Update ML datafeed settings (#4676)

* Removed types from ML datafeed config * Update query filter and frequency
elastic · Jul 17, 2017 · 632ebfc · 632ebfc
1 parent 95e6fa2
commit 632ebfc
Show file tree

Hide file tree

Showing 5 changed files with 30 additions and 35 deletions.
diff --git a/filebeat/module/nginx/access/machine_learning/datafeed_low_request_rate.json b/filebeat/module/nginx/access/machine_learning/datafeed_low_request_rate.json
@@ -1,17 +1,16 @@
 {
     "job_id": "JOB_ID",
     "query_delay": "60s",
-    "frequency": "60s",
+    "frequency": "450s",
     "indexes": [
       "filebeat-*"
     ],
-    "types": [
-      "_default_",
-      "log"
-    ],
     "query": {
-      "match_all": {
-        "boost": 1
+      "bool": {
+        "filter": [
+          { "term":  { "fileset.module": "nginx" } },
+          { "term":  { "fileset.name": "access" } }
+        ]
       }
     },
     "aggregations": {

diff --git a/filebeat/module/nginx/access/machine_learning/datafeed_remote_ip_request_rate.json b/filebeat/module/nginx/access/machine_learning/datafeed_remote_ip_request_rate.json
@@ -1,17 +1,16 @@
 {
     "job_id": "JOB_ID",
     "query_delay": "60s",
-    "frequency": "60s",
+    "frequency": "600s",
     "indexes": [
       "filebeat-*"
     ],
-    "types": [
-      "_default_",
-      "log"
-    ],
     "query": {
-      "match_all": {
-        "boost": 1
+      "bool": {
+        "filter": [  
+          { "term":  { "fileset.module": "nginx" } },
+          { "term":  { "fileset.name": "access" } }
+        ]
       }
     }
 }
diff --git a/filebeat/module/nginx/access/machine_learning/datafeed_remote_ip_url_count.json b/filebeat/module/nginx/access/machine_learning/datafeed_remote_ip_url_count.json
@@ -1,17 +1,16 @@
 {
     "job_id": "JOB_ID",
     "query_delay": "60s",
-    "frequency": "60s",
+    "frequency": "600s",
     "indexes": [
       "filebeat-*"
     ],
-    "types": [
-      "_default_",
-      "log"
-    ],
     "query": {
-      "match_all": {
-        "boost": 1
+      "bool": {
+        "filter": [  
+          { "term":  { "fileset.module": "nginx" } },
+          { "term":  { "fileset.name": "access" } }
+        ]
       }
     }
 }
diff --git a/filebeat/module/nginx/access/machine_learning/datafeed_response_code.json b/filebeat/module/nginx/access/machine_learning/datafeed_response_code.json
@@ -1,17 +1,16 @@
 {
     "job_id": "JOB_ID",
     "query_delay": "60s",
-    "frequency": "60s",
+    "frequency": "450s",
     "indexes": [
       "filebeat-*"
     ],
-    "types": [
-      "_default_",
-      "log"
-    ],
     "query": {
-      "match_all": {
-        "boost": 1
+      "bool": {
+        "filter": [  
+          { "term":  { "fileset.module": "nginx" } },
+          { "term":  { "fileset.name": "access" } }
+        ]
       }
     }
 }
diff --git a/filebeat/module/nginx/access/machine_learning/datafeed_visitor_rate.json b/filebeat/module/nginx/access/machine_learning/datafeed_visitor_rate.json
@@ -1,17 +1,16 @@
 {
     "job_id": "JOB_ID",
     "query_delay": "60s",
-    "frequency": "60s",
+    "frequency": "450s",
     "indexes": [
       "filebeat-*"
     ],
-    "types": [
-      "_default_",
-      "log"
-    ],
     "query": {
-      "match_all": {
-        "boost": 1
+      "bool": {
+        "filter": [  
+          { "term":  { "fileset.module": "nginx" } },
+          { "term":  { "fileset.name": "access" } }
+        ]
       }
     },
     "aggregations": {