1. {
  2. "logstash-2023.03.27": {
  3. "mappings": {
  4. "dynamic_templates": [
  5. {
  6. "id_fields": {
  7. "match": "*_id",
  8. "mapping": {
  9. "ignore_above": 256,
  10. "type": "keyword"
  11. }
  12. }
  13. },
  14. {
  15. "string_fields": {
  16. "match": "*",
  17. "match_mapping_type": "string",
  18. "mapping": {
  19. "norms": false,
  20. "type": "text"
  21. }
  22. }
  23. },
  24. {
  25. "boolean_fields": {
  26. "match": "*",
  27. "match_mapping_type": "boolean",
  28. "mapping": {
  29. "norms": false,
  30. "type": "text"
  31. }
  32. }
  33. },
  34. {
  35. "long_fields": {
  36. "match": "*",
  37. "match_mapping_type": "long",
  38. "mapping": {
  39. "norms": false,
  40. "type": "text"
  41. }
  42. }
  43. },
  44. {
  45. "double_fields": {
  46. "match": "*",
  47. "match_mapping_type": "double",
  48. "mapping": {
  49. "norms": false,
  50. "type": "text"
  51. }
  52. }
  53. }
  54. ],
  55. "date_detection": false,
  56. "numeric_detection": false,
  57. "properties": {
  58. "@timestamp": {
  59. "type": "date"
  60. },
  61. "@version": {
  62. "type": "text",
  63. "norms": false
  64. },
  65. "_all": {
  66. "type": "object",
  67. "enabled": false
  68. },
  69. "absolute_site_domain_name": {
  70. "type": "text",
  71. "norms": false
  72. },
  73. "access_type_id": {
  74. "type": "keyword",
  75. "ignore_above": 256
  76. },
  77. "accountdomain": {
  78. "type": "text",
  79. "norms": false
  80. },
  81. "accountname": {
  82. "type": "text",
  83. "norms": false
  84. },
  85. "accounttype": {
  86. "type": "text",
  87. "norms": false
  88. },
  89. "accreditations": {
  90. "type": "text",
  91. "norms": false
  92. },
  93. "action": {
  94. "type": "text",
  95. "norms": false
  96. },
  97. "action_data": {
  98. "type": "text",
  99. "norms": false
  100. },
  101. "action_name": {
  102. "type": "text",
  103. "norms": false
  104. },
  105. "actionname": {
  106. "type": "text",
  107. "norms": false
  108. },
  109. "actions": {
  110. "type": "text",
  111. "norms": false
  112. },
  113. "active": {
  114. "type": "text",
  115. "norms": false
  116. },
  117. "activityid": {
  118. "type": "text",
  119. "norms": false
  120. },
  121. "activityvalidationtimeout": {
  122. "type": "text",
  123. "norms": false
  124. },
  125. "actual_user_id": {
  126. "type": "keyword",
  127. "ignore_above": 256
  128. },
  129. "adapterguid": {
  130. "type": "text",
  131. "norms": false
  132. },
  133. "adaptername": {
  134. "type": "text",
  135. "norms": false
  136. },
  137. "adapterserialnumberlength": {
  138. "type": "text",
  139. "norms": false
  140. },
  141. "adaptersuffixname": {
  142. "type": "text",
  143. "norms": false
  144. },
  145. "added_by": {
  146. "type": "text",
  147. "norms": false
  148. },
  149. "additionalinfo": {
  150. "type": "text",
  151. "norms": false
  152. },
  153. "additionalinfohr": {
  154. "type": "text",
  155. "norms": false
  156. },
  157. "additionalsensecode": {
  158. "type": "text",
  159. "norms": false
  160. },
  161. "additionalsensecodequalifier": {
  162. "type": "text",
  163. "norms": false
  164. },
  165. "address": {
  166. "type": "text",
  167. "norms": false
  168. },
  169. "addresslength": {
  170. "type": "text",
  171. "norms": false
  172. },
  173. "addsense": {
  174. "type": "text",
  175. "norms": false
  176. },
  177. "addsenseq": {
  178. "type": "text",
  179. "norms": false
  180. },
  181. "adjustmentppm": {
  182. "type": "text",
  183. "norms": false
  184. },
  185. "admin_user_id": {
  186. "type": "keyword",
  187. "ignore_above": 256
  188. },
  189. "admin_user_name": {
  190. "type": "text",
  191. "norms": false
  192. },
  193. "affiliatename": {
  194. "type": "text",
  195. "norms": false
  196. },
  197. "aicc_data": {
  198. "type": "text",
  199. "norms": false
  200. },
  201. "aicc_request_headers": {
  202. "type": "text",
  203. "norms": false
  204. },
  205. "aicc_session_id": {
  206. "type": "keyword",
  207. "ignore_above": 256
  208. },
  209. "aicc_session_key": {
  210. "type": "text",
  211. "norms": false
  212. },
  213. "aicc_session_registration_id": {
  214. "type": "keyword",
  215. "ignore_above": 256
  216. },
  217. "aicc_sid": {
  218. "type": "text",
  219. "norms": false
  220. },
  221. "aicc_url": {
  222. "type": "text",
  223. "norms": false
  224. },
  225. "aide": {
  226. "dynamic": "true",
  227. "properties": {
  228. "file": {
  229. "type": "keyword"
  230. },
  231. "package": {
  232. "type": "keyword"
  233. },
  234. "packages_installed": {
  235. "type": "keyword"
  236. },
  237. "status": {
  238. "type": "keyword"
  239. }
  240. }
  241. },
  242. "alert": {
  243. "properties": {
  244. "action": {
  245. "type": "text",
  246. "norms": false
  247. },
  248. "category": {
  249. "type": "keyword",
  250. "ignore_above": 256
  251. },
  252. "gid": {
  253. "type": "text",
  254. "norms": false
  255. },
  256. "metadata": {
  257. "properties": {
  258. "affected_product": {
  259. "type": "text",
  260. "norms": false
  261. },
  262. "attack_target": {
  263. "type": "text",
  264. "norms": false
  265. },
  266. "confidence": {
  267. "type": "text",
  268. "norms": false
  269. },
  270. "created_at": {
  271. "type": "text",
  272. "norms": false
  273. },
  274. "cve": {
  275. "type": "text",
  276. "norms": false
  277. },
  278. "deployment": {
  279. "type": "text",
  280. "norms": false
  281. },
  282. "former_category": {
  283. "type": "text",
  284. "norms": false
  285. },
  286. "mitre_tactic_id": {
  287. "type": "keyword",
  288. "ignore_above": 256
  289. },
  290. "mitre_tactic_name": {
  291. "type": "text",
  292. "norms": false
  293. },
  294. "mitre_technique_id": {
  295. "type": "keyword",
  296. "ignore_above": 256
  297. },
  298. "mitre_technique_name": {
  299. "type": "text",
  300. "norms": false
  301. },
  302. "performance_impact": {
  303. "type": "text",
  304. "norms": false
  305. },
  306. "signature_severity": {
  307. "type": "text",
  308. "norms": false
  309. },
  310. "tag": {
  311. "type": "text",
  312. "norms": false
  313. },
  314. "updated_at": {
  315. "type": "text",
  316. "norms": false
  317. }
  318. }
  319. },
  320. "rev": {
  321. "type": "text",
  322. "norms": false
  323. },
  324. "severity": {
  325. "type": "text",
  326. "norms": false
  327. },
  328. "signature": {
  329. "type": "keyword",
  330. "ignore_above": 256
  331. },
  332. "signature_id": {
  333. "type": "keyword",
  334. "ignore_above": 256
  335. }
  336. }
  337. },
  338. "all_users": {
  339. "type": "text",
  340. "norms": false
  341. },
  342. "allntpservers": {
  343. "type": "text",
  344. "norms": false
  345. },
  346. "allow_auto_register": {
  347. "type": "text",
  348. "norms": false
  349. },
  350. "allow_create": {
  351. "type": "text",
  352. "norms": false
  353. },
  354. "allow_duplicate_emails": {
  355. "type": "text",
  356. "norms": false
  357. },
  358. "amount": {
  359. "type": "text",
  360. "norms": false
  361. },
  362. "app_proto": {
  363. "type": "keyword"
  364. },
  365. "apparmor": {
  366. "type": "text",
  367. "norms": false
  368. },
  369. "appcontainername": {
  370. "type": "text",
  371. "norms": false
  372. },
  373. "appdomain": {
  374. "type": "text",
  375. "norms": false
  376. },
  377. "applicablegpolist": {
  378. "type": "text",
  379. "norms": false
  380. },
  381. "applicationpath": {
  382. "type": "text",
  383. "norms": false
  384. },
  385. "apppoolid": {
  386. "type": "text",
  387. "norms": false
  388. },
  389. "approval_status_id": {
  390. "type": "keyword",
  391. "ignore_above": 256
  392. },
  393. "appsettings": {
  394. "type": "text",
  395. "norms": false
  396. },
  397. "apptype": {
  398. "type": "text",
  399. "norms": false
  400. },
  401. "appusermodelid": {
  402. "type": "text",
  403. "norms": false
  404. },
  405. "as_security_intelligence_creation_time": {
  406. "type": "text",
  407. "norms": false
  408. },
  409. "as_security_intelligence_version": {
  410. "type": "text",
  411. "norms": false
  412. },
  413. "assign_components": {
  414. "type": "text",
  415. "norms": false
  416. },
  417. "assigned": {
  418. "type": "text",
  419. "norms": false
  420. },
  421. "assigned_credits": {
  422. "type": "text",
  423. "norms": false
  424. },
  425. "assigned_groups": {
  426. "type": "text",
  427. "norms": false
  428. },
  429. "assigned_labels": {
  430. "type": "text",
  431. "norms": false
  432. },
  433. "associated_user_id": {
  434. "type": "keyword",
  435. "ignore_above": 256
  436. },
  437. "asynchronousreadiocountsbucket1": {
  438. "type": "text",
  439. "norms": false
  440. },
  441. "asynchronousreadiocountsbucket10": {
  442. "type": "text",
  443. "norms": false
  444. },
  445. "asynchronousreadiocountsbucket11": {
  446. "type": "text",
  447. "norms": false
  448. },
  449. "asynchronousreadiocountsbucket12": {
  450. "type": "text",
  451. "norms": false
  452. },
  453. "asynchronousreadiocountsbucket2": {
  454. "type": "text",
  455. "norms": false
  456. },
  457. "asynchronousreadiocountsbucket3": {
  458. "type": "text",
  459. "norms": false
  460. },
  461. "asynchronousreadiocountsbucket4": {
  462. "type": "text",
  463. "norms": false
  464. },
  465. "asynchronousreadiocountsbucket5": {
  466. "type": "text",
  467. "norms": false
  468. },
  469. "asynchronousreadiocountsbucket6": {
  470. "type": "text",
  471. "norms": false
  472. },
  473. "asynchronousreadiocountsbucket7": {
  474. "type": "text",
  475. "norms": false
  476. },
  477. "asynchronousreadiocountsbucket8": {
  478. "type": "text",
  479. "norms": false
  480. },
  481. "asynchronousreadiocountsbucket9": {
  482. "type": "text",
  483. "norms": false
  484. },
  485. "asynchronousreadiomaxlatency": {
  486. "type": "text",
  487. "norms": false
  488. },
  489. "asynchronousreadtotallatencybucket1": {
  490. "type": "text",
  491. "norms": false
  492. },
  493. "asynchronousreadtotallatencybucket10": {
  494. "type": "text",
  495. "norms": false
  496. },
  497. "asynchronousreadtotallatencybucket11": {
  498. "type": "text",
  499. "norms": false
  500. },
  501. "asynchronousreadtotallatencybucket12": {
  502. "type": "text",
  503. "norms": false
  504. },
  505. "asynchronousreadtotallatencybucket2": {
  506. "type": "text",
  507. "norms": false
  508. },
  509. "asynchronousreadtotallatencybucket3": {
  510. "type": "text",
  511. "norms": false
  512. },
  513. "asynchronousreadtotallatencybucket4": {
  514. "type": "text",
  515. "norms": false
  516. },
  517. "asynchronousreadtotallatencybucket5": {
  518. "type": "text",
  519. "norms": false
  520. },
  521. "asynchronousreadtotallatencybucket6": {
  522. "type": "text",
  523. "norms": false
  524. },
  525. "asynchronousreadtotallatencybucket7": {
  526. "type": "text",
  527. "norms": false
  528. },
  529. "asynchronousreadtotallatencybucket8": {
  530. "type": "text",
  531. "norms": false
  532. },
  533. "asynchronousreadtotallatencybucket9": {
  534. "type": "text",
  535. "norms": false
  536. },
  537. "attributeid": {
  538. "type": "text",
  539. "norms": false
  540. },
  541. "attributes": {
  542. "type": "text",
  543. "norms": false
  544. },
  545. "audit_backlog": {
  546. "type": "text",
  547. "norms": false
  548. },
  549. "audit_backlog_limit": {
  550. "type": "text",
  551. "norms": false
  552. },
  553. "audit_lost": {
  554. "type": "text",
  555. "norms": false
  556. },
  557. "audit_rate_limit": {
  558. "type": "text",
  559. "norms": false
  560. },
  561. "auditsourcename": {
  562. "type": "text",
  563. "norms": false
  564. },
  565. "auth": {
  566. "properties": {
  567. "accessor": {
  568. "type": "text",
  569. "norms": false
  570. },
  571. "client_token": {
  572. "type": "text",
  573. "norms": false
  574. },
  575. "display_name": {
  576. "type": "text",
  577. "norms": false
  578. },
  579. "entity_id": {
  580. "type": "keyword",
  581. "ignore_above": 256
  582. },
  583. "metadata": {
  584. "properties": {
  585. "role": {
  586. "type": "text",
  587. "norms": false
  588. },
  589. "service_account_name": {
  590. "type": "text",
  591. "norms": false
  592. },
  593. "service_account_namespace": {
  594. "type": "text",
  595. "norms": false
  596. },
  597. "service_account_secret_name": {
  598. "type": "text",
  599. "norms": false
  600. },
  601. "service_account_uid": {
  602. "type": "text",
  603. "norms": false
  604. },
  605. "username": {
  606. "type": "text",
  607. "norms": false
  608. }
  609. }
  610. },
  611. "policies": {
  612. "type": "text",
  613. "norms": false
  614. },
  615. "policy_results": {
  616. "properties": {
  617. "allowed": {
  618. "type": "text",
  619. "norms": false
  620. },
  621. "granting_policies": {
  622. "properties": {
  623. "name": {
  624. "type": "text",
  625. "norms": false
  626. },
  627. "namespace_id": {
  628. "type": "keyword",
  629. "ignore_above": 256
  630. },
  631. "type": {
  632. "type": "text",
  633. "norms": false
  634. }
  635. }
  636. }
  637. }
  638. },
  639. "token_issue_time": {
  640. "type": "text",
  641. "norms": false
  642. },
  643. "token_policies": {
  644. "type": "text",
  645. "norms": false
  646. },
  647. "token_ttl": {
  648. "type": "text",
  649. "norms": false
  650. },
  651. "token_type": {
  652. "type": "text",
  653. "norms": false
  654. },
  655. "value": {
  656. "type": "text",
  657. "norms": false
  658. }
  659. }
  660. },
  661. "authenticationpackagename": {
  662. "type": "text",
  663. "norms": false
  664. },
  665. "authn_method": {
  666. "type": "text",
  667. "norms": false
  668. },
  669. "authrequired": {
  670. "type": "text",
  671. "norms": false
  672. },
  673. "autoregister": {
  674. "type": "text",
  675. "norms": false
  676. },
  677. "av_security_intelligence_creation_time": {
  678. "type": "text",
  679. "norms": false
  680. },
  681. "av_security_intelligence_version": {
  682. "type": "text",
  683. "norms": false
  684. },
  685. "availabespacedeltastr": {
  686. "type": "text",
  687. "norms": false
  688. },
  689. "availabespacemaxstr": {
  690. "type": "text",
  691. "norms": false
  692. },
  693. "availabespaceminstr": {
  694. "type": "text",
  695. "norms": false
  696. },
  697. "availableclustersmax": {
  698. "type": "text",
  699. "norms": false
  700. },
  701. "availableclustersmin": {
  702. "type": "text",
  703. "norms": false
  704. },
  705. "avcenabled": {
  706. "type": "text",
  707. "norms": false
  708. },
  709. "averagebps": {
  710. "type": "text",
  711. "norms": false
  712. },
  713. "averageiops": {
  714. "type": "text",
  715. "norms": false
  716. },
  717. "averagelatencyns": {
  718. "type": "text",
  719. "norms": false
  720. },
  721. "averagelatencystr": {
  722. "type": "text",
  723. "norms": false
  724. },
  725. "avgdailydriftseconds": {
  726. "type": "text",
  727. "norms": false
  728. },
  729. "avgfileleveltrimsize": {
  730. "type": "text",
  731. "norms": false
  732. },
  733. "avgfileleveltrimtime": {
  734. "type": "text",
  735. "norms": false
  736. },
  737. "avgfreqdurationmins": {
  738. "type": "text",
  739. "norms": false
  740. },
  741. "avgfrequencyerrorppm": {
  742. "type": "text",
  743. "norms": false
  744. },
  745. "avgvolumetrimsize": {
  746. "type": "text",
  747. "norms": false
  748. },
  749. "avgvolumetrimtime": {
  750. "type": "text",
  751. "norms": false
  752. },
  753. "backupfailurelogpath": {
  754. "type": "text",
  755. "norms": false
  756. },
  757. "backupflags": {
  758. "type": "text",
  759. "norms": false
  760. },
  761. "backuppreviousstate": {
  762. "type": "text",
  763. "norms": false
  764. },
  765. "backupstate": {
  766. "type": "text",
  767. "norms": false
  768. },
  769. "backupsuccesslogpath": {
  770. "type": "text",
  771. "norms": false
  772. },
  773. "backuptarget": {
  774. "type": "text",
  775. "norms": false
  776. },
  777. "backuptemplateid": {
  778. "type": "text",
  779. "norms": false
  780. },
  781. "backuptime": {
  782. "type": "text",
  783. "norms": false
  784. },
  785. "backupwriteendtime": {
  786. "type": "text",
  787. "norms": false
  788. },
  789. "backupwritestarttime": {
  790. "type": "text",
  791. "norms": false
  792. },
  793. "bandwidthinkbps": {
  794. "type": "text",
  795. "norms": false
  796. },
  797. "bandwidthlimit": {
  798. "type": "text",
  799. "norms": false
  800. },
  801. "barrier": {
  802. "type": "text",
  803. "norms": false
  804. },
  805. "batch_process_user_id": {
  806. "type": "keyword",
  807. "ignore_above": 256
  808. },
  809. "bitmapreadbytes": {
  810. "type": "text",
  811. "norms": false
  812. },
  813. "bitmapreads": {
  814. "type": "text",
  815. "norms": false
  816. },
  817. "bitmapwritebytes": {
  818. "type": "text",
  819. "norms": false
  820. },
  821. "bitmapwrites": {
  822. "type": "text",
  823. "norms": false
  824. },
  825. "bls_course_id": {
  826. "type": "keyword",
  827. "ignore_above": 256
  828. },
  829. "bm_state": {
  830. "type": "text",
  831. "norms": false
  832. },
  833. "bmr": {
  834. "type": "text",
  835. "norms": false
  836. },
  837. "bms_user_id": {
  838. "type": "keyword",
  839. "ignore_above": 256
  840. },
  841. "bms_user_name": {
  842. "type": "text",
  843. "norms": false
  844. },
  845. "body": {
  846. "type": "text",
  847. "norms": false
  848. },
  849. "bootdevice": {
  850. "type": "text",
  851. "norms": false
  852. },
  853. "browser": {
  854. "type": "text",
  855. "norms": false
  856. },
  857. "browser_metrics": {
  858. "properties": {
  859. "build": {
  860. "type": "keyword"
  861. },
  862. "device": {
  863. "type": "keyword"
  864. },
  865. "major": {
  866. "type": "keyword"
  867. },
  868. "minor": {
  869. "type": "keyword"
  870. },
  871. "name": {
  872. "type": "keyword"
  873. },
  874. "os": {
  875. "type": "keyword"
  876. },
  877. "os_full": {
  878. "type": "text",
  879. "norms": false
  880. },
  881. "os_major": {
  882. "type": "keyword"
  883. },
  884. "os_minor": {
  885. "type": "keyword"
  886. },
  887. "os_name": {
  888. "type": "keyword"
  889. },
  890. "os_patch": {
  891. "type": "text",
  892. "norms": false
  893. },
  894. "os_version": {
  895. "type": "text",
  896. "norms": false
  897. },
  898. "patch": {
  899. "type": "keyword"
  900. },
  901. "version": {
  902. "type": "text",
  903. "norms": false
  904. }
  905. }
  906. },
  907. "browser_minor_version": {
  908. "type": "text",
  909. "norms": false
  910. },
  911. "browser_type": {
  912. "type": "text",
  913. "norms": false
  914. },
  915. "browser_version": {
  916. "type": "text",
  917. "norms": false
  918. },
  919. "browsersupportsactivexcontrols": {
  920. "type": "text",
  921. "norms": false
  922. },
  923. "browsersupportscookies": {
  924. "type": "text",
  925. "norms": false
  926. },
  927. "browsersupportsjavascript": {
  928. "type": "text",
  929. "norms": false
  930. },
  931. "bucketiofailed1": {
  932. "type": "text",
  933. "norms": false
  934. },
  935. "bucketiofailed10": {
  936. "type": "text",
  937. "norms": false
  938. },
  939. "bucketiofailed11": {
  940. "type": "text",
  941. "norms": false
  942. },
  943. "bucketiofailed12": {
  944. "type": "text",
  945. "norms": false
  946. },
  947. "bucketiofailed2": {
  948. "type": "text",
  949. "norms": false
  950. },
  951. "bucketiofailed3": {
  952. "type": "text",
  953. "norms": false
  954. },
  955. "bucketiofailed4": {
  956. "type": "text",
  957. "norms": false
  958. },
  959. "bucketiofailed5": {
  960. "type": "text",
  961. "norms": false
  962. },
  963. "bucketiofailed6": {
  964. "type": "text",
  965. "norms": false
  966. },
  967. "bucketiofailed7": {
  968. "type": "text",
  969. "norms": false
  970. },
  971. "bucketiofailed8": {
  972. "type": "text",
  973. "norms": false
  974. },
  975. "bucketiofailed9": {
  976. "type": "text",
  977. "norms": false
  978. },
  979. "bucketiolatency10_100ns": {
  980. "type": "text",
  981. "norms": false
  982. },
  983. "bucketiolatency11_100ns": {
  984. "type": "text",
  985. "norms": false
  986. },
  987. "bucketiolatency12_100ns": {
  988. "type": "text",
  989. "norms": false
  990. },
  991. "bucketiolatency1_100ns": {
  992. "type": "text",
  993. "norms": false
  994. },
  995. "bucketiolatency2_100ns": {
  996. "type": "text",
  997. "norms": false
  998. },
  999. "bucketiolatency3_100ns": {
  1000. "type": "text",
  1001. "norms": false
  1002. },
  1003. "bucketiolatency4_100ns": {
  1004. "type": "text",
  1005. "norms": false
  1006. },
  1007. "bucketiolatency5_100ns": {
  1008. "type": "text",
  1009. "norms": false
  1010. },
  1011. "bucketiolatency6_100ns": {
  1012. "type": "text",
  1013. "norms": false
  1014. },
  1015. "bucketiolatency7_100ns": {
  1016. "type": "text",
  1017. "norms": false
  1018. },
  1019. "bucketiolatency8_100ns": {
  1020. "type": "text",
  1021. "norms": false
  1022. },
  1023. "bucketiolatency9_100ns": {
  1024. "type": "text",
  1025. "norms": false
  1026. },
  1027. "bucketiosuccess1": {
  1028. "type": "text",
  1029. "norms": false
  1030. },
  1031. "bucketiosuccess10": {
  1032. "type": "text",
  1033. "norms": false
  1034. },
  1035. "bucketiosuccess11": {
  1036. "type": "text",
  1037. "norms": false
  1038. },
  1039. "bucketiosuccess12": {
  1040. "type": "text",
  1041. "norms": false
  1042. },
  1043. "bucketiosuccess2": {
  1044. "type": "text",
  1045. "norms": false
  1046. },
  1047. "bucketiosuccess3": {
  1048. "type": "text",
  1049. "norms": false
  1050. },
  1051. "bucketiosuccess4": {
  1052. "type": "text",
  1053. "norms": false
  1054. },
  1055. "bucketiosuccess5": {
  1056. "type": "text",
  1057. "norms": false
  1058. },
  1059. "bucketiosuccess6": {
  1060. "type": "text",
  1061. "norms": false
  1062. },
  1063. "bucketiosuccess7": {
  1064. "type": "text",
  1065. "norms": false
  1066. },
  1067. "bucketiosuccess8": {
  1068. "type": "text",
  1069. "norms": false
  1070. },
  1071. "bucketiosuccess9": {
  1072. "type": "text",
  1073. "norms": false
  1074. },
  1075. "buffersize": {
  1076. "type": "text",
  1077. "norms": false
  1078. },
  1079. "bustype": {
  1080. "type": "text",
  1081. "norms": false
  1082. },
  1083. "bytes": {
  1084. "type": "long",
  1085. "ignore_malformed": true
  1086. },
  1087. "bytestotal": {
  1088. "type": "text",
  1089. "norms": false
  1090. },
  1091. "bytestransferred": {
  1092. "type": "text",
  1093. "norms": false
  1094. },
  1095. "bytestransferredfrompeer": {
  1096. "type": "text",
  1097. "norms": false
  1098. },
  1099. "bytesuploaded": {
  1100. "type": "text",
  1101. "norms": false
  1102. },
  1103. "cabx": {
  1104. "type": "text",
  1105. "norms": false
  1106. },
  1107. "cache": {
  1108. "type": "keyword"
  1109. },
  1110. "cachedrunsmisscount": {
  1111. "type": "text",
  1112. "norms": false
  1113. },
  1114. "cachedrunsmisscountformft": {
  1115. "type": "text",
  1116. "norms": false
  1117. },
  1118. "cachedrunsmisscountformftzone": {
  1119. "type": "text",
  1120. "norms": false
  1121. },
  1122. "cachehitratio": {
  1123. "type": "text",
  1124. "norms": false
  1125. },
  1126. "caller": {
  1127. "type": "text",
  1128. "norms": false
  1129. },
  1130. "callerpid": {
  1131. "type": "text",
  1132. "norms": false
  1133. },
  1134. "callerprocessid": {
  1135. "type": "text",
  1136. "norms": false
  1137. },
  1138. "callerprocessname": {
  1139. "type": "text",
  1140. "norms": false
  1141. },
  1142. "callingprocesscreatetime": {
  1143. "type": "text",
  1144. "norms": false
  1145. },
  1146. "callingprocessid": {
  1147. "type": "text",
  1148. "norms": false
  1149. },
  1150. "callingprocessprotection": {
  1151. "type": "text",
  1152. "norms": false
  1153. },
  1154. "callingprocesssectionsignaturelevel": {
  1155. "type": "text",
  1156. "norms": false
  1157. },
  1158. "callingprocesssignaturelevel": {
  1159. "type": "text",
  1160. "norms": false
  1161. },
  1162. "callingprocessstartkey": {
  1163. "type": "text",
  1164. "norms": false
  1165. },
  1166. "callingthreadcreatetime": {
  1167. "type": "text",
  1168. "norms": false
  1169. },
  1170. "callingthreadid": {
  1171. "type": "text",
  1172. "norms": false
  1173. },
  1174. "capability": {
  1175. "type": "text",
  1176. "norms": false
  1177. },
  1178. "capf1mjz7": {
  1179. "type": "text",
  1180. "norms": false
  1181. },
  1182. "capname": {
  1183. "type": "text",
  1184. "norms": false
  1185. },
  1186. "category": {
  1187. "type": "keyword"
  1188. },
  1189. "category_id": {
  1190. "type": "keyword",
  1191. "ignore_above": 256
  1192. },
  1193. "ccasynccopyreadcalls": {
  1194. "type": "text",
  1195. "norms": false
  1196. },
  1197. "cccopyreadcalls": {
  1198. "type": "text",
  1199. "norms": false
  1200. },
  1201. "cccopywritecalls": {
  1202. "type": "text",
  1203. "norms": false
  1204. },
  1205. "ccflushcachecalls": {
  1206. "type": "text",
  1207. "norms": false
  1208. },
  1209. "ccsetvaliddatacalls": {
  1210. "type": "text",
  1211. "norms": false
  1212. },
  1213. "cdbbytecount": {
  1214. "type": "text",
  1215. "norms": false
  1216. },
  1217. "cdbbytes": {
  1218. "type": "text",
  1219. "norms": false
  1220. },
  1221. "certificate_types": {
  1222. "type": "text",
  1223. "norms": false
  1224. },
  1225. "challenges": {
  1226. "type": "text",
  1227. "norms": false
  1228. },
  1229. "channel": {
  1230. "type": "text",
  1231. "norms": false
  1232. },
  1233. "channelname": {
  1234. "type": "text",
  1235. "norms": false
  1236. },
  1237. "check": {
  1238. "type": "text",
  1239. "norms": false
  1240. },
  1241. "check_required": {
  1242. "type": "text",
  1243. "norms": false
  1244. },
  1245. "childcommandline": {
  1246. "type": "text",
  1247. "norms": false
  1248. },
  1249. "childcommandlinelength": {
  1250. "type": "text",
  1251. "norms": false
  1252. },
  1253. "childimagepathname": {
  1254. "type": "text",
  1255. "norms": false
  1256. },
  1257. "childimagepathnamelength": {
  1258. "type": "text",
  1259. "norms": false
  1260. },
  1261. "chosenreferencentpserver": {
  1262. "type": "text",
  1263. "norms": false
  1264. },
  1265. "classdeviceguid": {
  1266. "type": "text",
  1267. "norms": false
  1268. },
  1269. "classguid": {
  1270. "type": "text",
  1271. "norms": false
  1272. },
  1273. "client": {
  1274. "type": "text",
  1275. "norms": false
  1276. },
  1277. "client_id": {
  1278. "type": "keyword",
  1279. "ignore_above": 256
  1280. },
  1281. "client_ip": {
  1282. "type": "ip"
  1283. },
  1284. "client_user": {
  1285. "type": "text",
  1286. "norms": false
  1287. },
  1288. "clientaddress": {
  1289. "type": "text",
  1290. "norms": false
  1291. },
  1292. "clientdomainname": {
  1293. "type": "text",
  1294. "norms": false
  1295. },
  1296. "clientluid": {
  1297. "type": "text",
  1298. "norms": false
  1299. },
  1300. "clientmode": {
  1301. "type": "text",
  1302. "norms": false
  1303. },
  1304. "clientname": {
  1305. "type": "text",
  1306. "norms": false
  1307. },
  1308. "clientprocessid": {
  1309. "type": "text",
  1310. "norms": false
  1311. },
  1312. "clientprocessstartkey": {
  1313. "type": "text",
  1314. "norms": false
  1315. },
  1316. "clientuser": {
  1317. "type": "keyword"
  1318. },
  1319. "clientusername": {
  1320. "type": "text",
  1321. "norms": false
  1322. },
  1323. "clockrate": {
  1324. "type": "text",
  1325. "norms": false
  1326. },
  1327. "cloud_protection_intelligence_compilation_timestamp": {
  1328. "type": "text",
  1329. "norms": false
  1330. },
  1331. "cloud_protection_intelligence_type": {
  1332. "type": "text",
  1333. "norms": false
  1334. },
  1335. "cloud_protection_intelligence_type_index": {
  1336. "type": "text",
  1337. "norms": false
  1338. },
  1339. "cloud_protection_intelligence_version": {
  1340. "type": "text",
  1341. "norms": false
  1342. },
  1343. "cluster_name": {
  1344. "type": "text",
  1345. "norms": false
  1346. },
  1347. "cluster_uuid": {
  1348. "type": "text",
  1349. "norms": false
  1350. },
  1351. "clustersize": {
  1352. "type": "text",
  1353. "norms": false
  1354. },
  1355. "code": {
  1356. "type": "text",
  1357. "norms": false
  1358. },
  1359. "comm": {
  1360. "type": "text",
  1361. "norms": false
  1362. },
  1363. "command": {
  1364. "type": "text",
  1365. "norms": false
  1366. },
  1367. "command_name": {
  1368. "type": "text",
  1369. "norms": false
  1370. },
  1371. "commands": {
  1372. "type": "text",
  1373. "norms": false
  1374. },
  1375. "comment": {
  1376. "type": "text",
  1377. "norms": false
  1378. },
  1379. "comment_id": {
  1380. "type": "keyword",
  1381. "ignore_above": 256
  1382. },
  1383. "comments": {
  1384. "type": "text",
  1385. "norms": false
  1386. },
  1387. "common_args": {
  1388. "type": "text",
  1389. "norms": false
  1390. },
  1391. "competency_nodes": {
  1392. "type": "text",
  1393. "norms": false
  1394. },
  1395. "completed": {
  1396. "type": "text",
  1397. "norms": false
  1398. },
  1399. "completed_scos_number": {
  1400. "type": "text",
  1401. "norms": false
  1402. },
  1403. "component": {
  1404. "type": "text",
  1405. "norms": false
  1406. },
  1407. "componentinfo": {
  1408. "type": "text",
  1409. "norms": false
  1410. },
  1411. "componentinfosummary": {
  1412. "type": "text",
  1413. "norms": false
  1414. },
  1415. "componentname": {
  1416. "type": "text",
  1417. "norms": false
  1418. },
  1419. "componentstatus": {
  1420. "type": "text",
  1421. "norms": false
  1422. },
  1423. "configmap": {
  1424. "type": "text",
  1425. "norms": false
  1426. },
  1427. "configuration": {
  1428. "type": "text",
  1429. "norms": false
  1430. },
  1431. "confirmation_code": {
  1432. "type": "text",
  1433. "norms": false
  1434. },
  1435. "connectionname": {
  1436. "type": "text",
  1437. "norms": false
  1438. },
  1439. "connectiontype": {
  1440. "type": "text",
  1441. "norms": false
  1442. },
  1443. "conntype": {
  1444. "type": "text",
  1445. "norms": false
  1446. },
  1447. "contacts": {
  1448. "type": "text",
  1449. "norms": false
  1450. },
  1451. "containsrawvolumes": {
  1452. "type": "text",
  1453. "norms": false
  1454. },
  1455. "content_size": {
  1456. "type": "text",
  1457. "norms": false
  1458. },
  1459. "content_type": {
  1460. "type": "text",
  1461. "norms": false
  1462. },
  1463. "context": {
  1464. "type": "text",
  1465. "norms": false
  1466. },
  1467. "context_attrs": {
  1468. "type": "text",
  1469. "norms": false
  1470. },
  1471. "contextinfo": {
  1472. "type": "text",
  1473. "norms": false
  1474. },
  1475. "cookie_names": {
  1476. "type": "text",
  1477. "norms": false
  1478. },
  1479. "cookies": {
  1480. "type": "text",
  1481. "norms": false
  1482. },
  1483. "corruptionactionstate": {
  1484. "type": "text",
  1485. "norms": false
  1486. },
  1487. "count": {
  1488. "type": "long",
  1489. "ignore_malformed": true,
  1490. "fields": {
  1491. "keyword": {
  1492. "type": "keyword",
  1493. "ignore_above": 256
  1494. }
  1495. }
  1496. },
  1497. "countdeletesindesktoparray": {
  1498. "type": "text",
  1499. "norms": false
  1500. },
  1501. "countdeletesindocumentsarray": {
  1502. "type": "text",
  1503. "norms": false
  1504. },
  1505. "countdeletesindownloadsarray": {
  1506. "type": "text",
  1507. "norms": false
  1508. },
  1509. "countdeletesinmusicarray": {
  1510. "type": "text",
  1511. "norms": false
  1512. },
  1513. "countdeletesinotherarray": {
  1514. "type": "text",
  1515. "norms": false
  1516. },
  1517. "countdeletesinpicturesarray": {
  1518. "type": "text",
  1519. "norms": false
  1520. },
  1521. "countdeletesinvideosarray": {
  1522. "type": "text",
  1523. "norms": false
  1524. },
  1525. "countofcredentialsreturned": {
  1526. "type": "text",
  1527. "norms": false
  1528. },
  1529. "course_data": {
  1530. "type": "text",
  1531. "norms": false
  1532. },
  1533. "course_id": {
  1534. "type": "keyword"
  1535. },
  1536. "course_ids": {
  1537. "type": "text",
  1538. "norms": false
  1539. },
  1540. "course_mastery_score": {
  1541. "type": "text",
  1542. "norms": false
  1543. },
  1544. "course_media_id": {
  1545. "type": "keyword",
  1546. "ignore_above": 256
  1547. },
  1548. "course_passing_score": {
  1549. "type": "text",
  1550. "norms": false
  1551. },
  1552. "course_provider_id": {
  1553. "type": "keyword",
  1554. "ignore_above": 256
  1555. },
  1556. "course_registration_id": {
  1557. "type": "keyword",
  1558. "ignore_above": 256
  1559. },
  1560. "course_registration_status": {
  1561. "type": "text",
  1562. "norms": false
  1563. },
  1564. "course_registrations_count": {
  1565. "type": "text",
  1566. "norms": false
  1567. },
  1568. "create_date": {
  1569. "type": "text",
  1570. "norms": false
  1571. },
  1572. "create_registration": {
  1573. "type": "text",
  1574. "norms": false
  1575. },
  1576. "created": {
  1577. "type": "text",
  1578. "norms": false
  1579. },
  1580. "created_by_user": {
  1581. "type": "text",
  1582. "norms": false
  1583. },
  1584. "created_date": {
  1585. "type": "text",
  1586. "norms": false
  1587. },
  1588. "creditlimits": {
  1589. "type": "text",
  1590. "norms": false
  1591. },
  1592. "credits": {
  1593. "type": "text",
  1594. "norms": false
  1595. },
  1596. "credkeyidentifier": {
  1597. "type": "text",
  1598. "norms": false
  1599. },
  1600. "cseelaspedtimeinmilliseconds": {
  1601. "type": "text",
  1602. "norms": false
  1603. },
  1604. "cseextensionid": {
  1605. "type": "text",
  1606. "norms": false
  1607. },
  1608. "cseextensionname": {
  1609. "type": "text",
  1610. "norms": false
  1611. },
  1612. "current_bls_id": {
  1613. "type": "keyword",
  1614. "ignore_above": 256
  1615. },
  1616. "current_engine_version": {
  1617. "type": "text",
  1618. "norms": false
  1619. },
  1620. "current_security_intelligence_version": {
  1621. "type": "text",
  1622. "norms": false
  1623. },
  1624. "current_state": {
  1625. "type": "text",
  1626. "norms": false
  1627. },
  1628. "current_status_id": {
  1629. "type": "keyword",
  1630. "ignore_above": 256
  1631. },
  1632. "custom_fields": {
  1633. "type": "text",
  1634. "norms": false
  1635. },
  1636. "customlevel": {
  1637. "type": "text",
  1638. "norms": false
  1639. },
  1640. "dailyuploadquotainbytes": {
  1641. "type": "text",
  1642. "norms": false
  1643. },
  1644. "data": {
  1645. "type": "keyword",
  1646. "ignore_above": 256
  1647. },
  1648. "data_limits": {
  1649. "type": "text",
  1650. "norms": false
  1651. },
  1652. "days_before_expire_for_reminder": {
  1653. "type": "text",
  1654. "norms": false
  1655. },
  1656. "dcdiscoverytimeinmilliseconds": {
  1657. "type": "text",
  1658. "norms": false
  1659. },
  1660. "dcdomainname": {
  1661. "type": "text",
  1662. "norms": false
  1663. },
  1664. "dcipaddress": {
  1665. "type": "text",
  1666. "norms": false
  1667. },
  1668. "dcname": {
  1669. "type": "text",
  1670. "norms": false
  1671. },
  1672. "default_locale": {
  1673. "type": "text",
  1674. "norms": false
  1675. },
  1676. "delay": {
  1677. "type": "text",
  1678. "norms": false
  1679. },
  1680. "delays": {
  1681. "type": "text",
  1682. "norms": false
  1683. },
  1684. "deleted": {
  1685. "type": "text",
  1686. "norms": false
  1687. },
  1688. "denied_mask": {
  1689. "type": "text",
  1690. "norms": false
  1691. },
  1692. "descriptionstring": {
  1693. "type": "text",
  1694. "norms": false
  1695. },
  1696. "dest_geoip": {
  1697. "dynamic": "true",
  1698. "properties": {
  1699. "city_name": {
  1700. "type": "text",
  1701. "norms": false
  1702. },
  1703. "continent_code": {
  1704. "type": "text",
  1705. "norms": false
  1706. },
  1707. "country_code2": {
  1708. "type": "text",
  1709. "norms": false
  1710. },
  1711. "ip": {
  1712. "type": "ip"
  1713. },
  1714. "latitude": {
  1715. "type": "float"
  1716. },
  1717. "location": {
  1718. "type": "geo_point"
  1719. },
  1720. "longitude": {
  1721. "type": "float"
  1722. },
  1723. "region_name": {
  1724. "type": "text",
  1725. "norms": false
  1726. }
  1727. }
  1728. },
  1729. "dest_ip": {
  1730. "type": "ip"
  1731. },
  1732. "dest_port": {
  1733. "type": "text",
  1734. "norms": false
  1735. },
  1736. "detail": {
  1737. "type": "text",
  1738. "norms": false
  1739. },
  1740. "detailedhresult": {
  1741. "type": "text",
  1742. "norms": false
  1743. },
  1744. "details": {
  1745. "type": "text",
  1746. "norms": false
  1747. },
  1748. "devicecount": {
  1749. "type": "text",
  1750. "norms": false
  1751. },
  1752. "deviceguid": {
  1753. "type": "text",
  1754. "norms": false
  1755. },
  1756. "deviceinstanceid": {
  1757. "type": "text",
  1758. "norms": false
  1759. },
  1760. "devicename": {
  1761. "type": "text",
  1762. "norms": false
  1763. },
  1764. "devicenamelength": {
  1765. "type": "text",
  1766. "norms": false
  1767. },
  1768. "devicenumber": {
  1769. "type": "text",
  1770. "norms": false
  1771. },
  1772. "devicequeueiobusycount": {
  1773. "type": "text",
  1774. "norms": false
  1775. },
  1776. "devicequeueiopausedcount": {
  1777. "type": "text",
  1778. "norms": false
  1779. },
  1780. "devicequeueiopausedforuntaggedcount": {
  1781. "type": "text",
  1782. "norms": false
  1783. },
  1784. "devicequeueiountaggedcommandoutstandingcount": {
  1785. "type": "text",
  1786. "norms": false
  1787. },
  1788. "devicequeueiowaitexceededtimeoutcount": {
  1789. "type": "text",
  1790. "norms": false
  1791. },
  1792. "deviceserialnumberlength": {
  1793. "type": "text",
  1794. "norms": false
  1795. },
  1796. "devicetime": {
  1797. "type": "text",
  1798. "norms": false
  1799. },
  1800. "deviceupdated": {
  1801. "type": "text",
  1802. "norms": false
  1803. },
  1804. "deviceversionmajor": {
  1805. "type": "text",
  1806. "norms": false
  1807. },
  1808. "deviceversionminor": {
  1809. "type": "text",
  1810. "norms": false
  1811. },
  1812. "diagnosticmoduleid": {
  1813. "type": "text",
  1814. "norms": false
  1815. },
  1816. "diagnosticmoduleimagename": {
  1817. "type": "text",
  1818. "norms": false
  1819. },
  1820. "direction": {
  1821. "type": "text",
  1822. "norms": false
  1823. },
  1824. "dirtypages": {
  1825. "type": "text",
  1826. "norms": false
  1827. },
  1828. "dirtypagesamples": {
  1829. "type": "text",
  1830. "norms": false
  1831. },
  1832. "discount": {
  1833. "type": "text",
  1834. "norms": false
  1835. },
  1836. "diskindex": {
  1837. "type": "text",
  1838. "norms": false
  1839. },
  1840. "disknumber": {
  1841. "type": "text",
  1842. "norms": false
  1843. },
  1844. "diskresourcefailure": {
  1845. "type": "text",
  1846. "norms": false
  1847. },
  1848. "disksizeinbytes": {
  1849. "type": "text",
  1850. "norms": false
  1851. },
  1852. "displaydrivername": {
  1853. "type": "text",
  1854. "norms": false
  1855. },
  1856. "dkim_new": {
  1857. "type": "text",
  1858. "norms": false
  1859. },
  1860. "dkim_sd": {
  1861. "type": "text",
  1862. "norms": false
  1863. },
  1864. "dns": {
  1865. "type": "text",
  1866. "norms": false
  1867. },
  1868. "dnsserverlist": {
  1869. "type": "text",
  1870. "norms": false
  1871. },
  1872. "doc_id": {
  1873. "type": "keyword",
  1874. "ignore_above": 256
  1875. },
  1876. "doc_type": {
  1877. "type": "text",
  1878. "norms": false
  1879. },
  1880. "docker": {
  1881. "properties": {
  1882. "container_id": {
  1883. "type": "keyword",
  1884. "ignore_above": 256
  1885. }
  1886. }
  1887. },
  1888. "documents": {
  1889. "type": "text",
  1890. "norms": false
  1891. },
  1892. "domain": {
  1893. "type": "keyword"
  1894. },
  1895. "domainname": {
  1896. "type": "text",
  1897. "norms": false
  1898. },
  1899. "downlevelirpstatus": {
  1900. "type": "text",
  1901. "norms": false
  1902. },
  1903. "dpt": {
  1904. "type": "text",
  1905. "norms": false
  1906. },
  1907. "drivename": {
  1908. "type": "text",
  1909. "norms": false
  1910. },
  1911. "driverdate": {
  1912. "type": "text",
  1913. "norms": false
  1914. },
  1915. "driverinbox": {
  1916. "type": "text",
  1917. "norms": false
  1918. },
  1919. "drivername": {
  1920. "type": "text",
  1921. "norms": false
  1922. },
  1923. "driverprovider": {
  1924. "type": "text",
  1925. "norms": false
  1926. },
  1927. "driverrank": {
  1928. "type": "text",
  1929. "norms": false
  1930. },
  1931. "driversection": {
  1932. "type": "text",
  1933. "norms": false
  1934. },
  1935. "driverversion": {
  1936. "type": "text",
  1937. "norms": false
  1938. },
  1939. "dsn": {
  1940. "type": "text",
  1941. "norms": false
  1942. },
  1943. "dst": {
  1944. "type": "text",
  1945. "norms": false
  1946. },
  1947. "duration": {
  1948. "type": "text",
  1949. "norms": false
  1950. },
  1951. "dvdformatendtime": {
  1952. "type": "text",
  1953. "norms": false
  1954. },
  1955. "dvdformatstarttime": {
  1956. "type": "text",
  1957. "norms": false
  1958. },
  1959. "edgetraversal": {
  1960. "type": "text",
  1961. "norms": false
  1962. },
  1963. "edit_user_id": {
  1964. "type": "keyword",
  1965. "ignore_above": 256
  1966. },
  1967. "egid": {
  1968. "type": "text",
  1969. "norms": false
  1970. },
  1971. "ehlo": {
  1972. "type": "text",
  1973. "norms": false
  1974. },
  1975. "elapsedseconds": {
  1976. "type": "text",
  1977. "norms": false
  1978. },
  1979. "elevatedtoken": {
  1980. "type": "text",
  1981. "norms": false
  1982. },
  1983. "elms_user_id": {
  1984. "type": "keyword",
  1985. "ignore_above": 256
  1986. },
  1987. "email_count": {
  1988. "type": "text",
  1989. "norms": false
  1990. },
  1991. "email_id": {
  1992. "type": "keyword",
  1993. "ignore_above": 256
  1994. },
  1995. "email_ids": {
  1996. "type": "text",
  1997. "norms": false
  1998. },
  1999. "email_subject": {
  2000. "type": "text",
  2001. "norms": false
  2002. },
  2003. "email_to": {
  2004. "type": "text",
  2005. "norms": false
  2006. },
  2007. "enabled": {
  2008. "type": "text",
  2009. "norms": false
  2010. },
  2011. "encryption_system_name": {
  2012. "type": "text",
  2013. "norms": false
  2014. },
  2015. "end_date": {
  2016. "type": "text",
  2017. "norms": false
  2018. },
  2019. "endpoint": {
  2020. "type": "text",
  2021. "norms": false
  2022. },
  2023. "engine_version": {
  2024. "type": "text",
  2025. "norms": false
  2026. },
  2027. "enginepid": {
  2028. "type": "text",
  2029. "norms": false
  2030. },
  2031. "enrollment_session_id": {
  2032. "type": "keyword",
  2033. "ignore_above": 256
  2034. },
  2035. "enrollment_session_record_id": {
  2036. "type": "keyword",
  2037. "ignore_above": 256
  2038. },
  2039. "entity_id": {
  2040. "type": "keyword",
  2041. "ignore_above": 256
  2042. },
  2043. "enumeratebackupendtime": {
  2044. "type": "text",
  2045. "norms": false
  2046. },
  2047. "enumeratebackupstarttime": {
  2048. "type": "text",
  2049. "norms": false
  2050. },
  2051. "environment": {
  2052. "type": "text",
  2053. "norms": false
  2054. },
  2055. "epoch": {
  2056. "type": "text",
  2057. "norms": false
  2058. },
  2059. "error": {
  2060. "type": "text",
  2061. "norms": false
  2062. },
  2063. "error_code": {
  2064. "type": "text",
  2065. "norms": false
  2066. },
  2067. "error_details": {
  2068. "type": "text",
  2069. "norms": false
  2070. },
  2071. "error_evt_unresolved": {
  2072. "type": "text",
  2073. "norms": false
  2074. },
  2075. "error_message": {
  2076. "type": "text",
  2077. "norms": false
  2078. },
  2079. "error_notification_address": {
  2080. "type": "text",
  2081. "norms": false
  2082. },
  2083. "error_text": {
  2084. "type": "text",
  2085. "norms": false
  2086. },
  2087. "errorcode": {
  2088. "type": "text",
  2089. "norms": false
  2090. },
  2091. "errormessage": {
  2092. "type": "text",
  2093. "norms": false
  2094. },
  2095. "event": {
  2096. "type": "text",
  2097. "norms": false
  2098. },
  2099. "event_id": {
  2100. "type": "keyword",
  2101. "ignore_above": 256
  2102. },
  2103. "event_name": {
  2104. "type": "text",
  2105. "norms": false
  2106. },
  2107. "event_type": {
  2108. "type": "text",
  2109. "norms": false
  2110. },
  2111. "event_uid": {
  2112. "type": "alias",
  2113. "path": "uid"
  2114. },
  2115. "eventname": {
  2116. "type": "text",
  2117. "norms": false
  2118. },
  2119. "eventsamples": {
  2120. "type": "text",
  2121. "norms": false
  2122. },
  2123. "eventsdropped": {
  2124. "type": "text",
  2125. "norms": false
  2126. },
  2127. "eventsourceid": {
  2128. "type": "text",
  2129. "norms": false
  2130. },
  2131. "eventsuploaded": {
  2132. "type": "text",
  2133. "norms": false
  2134. },
  2135. "expires": {
  2136. "type": "text",
  2137. "norms": false
  2138. },
  2139. "extentsbucketscount": {
  2140. "type": "text",
  2141. "norms": false
  2142. },
  2143. "external_id": {
  2144. "type": "keyword",
  2145. "ignore_above": 256
  2146. },
  2147. "external_registration_id": {
  2148. "type": "keyword",
  2149. "ignore_above": 256
  2150. },
  2151. "failurereason": {
  2152. "type": "text",
  2153. "norms": false
  2154. },
  2155. "field_name": {
  2156. "type": "text",
  2157. "norms": false
  2158. },
  2159. "file": {
  2160. "type": "text",
  2161. "norms": false
  2162. },
  2163. "file_id": {
  2164. "type": "keyword",
  2165. "ignore_above": 256
  2166. },
  2167. "file_name": {
  2168. "type": "text",
  2169. "norms": false
  2170. },
  2171. "file_path": {
  2172. "type": "text",
  2173. "norms": false
  2174. },
  2175. "filecount": {
  2176. "type": "text",
  2177. "norms": false
  2178. },
  2179. "fileflushavglatencyns": {
  2180. "type": "text",
  2181. "norms": false
  2182. },
  2183. "fileflushcount": {
  2184. "type": "text",
  2185. "norms": false
  2186. },
  2187. "filelength": {
  2188. "type": "text",
  2189. "norms": false
  2190. },
  2191. "fileleveltrimavglatencyns": {
  2192. "type": "text",
  2193. "norms": false
  2194. },
  2195. "fileleveltrimcount": {
  2196. "type": "text",
  2197. "norms": false
  2198. },
  2199. "fileleveltrimextentscount": {
  2200. "type": "text",
  2201. "norms": false
  2202. },
  2203. "fileleveltrimsize": {
  2204. "type": "text",
  2205. "norms": false
  2206. },
  2207. "fileleveltrimtime": {
  2208. "type": "text",
  2209. "norms": false
  2210. },
  2211. "fileleveltrimtotalbytes": {
  2212. "type": "text",
  2213. "norms": false
  2214. },
  2215. "filesystem": {
  2216. "type": "text",
  2217. "norms": false
  2218. },
  2219. "filetime": {
  2220. "type": "text",
  2221. "norms": false
  2222. },
  2223. "finalstatus": {
  2224. "type": "text",
  2225. "norms": false
  2226. },
  2227. "firmwareversion": {
  2228. "type": "text",
  2229. "norms": false
  2230. },
  2231. "firstgraphicsreceived": {
  2232. "type": "text",
  2233. "norms": false
  2234. },
  2235. "flags": {
  2236. "type": "text",
  2237. "norms": false
  2238. },
  2239. "flow": {
  2240. "properties": {
  2241. "bytes_toclient": {
  2242. "type": "text",
  2243. "norms": false
  2244. },
  2245. "bytes_toserver": {
  2246. "type": "text",
  2247. "norms": false
  2248. },
  2249. "dest_ip": {
  2250. "type": "text",
  2251. "norms": false
  2252. },
  2253. "dest_port": {
  2254. "type": "text",
  2255. "norms": false
  2256. },
  2257. "pkts_toclient": {
  2258. "type": "text",
  2259. "norms": false
  2260. },
  2261. "pkts_toserver": {
  2262. "type": "text",
  2263. "norms": false
  2264. },
  2265. "src_ip": {
  2266. "type": "text",
  2267. "norms": false
  2268. },
  2269. "src_port": {
  2270. "type": "text",
  2271. "norms": false
  2272. },
  2273. "start": {
  2274. "type": "text",
  2275. "norms": false
  2276. }
  2277. }
  2278. },
  2279. "flow_id": {
  2280. "type": "keyword",
  2281. "ignore_above": 256
  2282. },
  2283. "flowlbl": {
  2284. "type": "text",
  2285. "norms": false
  2286. },
  2287. "flushed_session_key": {
  2288. "type": "text",
  2289. "norms": false
  2290. },
  2291. "flushlatencybucket1": {
  2292. "type": "text",
  2293. "norms": false
  2294. },
  2295. "flushlatencybucket2": {
  2296. "type": "text",
  2297. "norms": false
  2298. },
  2299. "flushlatencybucket3": {
  2300. "type": "text",
  2301. "norms": false
  2302. },
  2303. "flushlatencybucket4": {
  2304. "type": "text",
  2305. "norms": false
  2306. },
  2307. "flushlatencybucket5": {
  2308. "type": "text",
  2309. "norms": false
  2310. },
  2311. "flushlatencybucket6": {
  2312. "type": "text",
  2313. "norms": false
  2314. },
  2315. "flushlatencybucket7": {
  2316. "type": "text",
  2317. "norms": false
  2318. },
  2319. "folderid": {
  2320. "type": "text",
  2321. "norms": false
  2322. },
  2323. "formparameters": {
  2324. "type": "text",
  2325. "norms": false
  2326. },
  2327. "forwarded_for": {
  2328. "type": "ip"
  2329. },
  2330. "from": {
  2331. "type": "text",
  2332. "fields": {
  2333. "keyword": {
  2334. "type": "keyword",
  2335. "ignore_above": 256
  2336. }
  2337. },
  2338. "norms": false
  2339. },
  2340. "from_group_id": {
  2341. "type": "keyword",
  2342. "ignore_above": 256
  2343. },
  2344. "fsuid": {
  2345. "type": "text",
  2346. "norms": false
  2347. },
  2348. "ftp_host": {
  2349. "type": "text",
  2350. "norms": false
  2351. },
  2352. "function": {
  2353. "type": "text",
  2354. "norms": false
  2355. },
  2356. "generated_login_name": {
  2357. "type": "text",
  2358. "norms": false
  2359. },
  2360. "geoip": {
  2361. "dynamic": "true",
  2362. "properties": {
  2363. "city_name": {
  2364. "type": "text",
  2365. "norms": false
  2366. },
  2367. "continent_code": {
  2368. "type": "text",
  2369. "norms": false
  2370. },
  2371. "country_code2": {
  2372. "type": "text",
  2373. "norms": false
  2374. },
  2375. "ip": {
  2376. "type": "ip"
  2377. },
  2378. "latitude": {
  2379. "type": "float"
  2380. },
  2381. "location": {
  2382. "type": "geo_point"
  2383. },
  2384. "longitude": {
  2385. "type": "float"
  2386. },
  2387. "region_name": {
  2388. "type": "text",
  2389. "norms": false
  2390. }
  2391. }
  2392. },
  2393. "gfp_mask": {
  2394. "type": "text",
  2395. "norms": false
  2396. },
  2397. "gfxchannelopened": {
  2398. "type": "text",
  2399. "norms": false
  2400. },
  2401. "gpodownloadtimeelapsedinmilliseconds": {
  2402. "type": "text",
  2403. "norms": false
  2404. },
  2405. "gpoinfolist": {
  2406. "type": "text",
  2407. "norms": false
  2408. },
  2409. "gpolist": {
  2410. "type": "text",
  2411. "norms": false
  2412. },
  2413. "gpoliststatusstring": {
  2414. "type": "text",
  2415. "norms": false
  2416. },
  2417. "group": {
  2418. "type": "text",
  2419. "norms": false
  2420. },
  2421. "group_id": {
  2422. "type": "keyword",
  2423. "ignore_above": 256
  2424. },
  2425. "group_ids": {
  2426. "type": "text",
  2427. "norms": false
  2428. },
  2429. "groupid": {
  2430. "type": "text",
  2431. "norms": false
  2432. },
  2433. "grouppolicyvalue": {
  2434. "type": "text",
  2435. "norms": false
  2436. },
  2437. "groups": {
  2438. "type": "text",
  2439. "norms": false
  2440. },
  2441. "groups_count": {
  2442. "type": "text",
  2443. "norms": false
  2444. },
  2445. "handleid": {
  2446. "type": "text",
  2447. "norms": false
  2448. },
  2449. "handler_product_type": {
  2450. "type": "text",
  2451. "norms": false
  2452. },
  2453. "hasattr_user": {
  2454. "type": "text",
  2455. "norms": false
  2456. },
  2457. "hasauthurl": {
  2458. "type": "text",
  2459. "norms": false
  2460. },
  2461. "hasendauthurl": {
  2462. "type": "text",
  2463. "norms": false
  2464. },
  2465. "hasflowurl": {
  2466. "type": "text",
  2467. "norms": false
  2468. },
  2469. "hc_stateid": {
  2470. "type": "text",
  2471. "norms": false
  2472. },
  2473. "headers": {
  2474. "type": "text",
  2475. "norms": false
  2476. },
  2477. "helo": {
  2478. "type": "text",
  2479. "norms": false
  2480. },
  2481. "hierarchicalresetsuccesscount": {
  2482. "type": "text",
  2483. "norms": false
  2484. },
  2485. "highestfreespaceinbytes": {
  2486. "type": "text",
  2487. "norms": false
  2488. },
  2489. "highiolatencycount": {
  2490. "type": "text",
  2491. "norms": false
  2492. },
  2493. "highlatencyiocount": {
  2494. "type": "text",
  2495. "norms": false
  2496. },
  2497. "hits": {
  2498. "type": "text",
  2499. "norms": false
  2500. },
  2501. "hivename": {
  2502. "type": "text",
  2503. "norms": false
  2504. },
  2505. "hivenamelength": {
  2506. "type": "text",
  2507. "norms": false
  2508. },
  2509. "hlasterror": {
  2510. "type": "text",
  2511. "norms": false
  2512. },
  2513. "hoplimit": {
  2514. "type": "text",
  2515. "norms": false
  2516. },
  2517. "host": {
  2518. "type": "keyword"
  2519. },
  2520. "hostname": {
  2521. "type": "text",
  2522. "norms": false
  2523. },
  2524. "hr": {
  2525. "type": "text",
  2526. "norms": false
  2527. },
  2528. "hrerror": {
  2529. "type": "text",
  2530. "norms": false
  2531. },
  2532. "hresult": {
  2533. "type": "text",
  2534. "norms": false
  2535. },
  2536. "htp_host": {
  2537. "type": "text",
  2538. "norms": false
  2539. },
  2540. "http_method": {
  2541. "type": "text",
  2542. "norms": false
  2543. },
  2544. "http_referrer": {
  2545. "type": "text",
  2546. "norms": false
  2547. },
  2548. "http_status": {
  2549. "type": "text",
  2550. "fields": {
  2551. "keyword": {
  2552. "type": "keyword",
  2553. "ignore_above": 256
  2554. }
  2555. },
  2556. "norms": false
  2557. },
  2558. "http_useragent": {
  2559. "type": "keyword"
  2560. },
  2561. "http_version": {
  2562. "type": "text",
  2563. "norms": false
  2564. },
  2565. "hugepages_free": {
  2566. "type": "text",
  2567. "norms": false
  2568. },
  2569. "hugepages_size": {
  2570. "type": "text",
  2571. "norms": false
  2572. },
  2573. "hugepages_surp": {
  2574. "type": "text",
  2575. "norms": false
  2576. },
  2577. "hugepages_total": {
  2578. "type": "text",
  2579. "norms": false
  2580. },
  2581. "icmp_code": {
  2582. "type": "text",
  2583. "norms": false
  2584. },
  2585. "icmp_type": {
  2586. "type": "text",
  2587. "norms": false
  2588. },
  2589. "id": {
  2590. "type": "text",
  2591. "norms": false
  2592. },
  2593. "idleseconds": {
  2594. "type": "text",
  2595. "norms": false
  2596. },
  2597. "idleseconds1": {
  2598. "type": "text",
  2599. "norms": false
  2600. },
  2601. "idleseconds2": {
  2602. "type": "text",
  2603. "norms": false
  2604. },
  2605. "iftstmp": {
  2606. "type": "text",
  2607. "norms": false
  2608. },
  2609. "ignorebandwidthlimitsonlan": {
  2610. "type": "text",
  2611. "norms": false
  2612. },
  2613. "ikey": {
  2614. "type": "text",
  2615. "norms": false
  2616. },
  2617. "imagename": {
  2618. "type": "text",
  2619. "norms": false
  2620. },
  2621. "imagenamelength": {
  2622. "type": "text",
  2623. "norms": false
  2624. },
  2625. "imagepath": {
  2626. "type": "text",
  2627. "norms": false
  2628. },
  2629. "impersonated_by_user_id": {
  2630. "type": "keyword",
  2631. "ignore_above": 256
  2632. },
  2633. "impersonationlevel": {
  2634. "type": "text",
  2635. "norms": false
  2636. },
  2637. "impersonationuserid": {
  2638. "type": "text",
  2639. "norms": false
  2640. },
  2641. "in": {
  2642. "type": "text",
  2643. "norms": false
  2644. },
  2645. "in_iface": {
  2646. "type": "text",
  2647. "norms": false
  2648. },
  2649. "index": {
  2650. "type": "text",
  2651. "norms": false
  2652. },
  2653. "info": {
  2654. "type": "text",
  2655. "norms": false
  2656. },
  2657. "infodescription": {
  2658. "type": "text",
  2659. "norms": false
  2660. },
  2661. "inproc": {
  2662. "type": "text",
  2663. "norms": false
  2664. },
  2665. "installpackagelist": {
  2666. "type": "text",
  2667. "norms": false
  2668. },
  2669. "instanceid": {
  2670. "type": "text",
  2671. "norms": false
  2672. },
  2673. "instancename": {
  2674. "type": "text",
  2675. "norms": false
  2676. },
  2677. "instancenamelength": {
  2678. "type": "text",
  2679. "norms": false
  2680. },
  2681. "instructorid": {
  2682. "type": "text",
  2683. "norms": false
  2684. },
  2685. "interface": {
  2686. "type": "text",
  2687. "norms": false
  2688. },
  2689. "internalid": {
  2690. "type": "text",
  2691. "norms": false
  2692. },
  2693. "intervaldurationms": {
  2694. "type": "text",
  2695. "norms": false
  2696. },
  2697. "intervaldurationstr": {
  2698. "type": "text",
  2699. "norms": false
  2700. },
  2701. "intervaldurationus": {
  2702. "type": "text",
  2703. "norms": false
  2704. },
  2705. "ioav_state": {
  2706. "type": "text",
  2707. "norms": false
  2708. },
  2709. "iobucketscount": {
  2710. "type": "text",
  2711. "norms": false
  2712. },
  2713. "iocount": {
  2714. "type": "text",
  2715. "norms": false
  2716. },
  2717. "iocount0": {
  2718. "type": "text",
  2719. "norms": false
  2720. },
  2721. "iocount1": {
  2722. "type": "text",
  2723. "norms": false
  2724. },
  2725. "iocount10": {
  2726. "type": "text",
  2727. "norms": false
  2728. },
  2729. "iocount11": {
  2730. "type": "text",
  2731. "norms": false
  2732. },
  2733. "iocount2": {
  2734. "type": "text",
  2735. "norms": false
  2736. },
  2737. "iocount3": {
  2738. "type": "text",
  2739. "norms": false
  2740. },
  2741. "iocount4": {
  2742. "type": "text",
  2743. "norms": false
  2744. },
  2745. "iocount5": {
  2746. "type": "text",
  2747. "norms": false
  2748. },
  2749. "iocount6": {
  2750. "type": "text",
  2751. "norms": false
  2752. },
  2753. "iocount7": {
  2754. "type": "text",
  2755. "norms": false
  2756. },
  2757. "iocount8": {
  2758. "type": "text",
  2759. "norms": false
  2760. },
  2761. "iocount9": {
  2762. "type": "text",
  2763. "norms": false
  2764. },
  2765. "ioctlcontrolcode": {
  2766. "type": "text",
  2767. "norms": false
  2768. },
  2769. "iolatencybuckets": {
  2770. "type": "text",
  2771. "norms": false
  2772. },
  2773. "iosize": {
  2774. "type": "text",
  2775. "norms": false
  2776. },
  2777. "iotimeout_s": {
  2778. "type": "text",
  2779. "norms": false
  2780. },
  2781. "iotype": {
  2782. "type": "text",
  2783. "norms": false
  2784. },
  2785. "iotypeindex": {
  2786. "type": "text",
  2787. "norms": false
  2788. },
  2789. "iotypestr": {
  2790. "type": "text",
  2791. "norms": false
  2792. },
  2793. "ip": {
  2794. "type": "text",
  2795. "norms": false
  2796. },
  2797. "ipaddress": {
  2798. "type": "ip"
  2799. },
  2800. "ipport": {
  2801. "type": "text",
  2802. "norms": false
  2803. },
  2804. "irpstatus": {
  2805. "type": "text",
  2806. "norms": false
  2807. },
  2808. "is_anonymous": {
  2809. "type": "text",
  2810. "norms": false
  2811. },
  2812. "is_new": {
  2813. "type": "text",
  2814. "norms": false
  2815. },
  2816. "is_succeeded": {
  2817. "type": "text",
  2818. "norms": false
  2819. },
  2820. "isasyncprocessing": {
  2821. "type": "text",
  2822. "norms": false
  2823. },
  2824. "isbackgroundprocessing": {
  2825. "type": "text",
  2826. "norms": false
  2827. },
  2828. "isbootvolume": {
  2829. "type": "text",
  2830. "norms": false
  2831. },
  2832. "isconnectivityfailure": {
  2833. "type": "text",
  2834. "norms": false
  2835. },
  2836. "isdomainjoined": {
  2837. "type": "text",
  2838. "norms": false
  2839. },
  2840. "isenabled": {
  2841. "type": "text",
  2842. "norms": false
  2843. },
  2844. "isextensionasyncprocessing": {
  2845. "type": "text",
  2846. "norms": false
  2847. },
  2848. "isgpolistchanged": {
  2849. "type": "text",
  2850. "norms": false
  2851. },
  2852. "ismachine": {
  2853. "type": "text",
  2854. "norms": false
  2855. },
  2856. "isscripthidden": {
  2857. "type": "text",
  2858. "norms": false
  2859. },
  2860. "isscriptminimized": {
  2861. "type": "text",
  2862. "norms": false
  2863. },
  2864. "isscriptsync": {
  2865. "type": "text",
  2866. "norms": false
  2867. },
  2868. "isservicerestart": {
  2869. "type": "text",
  2870. "norms": false
  2871. },
  2872. "isslowlink": {
  2873. "type": "text",
  2874. "norms": false
  2875. },
  2876. "isspecialuserprofile": {
  2877. "type": "text",
  2878. "norms": false
  2879. },
  2880. "issuer": {
  2881. "type": "text",
  2882. "norms": false
  2883. },
  2884. "jobid": {
  2885. "type": "text",
  2886. "norms": false
  2887. },
  2888. "jobowner": {
  2889. "type": "text",
  2890. "norms": false
  2891. },
  2892. "jobtitle": {
  2893. "type": "text",
  2894. "norms": false
  2895. },
  2896. "key": {
  2897. "type": "text",
  2898. "norms": false
  2899. },
  2900. "keylength": {
  2901. "type": "text",
  2902. "norms": false
  2903. },
  2904. "keyname": {
  2905. "type": "text",
  2906. "norms": false
  2907. },
  2908. "keysupdated": {
  2909. "type": "text",
  2910. "norms": false
  2911. },
  2912. "kubernetes": {
  2913. "properties": {
  2914. "container_image": {
  2915. "type": "text",
  2916. "norms": false
  2917. },
  2918. "container_image_id": {
  2919. "type": "keyword",
  2920. "ignore_above": 256
  2921. },
  2922. "container_name": {
  2923. "type": "text",
  2924. "norms": false
  2925. },
  2926. "host": {
  2927. "type": "text",
  2928. "norms": false
  2929. },
  2930. "labels": {
  2931. "properties": {
  2932. "app": {
  2933. "type": "text",
  2934. "norms": false
  2935. },
  2936. "app_kubernetes_io/component": {
  2937. "type": "text",
  2938. "norms": false
  2939. },
  2940. "app_kubernetes_io/instance": {
  2941. "type": "text",
  2942. "norms": false
  2943. },
  2944. "app_kubernetes_io/name": {
  2945. "type": "text",
  2946. "norms": false
  2947. },
  2948. "component": {
  2949. "type": "text",
  2950. "norms": false
  2951. },
  2952. "controller-revision-hash": {
  2953. "type": "text",
  2954. "norms": false
  2955. },
  2956. "controller-uid": {
  2957. "type": "text",
  2958. "norms": false
  2959. },
  2960. "job-name": {
  2961. "type": "text",
  2962. "norms": false
  2963. },
  2964. "k8s-app": {
  2965. "type": "text",
  2966. "norms": false
  2967. },
  2968. "pod-template-generation": {
  2969. "type": "text",
  2970. "norms": false
  2971. },
  2972. "pod-template-hash": {
  2973. "type": "text",
  2974. "norms": false
  2975. },
  2976. "role": {
  2977. "type": "text",
  2978. "norms": false
  2979. },
  2980. "run": {
  2981. "type": "text",
  2982. "norms": false
  2983. },
  2984. "statefulset_kubernetes_io/pod-name": {
  2985. "type": "text",
  2986. "norms": false
  2987. }
  2988. }
  2989. },
  2990. "master_url": {
  2991. "type": "text",
  2992. "norms": false
  2993. },
  2994. "namespace_id": {
  2995. "type": "keyword",
  2996. "ignore_above": 256
  2997. },
  2998. "namespace_labels": {
  2999. "properties": {
  3000. "app": {
  3001. "type": "text",
  3002. "norms": false
  3003. },
  3004. "app_kubernetes_io/instance": {
  3005. "type": "text",
  3006. "norms": false
  3007. },
  3008. "app_kubernetes_io/name": {
  3009. "type": "text",
  3010. "norms": false
  3011. },
  3012. "field_cattle_io/projectId": {
  3013. "type": "text",
  3014. "norms": false
  3015. },
  3016. "kubernetes_io/metadata_name": {
  3017. "type": "text",
  3018. "norms": false
  3019. },
  3020. "name": {
  3021. "type": "text",
  3022. "norms": false
  3023. },
  3024. "objectset_rio_cattle_io/hash": {
  3025. "type": "text",
  3026. "norms": false
  3027. }
  3028. }
  3029. },
  3030. "namespace_name": {
  3031. "type": "text",
  3032. "norms": false
  3033. },
  3034. "pod_id": {
  3035. "type": "keyword",
  3036. "ignore_above": 256
  3037. },
  3038. "pod_ip": {
  3039. "type": "text",
  3040. "norms": false
  3041. },
  3042. "pod_name": {
  3043. "type": "text",
  3044. "norms": false
  3045. }
  3046. }
  3047. },
  3048. "last_activity_date": {
  3049. "type": "text",
  3050. "norms": false
  3051. },
  3052. "last_as_security_intelligence_age": {
  3053. "type": "text",
  3054. "norms": false
  3055. },
  3056. "last_av_security_intelligence_age": {
  3057. "type": "text",
  3058. "norms": false
  3059. },
  3060. "last_completion_date": {
  3061. "type": "text",
  3062. "norms": false
  3063. },
  3064. "last_full_scan_age": {
  3065. "type": "text",
  3066. "norms": false
  3067. },
  3068. "last_full_scan_end_time": {
  3069. "type": "text",
  3070. "norms": false
  3071. },
  3072. "last_full_scan_source": {
  3073. "type": "text",
  3074. "norms": false
  3075. },
  3076. "last_full_scan_start_time": {
  3077. "type": "text",
  3078. "norms": false
  3079. },
  3080. "last_quick_scan_age": {
  3081. "type": "text",
  3082. "norms": false
  3083. },
  3084. "last_quick_scan_end_time": {
  3085. "type": "text",
  3086. "norms": false
  3087. },
  3088. "last_quick_scan_source": {
  3089. "type": "text",
  3090. "norms": false
  3091. },
  3092. "last_quick_scan_start_time": {
  3093. "type": "text",
  3094. "norms": false
  3095. },
  3096. "lastdailydriftseconds": {
  3097. "type": "text",
  3098. "norms": false
  3099. },
  3100. "lasterror": {
  3101. "type": "text",
  3102. "norms": false
  3103. },
  3104. "lasterror_addsense": {
  3105. "type": "text",
  3106. "norms": false
  3107. },
  3108. "lasterror_addsenseq": {
  3109. "type": "text",
  3110. "norms": false
  3111. },
  3112. "lasterror_command": {
  3113. "type": "text",
  3114. "norms": false
  3115. },
  3116. "lasterror_iosize": {
  3117. "type": "text",
  3118. "norms": false
  3119. },
  3120. "lasterror_lba": {
  3121. "type": "text",
  3122. "norms": false
  3123. },
  3124. "lasterror_queuedepth": {
  3125. "type": "text",
  3126. "norms": false
  3127. },
  3128. "lasterror_requestduration_ms": {
  3129. "type": "text",
  3130. "norms": false
  3131. },
  3132. "lasterror_scsistatus": {
  3133. "type": "text",
  3134. "norms": false
  3135. },
  3136. "lasterror_sensekey": {
  3137. "type": "text",
  3138. "norms": false
  3139. },
  3140. "lasterror_srbstatus": {
  3141. "type": "text",
  3142. "norms": false
  3143. },
  3144. "lasterror_waitduration_ms": {
  3145. "type": "text",
  3146. "norms": false
  3147. },
  3148. "lasteventlogwrittentime": {
  3149. "type": "text",
  3150. "norms": false
  3151. },
  3152. "lastfrequencyerrorppm": {
  3153. "type": "text",
  3154. "norms": false
  3155. },
  3156. "lastrundatetime": {
  3157. "type": "text",
  3158. "norms": false
  3159. },
  3160. "lastsuccessfulsynctime": {
  3161. "type": "text",
  3162. "norms": false
  3163. },
  3164. "lastsyncerror": {
  3165. "type": "text",
  3166. "norms": false
  3167. },
  3168. "latencybuckets": {
  3169. "type": "text",
  3170. "norms": false
  3171. },
  3172. "latest_engine_version": {
  3173. "type": "text",
  3174. "norms": false
  3175. },
  3176. "latest_platform_version": {
  3177. "type": "text",
  3178. "norms": false
  3179. },
  3180. "launch_data": {
  3181. "type": "text",
  3182. "norms": false
  3183. },
  3184. "launcherid": {
  3185. "type": "text",
  3186. "norms": false
  3187. },
  3188. "lba": {
  3189. "type": "text",
  3190. "norms": false
  3191. },
  3192. "leapindicator": {
  3193. "type": "text",
  3194. "norms": false
  3195. },
  3196. "learning_series_id": {
  3197. "type": "keyword",
  3198. "ignore_above": 256
  3199. },
  3200. "lease_id": {
  3201. "type": "keyword",
  3202. "ignore_above": 256
  3203. },
  3204. "len": {
  3205. "type": "text",
  3206. "norms": false
  3207. },
  3208. "lesson_location": {
  3209. "type": "text",
  3210. "norms": false
  3211. },
  3212. "level": {
  3213. "type": "keyword"
  3214. },
  3215. "levelname": {
  3216. "type": "text",
  3217. "norms": false
  3218. },
  3219. "licences": {
  3220. "type": "text",
  3221. "norms": false
  3222. },
  3223. "line": {
  3224. "type": "text",
  3225. "norms": false
  3226. },
  3227. "line_number": {
  3228. "type": "text",
  3229. "norms": false
  3230. },
  3231. "lineno": {
  3232. "type": "text",
  3233. "norms": false
  3234. },
  3235. "linkdescription": {
  3236. "type": "text",
  3237. "norms": false
  3238. },
  3239. "lip": {
  3240. "type": "text",
  3241. "norms": false
  3242. },
  3243. "lmpackagename": {
  3244. "type": "text",
  3245. "norms": false
  3246. },
  3247. "localaddress": {
  3248. "type": "text",
  3249. "norms": false
  3250. },
  3251. "localaddresses": {
  3252. "type": "text",
  3253. "norms": false
  3254. },
  3255. "locale": {
  3256. "type": "text",
  3257. "norms": false
  3258. },
  3259. "localname": {
  3260. "type": "text",
  3261. "norms": false
  3262. },
  3263. "localonlymapped": {
  3264. "type": "text",
  3265. "norms": false
  3266. },
  3267. "localpath": {
  3268. "type": "text",
  3269. "norms": false
  3270. },
  3271. "localports": {
  3272. "type": "text",
  3273. "norms": false
  3274. },
  3275. "locationid": {
  3276. "type": "text",
  3277. "norms": false
  3278. },
  3279. "logfilefull": {
  3280. "type": "text",
  3281. "norms": false
  3282. },
  3283. "logfilefullreasonbucket1": {
  3284. "type": "text",
  3285. "norms": false
  3286. },
  3287. "logfilefullreasonbucket10": {
  3288. "type": "text",
  3289. "norms": false
  3290. },
  3291. "logfilefullreasonbucket11": {
  3292. "type": "text",
  3293. "norms": false
  3294. },
  3295. "logfilefullreasonbucket12": {
  3296. "type": "text",
  3297. "norms": false
  3298. },
  3299. "logfilefullreasonbucket13": {
  3300. "type": "text",
  3301. "norms": false
  3302. },
  3303. "logfilefullreasonbucket14": {
  3304. "type": "text",
  3305. "norms": false
  3306. },
  3307. "logfilefullreasonbucket15": {
  3308. "type": "text",
  3309. "norms": false
  3310. },
  3311. "logfilefullreasonbucket2": {
  3312. "type": "text",
  3313. "norms": false
  3314. },
  3315. "logfilefullreasonbucket3": {
  3316. "type": "text",
  3317. "norms": false
  3318. },
  3319. "logfilefullreasonbucket4": {
  3320. "type": "text",
  3321. "norms": false
  3322. },
  3323. "logfilefullreasonbucket5": {
  3324. "type": "text",
  3325. "norms": false
  3326. },
  3327. "logfilefullreasonbucket6": {
  3328. "type": "text",
  3329. "norms": false
  3330. },
  3331. "logfilefullreasonbucket7": {
  3332. "type": "text",
  3333. "norms": false
  3334. },
  3335. "logfilefullreasonbucket8": {
  3336. "type": "text",
  3337. "norms": false
  3338. },
  3339. "logfilefullreasonbucket9": {
  3340. "type": "text",
  3341. "norms": false
  3342. },
  3343. "logfilereadbytes": {
  3344. "type": "text",
  3345. "norms": false
  3346. },
  3347. "logfilereads": {
  3348. "type": "text",
  3349. "norms": false
  3350. },
  3351. "logfilewritebytes": {
  3352. "type": "text",
  3353. "norms": false
  3354. },
  3355. "logfilewrites": {
  3356. "type": "text",
  3357. "norms": false
  3358. },
  3359. "loggedpagesqueuedtodisksamples": {
  3360. "type": "text",
  3361. "norms": false
  3362. },
  3363. "logger_name": {
  3364. "type": "keyword",
  3365. "ignore_above": 256
  3366. },
  3367. "login_name": {
  3368. "type": "text",
  3369. "norms": false
  3370. },
  3371. "login_prefix": {
  3372. "type": "text",
  3373. "norms": false
  3374. },
  3375. "loginname": {
  3376. "type": "text",
  3377. "norms": false
  3378. },
  3379. "loginnameorid": {
  3380. "type": "text",
  3381. "norms": false
  3382. },
  3383. "loginresultmessage": {
  3384. "type": "text",
  3385. "norms": false
  3386. },
  3387. "loginresultvalue": {
  3388. "type": "text",
  3389. "norms": false
  3390. },
  3391. "logonguid": {
  3392. "type": "text",
  3393. "norms": false
  3394. },
  3395. "logonid": {
  3396. "type": "text",
  3397. "norms": false
  3398. },
  3399. "logonprocessname": {
  3400. "type": "text",
  3401. "norms": false
  3402. },
  3403. "logstring": {
  3404. "type": "text",
  3405. "norms": false
  3406. },
  3407. "loosesourcemapped": {
  3408. "type": "text",
  3409. "norms": false
  3410. },
  3411. "lowestfreespaceinbytes": {
  3412. "type": "text",
  3413. "norms": false
  3414. },
  3415. "ls_course": {
  3416. "type": "text",
  3417. "norms": false
  3418. },
  3419. "ls_course_id": {
  3420. "type": "keyword",
  3421. "ignore_above": 256
  3422. },
  3423. "lun": {
  3424. "type": "text",
  3425. "norms": false
  3426. },
  3427. "mac": {
  3428. "type": "text",
  3429. "norms": false
  3430. },
  3431. "machinename": {
  3432. "type": "text",
  3433. "norms": false
  3434. },
  3435. "machinerole": {
  3436. "type": "text",
  3437. "norms": false
  3438. },
  3439. "machines": {
  3440. "type": "text",
  3441. "norms": false
  3442. },
  3443. "mail": {
  3444. "type": "text",
  3445. "norms": false
  3446. },
  3447. "majortype": {
  3448. "type": "text",
  3449. "norms": false
  3450. },
  3451. "mapper_attributes": {
  3452. "type": "text",
  3453. "norms": false
  3454. },
  3455. "matchingdeviceid": {
  3456. "type": "text",
  3457. "norms": false
  3458. },
  3459. "matrchers": {
  3460. "type": "text",
  3461. "norms": false
  3462. },
  3463. "max_attempt_count": {
  3464. "type": "text",
  3465. "norms": false
  3466. },
  3467. "max_registrations": {
  3468. "type": "text",
  3469. "norms": false
  3470. },
  3471. "maxdevicequeuecount": {
  3472. "type": "text",
  3473. "norms": false
  3474. },
  3475. "maxdevicequeueiowaitduration_100ns": {
  3476. "type": "text",
  3477. "norms": false
  3478. },
  3479. "maxdirtypages": {
  3480. "type": "text",
  3481. "norms": false
  3482. },
  3483. "maxflushlatency_100ns": {
  3484. "type": "text",
  3485. "norms": false
  3486. },
  3487. "maxlatencyms": {
  3488. "type": "text",
  3489. "norms": false
  3490. },
  3491. "maxlatencystr": {
  3492. "type": "text",
  3493. "norms": false
  3494. },
  3495. "maxloggedpagesqueuedtodisk": {
  3496. "type": "text",
  3497. "norms": false
  3498. },
  3499. "maxoutstandingcount": {
  3500. "type": "text",
  3501. "norms": false
  3502. },
  3503. "maxpagesqueuedtodisk": {
  3504. "type": "text",
  3505. "norms": false
  3506. },
  3507. "maxreadwritelatency_100ns": {
  3508. "type": "text",
  3509. "norms": false
  3510. },
  3511. "maxunmaplatency_100ns": {
  3512. "type": "text",
  3513. "norms": false
  3514. },
  3515. "mdmpolicyvalue": {
  3516. "type": "text",
  3517. "norms": false
  3518. },
  3519. "mechanismoid": {
  3520. "type": "text",
  3521. "norms": false
  3522. },
  3523. "media": {
  3524. "type": "text",
  3525. "norms": false
  3526. },
  3527. "mediaverifyendtime": {
  3528. "type": "text",
  3529. "norms": false
  3530. },
  3531. "mediaverifystarttime": {
  3532. "type": "text",
  3533. "norms": false
  3534. },
  3535. "member": {
  3536. "type": "text",
  3537. "norms": false
  3538. },
  3539. "member_user_id": {
  3540. "type": "keyword",
  3541. "ignore_above": 256
  3542. },
  3543. "message": {
  3544. "type": "text",
  3545. "fields": {
  3546. "keyword": {
  3547. "type": "keyword",
  3548. "ignore_above": 256
  3549. }
  3550. },
  3551. "norms": false
  3552. },
  3553. "message_id": {
  3554. "type": "keyword",
  3555. "ignore_above": 256
  3556. },
  3557. "messageid": {
  3558. "type": "text",
  3559. "norms": false
  3560. },
  3561. "metadata": {
  3562. "type": "text",
  3563. "norms": false
  3564. },
  3565. "metadatadiskreads": {
  3566. "type": "text",
  3567. "norms": false
  3568. },
  3569. "metadatadiskwrites": {
  3570. "type": "text",
  3571. "norms": false
  3572. },
  3573. "metadatareadbytes": {
  3574. "type": "text",
  3575. "norms": false
  3576. },
  3577. "metadatareads": {
  3578. "type": "text",
  3579. "norms": false
  3580. },
  3581. "metadatawritebytes": {
  3582. "type": "text",
  3583. "norms": false
  3584. },
  3585. "metadatawrites": {
  3586. "type": "text",
  3587. "norms": false
  3588. },
  3589. "method": {
  3590. "type": "text",
  3591. "norms": false
  3592. },
  3593. "method_name": {
  3594. "type": "text",
  3595. "norms": false
  3596. },
  3597. "methodname": {
  3598. "type": "text",
  3599. "norms": false
  3600. },
  3601. "mft2writebytes": {
  3602. "type": "text",
  3603. "norms": false
  3604. },
  3605. "mft2writes": {
  3606. "type": "text",
  3607. "norms": false
  3608. },
  3609. "mftbitmapreadbytes": {
  3610. "type": "text",
  3611. "norms": false
  3612. },
  3613. "mftbitmapreads": {
  3614. "type": "text",
  3615. "norms": false
  3616. },
  3617. "mftbitmapwritebytes": {
  3618. "type": "text",
  3619. "norms": false
  3620. },
  3621. "mftbitmapwrites": {
  3622. "type": "text",
  3623. "norms": false
  3624. },
  3625. "mftreadbytes": {
  3626. "type": "text",
  3627. "norms": false
  3628. },
  3629. "mftreads": {
  3630. "type": "text",
  3631. "norms": false
  3632. },
  3633. "mftwritebytes": {
  3634. "type": "text",
  3635. "norms": false
  3636. },
  3637. "mftwrites": {
  3638. "type": "text",
  3639. "norms": false
  3640. },
  3641. "miniportname": {
  3642. "type": "text",
  3643. "norms": false
  3644. },
  3645. "minortype": {
  3646. "type": "text",
  3647. "norms": false
  3648. },
  3649. "minreportedadjustmentppm": {
  3650. "type": "text",
  3651. "norms": false
  3652. },
  3653. "minutes": {
  3654. "type": "long",
  3655. "ignore_malformed": true
  3656. },
  3657. "miss": {
  3658. "type": "text",
  3659. "norms": false
  3660. },
  3661. "mode": {
  3662. "type": "text",
  3663. "norms": false
  3664. },
  3665. "model": {
  3666. "type": "text",
  3667. "norms": false
  3668. },
  3669. "modifyingapplication": {
  3670. "type": "text",
  3671. "norms": false
  3672. },
  3673. "modifyinguser": {
  3674. "type": "text",
  3675. "norms": false
  3676. },
  3677. "module": {
  3678. "type": "text",
  3679. "norms": false
  3680. },
  3681. "monitorheight": {
  3682. "type": "text",
  3683. "norms": false
  3684. },
  3685. "monitornum": {
  3686. "type": "text",
  3687. "norms": false
  3688. },
  3689. "monitorwidth": {
  3690. "type": "text",
  3691. "norms": false
  3692. },
  3693. "monitorx": {
  3694. "type": "text",
  3695. "norms": false
  3696. },
  3697. "monitory": {
  3698. "type": "text",
  3699. "norms": false
  3700. },
  3701. "mpid": {
  3702. "type": "text",
  3703. "norms": false
  3704. },
  3705. "msg": {
  3706. "type": "text",
  3707. "norms": false
  3708. },
  3709. "name": {
  3710. "type": "text",
  3711. "norms": false
  3712. },
  3713. "name_id": {
  3714. "type": "keyword",
  3715. "ignore_above": 256
  3716. },
  3717. "nameid_format": {
  3718. "type": "text",
  3719. "norms": false
  3720. },
  3721. "namespace": {
  3722. "type": "text",
  3723. "norms": false
  3724. },
  3725. "namespacename": {
  3726. "type": "text",
  3727. "norms": false
  3728. },
  3729. "ncreadavglatencyns": {
  3730. "type": "text",
  3731. "norms": false
  3732. },
  3733. "ncreadiocount": {
  3734. "type": "text",
  3735. "norms": false
  3736. },
  3737. "ncreadtotalbytes": {
  3738. "type": "text",
  3739. "norms": false
  3740. },
  3741. "ncwriteavglatencyns": {
  3742. "type": "text",
  3743. "norms": false
  3744. },
  3745. "ncwriteiocount": {
  3746. "type": "text",
  3747. "norms": false
  3748. },
  3749. "ncwritetotalbytes": {
  3750. "type": "text",
  3751. "norms": false
  3752. },
  3753. "networkbandwidthinkbps": {
  3754. "type": "text",
  3755. "norms": false
  3756. },
  3757. "networkname": {
  3758. "type": "text",
  3759. "norms": false
  3760. },
  3761. "new_activities": {
  3762. "type": "text",
  3763. "norms": false
  3764. },
  3765. "new_comments_count": {
  3766. "type": "text",
  3767. "norms": false
  3768. },
  3769. "new_organization_id": {
  3770. "type": "keyword",
  3771. "ignore_above": 256
  3772. },
  3773. "new_value": {
  3774. "type": "text",
  3775. "norms": false
  3776. },
  3777. "newclockrate": {
  3778. "type": "text",
  3779. "norms": false
  3780. },
  3781. "newsd": {
  3782. "type": "text",
  3783. "norms": false
  3784. },
  3785. "newsize": {
  3786. "type": "text",
  3787. "norms": false
  3788. },
  3789. "newstate": {
  3790. "type": "text",
  3791. "norms": false
  3792. },
  3793. "newstatename": {
  3794. "type": "text",
  3795. "norms": false
  3796. },
  3797. "nextpolicyapplicationtime": {
  3798. "type": "text",
  3799. "norms": false
  3800. },
  3801. "nextpolicyapplicationtimeunit": {
  3802. "type": "text",
  3803. "norms": false
  3804. },
  3805. "node_id": {
  3806. "type": "keyword",
  3807. "ignore_above": 256
  3808. },
  3809. "node_name": {
  3810. "type": "text",
  3811. "norms": false
  3812. },
  3813. "nonce": {
  3814. "type": "text",
  3815. "norms": false
  3816. },
  3817. "noop": {
  3818. "type": "text",
  3819. "norms": false
  3820. },
  3821. "notification": {
  3822. "type": "text",
  3823. "norms": false
  3824. },
  3825. "notification_type": {
  3826. "type": "text",
  3827. "norms": false
  3828. },
  3829. "notificationtype": {
  3830. "type": "text",
  3831. "norms": false
  3832. },
  3833. "notify_of_failed_email_only_once": {
  3834. "type": "text",
  3835. "norms": false
  3836. },
  3837. "nrcpt": {
  3838. "type": "text",
  3839. "norms": false
  3840. },
  3841. "nri_engine_version": {
  3842. "type": "text",
  3843. "norms": false
  3844. },
  3845. "nri_security_intelligence_version": {
  3846. "type": "text",
  3847. "norms": false
  3848. },
  3849. "ntfsfillstatinfofrommftrecordbailedbecauseofattributelistcount": {
  3850. "type": "text",
  3851. "norms": false
  3852. },
  3853. "ntfsfillstatinfofrommftrecordbailedbecauseofnonresreparsepointcount": {
  3854. "type": "text",
  3855. "norms": false
  3856. },
  3857. "ntfsfillstatinfofrommftrecordcalledcount": {
  3858. "type": "text",
  3859. "norms": false
  3860. },
  3861. "numberofgposapplicable": {
  3862. "type": "text",
  3863. "norms": false
  3864. },
  3865. "numberofgposdownloaded": {
  3866. "type": "text",
  3867. "norms": false
  3868. },
  3869. "numberofnumanodes": {
  3870. "type": "text",
  3871. "norms": false
  3872. },
  3873. "numberofretriesdone": {
  3874. "type": "text",
  3875. "norms": false
  3876. },
  3877. "numofvolumes": {
  3878. "type": "text",
  3879. "norms": false
  3880. },
  3881. "oa_state": {
  3882. "type": "text",
  3883. "norms": false
  3884. },
  3885. "object": {
  3886. "type": "text",
  3887. "norms": false
  3888. },
  3889. "object_id": {
  3890. "type": "keyword",
  3891. "ignore_above": 256
  3892. },
  3893. "object_login_name": {
  3894. "type": "text",
  3895. "norms": false
  3896. },
  3897. "object_user_id": {
  3898. "type": "keyword",
  3899. "ignore_above": 256
  3900. },
  3901. "objectid": {
  3902. "type": "keyword"
  3903. },
  3904. "objectname": {
  3905. "type": "text",
  3906. "norms": false
  3907. },
  3908. "objectnamelength": {
  3909. "type": "text",
  3910. "norms": false
  3911. },
  3912. "objectserver": {
  3913. "type": "text",
  3914. "norms": false
  3915. },
  3916. "objecttype": {
  3917. "type": "text",
  3918. "norms": false
  3919. },
  3920. "objid": {
  3921. "type": "text",
  3922. "norms": false
  3923. },
  3924. "old_session_id": {
  3925. "type": "keyword",
  3926. "ignore_above": 256
  3927. },
  3928. "old_status_id": {
  3929. "type": "keyword",
  3930. "ignore_above": 256
  3931. },
  3932. "old_value": {
  3933. "type": "text",
  3934. "norms": false
  3935. },
  3936. "oldclockrate": {
  3937. "type": "text",
  3938. "norms": false
  3939. },
  3940. "oldsd": {
  3941. "type": "text",
  3942. "norms": false
  3943. },
  3944. "oom_score_adj": {
  3945. "type": "text",
  3946. "norms": false
  3947. },
  3948. "op": {
  3949. "type": "text",
  3950. "norms": false
  3951. },
  3952. "open_id_user_id": {
  3953. "type": "keyword",
  3954. "ignore_above": 256
  3955. },
  3956. "operation": {
  3957. "type": "text",
  3958. "norms": false
  3959. },
  3960. "operationdescription": {
  3961. "type": "text",
  3962. "norms": false
  3963. },
  3964. "operationelaspedtimeinmilliseconds": {
  3965. "type": "text",
  3966. "norms": false
  3967. },
  3968. "operationname": {
  3969. "type": "text",
  3970. "norms": false
  3971. },
  3972. "options": {
  3973. "type": "text",
  3974. "norms": false
  3975. },
  3976. "order": {
  3977. "type": "text",
  3978. "norms": false
  3979. },
  3980. "org_course_id": {
  3981. "type": "keyword",
  3982. "ignore_above": 256
  3983. },
  3984. "organization_id": {
  3985. "type": "keyword",
  3986. "ignore_above": 256
  3987. },
  3988. "organization_role_id": {
  3989. "type": "keyword",
  3990. "ignore_above": 256
  3991. },
  3992. "orig_to": {
  3993. "type": "text",
  3994. "norms": false
  3995. },
  3996. "origin": {
  3997. "type": "text",
  3998. "norms": false
  3999. },
  4000. "original_file_name": {
  4001. "type": "text",
  4002. "norms": false
  4003. },
  4004. "originalactivityid": {
  4005. "type": "text",
  4006. "norms": false
  4007. },
  4008. "originalsize": {
  4009. "type": "text",
  4010. "norms": false
  4011. },
  4012. "ouid": {
  4013. "type": "text",
  4014. "norms": false
  4015. },
  4016. "out": {
  4017. "type": "text",
  4018. "norms": false
  4019. },
  4020. "outrankeddrivers": {
  4021. "type": "text",
  4022. "norms": false
  4023. },
  4024. "packagefamilyname": {
  4025. "type": "text",
  4026. "norms": false
  4027. },
  4028. "packagefullname": {
  4029. "type": "text",
  4030. "norms": false
  4031. },
  4032. "packagename": {
  4033. "type": "text",
  4034. "norms": false
  4035. },
  4036. "packet": {
  4037. "type": "text",
  4038. "norms": false
  4039. },
  4040. "packet_info": {
  4041. "type": "text",
  4042. "norms": false
  4043. },
  4044. "pagefilesizeinbytes": {
  4045. "type": "text",
  4046. "norms": false
  4047. },
  4048. "pagefilesizestr": {
  4049. "type": "text",
  4050. "norms": false
  4051. },
  4052. "pagesqueuedtodisksamples": {
  4053. "type": "text",
  4054. "norms": false
  4055. },
  4056. "param1": {
  4057. "type": "text",
  4058. "norms": false
  4059. },
  4060. "param2": {
  4061. "type": "text",
  4062. "norms": false
  4063. },
  4064. "param3": {
  4065. "type": "text",
  4066. "norms": false
  4067. },
  4068. "param4": {
  4069. "type": "text",
  4070. "norms": false
  4071. },
  4072. "param_course_id": {
  4073. "type": "keyword",
  4074. "ignore_above": 256
  4075. },
  4076. "param_goup_id": {
  4077. "type": "keyword",
  4078. "ignore_above": 256
  4079. },
  4080. "parameter": {
  4081. "type": "text",
  4082. "norms": false
  4083. },
  4084. "parameters": {
  4085. "type": "text",
  4086. "norms": false
  4087. },
  4088. "parent_bls_courses": {
  4089. "type": "text",
  4090. "norms": false
  4091. },
  4092. "parentdeviceinstanceid": {
  4093. "type": "text",
  4094. "norms": false
  4095. },
  4096. "parentid": {
  4097. "type": "text",
  4098. "norms": false
  4099. },
  4100. "partition": {
  4101. "type": "text",
  4102. "norms": false
  4103. },
  4104. "partitionstyle": {
  4105. "type": "text",
  4106. "norms": false
  4107. },
  4108. "passing_score": {
  4109. "type": "text",
  4110. "norms": false
  4111. },
  4112. "password_user_id": {
  4113. "type": "keyword",
  4114. "ignore_above": 256
  4115. },
  4116. "path": {
  4117. "type": "keyword"
  4118. },
  4119. "pathid": {
  4120. "type": "text",
  4121. "norms": false
  4122. },
  4123. "pattern_id": {
  4124. "type": "keyword",
  4125. "ignore_above": 256
  4126. },
  4127. "payload": {
  4128. "type": "text",
  4129. "norms": false
  4130. },
  4131. "payload_printable": {
  4132. "type": "text",
  4133. "norms": false
  4134. },
  4135. "payloadsize": {
  4136. "type": "text",
  4137. "norms": false
  4138. },
  4139. "payment_id": {
  4140. "type": "keyword",
  4141. "ignore_above": 256
  4142. },
  4143. "peer": {
  4144. "type": "text",
  4145. "norms": false
  4146. },
  4147. "peercontextinfo": {
  4148. "type": "text",
  4149. "norms": false
  4150. },
  4151. "peerprotocolflags": {
  4152. "type": "text",
  4153. "norms": false
  4154. },
  4155. "period": {
  4156. "type": "text",
  4157. "norms": false
  4158. },
  4159. "perioddurationmicrosec": {
  4160. "type": "text",
  4161. "norms": false
  4162. },
  4163. "persistence_limit_type": {
  4164. "type": "text",
  4165. "norms": false
  4166. },
  4167. "persistence_limit_type_index": {
  4168. "type": "text",
  4169. "norms": false
  4170. },
  4171. "persistence_limit_value": {
  4172. "type": "text",
  4173. "norms": false
  4174. },
  4175. "persistence_path": {
  4176. "type": "text",
  4177. "norms": false
  4178. },
  4179. "persistent": {
  4180. "type": "keyword"
  4181. },
  4182. "phaseoffset": {
  4183. "type": "text",
  4184. "norms": false
  4185. },
  4186. "picture_id": {
  4187. "type": "keyword",
  4188. "ignore_above": 256
  4189. },
  4190. "pid": {
  4191. "type": "text",
  4192. "norms": false
  4193. },
  4194. "pkt_src": {
  4195. "type": "text",
  4196. "norms": false
  4197. },
  4198. "platform": {
  4199. "type": "text",
  4200. "norms": false
  4201. },
  4202. "platform_version": {
  4203. "type": "text",
  4204. "norms": false
  4205. },
  4206. "policyactivityid": {
  4207. "type": "text",
  4208. "norms": false
  4209. },
  4210. "policyapplicationmode": {
  4211. "type": "text",
  4212. "norms": false
  4213. },
  4214. "policydownloadtimeelapsedinmilliseconds": {
  4215. "type": "text",
  4216. "norms": false
  4217. },
  4218. "policyelaspedtimeinseconds": {
  4219. "type": "text",
  4220. "norms": false
  4221. },
  4222. "policyprocessingmode": {
  4223. "type": "text",
  4224. "norms": false
  4225. },
  4226. "pollinterval": {
  4227. "type": "text",
  4228. "norms": false
  4229. },
  4230. "pool": {
  4231. "type": "text",
  4232. "norms": false
  4233. },
  4234. "port": {
  4235. "type": "text",
  4236. "norms": false
  4237. },
  4238. "portnumber": {
  4239. "type": "text",
  4240. "norms": false
  4241. },
  4242. "post_xml": {
  4243. "type": "text",
  4244. "norms": false
  4245. },
  4246. "powereventtype": {
  4247. "type": "text",
  4248. "norms": false
  4249. },
  4250. "prec": {
  4251. "type": "text",
  4252. "norms": false
  4253. },
  4254. "precision": {
  4255. "type": "text",
  4256. "norms": false
  4257. },
  4258. "prefer_encoding": {
  4259. "type": "text",
  4260. "norms": false
  4261. },
  4262. "preparebackupendtime": {
  4263. "type": "text",
  4264. "norms": false
  4265. },
  4266. "preparebackupstarttime": {
  4267. "type": "text",
  4268. "norms": false
  4269. },
  4270. "presencevalidationenabled": {
  4271. "type": "text",
  4272. "norms": false
  4273. },
  4274. "presencevalidationquestiondata": {
  4275. "type": "text",
  4276. "norms": false
  4277. },
  4278. "presencevalidationquestionid": {
  4279. "type": "text",
  4280. "norms": false
  4281. },
  4282. "presencevalidationtext": {
  4283. "type": "text",
  4284. "norms": false
  4285. },
  4286. "presencevalidationtimeout": {
  4287. "type": "text",
  4288. "norms": false
  4289. },
  4290. "previous_engine_version": {
  4291. "type": "text",
  4292. "norms": false
  4293. },
  4294. "previous_security_intelligence_version": {
  4295. "type": "text",
  4296. "norms": false
  4297. },
  4298. "previousstate": {
  4299. "type": "text",
  4300. "norms": false
  4301. },
  4302. "previousstatename": {
  4303. "type": "text",
  4304. "norms": false
  4305. },
  4306. "price": {
  4307. "type": "text",
  4308. "norms": false
  4309. },
  4310. "price_type_id": {
  4311. "type": "keyword",
  4312. "ignore_above": 256
  4313. },
  4314. "prices": {
  4315. "type": "text",
  4316. "norms": false
  4317. },
  4318. "primary_key": {
  4319. "type": "text",
  4320. "norms": false
  4321. },
  4322. "principalcnname": {
  4323. "type": "text",
  4324. "norms": false
  4325. },
  4326. "principaldomainname": {
  4327. "type": "text",
  4328. "norms": false
  4329. },
  4330. "principalsamname": {
  4331. "type": "text",
  4332. "norms": false
  4333. },
  4334. "priority": {
  4335. "type": "text",
  4336. "norms": false
  4337. },
  4338. "privilegelist": {
  4339. "type": "text",
  4340. "norms": false
  4341. },
  4342. "problem": {
  4343. "type": "text",
  4344. "norms": false
  4345. },
  4346. "process": {
  4347. "type": "text",
  4348. "norms": false
  4349. },
  4350. "process_id": {
  4351. "type": "long",
  4352. "ignore_malformed": true
  4353. },
  4354. "process_name": {
  4355. "type": "text",
  4356. "norms": false
  4357. },
  4358. "process_session_guide": {
  4359. "type": "text",
  4360. "norms": false
  4361. },
  4362. "process_step": {
  4363. "type": "text",
  4364. "norms": false
  4365. },
  4366. "processcommandline": {
  4367. "type": "text",
  4368. "norms": false
  4369. },
  4370. "processcommandlinelength": {
  4371. "type": "text",
  4372. "norms": false
  4373. },
  4374. "processcreatetime": {
  4375. "type": "text",
  4376. "norms": false
  4377. },
  4378. "processcreationtime": {
  4379. "type": "text",
  4380. "norms": false
  4381. },
  4382. "processed_user_id": {
  4383. "type": "keyword",
  4384. "ignore_above": 256
  4385. },
  4386. "processname": {
  4387. "type": "text",
  4388. "norms": false
  4389. },
  4390. "processnamesarray": {
  4391. "type": "text",
  4392. "norms": false
  4393. },
  4394. "processpath": {
  4395. "type": "text",
  4396. "norms": false
  4397. },
  4398. "processpathlength": {
  4399. "type": "text",
  4400. "norms": false
  4401. },
  4402. "processprotection": {
  4403. "type": "text",
  4404. "norms": false
  4405. },
  4406. "processsectionsignaturelevel": {
  4407. "type": "text",
  4408. "norms": false
  4409. },
  4410. "processsignaturelevel": {
  4411. "type": "text",
  4412. "norms": false
  4413. },
  4414. "processstartkey": {
  4415. "type": "text",
  4416. "norms": false
  4417. },
  4418. "product_id": {
  4419. "type": "keyword",
  4420. "ignore_above": 256
  4421. },
  4422. "product_name": {
  4423. "type": "text",
  4424. "norms": false
  4425. },
  4426. "product_price": {
  4427. "type": "text",
  4428. "norms": false
  4429. },
  4430. "product_price_type_id": {
  4431. "type": "keyword",
  4432. "ignore_above": 256
  4433. },
  4434. "product_status": {
  4435. "type": "text",
  4436. "norms": false
  4437. },
  4438. "product_type": {
  4439. "type": "text",
  4440. "norms": false
  4441. },
  4442. "product_type_id": {
  4443. "type": "keyword",
  4444. "ignore_above": 256
  4445. },
  4446. "product_version": {
  4447. "type": "text",
  4448. "norms": false
  4449. },
  4450. "productid": {
  4451. "type": "text",
  4452. "norms": false
  4453. },
  4454. "productidlength": {
  4455. "type": "text",
  4456. "norms": false
  4457. },
  4458. "productrevision": {
  4459. "type": "text",
  4460. "norms": false
  4461. },
  4462. "productrevisionlength": {
  4463. "type": "text",
  4464. "norms": false
  4465. },
  4466. "profile": {
  4467. "type": "text",
  4468. "norms": false
  4469. },
  4470. "profileidnum": {
  4471. "type": "text",
  4472. "norms": false
  4473. },
  4474. "profiles": {
  4475. "type": "text",
  4476. "norms": false
  4477. },
  4478. "profiletype": {
  4479. "type": "text",
  4480. "norms": false
  4481. },
  4482. "program": {
  4483. "type": "text",
  4484. "norms": false
  4485. },
  4486. "program_set_name": {
  4487. "type": "text",
  4488. "norms": false
  4489. },
  4490. "project_name": {
  4491. "type": "text",
  4492. "norms": false
  4493. },
  4494. "promptforcredentials": {
  4495. "type": "text",
  4496. "norms": false
  4497. },
  4498. "promptforcredentialsdone": {
  4499. "type": "text",
  4500. "norms": false
  4501. },
  4502. "prop_containerid": {
  4503. "type": "text",
  4504. "norms": false
  4505. },
  4506. "prop_coreservicemode": {
  4507. "type": "text",
  4508. "norms": false
  4509. },
  4510. "prop_devicename": {
  4511. "type": "text",
  4512. "norms": false
  4513. },
  4514. "prop_event_window_seconds": {
  4515. "type": "text",
  4516. "norms": false
  4517. },
  4518. "prop_propertycount": {
  4519. "type": "text",
  4520. "norms": false
  4521. },
  4522. "prop_taskcount": {
  4523. "type": "text",
  4524. "norms": false
  4525. },
  4526. "prop_uptime_seconds": {
  4527. "type": "text",
  4528. "norms": false
  4529. },
  4530. "prop_worktime_milliseconds": {
  4531. "type": "text",
  4532. "norms": false
  4533. },
  4534. "properties": {
  4535. "type": "text",
  4536. "norms": false
  4537. },
  4538. "proto": {
  4539. "type": "text",
  4540. "norms": false
  4541. },
  4542. "protocol": {
  4543. "type": "text",
  4544. "norms": false
  4545. },
  4546. "provider_id": {
  4547. "type": "keyword",
  4548. "ignore_above": 256
  4549. },
  4550. "provider_name": {
  4551. "type": "text",
  4552. "norms": false
  4553. },
  4554. "prunebackupendtime": {
  4555. "type": "text",
  4556. "norms": false
  4557. },
  4558. "prunebackupstarttime": {
  4559. "type": "text",
  4560. "norms": false
  4561. },
  4562. "purchase_id": {
  4563. "type": "keyword",
  4564. "ignore_above": 256
  4565. },
  4566. "purchase_user_id": {
  4567. "type": "keyword",
  4568. "ignore_above": 256
  4569. },
  4570. "quantity": {
  4571. "type": "text",
  4572. "norms": false
  4573. },
  4574. "query_params": {
  4575. "type": "text",
  4576. "norms": false
  4577. },
  4578. "queryparameters": {
  4579. "type": "text",
  4580. "norms": false
  4581. },
  4582. "question_id": {
  4583. "type": "keyword",
  4584. "ignore_above": 256
  4585. },
  4586. "queue_name": {
  4587. "type": "text",
  4588. "norms": false
  4589. },
  4590. "queued_as": {
  4591. "type": "keyword",
  4592. "ignore_above": 256
  4593. },
  4594. "queuedepth": {
  4595. "type": "text",
  4596. "norms": false
  4597. },
  4598. "queuedtaskinstanceid": {
  4599. "type": "text",
  4600. "norms": false
  4601. },
  4602. "queuedtilecleanups": {
  4603. "type": "text",
  4604. "norms": false
  4605. },
  4606. "queuedtilecloses": {
  4607. "type": "text",
  4608. "norms": false
  4609. },
  4610. "quit": {
  4611. "type": "text",
  4612. "norms": false
  4613. },
  4614. "quizid": {
  4615. "type": "text",
  4616. "norms": false
  4617. },
  4618. "random_number": {
  4619. "type": "text",
  4620. "norms": false
  4621. },
  4622. "rating": {
  4623. "type": "text",
  4624. "norms": false
  4625. },
  4626. "rcpt": {
  4627. "type": "text",
  4628. "norms": false
  4629. },
  4630. "rdata": {
  4631. "type": "text",
  4632. "norms": false
  4633. },
  4634. "readaheadtotalbytes": {
  4635. "type": "text",
  4636. "norms": false
  4637. },
  4638. "readoperation": {
  4639. "type": "text",
  4640. "norms": false
  4641. },
  4642. "readpagedintotalbytes": {
  4643. "type": "text",
  4644. "norms": false
  4645. },
  4646. "readtotalbytes": {
  4647. "type": "text",
  4648. "norms": false
  4649. },
  4650. "readwritelatencybucket1": {
  4651. "type": "text",
  4652. "norms": false
  4653. },
  4654. "readwritelatencybucket2": {
  4655. "type": "text",
  4656. "norms": false
  4657. },
  4658. "readwritelatencybucket3": {
  4659. "type": "text",
  4660. "norms": false
  4661. },
  4662. "readwritelatencybucket4": {
  4663. "type": "text",
  4664. "norms": false
  4665. },
  4666. "readwritelatencybucket5": {
  4667. "type": "text",
  4668. "norms": false
  4669. },
  4670. "readwritelatencybucket6": {
  4671. "type": "text",
  4672. "norms": false
  4673. },
  4674. "readwritelatencybucket7": {
  4675. "type": "text",
  4676. "norms": false
  4677. },
  4678. "reason": {
  4679. "type": "text",
  4680. "fields": {
  4681. "keyword": {
  4682. "type": "keyword",
  4683. "ignore_above": 256
  4684. }
  4685. },
  4686. "norms": false
  4687. },
  4688. "reasoncode": {
  4689. "type": "text",
  4690. "norms": false
  4691. },
  4692. "reasonforsyncprocessing": {
  4693. "type": "text",
  4694. "norms": false
  4695. },
  4696. "reasonstring": {
  4697. "type": "text",
  4698. "norms": false
  4699. },
  4700. "rebuild": {
  4701. "type": "text",
  4702. "norms": false
  4703. },
  4704. "receipt_path": {
  4705. "type": "text",
  4706. "norms": false
  4707. },
  4708. "recipient": {
  4709. "type": "text",
  4710. "norms": false
  4711. },
  4712. "recipient_email": {
  4713. "type": "text",
  4714. "norms": false
  4715. },
  4716. "recipient_emails": {
  4717. "type": "text",
  4718. "norms": false
  4719. },
  4720. "recipient_user_id": {
  4721. "type": "keyword",
  4722. "ignore_above": 256
  4723. },
  4724. "recipients": {
  4725. "type": "text",
  4726. "norms": false
  4727. },
  4728. "record_id": {
  4729. "type": "keyword",
  4730. "ignore_above": 256
  4731. },
  4732. "redirect_uri": {
  4733. "type": "text",
  4734. "norms": false
  4735. },
  4736. "referenceid": {
  4737. "type": "text",
  4738. "norms": false
  4739. },
  4740. "refreshtriggersource": {
  4741. "type": "text",
  4742. "norms": false
  4743. },
  4744. "reg_filters": {
  4745. "type": "text",
  4746. "norms": false
  4747. },
  4748. "registered_user_id": {
  4749. "type": "keyword",
  4750. "ignore_above": 256
  4751. },
  4752. "registration": {
  4753. "type": "text",
  4754. "norms": false
  4755. },
  4756. "registration_event": {
  4757. "type": "text",
  4758. "norms": false
  4759. },
  4760. "registration_id": {
  4761. "type": "keyword",
  4762. "ignore_above": 256
  4763. },
  4764. "registration_user_id": {
  4765. "type": "keyword",
  4766. "ignore_above": 256
  4767. },
  4768. "registrations": {
  4769. "type": "text",
  4770. "norms": false
  4771. },
  4772. "relateddata": {
  4773. "type": "text",
  4774. "norms": false
  4775. },
  4776. "relay": {
  4777. "type": "text",
  4778. "norms": false
  4779. },
  4780. "relay_state": {
  4781. "type": "text",
  4782. "norms": false
  4783. },
  4784. "remote_address": {
  4785. "type": "text",
  4786. "norms": false
  4787. },
  4788. "remote_host": {
  4789. "type": "text",
  4790. "norms": false
  4791. },
  4792. "remote_path": {
  4793. "type": "text",
  4794. "norms": false
  4795. },
  4796. "remote_path_csv": {
  4797. "type": "text",
  4798. "norms": false
  4799. },
  4800. "remoteaddress": {
  4801. "type": "ip"
  4802. },
  4803. "remoteaddresses": {
  4804. "type": "text",
  4805. "norms": false
  4806. },
  4807. "remotehost": {
  4808. "type": "text",
  4809. "norms": false
  4810. },
  4811. "remotename": {
  4812. "type": "text",
  4813. "norms": false
  4814. },
  4815. "remoteports": {
  4816. "type": "text",
  4817. "norms": false
  4818. },
  4819. "remove_date": {
  4820. "type": "text",
  4821. "norms": false
  4822. },
  4823. "removepackagelist": {
  4824. "type": "text",
  4825. "norms": false
  4826. },
  4827. "report_id": {
  4828. "type": "keyword",
  4829. "ignore_above": 256
  4830. },
  4831. "report_internal_name": {
  4832. "type": "text",
  4833. "norms": false
  4834. },
  4835. "report_params": {
  4836. "type": "text",
  4837. "norms": false
  4838. },
  4839. "report_result_id": {
  4840. "type": "keyword",
  4841. "ignore_above": 256
  4842. },
  4843. "report_user_id": {
  4844. "type": "keyword",
  4845. "ignore_above": 256
  4846. },
  4847. "req_id": {
  4848. "type": "keyword",
  4849. "ignore_above": 256
  4850. },
  4851. "request": {
  4852. "type": "text",
  4853. "norms": false
  4854. },
  4855. "request_id": {
  4856. "type": "keyword",
  4857. "ignore_above": 256
  4858. },
  4859. "request_info": {
  4860. "type": "text",
  4861. "norms": false
  4862. },
  4863. "request_path": {
  4864. "type": "text",
  4865. "norms": false
  4866. },
  4867. "request_session_modified": {
  4868. "type": "text",
  4869. "norms": false
  4870. },
  4871. "request_user_id": {
  4872. "type": "keyword",
  4873. "ignore_above": 256
  4874. },
  4875. "requestduration_ms": {
  4876. "type": "text",
  4877. "norms": false
  4878. },
  4879. "requested_mask": {
  4880. "type": "text",
  4881. "norms": false
  4882. },
  4883. "requestguid": {
  4884. "type": "text",
  4885. "norms": false
  4886. },
  4887. "requeststatus": {
  4888. "type": "text",
  4889. "norms": false
  4890. },
  4891. "required": {
  4892. "type": "text",
  4893. "norms": false
  4894. },
  4895. "requiredsignaturelevel": {
  4896. "type": "text",
  4897. "norms": false
  4898. },
  4899. "res": {
  4900. "type": "text",
  4901. "norms": false
  4902. },
  4903. "reservedclustersmax": {
  4904. "type": "text",
  4905. "norms": false
  4906. },
  4907. "reservedclustersmin": {
  4908. "type": "text",
  4909. "norms": false
  4910. },
  4911. "resourceuri": {
  4912. "type": "text",
  4913. "norms": false
  4914. },
  4915. "response": {
  4916. "type": "text",
  4917. "norms": false
  4918. },
  4919. "response_time": {
  4920. "type": "float",
  4921. "ignore_malformed": true
  4922. },
  4923. "response_type": {
  4924. "type": "text",
  4925. "norms": false
  4926. },
  4927. "responsemac": {
  4928. "type": "text",
  4929. "norms": false
  4930. },
  4931. "restartrequired": {
  4932. "type": "text",
  4933. "norms": false
  4934. },
  4935. "restrictedadminmode": {
  4936. "type": "text",
  4937. "norms": false
  4938. },
  4939. "result": {
  4940. "type": "text",
  4941. "norms": false
  4942. },
  4943. "result_getaway": {
  4944. "type": "text",
  4945. "norms": false
  4946. },
  4947. "result_id": {
  4948. "type": "keyword",
  4949. "ignore_above": 256
  4950. },
  4951. "result_message": {
  4952. "type": "text",
  4953. "norms": false
  4954. },
  4955. "result_user_id": {
  4956. "type": "keyword",
  4957. "ignore_above": 256
  4958. },
  4959. "resultcode": {
  4960. "type": "text",
  4961. "norms": false
  4962. },
  4963. "results_count": {
  4964. "type": "text",
  4965. "norms": false
  4966. },
  4967. "resultsreturned": {
  4968. "type": "text",
  4969. "norms": false
  4970. },
  4971. "returncode": {
  4972. "type": "text",
  4973. "norms": false
  4974. },
  4975. "returns_rows": {
  4976. "type": "text",
  4977. "norms": false
  4978. },
  4979. "review_id": {
  4980. "type": "keyword",
  4981. "ignore_above": 256
  4982. },
  4983. "rewrite_file": {
  4984. "type": "text",
  4985. "norms": false
  4986. },
  4987. "rip": {
  4988. "type": "text",
  4989. "norms": false
  4990. },
  4991. "roleid": {
  4992. "type": "text",
  4993. "norms": false
  4994. },
  4995. "rootdelay": {
  4996. "type": "text",
  4997. "norms": false
  4998. },
  4999. "rootdispersion": {
  5000. "type": "text",
  5001. "norms": false
  5002. },
  5003. "rootindexreadbytes": {
  5004. "type": "text",
  5005. "norms": false
  5006. },
  5007. "rootindexreads": {
  5008. "type": "text",
  5009. "norms": false
  5010. },
  5011. "rootindexwritebytes": {
  5012. "type": "text",
  5013. "norms": false
  5014. },
  5015. "rootindexwrites": {
  5016. "type": "text",
  5017. "norms": false
  5018. },
  5019. "rset": {
  5020. "type": "text",
  5021. "norms": false
  5022. },
  5023. "rtp_state": {
  5024. "type": "text",
  5025. "norms": false
  5026. },
  5027. "ruleid": {
  5028. "type": "text",
  5029. "norms": false
  5030. },
  5031. "rulename": {
  5032. "type": "text",
  5033. "norms": false
  5034. },
  5035. "rulestatus": {
  5036. "type": "text",
  5037. "norms": false
  5038. },
  5039. "saml_relaystate": {
  5040. "type": "text",
  5041. "norms": false
  5042. },
  5043. "saml_request": {
  5044. "type": "text",
  5045. "norms": false
  5046. },
  5047. "saml_sso": {
  5048. "type": "text",
  5049. "norms": false
  5050. },
  5051. "saml_sso_data": {
  5052. "type": "text",
  5053. "norms": false
  5054. },
  5055. "saml_url": {
  5056. "type": "text",
  5057. "norms": false
  5058. },
  5059. "samplederrorlogarray": {
  5060. "type": "text",
  5061. "norms": false
  5062. },
  5063. "samplederrorlogarraylength": {
  5064. "type": "text",
  5065. "norms": false
  5066. },
  5067. "saved_searches_count": {
  5068. "type": "text",
  5069. "norms": false
  5070. },
  5071. "saved_state": {
  5072. "type": "text",
  5073. "norms": false
  5074. },
  5075. "scan_id": {
  5076. "type": "keyword",
  5077. "ignore_above": 256
  5078. },
  5079. "scan_parameters": {
  5080. "type": "text",
  5081. "norms": false
  5082. },
  5083. "scan_parameters_index": {
  5084. "type": "text",
  5085. "norms": false
  5086. },
  5087. "scan_time_hours": {
  5088. "type": "text",
  5089. "norms": false
  5090. },
  5091. "scan_time_minutes": {
  5092. "type": "text",
  5093. "norms": false
  5094. },
  5095. "scan_time_seconds": {
  5096. "type": "text",
  5097. "norms": false
  5098. },
  5099. "scan_type": {
  5100. "type": "text",
  5101. "norms": false
  5102. },
  5103. "scan_type_index": {
  5104. "type": "text",
  5105. "norms": false
  5106. },
  5107. "scenario": {
  5108. "type": "text",
  5109. "norms": false
  5110. },
  5111. "scenarioid": {
  5112. "type": "text",
  5113. "norms": false
  5114. },
  5115. "schannelname": {
  5116. "type": "text",
  5117. "norms": false
  5118. },
  5119. "schanneltype": {
  5120. "type": "text",
  5121. "norms": false
  5122. },
  5123. "schedule_date": {
  5124. "type": "text",
  5125. "norms": false
  5126. },
  5127. "schedule_id": {
  5128. "type": "keyword",
  5129. "ignore_above": 256
  5130. },
  5131. "schedule_options": {
  5132. "type": "text",
  5133. "norms": false
  5134. },
  5135. "schemaversion": {
  5136. "type": "text",
  5137. "norms": false
  5138. },
  5139. "scope": {
  5140. "type": "text",
  5141. "norms": false
  5142. },
  5143. "score": {
  5144. "type": "text",
  5145. "norms": false
  5146. },
  5147. "scorm_manifest_id": {
  5148. "type": "keyword",
  5149. "ignore_above": 256
  5150. },
  5151. "scos_number": {
  5152. "type": "text",
  5153. "norms": false
  5154. },
  5155. "scriptelaspedtimeinseconds": {
  5156. "type": "text",
  5157. "norms": false
  5158. },
  5159. "scripttype": {
  5160. "type": "text",
  5161. "norms": false
  5162. },
  5163. "scsistatus": {
  5164. "type": "text",
  5165. "norms": false
  5166. },
  5167. "sd": {
  5168. "type": "text",
  5169. "norms": false
  5170. },
  5171. "search_user_id": {
  5172. "type": "keyword",
  5173. "ignore_above": 256
  5174. },
  5175. "secondselapsed": {
  5176. "type": "text",
  5177. "norms": false
  5178. },
  5179. "section_id": {
  5180. "type": "keyword",
  5181. "ignore_above": 256
  5182. },
  5183. "security_intelligence_type": {
  5184. "type": "text",
  5185. "norms": false
  5186. },
  5187. "security_intelligence_type_index": {
  5188. "type": "text",
  5189. "norms": false
  5190. },
  5191. "security_intelligence_version": {
  5192. "type": "text",
  5193. "norms": false
  5194. },
  5195. "security_token": {
  5196. "type": "text",
  5197. "norms": false
  5198. },
  5199. "security_token_id": {
  5200. "type": "keyword",
  5201. "ignore_above": 256
  5202. },
  5203. "securityoptions": {
  5204. "type": "text",
  5205. "norms": false
  5206. },
  5207. "self__data_cmi_core_lesson_status": {
  5208. "type": "text",
  5209. "norms": false
  5210. },
  5211. "self__data_cmi_core_score_raw": {
  5212. "type": "text",
  5213. "norms": false
  5214. },
  5215. "send_emergency_emails": {
  5216. "type": "text",
  5217. "norms": false
  5218. },
  5219. "sender": {
  5220. "type": "text",
  5221. "norms": false
  5222. },
  5223. "sender_user_id": {
  5224. "type": "keyword",
  5225. "ignore_above": 256
  5226. },
  5227. "senderip": {
  5228. "type": "text",
  5229. "norms": false
  5230. },
  5231. "sendermac": {
  5232. "type": "text",
  5233. "norms": false
  5234. },
  5235. "sensekey": {
  5236. "type": "text",
  5237. "norms": false
  5238. },
  5239. "sent_updateserver": {
  5240. "type": "text",
  5241. "norms": false
  5242. },
  5243. "seq": {
  5244. "type": "text",
  5245. "norms": false
  5246. },
  5247. "serialnumber": {
  5248. "type": "text",
  5249. "norms": false
  5250. },
  5251. "server": {
  5252. "type": "text",
  5253. "norms": false
  5254. },
  5255. "server_time": {
  5256. "type": "text",
  5257. "norms": false
  5258. },
  5259. "servername": {
  5260. "type": "text",
  5261. "norms": false
  5262. },
  5263. "servernamelength": {
  5264. "type": "text",
  5265. "norms": false
  5266. },
  5267. "serverrole": {
  5268. "type": "text",
  5269. "norms": false
  5270. },
  5271. "service": {
  5272. "type": "keyword"
  5273. },
  5274. "service_user_id": {
  5275. "type": "keyword",
  5276. "ignore_above": 256
  5277. },
  5278. "serviceguid": {
  5279. "type": "text",
  5280. "norms": false
  5281. },
  5282. "servicename": {
  5283. "type": "text",
  5284. "norms": false
  5285. },
  5286. "servicetype": {
  5287. "type": "text",
  5288. "norms": false
  5289. },
  5290. "session": {
  5291. "type": "text",
  5292. "norms": false
  5293. },
  5294. "session_id": {
  5295. "type": "keyword",
  5296. "ignore_above": 256
  5297. },
  5298. "session_info": {
  5299. "type": "text",
  5300. "norms": false
  5301. },
  5302. "session_key": {
  5303. "type": "text",
  5304. "norms": false
  5305. },
  5306. "session_notifications": {
  5307. "type": "text",
  5308. "norms": false
  5309. },
  5310. "session_record_id": {
  5311. "type": "keyword",
  5312. "ignore_above": 256
  5313. },
  5314. "session_save_every_request": {
  5315. "type": "text",
  5316. "norms": false
  5317. },
  5318. "session_user_id": {
  5319. "type": "keyword",
  5320. "ignore_above": 256
  5321. },
  5322. "sessionname": {
  5323. "type": "text",
  5324. "norms": false
  5325. },
  5326. "sessiontimeelapsedinmilliseconds": {
  5327. "type": "text",
  5328. "norms": false
  5329. },
  5330. "severity": {
  5331. "type": "keyword"
  5332. },
  5333. "sharename": {
  5334. "type": "text",
  5335. "norms": false
  5336. },
  5337. "sharenamelength": {
  5338. "type": "text",
  5339. "norms": false
  5340. },
  5341. "short_message": {
  5342. "type": "text",
  5343. "norms": false
  5344. },
  5345. "sid": {
  5346. "type": "text",
  5347. "norms": false
  5348. },
  5349. "signal": {
  5350. "type": "text",
  5351. "norms": false
  5352. },
  5353. "signature": {
  5354. "type": "keyword"
  5355. },
  5356. "signaturelevel": {
  5357. "type": "text",
  5358. "norms": false
  5359. },
  5360. "sip": {
  5361. "type": "text",
  5362. "norms": false
  5363. },
  5364. "site": {
  5365. "type": "text",
  5366. "norms": false
  5367. },
  5368. "site_from_address": {
  5369. "type": "text",
  5370. "norms": false
  5371. },
  5372. "size": {
  5373. "type": "text",
  5374. "norms": false
  5375. },
  5376. "snmp": {
  5377. "type": "text",
  5378. "norms": false
  5379. },
  5380. "source": {
  5381. "type": "text",
  5382. "norms": false
  5383. },
  5384. "source_certificate_id": {
  5385. "type": "keyword",
  5386. "ignore_above": 256
  5387. },
  5388. "source_folder": {
  5389. "type": "text",
  5390. "norms": false
  5391. },
  5392. "source_host": {
  5393. "type": "ip"
  5394. },
  5395. "source_session_id": {
  5396. "type": "keyword",
  5397. "ignore_above": 256
  5398. },
  5399. "sourcesnapendtime": {
  5400. "type": "text",
  5401. "norms": false
  5402. },
  5403. "sourcesnapstarttime": {
  5404. "type": "text",
  5405. "norms": false
  5406. },
  5407. "spt": {
  5408. "type": "text",
  5409. "norms": false
  5410. },
  5411. "srbstatus": {
  5412. "type": "text",
  5413. "norms": false
  5414. },
  5415. "src": {
  5416. "type": "text",
  5417. "norms": false
  5418. },
  5419. "src_ip": {
  5420. "type": "ip"
  5421. },
  5422. "src_port": {
  5423. "type": "text",
  5424. "norms": false
  5425. },
  5426. "ssbbackupendtime": {
  5427. "type": "text",
  5428. "norms": false
  5429. },
  5430. "ssbbackupstarttime": {
  5431. "type": "text",
  5432. "norms": false
  5433. },
  5434. "ssbenumerateendtime": {
  5435. "type": "text",
  5436. "norms": false
  5437. },
  5438. "ssbenumeratestarttime": {
  5439. "type": "text",
  5440. "norms": false
  5441. },
  5442. "ssbvhdcreationendtime": {
  5443. "type": "text",
  5444. "norms": false
  5445. },
  5446. "ssbvhdcreationstarttime": {
  5447. "type": "text",
  5448. "norms": false
  5449. },
  5450. "sso_data": {
  5451. "type": "text",
  5452. "norms": false
  5453. },
  5454. "stack_trace": {
  5455. "type": "text",
  5456. "norms": false
  5457. },
  5458. "stacktrace": {
  5459. "type": "text",
  5460. "norms": false
  5461. },
  5462. "stage": {
  5463. "type": "text",
  5464. "norms": false
  5465. },
  5466. "start_date": {
  5467. "type": "text",
  5468. "norms": false
  5469. },
  5470. "starttls": {
  5471. "type": "text",
  5472. "norms": false
  5473. },
  5474. "starttype": {
  5475. "type": "text",
  5476. "norms": false
  5477. },
  5478. "state": {
  5479. "type": "text",
  5480. "norms": false
  5481. },
  5482. "state_machine": {
  5483. "type": "text",
  5484. "norms": false
  5485. },
  5486. "state_machine_name": {
  5487. "type": "text",
  5488. "norms": false
  5489. },
  5490. "state_name": {
  5491. "type": "text",
  5492. "norms": false
  5493. },
  5494. "statemachine": {
  5495. "type": "text",
  5496. "norms": false
  5497. },
  5498. "statetransition": {
  5499. "type": "text",
  5500. "norms": false
  5501. },
  5502. "status": {
  5503. "type": "text",
  5504. "fields": {
  5505. "keyword": {
  5506. "type": "keyword",
  5507. "ignore_above": 256
  5508. }
  5509. },
  5510. "norms": false
  5511. },
  5512. "status_code": {
  5513. "type": "text",
  5514. "norms": false
  5515. },
  5516. "status_id": {
  5517. "type": "keyword",
  5518. "ignore_above": 256
  5519. },
  5520. "storage_location": {
  5521. "type": "text",
  5522. "norms": false
  5523. },
  5524. "storage_path": {
  5525. "type": "text",
  5526. "norms": false
  5527. },
  5528. "storage_type": {
  5529. "type": "text",
  5530. "norms": false
  5531. },
  5532. "stratum": {
  5533. "type": "text",
  5534. "norms": false
  5535. },
  5536. "stream": {
  5537. "type": "text",
  5538. "norms": false
  5539. },
  5540. "subject": {
  5541. "type": "text",
  5542. "norms": false
  5543. },
  5544. "subject_token": {
  5545. "type": "text",
  5546. "norms": false
  5547. },
  5548. "subject_userinfo": {
  5549. "type": "text",
  5550. "norms": false
  5551. },
  5552. "subjectdomainname": {
  5553. "type": "text",
  5554. "norms": false
  5555. },
  5556. "subjectlogonid": {
  5557. "type": "text",
  5558. "norms": false
  5559. },
  5560. "subjectusername": {
  5561. "type": "text",
  5562. "norms": false
  5563. },
  5564. "subjectusersid": {
  5565. "type": "text",
  5566. "norms": false
  5567. },
  5568. "subscribername": {
  5569. "type": "text",
  5570. "norms": false
  5571. },
  5572. "substatus": {
  5573. "type": "text",
  5574. "norms": false
  5575. },
  5576. "success": {
  5577. "type": "text",
  5578. "fields": {
  5579. "keyword": {
  5580. "type": "keyword",
  5581. "ignore_above": 256
  5582. }
  5583. },
  5584. "norms": false
  5585. },
  5586. "swap": {
  5587. "type": "text",
  5588. "norms": false
  5589. },
  5590. "synchronousreadiocountsbucket1": {
  5591. "type": "text",
  5592. "norms": false
  5593. },
  5594. "synchronousreadiocountsbucket10": {
  5595. "type": "text",
  5596. "norms": false
  5597. },
  5598. "synchronousreadiocountsbucket11": {
  5599. "type": "text",
  5600. "norms": false
  5601. },
  5602. "synchronousreadiocountsbucket12": {
  5603. "type": "text",
  5604. "norms": false
  5605. },
  5606. "synchronousreadiocountsbucket2": {
  5607. "type": "text",
  5608. "norms": false
  5609. },
  5610. "synchronousreadiocountsbucket3": {
  5611. "type": "text",
  5612. "norms": false
  5613. },
  5614. "synchronousreadiocountsbucket4": {
  5615. "type": "text",
  5616. "norms": false
  5617. },
  5618. "synchronousreadiocountsbucket5": {
  5619. "type": "text",
  5620. "norms": false
  5621. },
  5622. "synchronousreadiocountsbucket6": {
  5623. "type": "text",
  5624. "norms": false
  5625. },
  5626. "synchronousreadiocountsbucket7": {
  5627. "type": "text",
  5628. "norms": false
  5629. },
  5630. "synchronousreadiocountsbucket8": {
  5631. "type": "text",
  5632. "norms": false
  5633. },
  5634. "synchronousreadiocountsbucket9": {
  5635. "type": "text",
  5636. "norms": false
  5637. },
  5638. "synchronousreadiomaxlatency": {
  5639. "type": "text",
  5640. "norms": false
  5641. },
  5642. "synchronousreadiononblockingmaxlatency": {
  5643. "type": "text",
  5644. "norms": false
  5645. },
  5646. "synchronousreadnonblockingiocountsbucket1": {
  5647. "type": "text",
  5648. "norms": false
  5649. },
  5650. "synchronousreadnonblockingiocountsbucket10": {
  5651. "type": "text",
  5652. "norms": false
  5653. },
  5654. "synchronousreadnonblockingiocountsbucket11": {
  5655. "type": "text",
  5656. "norms": false
  5657. },
  5658. "synchronousreadnonblockingiocountsbucket12": {
  5659. "type": "text",
  5660. "norms": false
  5661. },
  5662. "synchronousreadnonblockingiocountsbucket2": {
  5663. "type": "text",
  5664. "norms": false
  5665. },
  5666. "synchronousreadnonblockingiocountsbucket3": {
  5667. "type": "text",
  5668. "norms": false
  5669. },
  5670. "synchronousreadnonblockingiocountsbucket4": {
  5671. "type": "text",
  5672. "norms": false
  5673. },
  5674. "synchronousreadnonblockingiocountsbucket5": {
  5675. "type": "text",
  5676. "norms": false
  5677. },
  5678. "synchronousreadnonblockingiocountsbucket6": {
  5679. "type": "text",
  5680. "norms": false
  5681. },
  5682. "synchronousreadnonblockingiocountsbucket7": {
  5683. "type": "text",
  5684. "norms": false
  5685. },
  5686. "synchronousreadnonblockingiocountsbucket8": {
  5687. "type": "text",
  5688. "norms": false
  5689. },
  5690. "synchronousreadnonblockingiocountsbucket9": {
  5691. "type": "text",
  5692. "norms": false
  5693. },
  5694. "synchronousreadnonblockingtotallatencybucket1": {
  5695. "type": "text",
  5696. "norms": false
  5697. },
  5698. "synchronousreadnonblockingtotallatencybucket10": {
  5699. "type": "text",
  5700. "norms": false
  5701. },
  5702. "synchronousreadnonblockingtotallatencybucket11": {
  5703. "type": "text",
  5704. "norms": false
  5705. },
  5706. "synchronousreadnonblockingtotallatencybucket12": {
  5707. "type": "text",
  5708. "norms": false
  5709. },
  5710. "synchronousreadnonblockingtotallatencybucket2": {
  5711. "type": "text",
  5712. "norms": false
  5713. },
  5714. "synchronousreadnonblockingtotallatencybucket3": {
  5715. "type": "text",
  5716. "norms": false
  5717. },
  5718. "synchronousreadnonblockingtotallatencybucket4": {
  5719. "type": "text",
  5720. "norms": false
  5721. },
  5722. "synchronousreadnonblockingtotallatencybucket5": {
  5723. "type": "text",
  5724. "norms": false
  5725. },
  5726. "synchronousreadnonblockingtotallatencybucket6": {
  5727. "type": "text",
  5728. "norms": false
  5729. },
  5730. "synchronousreadnonblockingtotallatencybucket7": {
  5731. "type": "text",
  5732. "norms": false
  5733. },
  5734. "synchronousreadnonblockingtotallatencybucket8": {
  5735. "type": "text",
  5736. "norms": false
  5737. },
  5738. "synchronousreadnonblockingtotallatencybucket9": {
  5739. "type": "text",
  5740. "norms": false
  5741. },
  5742. "synchronousreadtotallatencybucket1": {
  5743. "type": "text",
  5744. "norms": false
  5745. },
  5746. "synchronousreadtotallatencybucket10": {
  5747. "type": "text",
  5748. "norms": false
  5749. },
  5750. "synchronousreadtotallatencybucket11": {
  5751. "type": "text",
  5752. "norms": false
  5753. },
  5754. "synchronousreadtotallatencybucket12": {
  5755. "type": "text",
  5756. "norms": false
  5757. },
  5758. "synchronousreadtotallatencybucket2": {
  5759. "type": "text",
  5760. "norms": false
  5761. },
  5762. "synchronousreadtotallatencybucket3": {
  5763. "type": "text",
  5764. "norms": false
  5765. },
  5766. "synchronousreadtotallatencybucket4": {
  5767. "type": "text",
  5768. "norms": false
  5769. },
  5770. "synchronousreadtotallatencybucket5": {
  5771. "type": "text",
  5772. "norms": false
  5773. },
  5774. "synchronousreadtotallatencybucket6": {
  5775. "type": "text",
  5776. "norms": false
  5777. },
  5778. "synchronousreadtotallatencybucket7": {
  5779. "type": "text",
  5780. "norms": false
  5781. },
  5782. "synchronousreadtotallatencybucket8": {
  5783. "type": "text",
  5784. "norms": false
  5785. },
  5786. "synchronousreadtotallatencybucket9": {
  5787. "type": "text",
  5788. "norms": false
  5789. },
  5790. "synchronouswriteiocountsbucket1": {
  5791. "type": "text",
  5792. "norms": false
  5793. },
  5794. "synchronouswriteiocountsbucket10": {
  5795. "type": "text",
  5796. "norms": false
  5797. },
  5798. "synchronouswriteiocountsbucket11": {
  5799. "type": "text",
  5800. "norms": false
  5801. },
  5802. "synchronouswriteiocountsbucket12": {
  5803. "type": "text",
  5804. "norms": false
  5805. },
  5806. "synchronouswriteiocountsbucket2": {
  5807. "type": "text",
  5808. "norms": false
  5809. },
  5810. "synchronouswriteiocountsbucket3": {
  5811. "type": "text",
  5812. "norms": false
  5813. },
  5814. "synchronouswriteiocountsbucket4": {
  5815. "type": "text",
  5816. "norms": false
  5817. },
  5818. "synchronouswriteiocountsbucket5": {
  5819. "type": "text",
  5820. "norms": false
  5821. },
  5822. "synchronouswriteiocountsbucket6": {
  5823. "type": "text",
  5824. "norms": false
  5825. },
  5826. "synchronouswriteiocountsbucket7": {
  5827. "type": "text",
  5828. "norms": false
  5829. },
  5830. "synchronouswriteiocountsbucket8": {
  5831. "type": "text",
  5832. "norms": false
  5833. },
  5834. "synchronouswriteiocountsbucket9": {
  5835. "type": "text",
  5836. "norms": false
  5837. },
  5838. "synchronouswriteiomaxlatency": {
  5839. "type": "text",
  5840. "norms": false
  5841. },
  5842. "synchronouswriteiononblockingmaxlatency": {
  5843. "type": "text",
  5844. "norms": false
  5845. },
  5846. "synchronouswritenonblockingiocountsbucket1": {
  5847. "type": "text",
  5848. "norms": false
  5849. },
  5850. "synchronouswritenonblockingiocountsbucket10": {
  5851. "type": "text",
  5852. "norms": false
  5853. },
  5854. "synchronouswritenonblockingiocountsbucket11": {
  5855. "type": "text",
  5856. "norms": false
  5857. },
  5858. "synchronouswritenonblockingiocountsbucket12": {
  5859. "type": "text",
  5860. "norms": false
  5861. },
  5862. "synchronouswritenonblockingiocountsbucket2": {
  5863. "type": "text",
  5864. "norms": false
  5865. },
  5866. "synchronouswritenonblockingiocountsbucket3": {
  5867. "type": "text",
  5868. "norms": false
  5869. },
  5870. "synchronouswritenonblockingiocountsbucket4": {
  5871. "type": "text",
  5872. "norms": false
  5873. },
  5874. "synchronouswritenonblockingiocountsbucket5": {
  5875. "type": "text",
  5876. "norms": false
  5877. },
  5878. "synchronouswritenonblockingiocountsbucket6": {
  5879. "type": "text",
  5880. "norms": false
  5881. },
  5882. "synchronouswritenonblockingiocountsbucket7": {
  5883. "type": "text",
  5884. "norms": false
  5885. },
  5886. "synchronouswritenonblockingiocountsbucket8": {
  5887. "type": "text",
  5888. "norms": false
  5889. },
  5890. "synchronouswritenonblockingiocountsbucket9": {
  5891. "type": "text",
  5892. "norms": false
  5893. },
  5894. "synchronouswritenonblockingtotallatencybucket1": {
  5895. "type": "text",
  5896. "norms": false
  5897. },
  5898. "synchronouswritenonblockingtotallatencybucket10": {
  5899. "type": "text",
  5900. "norms": false
  5901. },
  5902. "synchronouswritenonblockingtotallatencybucket11": {
  5903. "type": "text",
  5904. "norms": false
  5905. },
  5906. "synchronouswritenonblockingtotallatencybucket12": {
  5907. "type": "text",
  5908. "norms": false
  5909. },
  5910. "synchronouswritenonblockingtotallatencybucket2": {
  5911. "type": "text",
  5912. "norms": false
  5913. },
  5914. "synchronouswritenonblockingtotallatencybucket3": {
  5915. "type": "text",
  5916. "norms": false
  5917. },
  5918. "synchronouswritenonblockingtotallatencybucket4": {
  5919. "type": "text",
  5920. "norms": false
  5921. },
  5922. "synchronouswritenonblockingtotallatencybucket5": {
  5923. "type": "text",
  5924. "norms": false
  5925. },
  5926. "synchronouswritenonblockingtotallatencybucket6": {
  5927. "type": "text",
  5928. "norms": false
  5929. },
  5930. "synchronouswritenonblockingtotallatencybucket7": {
  5931. "type": "text",
  5932. "norms": false
  5933. },
  5934. "synchronouswritenonblockingtotallatencybucket8": {
  5935. "type": "text",
  5936. "norms": false
  5937. },
  5938. "synchronouswritenonblockingtotallatencybucket9": {
  5939. "type": "text",
  5940. "norms": false
  5941. },
  5942. "synchronouswritetotallatencybucket1": {
  5943. "type": "text",
  5944. "norms": false
  5945. },
  5946. "synchronouswritetotallatencybucket10": {
  5947. "type": "text",
  5948. "norms": false
  5949. },
  5950. "synchronouswritetotallatencybucket11": {
  5951. "type": "text",
  5952. "norms": false
  5953. },
  5954. "synchronouswritetotallatencybucket12": {
  5955. "type": "text",
  5956. "norms": false
  5957. },
  5958. "synchronouswritetotallatencybucket2": {
  5959. "type": "text",
  5960. "norms": false
  5961. },
  5962. "synchronouswritetotallatencybucket3": {
  5963. "type": "text",
  5964. "norms": false
  5965. },
  5966. "synchronouswritetotallatencybucket4": {
  5967. "type": "text",
  5968. "norms": false
  5969. },
  5970. "synchronouswritetotallatencybucket5": {
  5971. "type": "text",
  5972. "norms": false
  5973. },
  5974. "synchronouswritetotallatencybucket6": {
  5975. "type": "text",
  5976. "norms": false
  5977. },
  5978. "synchronouswritetotallatencybucket7": {
  5979. "type": "text",
  5980. "norms": false
  5981. },
  5982. "synchronouswritetotallatencybucket8": {
  5983. "type": "text",
  5984. "norms": false
  5985. },
  5986. "synchronouswritetotallatencybucket9": {
  5987. "type": "text",
  5988. "norms": false
  5989. },
  5990. "syslog_facility": {
  5991. "type": "text",
  5992. "norms": false
  5993. },
  5994. "syslog_facility_code": {
  5995. "type": "text",
  5996. "norms": false
  5997. },
  5998. "syslog_pid": {
  5999. "type": "long",
  6000. "ignore_malformed": true
  6001. },
  6002. "syslog_process_id": {
  6003. "type": "keyword",
  6004. "ignore_above": 256
  6005. },
  6006. "syslog_program": {
  6007. "type": "text",
  6008. "norms": false
  6009. },
  6010. "syslog_severity": {
  6011. "type": "text",
  6012. "norms": false
  6013. },
  6014. "syslog_severity_code": {
  6015. "type": "text",
  6016. "norms": false
  6017. },
  6018. "systemstatebackup": {
  6019. "type": "text",
  6020. "norms": false
  6021. },
  6022. "systemuptime_s": {
  6023. "type": "text",
  6024. "norms": false
  6025. },
  6026. "tags": {
  6027. "type": "keyword"
  6028. },
  6029. "target": {
  6030. "type": "text",
  6031. "fields": {
  6032. "keyword": {
  6033. "type": "keyword",
  6034. "ignore_above": 256
  6035. }
  6036. },
  6037. "norms": false
  6038. },
  6039. "target_capabilities": {
  6040. "type": "text",
  6041. "norms": false
  6042. },
  6043. "target_file_name": {
  6044. "type": "text",
  6045. "norms": false
  6046. },
  6047. "target_url": {
  6048. "type": "text",
  6049. "norms": false
  6050. },
  6051. "targetid": {
  6052. "type": "text",
  6053. "norms": false
  6054. },
  6055. "targetinfo": {
  6056. "type": "text",
  6057. "norms": false
  6058. },
  6059. "targetlinkedlogonid": {
  6060. "type": "text",
  6061. "norms": false
  6062. },
  6063. "targetlogonguid": {
  6064. "type": "text",
  6065. "norms": false
  6066. },
  6067. "targetname": {
  6068. "type": "text",
  6069. "norms": false
  6070. },
  6071. "targetoutbounddomainname": {
  6072. "type": "text",
  6073. "norms": false
  6074. },
  6075. "targetoutboundusername": {
  6076. "type": "text",
  6077. "norms": false
  6078. },
  6079. "targetservername": {
  6080. "type": "text",
  6081. "norms": false
  6082. },
  6083. "targetsid": {
  6084. "type": "text",
  6085. "norms": false
  6086. },
  6087. "targetsnapendtime": {
  6088. "type": "text",
  6089. "norms": false
  6090. },
  6091. "targetsnapstarttime": {
  6092. "type": "text",
  6093. "norms": false
  6094. },
  6095. "targetthreadcreatetime": {
  6096. "type": "text",
  6097. "norms": false
  6098. },
  6099. "targetthreadid": {
  6100. "type": "text",
  6101. "norms": false
  6102. },
  6103. "task": {
  6104. "type": "text",
  6105. "norms": false
  6106. },
  6107. "taskenginename": {
  6108. "type": "text",
  6109. "norms": false
  6110. },
  6111. "taskinstanceid": {
  6112. "type": "text",
  6113. "norms": false
  6114. },
  6115. "taskname": {
  6116. "type": "text",
  6117. "norms": false
  6118. },
  6119. "tax_id": {
  6120. "type": "keyword",
  6121. "ignore_above": 256
  6122. },
  6123. "tc": {
  6124. "type": "text",
  6125. "norms": false
  6126. },
  6127. "tcpinfo_rtt": {
  6128. "type": "text",
  6129. "norms": false
  6130. },
  6131. "tcpinfo_rttvar": {
  6132. "type": "text",
  6133. "norms": false
  6134. },
  6135. "temp_dir": {
  6136. "type": "text",
  6137. "norms": false
  6138. },
  6139. "template_id": {
  6140. "type": "keyword",
  6141. "ignore_above": 256
  6142. },
  6143. "test": {
  6144. "type": "text",
  6145. "norms": false
  6146. },
  6147. "test_user": {
  6148. "type": "text",
  6149. "norms": false
  6150. },
  6151. "thread": {
  6152. "type": "text",
  6153. "norms": false
  6154. },
  6155. "thread_id": {
  6156. "type": "keyword",
  6157. "ignore_above": 256
  6158. },
  6159. "thread_name": {
  6160. "type": "text",
  6161. "norms": false
  6162. },
  6163. "thresholdinkbps": {
  6164. "type": "text",
  6165. "norms": false
  6166. },
  6167. "tickcount": {
  6168. "type": "text",
  6169. "norms": false
  6170. },
  6171. "timemillis": {
  6172. "type": "text",
  6173. "norms": false
  6174. },
  6175. "timeoutsinminiport": {
  6176. "type": "text",
  6177. "norms": false
  6178. },
  6179. "timeproviders": {
  6180. "type": "text",
  6181. "norms": false
  6182. },
  6183. "timesincelastgoodsync": {
  6184. "type": "text",
  6185. "norms": false
  6186. },
  6187. "timesourceflags": {
  6188. "type": "text",
  6189. "norms": false
  6190. },
  6191. "timestamp": {
  6192. "type": "text",
  6193. "norms": false
  6194. },
  6195. "timetoactivityvalidation": {
  6196. "type": "text",
  6197. "norms": false
  6198. },
  6199. "timetopresencevalidation": {
  6200. "type": "text",
  6201. "norms": false
  6202. },
  6203. "timetopresencevalidationexpiration": {
  6204. "type": "text",
  6205. "norms": false
  6206. },
  6207. "timezonebiashour": {
  6208. "type": "text",
  6209. "norms": false
  6210. },
  6211. "timezoneid": {
  6212. "type": "text",
  6213. "norms": false
  6214. },
  6215. "title": {
  6216. "type": "text",
  6217. "norms": false
  6218. },
  6219. "tls_cipher": {
  6220. "type": "keyword"
  6221. },
  6222. "tls_protocol": {
  6223. "type": "keyword"
  6224. },
  6225. "tmp_course_media": {
  6226. "type": "text",
  6227. "norms": false
  6228. },
  6229. "tmp_folder_envs": {
  6230. "type": "text",
  6231. "norms": false
  6232. },
  6233. "to": {
  6234. "type": "text",
  6235. "fields": {
  6236. "keyword": {
  6237. "type": "keyword",
  6238. "ignore_above": 256
  6239. }
  6240. },
  6241. "norms": false
  6242. },
  6243. "to_group_id": {
  6244. "type": "keyword",
  6245. "ignore_above": 256
  6246. },
  6247. "token_data": {
  6248. "type": "text",
  6249. "norms": false
  6250. },
  6251. "tokentype": {
  6252. "type": "text",
  6253. "norms": false
  6254. },
  6255. "topic_id": {
  6256. "type": "keyword",
  6257. "ignore_above": 256
  6258. },
  6259. "topicid": {
  6260. "type": "text",
  6261. "norms": false
  6262. },
  6263. "tos": {
  6264. "type": "text",
  6265. "norms": false
  6266. },
  6267. "total": {
  6268. "type": "text",
  6269. "norms": false
  6270. },
  6271. "totalasynchronousreadiocount": {
  6272. "type": "text",
  6273. "norms": false
  6274. },
  6275. "totalavailablepages": {
  6276. "type": "text",
  6277. "norms": false
  6278. },
  6279. "totalaverageavailablepages": {
  6280. "type": "text",
  6281. "norms": false
  6282. },
  6283. "totalaveragedirtypages": {
  6284. "type": "text",
  6285. "norms": false
  6286. },
  6287. "totalbytes": {
  6288. "type": "text",
  6289. "norms": false
  6290. },
  6291. "totalbytes0": {
  6292. "type": "text",
  6293. "norms": false
  6294. },
  6295. "totalbytes1": {
  6296. "type": "text",
  6297. "norms": false
  6298. },
  6299. "totalbytes10": {
  6300. "type": "text",
  6301. "norms": false
  6302. },
  6303. "totalbytes11": {
  6304. "type": "text",
  6305. "norms": false
  6306. },
  6307. "totalbytes2": {
  6308. "type": "text",
  6309. "norms": false
  6310. },
  6311. "totalbytes3": {
  6312. "type": "text",
  6313. "norms": false
  6314. },
  6315. "totalbytes4": {
  6316. "type": "text",
  6317. "norms": false
  6318. },
  6319. "totalbytes5": {
  6320. "type": "text",
  6321. "norms": false
  6322. },
  6323. "totalbytes6": {
  6324. "type": "text",
  6325. "norms": false
  6326. },
  6327. "totalbytes7": {
  6328. "type": "text",
  6329. "norms": false
  6330. },
  6331. "totalbytes8": {
  6332. "type": "text",
  6333. "norms": false
  6334. },
  6335. "totalbytes9": {
  6336. "type": "text",
  6337. "norms": false
  6338. },
  6339. "totalbytesbucketscount": {
  6340. "type": "text",
  6341. "norms": false
  6342. },
  6343. "totalcountdeletefile": {
  6344. "type": "text",
  6345. "norms": false
  6346. },
  6347. "totalcountdeletefilelogged": {
  6348. "type": "text",
  6349. "norms": false
  6350. },
  6351. "totaldevicefailureerrors": {
  6352. "type": "text",
  6353. "norms": false
  6354. },
  6355. "totaldevicequeueiocount": {
  6356. "type": "text",
  6357. "norms": false
  6358. },
  6359. "totaldevicequeueiowaitduration_100ns": {
  6360. "type": "text",
  6361. "norms": false
  6362. },
  6363. "totaldirtypages": {
  6364. "type": "text",
  6365. "norms": false
  6366. },
  6367. "totaldisks": {
  6368. "type": "text",
  6369. "norms": false
  6370. },
  6371. "totalerrors": {
  6372. "type": "text",
  6373. "norms": false
  6374. },
  6375. "totalextents": {
  6376. "type": "text",
  6377. "norms": false
  6378. },
  6379. "totalextents0": {
  6380. "type": "text",
  6381. "norms": false
  6382. },
  6383. "totalextents1": {
  6384. "type": "text",
  6385. "norms": false
  6386. },
  6387. "totalextents10": {
  6388. "type": "text",
  6389. "norms": false
  6390. },
  6391. "totalextents11": {
  6392. "type": "text",
  6393. "norms": false
  6394. },
  6395. "totalextents2": {
  6396. "type": "text",
  6397. "norms": false
  6398. },
  6399. "totalextents3": {
  6400. "type": "text",
  6401. "norms": false
  6402. },
  6403. "totalextents4": {
  6404. "type": "text",
  6405. "norms": false
  6406. },
  6407. "totalextents5": {
  6408. "type": "text",
  6409. "norms": false
  6410. },
  6411. "totalextents6": {
  6412. "type": "text",
  6413. "norms": false
  6414. },
  6415. "totalextents7": {
  6416. "type": "text",
  6417. "norms": false
  6418. },
  6419. "totalextents8": {
  6420. "type": "text",
  6421. "norms": false
  6422. },
  6423. "totalextents9": {
  6424. "type": "text",
  6425. "norms": false
  6426. },
  6427. "totalfailedsynchronousnonblockingreadiocount": {
  6428. "type": "text",
  6429. "norms": false
  6430. },
  6431. "totalfailedsynchronousnonblockingwriteiocount": {
  6432. "type": "text",
  6433. "norms": false
  6434. },
  6435. "totalhardthrottlewrites": {
  6436. "type": "text",
  6437. "norms": false
  6438. },
  6439. "totalimpendingdevicefailureerrors": {
  6440. "type": "text",
  6441. "norms": false
  6442. },
  6443. "totaliocount": {
  6444. "type": "text",
  6445. "norms": false
  6446. },
  6447. "totallatencyus": {
  6448. "type": "text",
  6449. "norms": false
  6450. },
  6451. "totalloggedpagesqueuedtodisk": {
  6452. "type": "text",
  6453. "norms": false
  6454. },
  6455. "totalnumberactiveworkerthreads": {
  6456. "type": "text",
  6457. "norms": false
  6458. },
  6459. "totalnumberofmappedvacbs": {
  6460. "type": "text",
  6461. "norms": false
  6462. },
  6463. "totalnumberworkerthreads": {
  6464. "type": "text",
  6465. "norms": false
  6466. },
  6467. "totalpagesqueuedtodisk": {
  6468. "type": "text",
  6469. "norms": false
  6470. },
  6471. "totalpagesyettowrite": {
  6472. "type": "text",
  6473. "norms": false
  6474. },
  6475. "totalpartitionsamples": {
  6476. "type": "text",
  6477. "norms": false
  6478. },
  6479. "totalreadbytes": {
  6480. "type": "text",
  6481. "norms": false
  6482. },
  6483. "totalreadwriteerrors": {
  6484. "type": "text",
  6485. "norms": false
  6486. },
  6487. "totalsoftthrottlewrites": {
  6488. "type": "text",
  6489. "norms": false
  6490. },
  6491. "totalsynchronousnonblockingreadiocount": {
  6492. "type": "text",
  6493. "norms": false
  6494. },
  6495. "totalsynchronousnonblockingwriteiocount": {
  6496. "type": "text",
  6497. "norms": false
  6498. },
  6499. "totalsynchronousreadiocount": {
  6500. "type": "text",
  6501. "norms": false
  6502. },
  6503. "totalsynchronouswriteiocount": {
  6504. "type": "text",
  6505. "norms": false
  6506. },
  6507. "totaltimens0": {
  6508. "type": "text",
  6509. "norms": false
  6510. },
  6511. "totaltimens1": {
  6512. "type": "text",
  6513. "norms": false
  6514. },
  6515. "totaltimens10": {
  6516. "type": "text",
  6517. "norms": false
  6518. },
  6519. "totaltimens11": {
  6520. "type": "text",
  6521. "norms": false
  6522. },
  6523. "totaltimens2": {
  6524. "type": "text",
  6525. "norms": false
  6526. },
  6527. "totaltimens3": {
  6528. "type": "text",
  6529. "norms": false
  6530. },
  6531. "totaltimens4": {
  6532. "type": "text",
  6533. "norms": false
  6534. },
  6535. "totaltimens5": {
  6536. "type": "text",
  6537. "norms": false
  6538. },
  6539. "totaltimens6": {
  6540. "type": "text",
  6541. "norms": false
  6542. },
  6543. "totaltimens7": {
  6544. "type": "text",
  6545. "norms": false
  6546. },
  6547. "totaltimens8": {
  6548. "type": "text",
  6549. "norms": false
  6550. },
  6551. "totaltimens9": {
  6552. "type": "text",
  6553. "norms": false
  6554. },
  6555. "totalwritebytes": {
  6556. "type": "text",
  6557. "norms": false
  6558. },
  6559. "totalwrites": {
  6560. "type": "text",
  6561. "norms": false
  6562. },
  6563. "totalxpaths": {
  6564. "type": "text",
  6565. "norms": false
  6566. },
  6567. "trackingid": {
  6568. "type": "text",
  6569. "norms": false
  6570. },
  6571. "transferid": {
  6572. "type": "text",
  6573. "norms": false
  6574. },
  6575. "transmittedservices": {
  6576. "type": "text",
  6577. "norms": false
  6578. },
  6579. "transporttype": {
  6580. "type": "text",
  6581. "norms": false
  6582. },
  6583. "treeid": {
  6584. "type": "text",
  6585. "norms": false
  6586. },
  6587. "trimextentscount": {
  6588. "type": "text",
  6589. "norms": false
  6590. },
  6591. "trimlatencybucket1": {
  6592. "type": "text",
  6593. "norms": false
  6594. },
  6595. "trimlatencybucket2": {
  6596. "type": "text",
  6597. "norms": false
  6598. },
  6599. "trimlatencybucket3": {
  6600. "type": "text",
  6601. "norms": false
  6602. },
  6603. "trimlatencybucket4": {
  6604. "type": "text",
  6605. "norms": false
  6606. },
  6607. "trimlatencybucket5": {
  6608. "type": "text",
  6609. "norms": false
  6610. },
  6611. "trimlatencybucket6": {
  6612. "type": "text",
  6613. "norms": false
  6614. },
  6615. "trimlatencybucket7": {
  6616. "type": "text",
  6617. "norms": false
  6618. },
  6619. "ts": {
  6620. "type": "text",
  6621. "norms": false
  6622. },
  6623. "tsid": {
  6624. "type": "text",
  6625. "norms": false
  6626. },
  6627. "ttl": {
  6628. "type": "text",
  6629. "norms": false
  6630. },
  6631. "tunnelid": {
  6632. "type": "text",
  6633. "norms": false
  6634. },
  6635. "tx_id": {
  6636. "type": "keyword",
  6637. "ignore_above": 256
  6638. },
  6639. "txfabortreservedclustersmax": {
  6640. "type": "text",
  6641. "norms": false
  6642. },
  6643. "txfabortreservedclustersmin": {
  6644. "type": "text",
  6645. "norms": false
  6646. },
  6647. "type": {
  6648. "type": "keyword"
  6649. },
  6650. "ufw_type": {
  6651. "type": "keyword"
  6652. },
  6653. "uid": {
  6654. "type": "text",
  6655. "norms": false
  6656. },
  6657. "unallocatedclustersmax": {
  6658. "type": "text",
  6659. "norms": false
  6660. },
  6661. "unallocatedclustersmin": {
  6662. "type": "text",
  6663. "norms": false
  6664. },
  6665. "unassigned_credits": {
  6666. "type": "text",
  6667. "norms": false
  6668. },
  6669. "unassigned_groups": {
  6670. "type": "text",
  6671. "norms": false
  6672. },
  6673. "unassigned_labels": {
  6674. "type": "text",
  6675. "norms": false
  6676. },
  6677. "uniqueerrorlogarray": {
  6678. "type": "text",
  6679. "norms": false
  6680. },
  6681. "uniqueerrorlogarraylength": {
  6682. "type": "text",
  6683. "norms": false
  6684. },
  6685. "unknown": {
  6686. "type": "text",
  6687. "norms": false
  6688. },
  6689. "update_date": {
  6690. "type": "text",
  6691. "norms": false
  6692. },
  6693. "update_type": {
  6694. "type": "text",
  6695. "norms": false
  6696. },
  6697. "update_type_index": {
  6698. "type": "text",
  6699. "norms": false
  6700. },
  6701. "updatecount": {
  6702. "type": "text",
  6703. "norms": false
  6704. },
  6705. "updated_by": {
  6706. "type": "text",
  6707. "norms": false
  6708. },
  6709. "updated_date": {
  6710. "type": "text",
  6711. "norms": false
  6712. },
  6713. "updateguid": {
  6714. "type": "text",
  6715. "norms": false
  6716. },
  6717. "updaterevisionnumber": {
  6718. "type": "text",
  6719. "norms": false
  6720. },
  6721. "updatetitle": {
  6722. "type": "text",
  6723. "norms": false
  6724. },
  6725. "upload_session_id": {
  6726. "type": "keyword",
  6727. "ignore_above": 256
  6728. },
  6729. "upload_session_record_id": {
  6730. "type": "keyword",
  6731. "ignore_above": 256
  6732. },
  6733. "uploadduration": {
  6734. "type": "text",
  6735. "norms": false
  6736. },
  6737. "upstream_addr": {
  6738. "type": "keyword"
  6739. },
  6740. "upstream_connect_time": {
  6741. "type": "text",
  6742. "norms": false
  6743. },
  6744. "upstream_data": {
  6745. "type": "text",
  6746. "norms": false
  6747. },
  6748. "upstream_response_time": {
  6749. "type": "float",
  6750. "ignore_malformed": true
  6751. },
  6752. "urgp": {
  6753. "type": "text",
  6754. "norms": false
  6755. },
  6756. "url": {
  6757. "type": "text",
  6758. "norms": false
  6759. },
  6760. "url_base": {
  6761. "type": "text",
  6762. "norms": false
  6763. },
  6764. "url_referrer": {
  6765. "type": "text",
  6766. "norms": false
  6767. },
  6768. "urlmethod": {
  6769. "type": "text",
  6770. "norms": false
  6771. },
  6772. "use_update_record": {
  6773. "type": "text",
  6774. "norms": false
  6775. },
  6776. "user": {
  6777. "type": "text",
  6778. "norms": false
  6779. },
  6780. "user_agent": {
  6781. "type": "text",
  6782. "norms": false
  6783. },
  6784. "user_attributes": {
  6785. "type": "text",
  6786. "norms": false
  6787. },
  6788. "user_email": {
  6789. "type": "text",
  6790. "norms": false
  6791. },
  6792. "user_filters": {
  6793. "type": "text",
  6794. "norms": false
  6795. },
  6796. "user_id": {
  6797. "type": "keyword",
  6798. "ignore_above": 256
  6799. },
  6800. "user_info_data": {
  6801. "type": "text",
  6802. "norms": false
  6803. },
  6804. "user_name": {
  6805. "type": "keyword"
  6806. },
  6807. "user_report_id": {
  6808. "type": "keyword",
  6809. "ignore_above": 256
  6810. },
  6811. "user_sco_data_id": {
  6812. "type": "keyword",
  6813. "ignore_above": 256
  6814. },
  6815. "user_sid": {
  6816. "type": "text",
  6817. "norms": false
  6818. },
  6819. "useractivitytypeid": {
  6820. "type": "long",
  6821. "ignore_malformed": true
  6822. },
  6823. "usercontext": {
  6824. "type": "text",
  6825. "norms": false
  6826. },
  6827. "userdiskreads": {
  6828. "type": "text",
  6829. "norms": false
  6830. },
  6831. "userdiskwrites": {
  6832. "type": "text",
  6833. "norms": false
  6834. },
  6835. "userfilereadbytes": {
  6836. "type": "text",
  6837. "norms": false
  6838. },
  6839. "userfilereads": {
  6840. "type": "text",
  6841. "norms": false
  6842. },
  6843. "userfilewritebytes": {
  6844. "type": "text",
  6845. "norms": false
  6846. },
  6847. "userfilewrites": {
  6848. "type": "text",
  6849. "norms": false
  6850. },
  6851. "userhostaddress": {
  6852. "type": "ip",
  6853. "fields": {
  6854. "keyword": {
  6855. "type": "keyword",
  6856. "ignore_above": 256
  6857. },
  6858. "text": {
  6859. "type": "text",
  6860. "norms": false
  6861. }
  6862. }
  6863. },
  6864. "userindexreadbytes": {
  6865. "type": "text",
  6866. "norms": false
  6867. },
  6868. "userindexreads": {
  6869. "type": "text",
  6870. "norms": false
  6871. },
  6872. "userindexwritebytes": {
  6873. "type": "text",
  6874. "norms": false
  6875. },
  6876. "userindexwrites": {
  6877. "type": "text",
  6878. "norms": false
  6879. },
  6880. "userinputbmr": {
  6881. "type": "text",
  6882. "norms": false
  6883. },
  6884. "userinputssb": {
  6885. "type": "text",
  6886. "norms": false
  6887. },
  6888. "userloginname": {
  6889. "type": "text",
  6890. "norms": false
  6891. },
  6892. "users": {
  6893. "type": "text",
  6894. "norms": false
  6895. },
  6896. "users_count": {
  6897. "type": "text",
  6898. "norms": false
  6899. },
  6900. "usersid": {
  6901. "type": "text",
  6902. "norms": false
  6903. },
  6904. "uvalue": {
  6905. "type": "text",
  6906. "norms": false
  6907. },
  6908. "value": {
  6909. "type": "text",
  6910. "norms": false
  6911. },
  6912. "vcb": {
  6913. "type": "text",
  6914. "norms": false
  6915. },
  6916. "vendor": {
  6917. "type": "text",
  6918. "norms": false
  6919. },
  6920. "vendorid": {
  6921. "type": "text",
  6922. "norms": false
  6923. },
  6924. "vendoridlength": {
  6925. "type": "text",
  6926. "norms": false
  6927. },
  6928. "version": {
  6929. "type": "text",
  6930. "norms": false
  6931. },
  6932. "virtualaccount": {
  6933. "type": "text",
  6934. "norms": false
  6935. },
  6936. "vlan": {
  6937. "type": "text",
  6938. "norms": false
  6939. },
  6940. "volumecorrelationid": {
  6941. "type": "text",
  6942. "norms": false
  6943. },
  6944. "volumecount": {
  6945. "type": "text",
  6946. "norms": false
  6947. },
  6948. "volumedeviceguid": {
  6949. "type": "text",
  6950. "norms": false
  6951. },
  6952. "volumeflushavglatencyns": {
  6953. "type": "text",
  6954. "norms": false
  6955. },
  6956. "volumeflushcount": {
  6957. "type": "text",
  6958. "norms": false
  6959. },
  6960. "volumeguid": {
  6961. "type": "text",
  6962. "norms": false
  6963. },
  6964. "volumelabel": {
  6965. "type": "text",
  6966. "norms": false
  6967. },
  6968. "volumelabellength": {
  6969. "type": "text",
  6970. "norms": false
  6971. },
  6972. "volumename": {
  6973. "type": "text",
  6974. "norms": false
  6975. },
  6976. "volumenamelength": {
  6977. "type": "text",
  6978. "norms": false
  6979. },
  6980. "volumesinfo": {
  6981. "type": "text",
  6982. "norms": false
  6983. },
  6984. "volumesizeinbytes": {
  6985. "type": "text",
  6986. "norms": false
  6987. },
  6988. "volumesizestr": {
  6989. "type": "text",
  6990. "norms": false
  6991. },
  6992. "volumetrimavglatencyns": {
  6993. "type": "text",
  6994. "norms": false
  6995. },
  6996. "volumetrimcount": {
  6997. "type": "text",
  6998. "norms": false
  6999. },
  7000. "volumetrimextentscount": {
  7001. "type": "text",
  7002. "norms": false
  7003. },
  7004. "volumetrimsize": {
  7005. "type": "text",
  7006. "norms": false
  7007. },
  7008. "volumetrimskippedcount": {
  7009. "type": "text",
  7010. "norms": false
  7011. },
  7012. "volumetrimskippedsize": {
  7013. "type": "text",
  7014. "norms": false
  7015. },
  7016. "volumetrimtime": {
  7017. "type": "text",
  7018. "norms": false
  7019. },
  7020. "volumetrimtotalbytes": {
  7021. "type": "text",
  7022. "norms": false
  7023. },
  7024. "vssfullbackup": {
  7025. "type": "text",
  7026. "norms": false
  7027. },
  7028. "waitduration_ms": {
  7029. "type": "text",
  7030. "norms": false
  7031. },
  7032. "window": {
  7033. "type": "text",
  7034. "norms": false
  7035. },
  7036. "windows-event_data-CommandLine": {
  7037. "type": "alias",
  7038. "path": "command"
  7039. },
  7040. "winlogonreturntimeelapsedinmilliseconds": {
  7041. "type": "text",
  7042. "norms": false
  7043. },
  7044. "wmiclassname": {
  7045. "type": "text",
  7046. "norms": false
  7047. },
  7048. "workstation": {
  7049. "type": "text",
  7050. "norms": false
  7051. },
  7052. "workstationname": {
  7053. "type": "text",
  7054. "norms": false
  7055. },
  7056. "xpath": {
  7057. "type": "text",
  7058. "norms": false
  7059. },
  7060. "zone": {
  7061. "type": "text",
  7062. "norms": false
  7063. },
  7064. "zonescope": {
  7065. "type": "text",
  7066. "norms": false
  7067. }
  7068. }
  7069. }
  7070. }
  7071. }

index mapping