norms": false
- },
- "capname": {
- "type": "text",
- "norms": false
- },
- "category": {
- "type": "keyword"
- },
- "category_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "ccasynccopyreadcalls": {
- "type": "text",
- "norms": false
- },
- "cccopyreadcalls": {
- "type": "text",
- "norms": false
- },
- "cccopywritecalls": {
- "type": "text",
- "norms": false
- },
- "ccflushcachecalls": {
- "type": "text",
- "norms": false
- },
- "ccsetvaliddatacalls": {
- "type": "text",
- "norms": false
- },
- "cdbbytecount": {
- "type": "text",
- "norms": false
- },
- "cdbbytes": {
- "type": "text",
- "norms": false
- },
- "certificate_types": {
- "type": "text",
- "norms": false
- },
- "challenges": {
- "type": "text",
- "norms": false
- },
- "channel": {
- "type": "text",
- "norms": false
- },
- "channelname": {
- "type": "text",
- "norms": false
- },
- "check": {
- "type": "text",
- "norms": false
- },
- "check_required": {
- "type": "text",
- "norms": false
- },
- "childcommandline": {
- "type": "text",
- "norms": false
- },
- "childcommandlinelength": {
- "type": "text",
- "norms": false
- },
- "childimagepathname": {
- "type": "text",
- "norms": false
- },
- "childimagepathnamelength": {
- "type": "text",
- "norms": false
- },
- "chosenreferencentpserver": {
- "type": "text",
- "norms": false
- },
- "classdeviceguid": {
- "type": "text",
- "norms": false
- },
- "classguid": {
- "type": "text",
- "norms": false
- },
- "client": {
- "type": "text",
- "norms": false
- },
- "client_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "client_ip": {
- "type": "ip"
- },
- "client_user": {
- "type": "text",
- "norms": false
- },
- "clientaddress": {
- "type": "text",
- "norms": false
- },
- "clientdomainname": {
- "type": "text",
- "norms": false
- },
- "clientluid": {
- "type": "text",
- "norms": false
- },
- "clientmode": {
- "type": "text",
- "norms": false
- },
- "clientname": {
- "type": "text",
- "norms": false
- },
- "clientprocessid": {
- "type": "text",
- "norms": false
- },
- "clientprocessstartkey": {
- "type": "text",
- "norms": false
- },
- "clientuser": {
- "type": "keyword"
- },
- "clientusername": {
- "type": "text",
- "norms": false
- },
- "clockrate": {
- "type": "text",
- "norms": false
- },
- "cloud_protection_intelligence_compilation_timestamp": {
- "type": "text",
- "norms": false
- },
- "cloud_protection_intelligence_type": {
- "type": "text",
- "norms": false
- },
- "cloud_protection_intelligence_type_index": {
- "type": "text",
- "norms": false
- },
- "cloud_protection_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "cluster_name": {
- "type": "text",
- "norms": false
- },
- "cluster_uuid": {
- "type": "text",
- "norms": false
- },
- "clustersize": {
- "type": "text",
- "norms": false
- },
- "code": {
- "type": "text",
- "norms": false
- },
- "comm": {
- "type": "text",
- "norms": false
- },
- "command": {
- "type": "text",
- "norms": false
- },
- "command_name": {
- "type": "text",
- "norms": false
- },
- "commands": {
- "type": "text",
- "norms": false
- },
- "comment": {
- "type": "text",
- "norms": false
- },
- "comment_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "comments": {
- "type": "text",
- "norms": false
- },
- "common_args": {
- "type": "text",
- "norms": false
- },
- "competency_nodes": {
- "type": "text",
- "norms": false
- },
- "completed": {
- "type": "text",
- "norms": false
- },
- "completed_scos_number": {
- "type": "text",
- "norms": false
- },
- "component": {
- "type": "text",
- "norms": false
- },
- "componentinfo": {
- "type": "text",
- "norms": false
- },
- "componentinfosummary": {
- "type": "text",
- "norms": false
- },
- "componentname": {
- "type": "text",
- "norms": false
- },
- "componentstatus": {
- "type": "text",
- "norms": false
- },
- "configmap": {
- "type": "text",
- "norms": false
- },
- "configuration": {
- "type": "text",
- "norms": false
- },
- "confirmation_code": {
- "type": "text",
- "norms": false
- },
- "connectionname": {
- "type": "text",
- "norms": false
- },
- "connectiontype": {
- "type": "text",
- "norms": false
- },
- "conntype": {
- "type": "text",
- "norms": false
- },
- "contacts": {
- "type": "text",
- "norms": false
- },
- "containsrawvolumes": {
- "type": "text",
- "norms": false
- },
- "content_size": {
- "type": "text",
- "norms": false
- },
- "content_type": {
- "type": "text",
- "norms": false
- },
- "context": {
- "type": "text",
- "norms": false
- },
- "context_attrs": {
- "type": "text",
- "norms": false
- },
- "contextinfo": {
- "type": "text",
- "norms": false
- },
- "cookie_names": {
- "type": "text",
- "norms": false
- },
- "cookies": {
- "type": "text",
- "norms": false
- },
- "corruptionactionstate": {
- "type": "text",
- "norms": false
- },
- "count": {
- "type": "long",
- "ignore_malformed": true,
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- }
- },
- "countdeletesindesktoparray": {
- "type": "text",
- "norms": false
- },
- "countdeletesindocumentsarray": {
- "type": "text",
- "norms": false
- },
- "countdeletesindownloadsarray": {
- "type": "text",
- "norms": false
- },
- "countdeletesinmusicarray": {
- "type": "text",
- "norms": false
- },
- "countdeletesinotherarray": {
- "type": "text",
- "norms": false
- },
- "countdeletesinpicturesarray": {
- "type": "text",
- "norms": false
- },
- "countdeletesinvideosarray": {
- "type": "text",
- "norms": false
- },
- "countofcredentialsreturned": {
- "type": "text",
- "norms": false
- },
- "course_data": {
- "type": "text",
- "norms": false
- },
- "course_id": {
- "type": "keyword"
- },
- "course_ids": {
- "type": "text",
- "norms": false
- },
- "course_mastery_score": {
- "type": "text",
- "norms": false
- },
- "course_media_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "course_passing_score": {
- "type": "text",
- "norms": false
- },
- "course_provider_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "course_registration_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "course_registration_status": {
- "type": "text",
- "norms": false
- },
- "course_registrations_count": {
- "type": "text",
- "norms": false
- },
- "create_date": {
- "type": "text",
- "norms": false
- },
- "create_registration": {
- "type": "text",
- "norms": false
- },
- "created": {
- "type": "text",
- "norms": false
- },
- "created_by_user": {
- "type": "text",
- "norms": false
- },
- "created_date": {
- "type": "text",
- "norms": false
- },
- "creditlimits": {
- "type": "text",
- "norms": false
- },
- "credits": {
- "type": "text",
- "norms": false
- },
- "credkeyidentifier": {
- "type": "text",
- "norms": false
- },
- "cseelaspedtimeinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "cseextensionid": {
- "type": "text",
- "norms": false
- },
- "cseextensionname": {
- "type": "text",
- "norms": false
- },
- "current_bls_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "current_engine_version": {
- "type": "text",
- "norms": false
- },
- "current_security_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "current_state": {
- "type": "text",
- "norms": false
- },
- "current_status_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "custom_fields": {
- "type": "text",
- "norms": false
- },
- "customlevel": {
- "type": "text",
- "norms": false
- },
- "dailyuploadquotainbytes": {
- "type": "text",
- "norms": false
- },
- "data": {
- "type": "keyword",
- "ignore_above": 256
- },
- "data_limits": {
- "type": "text",
- "norms": false
- },
- "days_before_expire_for_reminder": {
- "type": "text",
- "norms": false
- },
- "dcdiscoverytimeinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "dcdomainname": {
- "type": "text",
- "norms": false
- },
- "dcipaddress": {
- "type": "text",
- "norms": false
- },
- "dcname": {
- "type": "text",
- "norms": false
- },
- "default_locale": {
- "type": "text",
- "norms": false
- },
- "delay": {
- "type": "text",
- "norms": false
- },
- "delays": {
- "type": "text",
- "norms": false
- },
- "deleted": {
- "type": "text",
- "norms": false
- },
- "denied_mask": {
- "type": "text",
- "norms": false
- },
- "descriptionstring": {
- "type": "text",
- "norms": false
- },
- "dest_geoip": {
- "dynamic": "true",
- "properties": {
- "city_name": {
- "type": "text",
- "norms": false
- },
- "continent_code": {
- "type": "text",
- "norms": false
- },
- "country_code2": {
- "type": "text",
- "norms": false
- },
- "ip": {
- "type": "ip"
- },
- "latitude": {
- "type": "float"
- },
- "location": {
- "type": "geo_point"
- },
- "longitude": {
- "type": "float"
- },
- "region_name": {
- "type": "text",
- "norms": false
- }
- }
- },
- "dest_ip": {
- "type": "ip"
- },
- "dest_port": {
- "type": "text",
- "norms": false
- },
- "detail": {
- "type": "text",
- "norms": false
- },
- "detailedhresult": {
- "type": "text",
- "norms": false
- },
- "details": {
- "type": "text",
- "norms": false
- },
- "devicecount": {
- "type": "text",
- "norms": false
- },
- "deviceguid": {
- "type": "text",
- "norms": false
- },
- "deviceinstanceid": {
- "type": "text",
- "norms": false
- },
- "devicename": {
- "type": "text",
- "norms": false
- },
- "devicenamelength": {
- "type": "text",
- "norms": false
- },
- "devicenumber": {
- "type": "text",
- "norms": false
- },
- "devicequeueiobusycount": {
- "type": "text",
- "norms": false
- },
- "devicequeueiopausedcount": {
- "type": "text",
- "norms": false
- },
- "devicequeueiopausedforuntaggedcount": {
- "type": "text",
- "norms": false
- },
- "devicequeueiountaggedcommandoutstandingcount": {
- "type": "text",
- "norms": false
- },
- "devicequeueiowaitexceededtimeoutcount": {
- "type": "text",
- "norms": false
- },
- "deviceserialnumberlength": {
- "type": "text",
- "norms": false
- },
- "devicetime": {
- "type": "text",
- "norms": false
- },
- "deviceupdated": {
- "type": "text",
- "norms": false
- },
- "deviceversionmajor": {
- "type": "text",
- "norms": false
- },
- "deviceversionminor": {
- "type": "text",
- "norms": false
- },
- "diagnosticmoduleid": {
- "type": "text",
- "norms": false
- },
- "diagnosticmoduleimagename": {
- "type": "text",
- "norms": false
- },
- "direction": {
- "type": "text",
- "norms": false
- },
- "dirtypages": {
- "type": "text",
- "norms": false
- },
- "dirtypagesamples": {
- "type": "text",
- "norms": false
- },
- "discount": {
- "type": "text",
- "norms": false
- },
- "diskindex": {
- "type": "text",
- "norms": false
- },
- "disknumber": {
- "type": "text",
- "norms": false
- },
- "diskresourcefailure": {
- "type": "text",
- "norms": false
- },
- "disksizeinbytes": {
- "type": "text",
- "norms": false
- },
- "displaydrivername": {
- "type": "text",
- "norms": false
- },
- "dkim_new": {
- "type": "text",
- "norms": false
- },
- "dkim_sd": {
- "type": "text",
- "norms": false
- },
- "dns": {
- "type": "text",
- "norms": false
- },
- "dnsserverlist": {
- "type": "text",
- "norms": false
- },
- "doc_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "doc_type": {
- "type": "text",
- "norms": false
- },
- "docker": {
- "properties": {
- "container_id": {
- "type": "keyword",
- "ignore_above": 256
- }
- }
- },
- "documents": {
- "type": "text",
- "norms": false
- },
- "domain": {
- "type": "keyword"
- },
- "domainname": {
- "type": "text",
- "norms": false
- },
- "downlevelirpstatus": {
- "type": "text",
- "norms": false
- },
- "dpt": {
- "type": "text",
- "norms": false
- },
- "drivename": {
- "type": "text",
- "norms": false
- },
- "driverdate": {
- "type": "text",
- "norms": false
- },
- "driverinbox": {
- "type": "text",
- "norms": false
- },
- "drivername": {
- "type": "text",
- "norms": false
- },
- "driverprovider": {
- "type": "text",
- "norms": false
- },
- "driverrank": {
- "type": "text",
- "norms": false
- },
- "driversection": {
- "type": "text",
- "norms": false
- },
- "driverversion": {
- "type": "text",
- "norms": false
- },
- "dsn": {
- "type": "text",
- "norms": false
- },
- "dst": {
- "type": "text",
- "norms": false
- },
- "duration": {
- "type": "text",
- "norms": false
- },
- "dvdformatendtime": {
- "type": "text",
- "norms": false
- },
- "dvdformatstarttime": {
- "type": "text",
- "norms": false
- },
- "edgetraversal": {
- "type": "text",
- "norms": false
- },
- "edit_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "egid": {
- "type": "text",
- "norms": false
- },
- "ehlo": {
- "type": "text",
- "norms": false
- },
- "elapsedseconds": {
- "type": "text",
- "norms": false
- },
- "elevatedtoken": {
- "type": "text",
- "norms": false
- },
- "elms_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "email_count": {
- "type": "text",
- "norms": false
- },
- "email_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "email_ids": {
- "type": "text",
- "norms": false
- },
- "email_subject": {
- "type": "text",
- "norms": false
- },
- "email_to": {
- "type": "text",
- "norms": false
- },
- "enabled": {
- "type": "text",
- "norms": false
- },
- "encryption_system_name": {
- "type": "text",
- "norms": false
- },
- "end_date": {
- "type": "text",
- "norms": false
- },
- "endpoint": {
- "type": "text",
- "norms": false
- },
- "engine_version": {
- "type": "text",
- "norms": false
- },
- "enginepid": {
- "type": "text",
- "norms": false
- },
- "enrollment_session_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "enrollment_session_record_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "entity_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "enumeratebackupendtime": {
- "type": "text",
- "norms": false
- },
- "enumeratebackupstarttime": {
- "type": "text",
- "norms": false
- },
- "environment": {
- "type": "text",
- "norms": false
- },
- "epoch": {
- "type": "text",
- "norms": false
- },
- "error": {
- "type": "text",
- "norms": false
- },
- "error_code": {
- "type": "text",
- "norms": false
- },
- "error_details": {
- "type": "text",
- "norms": false
- },
- "error_evt_unresolved": {
- "type": "text",
- "norms": false
- },
- "error_message": {
- "type": "text",
- "norms": false
- },
- "error_notification_address": {
- "type": "text",
- "norms": false
- },
- "error_text": {
- "type": "text",
- "norms": false
- },
- "errorcode": {
- "type": "text",
- "norms": false
- },
- "errormessage": {
- "type": "text",
- "norms": false
- },
- "event": {
- "type": "text",
- "norms": false
- },
- "event_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "event_name": {
- "type": "text",
- "norms": false
- },
- "event_type": {
- "type": "text",
- "norms": false
- },
- "event_uid": {
- "type": "alias",
- "path": "uid"
- },
- "eventname": {
- "type": "text",
- "norms": false
- },
- "eventsamples": {
- "type": "text",
- "norms": false
- },
- "eventsdropped": {
- "type": "text",
- "norms": false
- },
- "eventsourceid": {
- "type": "text",
- "norms": false
- },
- "eventsuploaded": {
- "type": "text",
- "norms": false
- },
- "expires": {
- "type": "text",
- "norms": false
- },
- "extentsbucketscount": {
- "type": "text",
- "norms": false
- },
- "external_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "external_registration_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "failurereason": {
- "type": "text",
- "norms": false
- },
- "field_name": {
- "type": "text",
- "norms": false
- },
- "file": {
- "type": "text",
- "norms": false
- },
- "file_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "file_name": {
- "type": "text",
- "norms": false
- },
- "file_path": {
- "type": "text",
- "norms": false
- },
- "filecount": {
- "type": "text",
- "norms": false
- },
- "fileflushavglatencyns": {
- "type": "text",
- "norms": false
- },
- "fileflushcount": {
- "type": "text",
- "norms": false
- },
- "filelength": {
- "type": "text",
- "norms": false
- },
- "fileleveltrimavglatencyns": {
- "type": "text",
- "norms": false
- },
- "fileleveltrimcount": {
- "type": "text",
- "norms": false
- },
- "fileleveltrimextentscount": {
- "type": "text",
- "norms": false
- },
- "fileleveltrimsize": {
- "type": "text",
- "norms": false
- },
- "fileleveltrimtime": {
- "type": "text",
- "norms": false
- },
- "fileleveltrimtotalbytes": {
- "type": "text",
- "norms": false
- },
- "filesystem": {
- "type": "text",
- "norms": false
- },
- "filetime": {
- "type": "text",
- "norms": false
- },
- "finalstatus": {
- "type": "text",
- "norms": false
- },
- "firmwareversion": {
- "type": "text",
- "norms": false
- },
- "firstgraphicsreceived": {
- "type": "text",
- "norms": false
- },
- "flags": {
- "type": "text",
- "norms": false
- },
- "flow": {
- "properties": {
- "bytes_toclient": {
- "type": "text",
- "norms": false
- },
- "bytes_toserver": {
- "type": "text",
- "norms": false
- },
- "dest_ip": {
- "type": "text",
- "norms": false
- },
- "dest_port": {
- "type": "text",
- "norms": false
- },
- "pkts_toclient": {
- "type": "text",
- "norms": false
- },
- "pkts_toserver": {
- "type": "text",
- "norms": false
- },
- "src_ip": {
- "type": "text",
- "norms": false
- },
- "src_port": {
- "type": "text",
- "norms": false
- },
- "start": {
- "type": "text",
- "norms": false
- }
- }
- },
- "flow_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "flowlbl": {
- "type": "text",
- "norms": false
- },
- "flushed_session_key": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket1": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket2": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket3": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket4": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket5": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket6": {
- "type": "text",
- "norms": false
- },
- "flushlatencybucket7": {
- "type": "text",
- "norms": false
- },
- "folderid": {
- "type": "text",
- "norms": false
- },
- "formparameters": {
- "type": "text",
- "norms": false
- },
- "forwarded_for": {
- "type": "ip"
- },
- "from": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "from_group_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "fsuid": {
- "type": "text",
- "norms": false
- },
- "ftp_host": {
- "type": "text",
- "norms": false
- },
- "function": {
- "type": "text",
- "norms": false
- },
- "generated_login_name": {
- "type": "text",
- "norms": false
- },
- "geoip": {
- "dynamic": "true",
- "properties": {
- "city_name": {
- "type": "text",
- "norms": false
- },
- "continent_code": {
- "type": "text",
- "norms": false
- },
- "country_code2": {
- "type": "text",
- "norms": false
- },
- "ip": {
- "type": "ip"
- },
- "latitude": {
- "type": "float"
- },
- "location": {
- "type": "geo_point"
- },
- "longitude": {
- "type": "float"
- },
- "region_name": {
- "type": "text",
- "norms": false
- }
- }
- },
- "gfp_mask": {
- "type": "text",
- "norms": false
- },
- "gfxchannelopened": {
- "type": "text",
- "norms": false
- },
- "gpodownloadtimeelapsedinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "gpoinfolist": {
- "type": "text",
- "norms": false
- },
- "gpolist": {
- "type": "text",
- "norms": false
- },
- "gpoliststatusstring": {
- "type": "text",
- "norms": false
- },
- "group": {
- "type": "text",
- "norms": false
- },
- "group_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "group_ids": {
- "type": "text",
- "norms": false
- },
- "groupid": {
- "type": "text",
- "norms": false
- },
- "grouppolicyvalue": {
- "type": "text",
- "norms": false
- },
- "groups": {
- "type": "text",
- "norms": false
- },
- "groups_count": {
- "type": "text",
- "norms": false
- },
- "handleid": {
- "type": "text",
- "norms": false
- },
- "handler_product_type": {
- "type": "text",
- "norms": false
- },
- "hasattr_user": {
- "type": "text",
- "norms": false
- },
- "hasauthurl": {
- "type": "text",
- "norms": false
- },
- "hasendauthurl": {
- "type": "text",
- "norms": false
- },
- "hasflowurl": {
- "type": "text",
- "norms": false
- },
- "hc_stateid": {
- "type": "text",
- "norms": false
- },
- "headers": {
- "type": "text",
- "norms": false
- },
- "helo": {
- "type": "text",
- "norms": false
- },
- "hierarchicalresetsuccesscount": {
- "type": "text",
- "norms": false
- },
- "highestfreespaceinbytes": {
- "type": "text",
- "norms": false
- },
- "highiolatencycount": {
- "type": "text",
- "norms": false
- },
- "highlatencyiocount": {
- "type": "text",
- "norms": false
- },
- "hits": {
- "type": "text",
- "norms": false
- },
- "hivename": {
- "type": "text",
- "norms": false
- },
- "hivenamelength": {
- "type": "text",
- "norms": false
- },
- "hlasterror": {
- "type": "text",
- "norms": false
- },
- "hoplimit": {
- "type": "text",
- "norms": false
- },
- "host": {
- "type": "keyword"
- },
- "hostname": {
- "type": "text",
- "norms": false
- },
- "hr": {
- "type": "text",
- "norms": false
- },
- "hrerror": {
- "type": "text",
- "norms": false
- },
- "hresult": {
- "type": "text",
- "norms": false
- },
- "htp_host": {
- "type": "text",
- "norms": false
- },
- "http_method": {
- "type": "text",
- "norms": false
- },
- "http_referrer": {
- "type": "text",
- "norms": false
- },
- "http_status": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "http_useragent": {
- "type": "keyword"
- },
- "http_version": {
- "type": "text",
- "norms": false
- },
- "hugepages_free": {
- "type": "text",
- "norms": false
- },
- "hugepages_size": {
- "type": "text",
- "norms": false
- },
- "hugepages_surp": {
- "type": "text",
- "norms": false
- },
- "hugepages_total": {
- "type": "text",
- "norms": false
- },
- "icmp_code": {
- "type": "text",
- "norms": false
- },
- "icmp_type": {
- "type": "text",
- "norms": false
- },
- "id": {
- "type": "text",
- "norms": false
- },
- "idleseconds": {
- "type": "text",
- "norms": false
- },
- "idleseconds1": {
- "type": "text",
- "norms": false
- },
- "idleseconds2": {
- "type": "text",
- "norms": false
- },
- "iftstmp": {
- "type": "text",
- "norms": false
- },
- "ignorebandwidthlimitsonlan": {
- "type": "text",
- "norms": false
- },
- "ikey": {
- "type": "text",
- "norms": false
- },
- "imagename": {
- "type": "text",
- "norms": false
- },
- "imagenamelength": {
- "type": "text",
- "norms": false
- },
- "imagepath": {
- "type": "text",
- "norms": false
- },
- "impersonated_by_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "impersonationlevel": {
- "type": "text",
- "norms": false
- },
- "impersonationuserid": {
- "type": "text",
- "norms": false
- },
- "in": {
- "type": "text",
- "norms": false
- },
- "in_iface": {
- "type": "text",
- "norms": false
- },
- "index": {
- "type": "text",
- "norms": false
- },
- "info": {
- "type": "text",
- "norms": false
- },
- "infodescription": {
- "type": "text",
- "norms": false
- },
- "inproc": {
- "type": "text",
- "norms": false
- },
- "installpackagelist": {
- "type": "text",
- "norms": false
- },
- "instanceid": {
- "type": "text",
- "norms": false
- },
- "instancename": {
- "type": "text",
- "norms": false
- },
- "instancenamelength": {
- "type": "text",
- "norms": false
- },
- "instructorid": {
- "type": "text",
- "norms": false
- },
- "interface": {
- "type": "text",
- "norms": false
- },
- "internalid": {
- "type": "text",
- "norms": false
- },
- "intervaldurationms": {
- "type": "text",
- "norms": false
- },
- "intervaldurationstr": {
- "type": "text",
- "norms": false
- },
- "intervaldurationus": {
- "type": "text",
- "norms": false
- },
- "ioav_state": {
- "type": "text",
- "norms": false
- },
- "iobucketscount": {
- "type": "text",
- "norms": false
- },
- "iocount": {
- "type": "text",
- "norms": false
- },
- "iocount0": {
- "type": "text",
- "norms": false
- },
- "iocount1": {
- "type": "text",
- "norms": false
- },
- "iocount10": {
- "type": "text",
- "norms": false
- },
- "iocount11": {
- "type": "text",
- "norms": false
- },
- "iocount2": {
- "type": "text",
- "norms": false
- },
- "iocount3": {
- "type": "text",
- "norms": false
- },
- "iocount4": {
- "type": "text",
- "norms": false
- },
- "iocount5": {
- "type": "text",
- "norms": false
- },
- "iocount6": {
- "type": "text",
- "norms": false
- },
- "iocount7": {
- "type": "text",
- "norms": false
- },
- "iocount8": {
- "type": "text",
- "norms": false
- },
- "iocount9": {
- "type": "text",
- "norms": false
- },
- "ioctlcontrolcode": {
- "type": "text",
- "norms": false
- },
- "iolatencybuckets": {
- "type": "text",
- "norms": false
- },
- "iosize": {
- "type": "text",
- "norms": false
- },
- "iotimeout_s": {
- "type": "text",
- "norms": false
- },
- "iotype": {
- "type": "text",
- "norms": false
- },
- "iotypeindex": {
- "type": "text",
- "norms": false
- },
- "iotypestr": {
- "type": "text",
- "norms": false
- },
- "ip": {
- "type": "text",
- "norms": false
- },
- "ipaddress": {
- "type": "ip"
- },
- "ipport": {
- "type": "text",
- "norms": false
- },
- "irpstatus": {
- "type": "text",
- "norms": false
- },
- "is_anonymous": {
- "type": "text",
- "norms": false
- },
- "is_new": {
- "type": "text",
- "norms": false
- },
- "is_succeeded": {
- "type": "text",
- "norms": false
- },
- "isasyncprocessing": {
- "type": "text",
- "norms": false
- },
- "isbackgroundprocessing": {
- "type": "text",
- "norms": false
- },
- "isbootvolume": {
- "type": "text",
- "norms": false
- },
- "isconnectivityfailure": {
- "type": "text",
- "norms": false
- },
- "isdomainjoined": {
- "type": "text",
- "norms": false
- },
- "isenabled": {
- "type": "text",
- "norms": false
- },
- "isextensionasyncprocessing": {
- "type": "text",
- "norms": false
- },
- "isgpolistchanged": {
- "type": "text",
- "norms": false
- },
- "ismachine": {
- "type": "text",
- "norms": false
- },
- "isscripthidden": {
- "type": "text",
- "norms": false
- },
- "isscriptminimized": {
- "type": "text",
- "norms": false
- },
- "isscriptsync": {
- "type": "text",
- "norms": false
- },
- "isservicerestart": {
- "type": "text",
- "norms": false
- },
- "isslowlink": {
- "type": "text",
- "norms": false
- },
- "isspecialuserprofile": {
- "type": "text",
- "norms": false
- },
- "issuer": {
- "type": "text",
- "norms": false
- },
- "jobid": {
- "type": "text",
- "norms": false
- },
- "jobowner": {
- "type": "text",
- "norms": false
- },
- "jobtitle": {
- "type": "text",
- "norms": false
- },
- "key": {
- "type": "text",
- "norms": false
- },
- "keylength": {
- "type": "text",
- "norms": false
- },
- "keyname": {
- "type": "text",
- "norms": false
- },
- "keysupdated": {
- "type": "text",
- "norms": false
- },
- "kubernetes": {
- "properties": {
- "container_image": {
- "type": "text",
- "norms": false
- },
- "container_image_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "container_name": {
- "type": "text",
- "norms": false
- },
- "host": {
- "type": "text",
- "norms": false
- },
- "labels": {
- "properties": {
- "app": {
- "type": "text",
- "norms": false
- },
- "app_kubernetes_io/component": {
- "type": "text",
- "norms": false
- },
- "app_kubernetes_io/instance": {
- "type": "text",
- "norms": false
- },
- "app_kubernetes_io/name": {
- "type": "text",
- "norms": false
- },
- "component": {
- "type": "text",
- "norms": false
- },
- "controller-revision-hash": {
- "type": "text",
- "norms": false
- },
- "controller-uid": {
- "type": "text",
- "norms": false
- },
- "job-name": {
- "type": "text",
- "norms": false
- },
- "k8s-app": {
- "type": "text",
- "norms": false
- },
- "pod-template-generation": {
- "type": "text",
- "norms": false
- },
- "pod-template-hash": {
- "type": "text",
- "norms": false
- },
- "role": {
- "type": "text",
- "norms": false
- },
- "run": {
- "type": "text",
- "norms": false
- },
- "statefulset_kubernetes_io/pod-name": {
- "type": "text",
- "norms": false
- }
- }
- },
- "master_url": {
- "type": "text",
- "norms": false
- },
- "namespace_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "namespace_labels": {
- "properties": {
- "app": {
- "type": "text",
- "norms": false
- },
- "app_kubernetes_io/instance": {
- "type": "text",
- "norms": false
- },
- "app_kubernetes_io/name": {
- "type": "text",
- "norms": false
- },
- "field_cattle_io/projectId": {
- "type": "text",
- "norms": false
- },
- "kubernetes_io/metadata_name": {
- "type": "text",
- "norms": false
- },
- "name": {
- "type": "text",
- "norms": false
- },
- "objectset_rio_cattle_io/hash": {
- "type": "text",
- "norms": false
- }
- }
- },
- "namespace_name": {
- "type": "text",
- "norms": false
- },
- "pod_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "pod_ip": {
- "type": "text",
- "norms": false
- },
- "pod_name": {
- "type": "text",
- "norms": false
- }
- }
- },
- "last_activity_date": {
- "type": "text",
- "norms": false
- },
- "last_as_security_intelligence_age": {
- "type": "text",
- "norms": false
- },
- "last_av_security_intelligence_age": {
- "type": "text",
- "norms": false
- },
- "last_completion_date": {
- "type": "text",
- "norms": false
- },
- "last_full_scan_age": {
- "type": "text",
- "norms": false
- },
- "last_full_scan_end_time": {
- "type": "text",
- "norms": false
- },
- "last_full_scan_source": {
- "type": "text",
- "norms": false
- },
- "last_full_scan_start_time": {
- "type": "text",
- "norms": false
- },
- "last_quick_scan_age": {
- "type": "text",
- "norms": false
- },
- "last_quick_scan_end_time": {
- "type": "text",
- "norms": false
- },
- "last_quick_scan_source": {
- "type": "text",
- "norms": false
- },
- "last_quick_scan_start_time": {
- "type": "text",
- "norms": false
- },
- "lastdailydriftseconds": {
- "type": "text",
- "norms": false
- },
- "lasterror": {
- "type": "text",
- "norms": false
- },
- "lasterror_addsense": {
- "type": "text",
- "norms": false
- },
- "lasterror_addsenseq": {
- "type": "text",
- "norms": false
- },
- "lasterror_command": {
- "type": "text",
- "norms": false
- },
- "lasterror_iosize": {
- "type": "text",
- "norms": false
- },
- "lasterror_lba": {
- "type": "text",
- "norms": false
- },
- "lasterror_queuedepth": {
- "type": "text",
- "norms": false
- },
- "lasterror_requestduration_ms": {
- "type": "text",
- "norms": false
- },
- "lasterror_scsistatus": {
- "type": "text",
- "norms": false
- },
- "lasterror_sensekey": {
- "type": "text",
- "norms": false
- },
- "lasterror_srbstatus": {
- "type": "text",
- "norms": false
- },
- "lasterror_waitduration_ms": {
- "type": "text",
- "norms": false
- },
- "lasteventlogwrittentime": {
- "type": "text",
- "norms": false
- },
- "lastfrequencyerrorppm": {
- "type": "text",
- "norms": false
- },
- "lastrundatetime": {
- "type": "text",
- "norms": false
- },
- "lastsuccessfulsynctime": {
- "type": "text",
- "norms": false
- },
- "lastsyncerror": {
- "type": "text",
- "norms": false
- },
- "latencybuckets": {
- "type": "text",
- "norms": false
- },
- "latest_engine_version": {
- "type": "text",
- "norms": false
- },
- "latest_platform_version": {
- "type": "text",
- "norms": false
- },
- "launch_data": {
- "type": "text",
- "norms": false
- },
- "launcherid": {
- "type": "text",
- "norms": false
- },
- "lba": {
- "type": "text",
- "norms": false
- },
- "leapindicator": {
- "type": "text",
- "norms": false
- },
- "learning_series_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "lease_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "len": {
- "type": "text",
- "norms": false
- },
- "lesson_location": {
- "type": "text",
- "norms": false
- },
- "level": {
- "type": "keyword"
- },
- "levelname": {
- "type": "text",
- "norms": false
- },
- "licences": {
- "type": "text",
- "norms": false
- },
- "line": {
- "type": "text",
- "norms": false
- },
- "line_number": {
- "type": "text",
- "norms": false
- },
- "lineno": {
- "type": "text",
- "norms": false
- },
- "linkdescription": {
- "type": "text",
- "norms": false
- },
- "lip": {
- "type": "text",
- "norms": false
- },
- "lmpackagename": {
- "type": "text",
- "norms": false
- },
- "localaddress": {
- "type": "text",
- "norms": false
- },
- "localaddresses": {
- "type": "text",
- "norms": false
- },
- "locale": {
- "type": "text",
- "norms": false
- },
- "localname": {
- "type": "text",
- "norms": false
- },
- "localonlymapped": {
- "type": "text",
- "norms": false
- },
- "localpath": {
- "type": "text",
- "norms": false
- },
- "localports": {
- "type": "text",
- "norms": false
- },
- "locationid": {
- "type": "text",
- "norms": false
- },
- "logfilefull": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket1": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket10": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket11": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket12": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket13": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket14": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket15": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket2": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket3": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket4": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket5": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket6": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket7": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket8": {
- "type": "text",
- "norms": false
- },
- "logfilefullreasonbucket9": {
- "type": "text",
- "norms": false
- },
- "logfilereadbytes": {
- "type": "text",
- "norms": false
- },
- "logfilereads": {
- "type": "text",
- "norms": false
- },
- "logfilewritebytes": {
- "type": "text",
- "norms": false
- },
- "logfilewrites": {
- "type": "text",
- "norms": false
- },
- "loggedpagesqueuedtodisksamples": {
- "type": "text",
- "norms": false
- },
- "logger_name": {
- "type": "keyword",
- "ignore_above": 256
- },
- "login_name": {
- "type": "text",
- "norms": false
- },
- "login_prefix": {
- "type": "text",
- "norms": false
- },
- "loginname": {
- "type": "text",
- "norms": false
- },
- "loginnameorid": {
- "type": "text",
- "norms": false
- },
- "loginresultmessage": {
- "type": "text",
- "norms": false
- },
- "loginresultvalue": {
- "type": "text",
- "norms": false
- },
- "logonguid": {
- "type": "text",
- "norms": false
- },
- "logonid": {
- "type": "text",
- "norms": false
- },
- "logonprocessname": {
- "type": "text",
- "norms": false
- },
- "logstring": {
- "type": "text",
- "norms": false
- },
- "loosesourcemapped": {
- "type": "text",
- "norms": false
- },
- "lowestfreespaceinbytes": {
- "type": "text",
- "norms": false
- },
- "ls_course": {
- "type": "text",
- "norms": false
- },
- "ls_course_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "lun": {
- "type": "text",
- "norms": false
- },
- "mac": {
- "type": "text",
- "norms": false
- },
- "machinename": {
- "type": "text",
- "norms": false
- },
- "machinerole": {
- "type": "text",
- "norms": false
- },
- "machines": {
- "type": "text",
- "norms": false
- },
- "mail": {
- "type": "text",
- "norms": false
- },
- "majortype": {
- "type": "text",
- "norms": false
- },
- "mapper_attributes": {
- "type": "text",
- "norms": false
- },
- "matchingdeviceid": {
- "type": "text",
- "norms": false
- },
- "matrchers": {
- "type": "text",
- "norms": false
- },
- "max_attempt_count": {
- "type": "text",
- "norms": false
- },
- "max_registrations": {
- "type": "text",
- "norms": false
- },
- "maxdevicequeuecount": {
- "type": "text",
- "norms": false
- },
- "maxdevicequeueiowaitduration_100ns": {
- "type": "text",
- "norms": false
- },
- "maxdirtypages": {
- "type": "text",
- "norms": false
- },
- "maxflushlatency_100ns": {
- "type": "text",
- "norms": false
- },
- "maxlatencyms": {
- "type": "text",
- "norms": false
- },
- "maxlatencystr": {
- "type": "text",
- "norms": false
- },
- "maxloggedpagesqueuedtodisk": {
- "type": "text",
- "norms": false
- },
- "maxoutstandingcount": {
- "type": "text",
- "norms": false
- },
- "maxpagesqueuedtodisk": {
- "type": "text",
- "norms": false
- },
- "maxreadwritelatency_100ns": {
- "type": "text",
- "norms": false
- },
- "maxunmaplatency_100ns": {
- "type": "text",
- "norms": false
- },
- "mdmpolicyvalue": {
- "type": "text",
- "norms": false
- },
- "mechanismoid": {
- "type": "text",
- "norms": false
- },
- "media": {
- "type": "text",
- "norms": false
- },
- "mediaverifyendtime": {
- "type": "text",
- "norms": false
- },
- "mediaverifystarttime": {
- "type": "text",
- "norms": false
- },
- "member": {
- "type": "text",
- "norms": false
- },
- "member_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "message": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "message_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "messageid": {
- "type": "text",
- "norms": false
- },
- "metadata": {
- "type": "text",
- "norms": false
- },
- "metadatadiskreads": {
- "type": "text",
- "norms": false
- },
- "metadatadiskwrites": {
- "type": "text",
- "norms": false
- },
- "metadatareadbytes": {
- "type": "text",
- "norms": false
- },
- "metadatareads": {
- "type": "text",
- "norms": false
- },
- "metadatawritebytes": {
- "type": "text",
- "norms": false
- },
- "metadatawrites": {
- "type": "text",
- "norms": false
- },
- "method": {
- "type": "text",
- "norms": false
- },
- "method_name": {
- "type": "text",
- "norms": false
- },
- "methodname": {
- "type": "text",
- "norms": false
- },
- "mft2writebytes": {
- "type": "text",
- "norms": false
- },
- "mft2writes": {
- "type": "text",
- "norms": false
- },
- "mftbitmapreadbytes": {
- "type": "text",
- "norms": false
- },
- "mftbitmapreads": {
- "type": "text",
- "norms": false
- },
- "mftbitmapwritebytes": {
- "type": "text",
- "norms": false
- },
- "mftbitmapwrites": {
- "type": "text",
- "norms": false
- },
- "mftreadbytes": {
- "type": "text",
- "norms": false
- },
- "mftreads": {
- "type": "text",
- "norms": false
- },
- "mftwritebytes": {
- "type": "text",
- "norms": false
- },
- "mftwrites": {
- "type": "text",
- "norms": false
- },
- "miniportname": {
- "type": "text",
- "norms": false
- },
- "minortype": {
- "type": "text",
- "norms": false
- },
- "minreportedadjustmentppm": {
- "type": "text",
- "norms": false
- },
- "minutes": {
- "type": "long",
- "ignore_malformed": true
- },
- "miss": {
- "type": "text",
- "norms": false
- },
- "mode": {
- "type": "text",
- "norms": false
- },
- "model": {
- "type": "text",
- "norms": false
- },
- "modifyingapplication": {
- "type": "text",
- "norms": false
- },
- "modifyinguser": {
- "type": "text",
- "norms": false
- },
- "module": {
- "type": "text",
- "norms": false
- },
- "monitorheight": {
- "type": "text",
- "norms": false
- },
- "monitornum": {
- "type": "text",
- "norms": false
- },
- "monitorwidth": {
- "type": "text",
- "norms": false
- },
- "monitorx": {
- "type": "text",
- "norms": false
- },
- "monitory": {
- "type": "text",
- "norms": false
- },
- "mpid": {
- "type": "text",
- "norms": false
- },
- "msg": {
- "type": "text",
- "norms": false
- },
- "name": {
- "type": "text",
- "norms": false
- },
- "name_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "nameid_format": {
- "type": "text",
- "norms": false
- },
- "namespace": {
- "type": "text",
- "norms": false
- },
- "namespacename": {
- "type": "text",
- "norms": false
- },
- "ncreadavglatencyns": {
- "type": "text",
- "norms": false
- },
- "ncreadiocount": {
- "type": "text",
- "norms": false
- },
- "ncreadtotalbytes": {
- "type": "text",
- "norms": false
- },
- "ncwriteavglatencyns": {
- "type": "text",
- "norms": false
- },
- "ncwriteiocount": {
- "type": "text",
- "norms": false
- },
- "ncwritetotalbytes": {
- "type": "text",
- "norms": false
- },
- "networkbandwidthinkbps": {
- "type": "text",
- "norms": false
- },
- "networkname": {
- "type": "text",
- "norms": false
- },
- "new_activities": {
- "type": "text",
- "norms": false
- },
- "new_comments_count": {
- "type": "text",
- "norms": false
- },
- "new_organization_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "new_value": {
- "type": "text",
- "norms": false
- },
- "newclockrate": {
- "type": "text",
- "norms": false
- },
- "newsd": {
- "type": "text",
- "norms": false
- },
- "newsize": {
- "type": "text",
- "norms": false
- },
- "newstate": {
- "type": "text",
- "norms": false
- },
- "newstatename": {
- "type": "text",
- "norms": false
- },
- "nextpolicyapplicationtime": {
- "type": "text",
- "norms": false
- },
- "nextpolicyapplicationtimeunit": {
- "type": "text",
- "norms": false
- },
- "node_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "node_name": {
- "type": "text",
- "norms": false
- },
- "nonce": {
- "type": "text",
- "norms": false
- },
- "noop": {
- "type": "text",
- "norms": false
- },
- "notification": {
- "type": "text",
- "norms": false
- },
- "notification_type": {
- "type": "text",
- "norms": false
- },
- "notificationtype": {
- "type": "text",
- "norms": false
- },
- "notify_of_failed_email_only_once": {
- "type": "text",
- "norms": false
- },
- "nrcpt": {
- "type": "text",
- "norms": false
- },
- "nri_engine_version": {
- "type": "text",
- "norms": false
- },
- "nri_security_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "ntfsfillstatinfofrommftrecordbailedbecauseofattributelistcount": {
- "type": "text",
- "norms": false
- },
- "ntfsfillstatinfofrommftrecordbailedbecauseofnonresreparsepointcount": {
- "type": "text",
- "norms": false
- },
- "ntfsfillstatinfofrommftrecordcalledcount": {
- "type": "text",
- "norms": false
- },
- "numberofgposapplicable": {
- "type": "text",
- "norms": false
- },
- "numberofgposdownloaded": {
- "type": "text",
- "norms": false
- },
- "numberofnumanodes": {
- "type": "text",
- "norms": false
- },
- "numberofretriesdone": {
- "type": "text",
- "norms": false
- },
- "numofvolumes": {
- "type": "text",
- "norms": false
- },
- "oa_state": {
- "type": "text",
- "norms": false
- },
- "object": {
- "type": "text",
- "norms": false
- },
- "object_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "object_login_name": {
- "type": "text",
- "norms": false
- },
- "object_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "objectid": {
- "type": "keyword"
- },
- "objectname": {
- "type": "text",
- "norms": false
- },
- "objectnamelength": {
- "type": "text",
- "norms": false
- },
- "objectserver": {
- "type": "text",
- "norms": false
- },
- "objecttype": {
- "type": "text",
- "norms": false
- },
- "objid": {
- "type": "text",
- "norms": false
- },
- "old_session_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "old_status_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "old_value": {
- "type": "text",
- "norms": false
- },
- "oldclockrate": {
- "type": "text",
- "norms": false
- },
- "oldsd": {
- "type": "text",
- "norms": false
- },
- "oom_score_adj": {
- "type": "text",
- "norms": false
- },
- "op": {
- "type": "text",
- "norms": false
- },
- "open_id_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "operation": {
- "type": "text",
- "norms": false
- },
- "operationdescription": {
- "type": "text",
- "norms": false
- },
- "operationelaspedtimeinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "operationname": {
- "type": "text",
- "norms": false
- },
- "options": {
- "type": "text",
- "norms": false
- },
- "order": {
- "type": "text",
- "norms": false
- },
- "org_course_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "organization_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "organization_role_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "orig_to": {
- "type": "text",
- "norms": false
- },
- "origin": {
- "type": "text",
- "norms": false
- },
- "original_file_name": {
- "type": "text",
- "norms": false
- },
- "originalactivityid": {
- "type": "text",
- "norms": false
- },
- "originalsize": {
- "type": "text",
- "norms": false
- },
- "ouid": {
- "type": "text",
- "norms": false
- },
- "out": {
- "type": "text",
- "norms": false
- },
- "outrankeddrivers": {
- "type": "text",
- "norms": false
- },
- "packagefamilyname": {
- "type": "text",
- "norms": false
- },
- "packagefullname": {
- "type": "text",
- "norms": false
- },
- "packagename": {
- "type": "text",
- "norms": false
- },
- "packet": {
- "type": "text",
- "norms": false
- },
- "packet_info": {
- "type": "text",
- "norms": false
- },
- "pagefilesizeinbytes": {
- "type": "text",
- "norms": false
- },
- "pagefilesizestr": {
- "type": "text",
- "norms": false
- },
- "pagesqueuedtodisksamples": {
- "type": "text",
- "norms": false
- },
- "param1": {
- "type": "text",
- "norms": false
- },
- "param2": {
- "type": "text",
- "norms": false
- },
- "param3": {
- "type": "text",
- "norms": false
- },
- "param4": {
- "type": "text",
- "norms": false
- },
- "param_course_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "param_goup_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "parameter": {
- "type": "text",
- "norms": false
- },
- "parameters": {
- "type": "text",
- "norms": false
- },
- "parent_bls_courses": {
- "type": "text",
- "norms": false
- },
- "parentdeviceinstanceid": {
- "type": "text",
- "norms": false
- },
- "parentid": {
- "type": "text",
- "norms": false
- },
- "partition": {
- "type": "text",
- "norms": false
- },
- "partitionstyle": {
- "type": "text",
- "norms": false
- },
- "passing_score": {
- "type": "text",
- "norms": false
- },
- "password_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "path": {
- "type": "keyword"
- },
- "pathid": {
- "type": "text",
- "norms": false
- },
- "pattern_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "payload": {
- "type": "text",
- "norms": false
- },
- "payload_printable": {
- "type": "text",
- "norms": false
- },
- "payloadsize": {
- "type": "text",
- "norms": false
- },
- "payment_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "peer": {
- "type": "text",
- "norms": false
- },
- "peercontextinfo": {
- "type": "text",
- "norms": false
- },
- "peerprotocolflags": {
- "type": "text",
- "norms": false
- },
- "period": {
- "type": "text",
- "norms": false
- },
- "perioddurationmicrosec": {
- "type": "text",
- "norms": false
- },
- "persistence_limit_type": {
- "type": "text",
- "norms": false
- },
- "persistence_limit_type_index": {
- "type": "text",
- "norms": false
- },
- "persistence_limit_value": {
- "type": "text",
- "norms": false
- },
- "persistence_path": {
- "type": "text",
- "norms": false
- },
- "persistent": {
- "type": "keyword"
- },
- "phaseoffset": {
- "type": "text",
- "norms": false
- },
- "picture_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "pid": {
- "type": "text",
- "norms": false
- },
- "pkt_src": {
- "type": "text",
- "norms": false
- },
- "platform": {
- "type": "text",
- "norms": false
- },
- "platform_version": {
- "type": "text",
- "norms": false
- },
- "policyactivityid": {
- "type": "text",
- "norms": false
- },
- "policyapplicationmode": {
- "type": "text",
- "norms": false
- },
- "policydownloadtimeelapsedinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "policyelaspedtimeinseconds": {
- "type": "text",
- "norms": false
- },
- "policyprocessingmode": {
- "type": "text",
- "norms": false
- },
- "pollinterval": {
- "type": "text",
- "norms": false
- },
- "pool": {
- "type": "text",
- "norms": false
- },
- "port": {
- "type": "text",
- "norms": false
- },
- "portnumber": {
- "type": "text",
- "norms": false
- },
- "post_xml": {
- "type": "text",
- "norms": false
- },
- "powereventtype": {
- "type": "text",
- "norms": false
- },
- "prec": {
- "type": "text",
- "norms": false
- },
- "precision": {
- "type": "text",
- "norms": false
- },
- "prefer_encoding": {
- "type": "text",
- "norms": false
- },
- "preparebackupendtime": {
- "type": "text",
- "norms": false
- },
- "preparebackupstarttime": {
- "type": "text",
- "norms": false
- },
- "presencevalidationenabled": {
- "type": "text",
- "norms": false
- },
- "presencevalidationquestiondata": {
- "type": "text",
- "norms": false
- },
- "presencevalidationquestionid": {
- "type": "text",
- "norms": false
- },
- "presencevalidationtext": {
- "type": "text",
- "norms": false
- },
- "presencevalidationtimeout": {
- "type": "text",
- "norms": false
- },
- "previous_engine_version": {
- "type": "text",
- "norms": false
- },
- "previous_security_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "previousstate": {
- "type": "text",
- "norms": false
- },
- "previousstatename": {
- "type": "text",
- "norms": false
- },
- "price": {
- "type": "text",
- "norms": false
- },
- "price_type_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "prices": {
- "type": "text",
- "norms": false
- },
- "primary_key": {
- "type": "text",
- "norms": false
- },
- "principalcnname": {
- "type": "text",
- "norms": false
- },
- "principaldomainname": {
- "type": "text",
- "norms": false
- },
- "principalsamname": {
- "type": "text",
- "norms": false
- },
- "priority": {
- "type": "text",
- "norms": false
- },
- "privilegelist": {
- "type": "text",
- "norms": false
- },
- "problem": {
- "type": "text",
- "norms": false
- },
- "process": {
- "type": "text",
- "norms": false
- },
- "process_id": {
- "type": "long",
- "ignore_malformed": true
- },
- "process_name": {
- "type": "text",
- "norms": false
- },
- "process_session_guide": {
- "type": "text",
- "norms": false
- },
- "process_step": {
- "type": "text",
- "norms": false
- },
- "processcommandline": {
- "type": "text",
- "norms": false
- },
- "processcommandlinelength": {
- "type": "text",
- "norms": false
- },
- "processcreatetime": {
- "type": "text",
- "norms": false
- },
- "processcreationtime": {
- "type": "text",
- "norms": false
- },
- "processed_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "processname": {
- "type": "text",
- "norms": false
- },
- "processnamesarray": {
- "type": "text",
- "norms": false
- },
- "processpath": {
- "type": "text",
- "norms": false
- },
- "processpathlength": {
- "type": "text",
- "norms": false
- },
- "processprotection": {
- "type": "text",
- "norms": false
- },
- "processsectionsignaturelevel": {
- "type": "text",
- "norms": false
- },
- "processsignaturelevel": {
- "type": "text",
- "norms": false
- },
- "processstartkey": {
- "type": "text",
- "norms": false
- },
- "product_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "product_name": {
- "type": "text",
- "norms": false
- },
- "product_price": {
- "type": "text",
- "norms": false
- },
- "product_price_type_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "product_status": {
- "type": "text",
- "norms": false
- },
- "product_type": {
- "type": "text",
- "norms": false
- },
- "product_type_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "product_version": {
- "type": "text",
- "norms": false
- },
- "productid": {
- "type": "text",
- "norms": false
- },
- "productidlength": {
- "type": "text",
- "norms": false
- },
- "productrevision": {
- "type": "text",
- "norms": false
- },
- "productrevisionlength": {
- "type": "text",
- "norms": false
- },
- "profile": {
- "type": "text",
- "norms": false
- },
- "profileidnum": {
- "type": "text",
- "norms": false
- },
- "profiles": {
- "type": "text",
- "norms": false
- },
- "profiletype": {
- "type": "text",
- "norms": false
- },
- "program": {
- "type": "text",
- "norms": false
- },
- "program_set_name": {
- "type": "text",
- "norms": false
- },
- "project_name": {
- "type": "text",
- "norms": false
- },
- "promptforcredentials": {
- "type": "text",
- "norms": false
- },
- "promptforcredentialsdone": {
- "type": "text",
- "norms": false
- },
- "prop_containerid": {
- "type": "text",
- "norms": false
- },
- "prop_coreservicemode": {
- "type": "text",
- "norms": false
- },
- "prop_devicename": {
- "type": "text",
- "norms": false
- },
- "prop_event_window_seconds": {
- "type": "text",
- "norms": false
- },
- "prop_propertycount": {
- "type": "text",
- "norms": false
- },
- "prop_taskcount": {
- "type": "text",
- "norms": false
- },
- "prop_uptime_seconds": {
- "type": "text",
- "norms": false
- },
- "prop_worktime_milliseconds": {
- "type": "text",
- "norms": false
- },
- "properties": {
- "type": "text",
- "norms": false
- },
- "proto": {
- "type": "text",
- "norms": false
- },
- "protocol": {
- "type": "text",
- "norms": false
- },
- "provider_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "provider_name": {
- "type": "text",
- "norms": false
- },
- "prunebackupendtime": {
- "type": "text",
- "norms": false
- },
- "prunebackupstarttime": {
- "type": "text",
- "norms": false
- },
- "purchase_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "purchase_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "quantity": {
- "type": "text",
- "norms": false
- },
- "query_params": {
- "type": "text",
- "norms": false
- },
- "queryparameters": {
- "type": "text",
- "norms": false
- },
- "question_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "queue_name": {
- "type": "text",
- "norms": false
- },
- "queued_as": {
- "type": "keyword",
- "ignore_above": 256
- },
- "queuedepth": {
- "type": "text",
- "norms": false
- },
- "queuedtaskinstanceid": {
- "type": "text",
- "norms": false
- },
- "queuedtilecleanups": {
- "type": "text",
- "norms": false
- },
- "queuedtilecloses": {
- "type": "text",
- "norms": false
- },
- "quit": {
- "type": "text",
- "norms": false
- },
- "quizid": {
- "type": "text",
- "norms": false
- },
- "random_number": {
- "type": "text",
- "norms": false
- },
- "rating": {
- "type": "text",
- "norms": false
- },
- "rcpt": {
- "type": "text",
- "norms": false
- },
- "rdata": {
- "type": "text",
- "norms": false
- },
- "readaheadtotalbytes": {
- "type": "text",
- "norms": false
- },
- "readoperation": {
- "type": "text",
- "norms": false
- },
- "readpagedintotalbytes": {
- "type": "text",
- "norms": false
- },
- "readtotalbytes": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket1": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket2": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket3": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket4": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket5": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket6": {
- "type": "text",
- "norms": false
- },
- "readwritelatencybucket7": {
- "type": "text",
- "norms": false
- },
- "reason": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "reasoncode": {
- "type": "text",
- "norms": false
- },
- "reasonforsyncprocessing": {
- "type": "text",
- "norms": false
- },
- "reasonstring": {
- "type": "text",
- "norms": false
- },
- "rebuild": {
- "type": "text",
- "norms": false
- },
- "receipt_path": {
- "type": "text",
- "norms": false
- },
- "recipient": {
- "type": "text",
- "norms": false
- },
- "recipient_email": {
- "type": "text",
- "norms": false
- },
- "recipient_emails": {
- "type": "text",
- "norms": false
- },
- "recipient_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "recipients": {
- "type": "text",
- "norms": false
- },
- "record_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "redirect_uri": {
- "type": "text",
- "norms": false
- },
- "referenceid": {
- "type": "text",
- "norms": false
- },
- "refreshtriggersource": {
- "type": "text",
- "norms": false
- },
- "reg_filters": {
- "type": "text",
- "norms": false
- },
- "registered_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "registration": {
- "type": "text",
- "norms": false
- },
- "registration_event": {
- "type": "text",
- "norms": false
- },
- "registration_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "registration_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "registrations": {
- "type": "text",
- "norms": false
- },
- "relateddata": {
- "type": "text",
- "norms": false
- },
- "relay": {
- "type": "text",
- "norms": false
- },
- "relay_state": {
- "type": "text",
- "norms": false
- },
- "remote_address": {
- "type": "text",
- "norms": false
- },
- "remote_host": {
- "type": "text",
- "norms": false
- },
- "remote_path": {
- "type": "text",
- "norms": false
- },
- "remote_path_csv": {
- "type": "text",
- "norms": false
- },
- "remoteaddress": {
- "type": "ip"
- },
- "remoteaddresses": {
- "type": "text",
- "norms": false
- },
- "remotehost": {
- "type": "text",
- "norms": false
- },
- "remotename": {
- "type": "text",
- "norms": false
- },
- "remoteports": {
- "type": "text",
- "norms": false
- },
- "remove_date": {
- "type": "text",
- "norms": false
- },
- "removepackagelist": {
- "type": "text",
- "norms": false
- },
- "report_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "report_internal_name": {
- "type": "text",
- "norms": false
- },
- "report_params": {
- "type": "text",
- "norms": false
- },
- "report_result_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "report_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "req_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "request": {
- "type": "text",
- "norms": false
- },
- "request_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "request_info": {
- "type": "text",
- "norms": false
- },
- "request_path": {
- "type": "text",
- "norms": false
- },
- "request_session_modified": {
- "type": "text",
- "norms": false
- },
- "request_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "requestduration_ms": {
- "type": "text",
- "norms": false
- },
- "requested_mask": {
- "type": "text",
- "norms": false
- },
- "requestguid": {
- "type": "text",
- "norms": false
- },
- "requeststatus": {
- "type": "text",
- "norms": false
- },
- "required": {
- "type": "text",
- "norms": false
- },
- "requiredsignaturelevel": {
- "type": "text",
- "norms": false
- },
- "res": {
- "type": "text",
- "norms": false
- },
- "reservedclustersmax": {
- "type": "text",
- "norms": false
- },
- "reservedclustersmin": {
- "type": "text",
- "norms": false
- },
- "resourceuri": {
- "type": "text",
- "norms": false
- },
- "response": {
- "type": "text",
- "norms": false
- },
- "response_time": {
- "type": "float",
- "ignore_malformed": true
- },
- "response_type": {
- "type": "text",
- "norms": false
- },
- "responsemac": {
- "type": "text",
- "norms": false
- },
- "restartrequired": {
- "type": "text",
- "norms": false
- },
- "restrictedadminmode": {
- "type": "text",
- "norms": false
- },
- "result": {
- "type": "text",
- "norms": false
- },
- "result_getaway": {
- "type": "text",
- "norms": false
- },
- "result_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "result_message": {
- "type": "text",
- "norms": false
- },
- "result_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "resultcode": {
- "type": "text",
- "norms": false
- },
- "results_count": {
- "type": "text",
- "norms": false
- },
- "resultsreturned": {
- "type": "text",
- "norms": false
- },
- "returncode": {
- "type": "text",
- "norms": false
- },
- "returns_rows": {
- "type": "text",
- "norms": false
- },
- "review_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "rewrite_file": {
- "type": "text",
- "norms": false
- },
- "rip": {
- "type": "text",
- "norms": false
- },
- "roleid": {
- "type": "text",
- "norms": false
- },
- "rootdelay": {
- "type": "text",
- "norms": false
- },
- "rootdispersion": {
- "type": "text",
- "norms": false
- },
- "rootindexreadbytes": {
- "type": "text",
- "norms": false
- },
- "rootindexreads": {
- "type": "text",
- "norms": false
- },
- "rootindexwritebytes": {
- "type": "text",
- "norms": false
- },
- "rootindexwrites": {
- "type": "text",
- "norms": false
- },
- "rset": {
- "type": "text",
- "norms": false
- },
- "rtp_state": {
- "type": "text",
- "norms": false
- },
- "ruleid": {
- "type": "text",
- "norms": false
- },
- "rulename": {
- "type": "text",
- "norms": false
- },
- "rulestatus": {
- "type": "text",
- "norms": false
- },
- "saml_relaystate": {
- "type": "text",
- "norms": false
- },
- "saml_request": {
- "type": "text",
- "norms": false
- },
- "saml_sso": {
- "type": "text",
- "norms": false
- },
- "saml_sso_data": {
- "type": "text",
- "norms": false
- },
- "saml_url": {
- "type": "text",
- "norms": false
- },
- "samplederrorlogarray": {
- "type": "text",
- "norms": false
- },
- "samplederrorlogarraylength": {
- "type": "text",
- "norms": false
- },
- "saved_searches_count": {
- "type": "text",
- "norms": false
- },
- "saved_state": {
- "type": "text",
- "norms": false
- },
- "scan_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "scan_parameters": {
- "type": "text",
- "norms": false
- },
- "scan_parameters_index": {
- "type": "text",
- "norms": false
- },
- "scan_time_hours": {
- "type": "text",
- "norms": false
- },
- "scan_time_minutes": {
- "type": "text",
- "norms": false
- },
- "scan_time_seconds": {
- "type": "text",
- "norms": false
- },
- "scan_type": {
- "type": "text",
- "norms": false
- },
- "scan_type_index": {
- "type": "text",
- "norms": false
- },
- "scenario": {
- "type": "text",
- "norms": false
- },
- "scenarioid": {
- "type": "text",
- "norms": false
- },
- "schannelname": {
- "type": "text",
- "norms": false
- },
- "schanneltype": {
- "type": "text",
- "norms": false
- },
- "schedule_date": {
- "type": "text",
- "norms": false
- },
- "schedule_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "schedule_options": {
- "type": "text",
- "norms": false
- },
- "schemaversion": {
- "type": "text",
- "norms": false
- },
- "scope": {
- "type": "text",
- "norms": false
- },
- "score": {
- "type": "text",
- "norms": false
- },
- "scorm_manifest_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "scos_number": {
- "type": "text",
- "norms": false
- },
- "scriptelaspedtimeinseconds": {
- "type": "text",
- "norms": false
- },
- "scripttype": {
- "type": "text",
- "norms": false
- },
- "scsistatus": {
- "type": "text",
- "norms": false
- },
- "sd": {
- "type": "text",
- "norms": false
- },
- "search_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "secondselapsed": {
- "type": "text",
- "norms": false
- },
- "section_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "security_intelligence_type": {
- "type": "text",
- "norms": false
- },
- "security_intelligence_type_index": {
- "type": "text",
- "norms": false
- },
- "security_intelligence_version": {
- "type": "text",
- "norms": false
- },
- "security_token": {
- "type": "text",
- "norms": false
- },
- "security_token_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "securityoptions": {
- "type": "text",
- "norms": false
- },
- "self__data_cmi_core_lesson_status": {
- "type": "text",
- "norms": false
- },
- "self__data_cmi_core_score_raw": {
- "type": "text",
- "norms": false
- },
- "send_emergency_emails": {
- "type": "text",
- "norms": false
- },
- "sender": {
- "type": "text",
- "norms": false
- },
- "sender_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "senderip": {
- "type": "text",
- "norms": false
- },
- "sendermac": {
- "type": "text",
- "norms": false
- },
- "sensekey": {
- "type": "text",
- "norms": false
- },
- "sent_updateserver": {
- "type": "text",
- "norms": false
- },
- "seq": {
- "type": "text",
- "norms": false
- },
- "serialnumber": {
- "type": "text",
- "norms": false
- },
- "server": {
- "type": "text",
- "norms": false
- },
- "server_time": {
- "type": "text",
- "norms": false
- },
- "servername": {
- "type": "text",
- "norms": false
- },
- "servernamelength": {
- "type": "text",
- "norms": false
- },
- "serverrole": {
- "type": "text",
- "norms": false
- },
- "service": {
- "type": "keyword"
- },
- "service_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "serviceguid": {
- "type": "text",
- "norms": false
- },
- "servicename": {
- "type": "text",
- "norms": false
- },
- "servicetype": {
- "type": "text",
- "norms": false
- },
- "session": {
- "type": "text",
- "norms": false
- },
- "session_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "session_info": {
- "type": "text",
- "norms": false
- },
- "session_key": {
- "type": "text",
- "norms": false
- },
- "session_notifications": {
- "type": "text",
- "norms": false
- },
- "session_record_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "session_save_every_request": {
- "type": "text",
- "norms": false
- },
- "session_user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "sessionname": {
- "type": "text",
- "norms": false
- },
- "sessiontimeelapsedinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "severity": {
- "type": "keyword"
- },
- "sharename": {
- "type": "text",
- "norms": false
- },
- "sharenamelength": {
- "type": "text",
- "norms": false
- },
- "short_message": {
- "type": "text",
- "norms": false
- },
- "sid": {
- "type": "text",
- "norms": false
- },
- "signal": {
- "type": "text",
- "norms": false
- },
- "signature": {
- "type": "keyword"
- },
- "signaturelevel": {
- "type": "text",
- "norms": false
- },
- "sip": {
- "type": "text",
- "norms": false
- },
- "site": {
- "type": "text",
- "norms": false
- },
- "site_from_address": {
- "type": "text",
- "norms": false
- },
- "size": {
- "type": "text",
- "norms": false
- },
- "snmp": {
- "type": "text",
- "norms": false
- },
- "source": {
- "type": "text",
- "norms": false
- },
- "source_certificate_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "source_folder": {
- "type": "text",
- "norms": false
- },
- "source_host": {
- "type": "ip"
- },
- "source_session_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "sourcesnapendtime": {
- "type": "text",
- "norms": false
- },
- "sourcesnapstarttime": {
- "type": "text",
- "norms": false
- },
- "spt": {
- "type": "text",
- "norms": false
- },
- "srbstatus": {
- "type": "text",
- "norms": false
- },
- "src": {
- "type": "text",
- "norms": false
- },
- "src_ip": {
- "type": "ip"
- },
- "src_port": {
- "type": "text",
- "norms": false
- },
- "ssbbackupendtime": {
- "type": "text",
- "norms": false
- },
- "ssbbackupstarttime": {
- "type": "text",
- "norms": false
- },
- "ssbenumerateendtime": {
- "type": "text",
- "norms": false
- },
- "ssbenumeratestarttime": {
- "type": "text",
- "norms": false
- },
- "ssbvhdcreationendtime": {
- "type": "text",
- "norms": false
- },
- "ssbvhdcreationstarttime": {
- "type": "text",
- "norms": false
- },
- "sso_data": {
- "type": "text",
- "norms": false
- },
- "stack_trace": {
- "type": "text",
- "norms": false
- },
- "stacktrace": {
- "type": "text",
- "norms": false
- },
- "stage": {
- "type": "text",
- "norms": false
- },
- "start_date": {
- "type": "text",
- "norms": false
- },
- "starttls": {
- "type": "text",
- "norms": false
- },
- "starttype": {
- "type": "text",
- "norms": false
- },
- "state": {
- "type": "text",
- "norms": false
- },
- "state_machine": {
- "type": "text",
- "norms": false
- },
- "state_machine_name": {
- "type": "text",
- "norms": false
- },
- "state_name": {
- "type": "text",
- "norms": false
- },
- "statemachine": {
- "type": "text",
- "norms": false
- },
- "statetransition": {
- "type": "text",
- "norms": false
- },
- "status": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "status_code": {
- "type": "text",
- "norms": false
- },
- "status_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "storage_location": {
- "type": "text",
- "norms": false
- },
- "storage_path": {
- "type": "text",
- "norms": false
- },
- "storage_type": {
- "type": "text",
- "norms": false
- },
- "stratum": {
- "type": "text",
- "norms": false
- },
- "stream": {
- "type": "text",
- "norms": false
- },
- "subject": {
- "type": "text",
- "norms": false
- },
- "subject_token": {
- "type": "text",
- "norms": false
- },
- "subject_userinfo": {
- "type": "text",
- "norms": false
- },
- "subjectdomainname": {
- "type": "text",
- "norms": false
- },
- "subjectlogonid": {
- "type": "text",
- "norms": false
- },
- "subjectusername": {
- "type": "text",
- "norms": false
- },
- "subjectusersid": {
- "type": "text",
- "norms": false
- },
- "subscribername": {
- "type": "text",
- "norms": false
- },
- "substatus": {
- "type": "text",
- "norms": false
- },
- "success": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "swap": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket1": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket10": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket11": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket12": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket2": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket3": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket4": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket5": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket6": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket7": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket8": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiocountsbucket9": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiomaxlatency": {
- "type": "text",
- "norms": false
- },
- "synchronousreadiononblockingmaxlatency": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket1": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket10": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket11": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket12": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket2": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket3": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket4": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket5": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket6": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket7": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket8": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingiocountsbucket9": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket1": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket10": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket11": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket12": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket2": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket3": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket4": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket5": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket6": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket7": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket8": {
- "type": "text",
- "norms": false
- },
- "synchronousreadnonblockingtotallatencybucket9": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket1": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket10": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket11": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket12": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket2": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket3": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket4": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket5": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket6": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket7": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket8": {
- "type": "text",
- "norms": false
- },
- "synchronousreadtotallatencybucket9": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket1": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket10": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket11": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket12": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket2": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket3": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket4": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket5": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket6": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket7": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket8": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiocountsbucket9": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiomaxlatency": {
- "type": "text",
- "norms": false
- },
- "synchronouswriteiononblockingmaxlatency": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket1": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket10": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket11": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket12": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket2": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket3": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket4": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket5": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket6": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket7": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket8": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingiocountsbucket9": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket1": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket10": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket11": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket12": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket2": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket3": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket4": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket5": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket6": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket7": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket8": {
- "type": "text",
- "norms": false
- },
- "synchronouswritenonblockingtotallatencybucket9": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket1": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket10": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket11": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket12": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket2": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket3": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket4": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket5": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket6": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket7": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket8": {
- "type": "text",
- "norms": false
- },
- "synchronouswritetotallatencybucket9": {
- "type": "text",
- "norms": false
- },
- "syslog_facility": {
- "type": "text",
- "norms": false
- },
- "syslog_facility_code": {
- "type": "text",
- "norms": false
- },
- "syslog_pid": {
- "type": "long",
- "ignore_malformed": true
- },
- "syslog_process_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "syslog_program": {
- "type": "text",
- "norms": false
- },
- "syslog_severity": {
- "type": "text",
- "norms": false
- },
- "syslog_severity_code": {
- "type": "text",
- "norms": false
- },
- "systemstatebackup": {
- "type": "text",
- "norms": false
- },
- "systemuptime_s": {
- "type": "text",
- "norms": false
- },
- "tags": {
- "type": "keyword"
- },
- "target": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "target_capabilities": {
- "type": "text",
- "norms": false
- },
- "target_file_name": {
- "type": "text",
- "norms": false
- },
- "target_url": {
- "type": "text",
- "norms": false
- },
- "targetid": {
- "type": "text",
- "norms": false
- },
- "targetinfo": {
- "type": "text",
- "norms": false
- },
- "targetlinkedlogonid": {
- "type": "text",
- "norms": false
- },
- "targetlogonguid": {
- "type": "text",
- "norms": false
- },
- "targetname": {
- "type": "text",
- "norms": false
- },
- "targetoutbounddomainname": {
- "type": "text",
- "norms": false
- },
- "targetoutboundusername": {
- "type": "text",
- "norms": false
- },
- "targetservername": {
- "type": "text",
- "norms": false
- },
- "targetsid": {
- "type": "text",
- "norms": false
- },
- "targetsnapendtime": {
- "type": "text",
- "norms": false
- },
- "targetsnapstarttime": {
- "type": "text",
- "norms": false
- },
- "targetthreadcreatetime": {
- "type": "text",
- "norms": false
- },
- "targetthreadid": {
- "type": "text",
- "norms": false
- },
- "task": {
- "type": "text",
- "norms": false
- },
- "taskenginename": {
- "type": "text",
- "norms": false
- },
- "taskinstanceid": {
- "type": "text",
- "norms": false
- },
- "taskname": {
- "type": "text",
- "norms": false
- },
- "tax_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "tc": {
- "type": "text",
- "norms": false
- },
- "tcpinfo_rtt": {
- "type": "text",
- "norms": false
- },
- "tcpinfo_rttvar": {
- "type": "text",
- "norms": false
- },
- "temp_dir": {
- "type": "text",
- "norms": false
- },
- "template_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "test": {
- "type": "text",
- "norms": false
- },
- "test_user": {
- "type": "text",
- "norms": false
- },
- "thread": {
- "type": "text",
- "norms": false
- },
- "thread_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "thread_name": {
- "type": "text",
- "norms": false
- },
- "thresholdinkbps": {
- "type": "text",
- "norms": false
- },
- "tickcount": {
- "type": "text",
- "norms": false
- },
- "timemillis": {
- "type": "text",
- "norms": false
- },
- "timeoutsinminiport": {
- "type": "text",
- "norms": false
- },
- "timeproviders": {
- "type": "text",
- "norms": false
- },
- "timesincelastgoodsync": {
- "type": "text",
- "norms": false
- },
- "timesourceflags": {
- "type": "text",
- "norms": false
- },
- "timestamp": {
- "type": "text",
- "norms": false
- },
- "timetoactivityvalidation": {
- "type": "text",
- "norms": false
- },
- "timetopresencevalidation": {
- "type": "text",
- "norms": false
- },
- "timetopresencevalidationexpiration": {
- "type": "text",
- "norms": false
- },
- "timezonebiashour": {
- "type": "text",
- "norms": false
- },
- "timezoneid": {
- "type": "text",
- "norms": false
- },
- "title": {
- "type": "text",
- "norms": false
- },
- "tls_cipher": {
- "type": "keyword"
- },
- "tls_protocol": {
- "type": "keyword"
- },
- "tmp_course_media": {
- "type": "text",
- "norms": false
- },
- "tmp_folder_envs": {
- "type": "text",
- "norms": false
- },
- "to": {
- "type": "text",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- }
- },
- "norms": false
- },
- "to_group_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "token_data": {
- "type": "text",
- "norms": false
- },
- "tokentype": {
- "type": "text",
- "norms": false
- },
- "topic_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "topicid": {
- "type": "text",
- "norms": false
- },
- "tos": {
- "type": "text",
- "norms": false
- },
- "total": {
- "type": "text",
- "norms": false
- },
- "totalasynchronousreadiocount": {
- "type": "text",
- "norms": false
- },
- "totalavailablepages": {
- "type": "text",
- "norms": false
- },
- "totalaverageavailablepages": {
- "type": "text",
- "norms": false
- },
- "totalaveragedirtypages": {
- "type": "text",
- "norms": false
- },
- "totalbytes": {
- "type": "text",
- "norms": false
- },
- "totalbytes0": {
- "type": "text",
- "norms": false
- },
- "totalbytes1": {
- "type": "text",
- "norms": false
- },
- "totalbytes10": {
- "type": "text",
- "norms": false
- },
- "totalbytes11": {
- "type": "text",
- "norms": false
- },
- "totalbytes2": {
- "type": "text",
- "norms": false
- },
- "totalbytes3": {
- "type": "text",
- "norms": false
- },
- "totalbytes4": {
- "type": "text",
- "norms": false
- },
- "totalbytes5": {
- "type": "text",
- "norms": false
- },
- "totalbytes6": {
- "type": "text",
- "norms": false
- },
- "totalbytes7": {
- "type": "text",
- "norms": false
- },
- "totalbytes8": {
- "type": "text",
- "norms": false
- },
- "totalbytes9": {
- "type": "text",
- "norms": false
- },
- "totalbytesbucketscount": {
- "type": "text",
- "norms": false
- },
- "totalcountdeletefile": {
- "type": "text",
- "norms": false
- },
- "totalcountdeletefilelogged": {
- "type": "text",
- "norms": false
- },
- "totaldevicefailureerrors": {
- "type": "text",
- "norms": false
- },
- "totaldevicequeueiocount": {
- "type": "text",
- "norms": false
- },
- "totaldevicequeueiowaitduration_100ns": {
- "type": "text",
- "norms": false
- },
- "totaldirtypages": {
- "type": "text",
- "norms": false
- },
- "totaldisks": {
- "type": "text",
- "norms": false
- },
- "totalerrors": {
- "type": "text",
- "norms": false
- },
- "totalextents": {
- "type": "text",
- "norms": false
- },
- "totalextents0": {
- "type": "text",
- "norms": false
- },
- "totalextents1": {
- "type": "text",
- "norms": false
- },
- "totalextents10": {
- "type": "text",
- "norms": false
- },
- "totalextents11": {
- "type": "text",
- "norms": false
- },
- "totalextents2": {
- "type": "text",
- "norms": false
- },
- "totalextents3": {
- "type": "text",
- "norms": false
- },
- "totalextents4": {
- "type": "text",
- "norms": false
- },
- "totalextents5": {
- "type": "text",
- "norms": false
- },
- "totalextents6": {
- "type": "text",
- "norms": false
- },
- "totalextents7": {
- "type": "text",
- "norms": false
- },
- "totalextents8": {
- "type": "text",
- "norms": false
- },
- "totalextents9": {
- "type": "text",
- "norms": false
- },
- "totalfailedsynchronousnonblockingreadiocount": {
- "type": "text",
- "norms": false
- },
- "totalfailedsynchronousnonblockingwriteiocount": {
- "type": "text",
- "norms": false
- },
- "totalhardthrottlewrites": {
- "type": "text",
- "norms": false
- },
- "totalimpendingdevicefailureerrors": {
- "type": "text",
- "norms": false
- },
- "totaliocount": {
- "type": "text",
- "norms": false
- },
- "totallatencyus": {
- "type": "text",
- "norms": false
- },
- "totalloggedpagesqueuedtodisk": {
- "type": "text",
- "norms": false
- },
- "totalnumberactiveworkerthreads": {
- "type": "text",
- "norms": false
- },
- "totalnumberofmappedvacbs": {
- "type": "text",
- "norms": false
- },
- "totalnumberworkerthreads": {
- "type": "text",
- "norms": false
- },
- "totalpagesqueuedtodisk": {
- "type": "text",
- "norms": false
- },
- "totalpagesyettowrite": {
- "type": "text",
- "norms": false
- },
- "totalpartitionsamples": {
- "type": "text",
- "norms": false
- },
- "totalreadbytes": {
- "type": "text",
- "norms": false
- },
- "totalreadwriteerrors": {
- "type": "text",
- "norms": false
- },
- "totalsoftthrottlewrites": {
- "type": "text",
- "norms": false
- },
- "totalsynchronousnonblockingreadiocount": {
- "type": "text",
- "norms": false
- },
- "totalsynchronousnonblockingwriteiocount": {
- "type": "text",
- "norms": false
- },
- "totalsynchronousreadiocount": {
- "type": "text",
- "norms": false
- },
- "totalsynchronouswriteiocount": {
- "type": "text",
- "norms": false
- },
- "totaltimens0": {
- "type": "text",
- "norms": false
- },
- "totaltimens1": {
- "type": "text",
- "norms": false
- },
- "totaltimens10": {
- "type": "text",
- "norms": false
- },
- "totaltimens11": {
- "type": "text",
- "norms": false
- },
- "totaltimens2": {
- "type": "text",
- "norms": false
- },
- "totaltimens3": {
- "type": "text",
- "norms": false
- },
- "totaltimens4": {
- "type": "text",
- "norms": false
- },
- "totaltimens5": {
- "type": "text",
- "norms": false
- },
- "totaltimens6": {
- "type": "text",
- "norms": false
- },
- "totaltimens7": {
- "type": "text",
- "norms": false
- },
- "totaltimens8": {
- "type": "text",
- "norms": false
- },
- "totaltimens9": {
- "type": "text",
- "norms": false
- },
- "totalwritebytes": {
- "type": "text",
- "norms": false
- },
- "totalwrites": {
- "type": "text",
- "norms": false
- },
- "totalxpaths": {
- "type": "text",
- "norms": false
- },
- "trackingid": {
- "type": "text",
- "norms": false
- },
- "transferid": {
- "type": "text",
- "norms": false
- },
- "transmittedservices": {
- "type": "text",
- "norms": false
- },
- "transporttype": {
- "type": "text",
- "norms": false
- },
- "treeid": {
- "type": "text",
- "norms": false
- },
- "trimextentscount": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket1": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket2": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket3": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket4": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket5": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket6": {
- "type": "text",
- "norms": false
- },
- "trimlatencybucket7": {
- "type": "text",
- "norms": false
- },
- "ts": {
- "type": "text",
- "norms": false
- },
- "tsid": {
- "type": "text",
- "norms": false
- },
- "ttl": {
- "type": "text",
- "norms": false
- },
- "tunnelid": {
- "type": "text",
- "norms": false
- },
- "tx_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "txfabortreservedclustersmax": {
- "type": "text",
- "norms": false
- },
- "txfabortreservedclustersmin": {
- "type": "text",
- "norms": false
- },
- "type": {
- "type": "keyword"
- },
- "ufw_type": {
- "type": "keyword"
- },
- "uid": {
- "type": "text",
- "norms": false
- },
- "unallocatedclustersmax": {
- "type": "text",
- "norms": false
- },
- "unallocatedclustersmin": {
- "type": "text",
- "norms": false
- },
- "unassigned_credits": {
- "type": "text",
- "norms": false
- },
- "unassigned_groups": {
- "type": "text",
- "norms": false
- },
- "unassigned_labels": {
- "type": "text",
- "norms": false
- },
- "uniqueerrorlogarray": {
- "type": "text",
- "norms": false
- },
- "uniqueerrorlogarraylength": {
- "type": "text",
- "norms": false
- },
- "unknown": {
- "type": "text",
- "norms": false
- },
- "update_date": {
- "type": "text",
- "norms": false
- },
- "update_type": {
- "type": "text",
- "norms": false
- },
- "update_type_index": {
- "type": "text",
- "norms": false
- },
- "updatecount": {
- "type": "text",
- "norms": false
- },
- "updated_by": {
- "type": "text",
- "norms": false
- },
- "updated_date": {
- "type": "text",
- "norms": false
- },
- "updateguid": {
- "type": "text",
- "norms": false
- },
- "updaterevisionnumber": {
- "type": "text",
- "norms": false
- },
- "updatetitle": {
- "type": "text",
- "norms": false
- },
- "upload_session_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "upload_session_record_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "uploadduration": {
- "type": "text",
- "norms": false
- },
- "upstream_addr": {
- "type": "keyword"
- },
- "upstream_connect_time": {
- "type": "text",
- "norms": false
- },
- "upstream_data": {
- "type": "text",
- "norms": false
- },
- "upstream_response_time": {
- "type": "float",
- "ignore_malformed": true
- },
- "urgp": {
- "type": "text",
- "norms": false
- },
- "url": {
- "type": "text",
- "norms": false
- },
- "url_base": {
- "type": "text",
- "norms": false
- },
- "url_referrer": {
- "type": "text",
- "norms": false
- },
- "urlmethod": {
- "type": "text",
- "norms": false
- },
- "use_update_record": {
- "type": "text",
- "norms": false
- },
- "user": {
- "type": "text",
- "norms": false
- },
- "user_agent": {
- "type": "text",
- "norms": false
- },
- "user_attributes": {
- "type": "text",
- "norms": false
- },
- "user_email": {
- "type": "text",
- "norms": false
- },
- "user_filters": {
- "type": "text",
- "norms": false
- },
- "user_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "user_info_data": {
- "type": "text",
- "norms": false
- },
- "user_name": {
- "type": "keyword"
- },
- "user_report_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "user_sco_data_id": {
- "type": "keyword",
- "ignore_above": 256
- },
- "user_sid": {
- "type": "text",
- "norms": false
- },
- "useractivitytypeid": {
- "type": "long",
- "ignore_malformed": true
- },
- "usercontext": {
- "type": "text",
- "norms": false
- },
- "userdiskreads": {
- "type": "text",
- "norms": false
- },
- "userdiskwrites": {
- "type": "text",
- "norms": false
- },
- "userfilereadbytes": {
- "type": "text",
- "norms": false
- },
- "userfilereads": {
- "type": "text",
- "norms": false
- },
- "userfilewritebytes": {
- "type": "text",
- "norms": false
- },
- "userfilewrites": {
- "type": "text",
- "norms": false
- },
- "userhostaddress": {
- "type": "ip",
- "fields": {
- "keyword": {
- "type": "keyword",
- "ignore_above": 256
- },
- "text": {
- "type": "text",
- "norms": false
- }
- }
- },
- "userindexreadbytes": {
- "type": "text",
- "norms": false
- },
- "userindexreads": {
- "type": "text",
- "norms": false
- },
- "userindexwritebytes": {
- "type": "text",
- "norms": false
- },
- "userindexwrites": {
- "type": "text",
- "norms": false
- },
- "userinputbmr": {
- "type": "text",
- "norms": false
- },
- "userinputssb": {
- "type": "text",
- "norms": false
- },
- "userloginname": {
- "type": "text",
- "norms": false
- },
- "users": {
- "type": "text",
- "norms": false
- },
- "users_count": {
- "type": "text",
- "norms": false
- },
- "usersid": {
- "type": "text",
- "norms": false
- },
- "uvalue": {
- "type": "text",
- "norms": false
- },
- "value": {
- "type": "text",
- "norms": false
- },
- "vcb": {
- "type": "text",
- "norms": false
- },
- "vendor": {
- "type": "text",
- "norms": false
- },
- "vendorid": {
- "type": "text",
- "norms": false
- },
- "vendoridlength": {
- "type": "text",
- "norms": false
- },
- "version": {
- "type": "text",
- "norms": false
- },
- "virtualaccount": {
- "type": "text",
- "norms": false
- },
- "vlan": {
- "type": "text",
- "norms": false
- },
- "volumecorrelationid": {
- "type": "text",
- "norms": false
- },
- "volumecount": {
- "type": "text",
- "norms": false
- },
- "volumedeviceguid": {
- "type": "text",
- "norms": false
- },
- "volumeflushavglatencyns": {
- "type": "text",
- "norms": false
- },
- "volumeflushcount": {
- "type": "text",
- "norms": false
- },
- "volumeguid": {
- "type": "text",
- "norms": false
- },
- "volumelabel": {
- "type": "text",
- "norms": false
- },
- "volumelabellength": {
- "type": "text",
- "norms": false
- },
- "volumename": {
- "type": "text",
- "norms": false
- },
- "volumenamelength": {
- "type": "text",
- "norms": false
- },
- "volumesinfo": {
- "type": "text",
- "norms": false
- },
- "volumesizeinbytes": {
- "type": "text",
- "norms": false
- },
- "volumesizestr": {
- "type": "text",
- "norms": false
- },
- "volumetrimavglatencyns": {
- "type": "text",
- "norms": false
- },
- "volumetrimcount": {
- "type": "text",
- "norms": false
- },
- "volumetrimextentscount": {
- "type": "text",
- "norms": false
- },
- "volumetrimsize": {
- "type": "text",
- "norms": false
- },
- "volumetrimskippedcount": {
- "type": "text",
- "norms": false
- },
- "volumetrimskippedsize": {
- "type": "text",
- "norms": false
- },
- "volumetrimtime": {
- "type": "text",
- "norms": false
- },
- "volumetrimtotalbytes": {
- "type": "text",
- "norms": false
- },
- "vssfullbackup": {
- "type": "text",
- "norms": false
- },
- "waitduration_ms": {
- "type": "text",
- "norms": false
- },
- "window": {
- "type": "text",
- "norms": false
- },
- "windows-event_data-CommandLine": {
- "type": "alias",
- "path": "command"
- },
- "winlogonreturntimeelapsedinmilliseconds": {
- "type": "text",
- "norms": false
- },
- "wmiclassname": {
- "type": "text",
- "norms": false
- },
- "workstation": {
- "type": "text",
- "norms": false
- },
- "workstationname": {
- "type": "text",
- "norms": false
- },
- "xpath": {
- "type": "text",
- "norms": false
- },
- "zone": {
- "type": "text",
- "norms": false
- },
- "zonescope": {
- "type": "text",
- "norms": false
- }
- }
- }
- }
- }
index mapping